$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/NcQp-qL9ulkR9Em3Q6DLCZ6Ag8A.roa File: NcQp-qL9ulkR9Em3Q6DLCZ6Ag8A.roa (raw, json) Hash identifier: edQoYBLJ6kUOfkIXQELihpdNDANY1P34yHFBNdKbQRg= Subject key identifier: 35:C4:29:FA:A2:FD:BA:59:11:F4:49:B7:43:A0:CB:09:9E:80:83:C0 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D8A Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/NcQp-qL9ulkR9Em3Q6DLCZ6Ag8A.roa Signing time: Mon 15 Jan 2024 21:29:15 +0000 ROA not before: Mon 15 Jan 2024 21:29:15 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 210.201.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3466 (0xd8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:29:15 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=35C429FAA2FDBA5911F449B743A0CB099E8083C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f4:4d:84:24:76:a4:35:f1:38:1e:df:8a:d2: 1b:72:65:3e:eb:68:be:57:39:9e:49:73:b3:99:3d: 02:ae:82:19:a0:ad:df:db:2c:07:c2:7a:e9:8a:17: f7:af:b0:8e:0c:ba:1c:87:55:fe:4e:ec:f9:72:1e: 76:78:45:bc:5c:f4:2f:b5:57:93:20:fb:ee:a7:b4: ff:01:b5:e6:f7:06:f1:fd:c3:42:53:36:20:6e:6d: 6b:d6:3c:cd:08:1f:ea:68:47:3e:a6:d0:bc:49:f8: 45:93:ef:53:10:7e:bf:27:a0:23:b7:1c:9c:06:64: 1c:48:75:35:68:67:bd:b1:83:00:29:96:35:ed:fc: 76:d3:52:be:ae:14:da:71:fd:3c:a7:af:e1:59:83: 45:cd:29:4e:c3:c9:df:6f:72:5d:d3:18:b9:45:6d: 2d:b7:de:4e:1a:8e:96:ca:ad:df:9a:f6:d0:7b:29: 34:57:90:e0:64:17:66:59:f3:06:c8:e9:66:79:f5: 16:44:cd:0e:b1:04:77:ff:b8:e9:4a:54:54:94:1c: 98:70:84:ab:82:71:af:62:f9:0c:18:13:3e:de:b9: 67:1f:25:98:a3:b0:eb:04:fb:39:36:8c:c9:4d:b2: ba:fe:ca:13:d8:07:f2:b9:62:d3:07:27:50:91:5e: 5f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C4:29:FA:A2:FD:BA:59:11:F4:49:B7:43:A0:CB:09:9E:80:83:C0 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/NcQp-qL9ulkR9Em3Q6DLCZ6Ag8A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.201.32.0/22 Signature Algorithm: sha256WithRSAEncryption 42:cf:e2:ec:29:13:62:72:bd:b5:ab:e3:d7:a3:36:74:7f:2c: d7:b8:12:70:74:61:49:d4:6c:a2:b0:a6:d0:b2:30:6d:b8:31: fc:b4:19:60:97:1e:ba:88:04:e0:58:c9:1b:9d:54:7a:f4:e0: 95:65:92:7a:b0:96:f1:5e:32:a0:5e:62:09:69:d6:07:2f:de: 53:36:4e:e5:ac:a2:2d:57:cf:b1:3a:a2:ab:c3:f5:5d:8a:73: 02:f5:1b:e0:f5:0c:f5:cd:d7:f1:7d:53:c4:1a:68:dc:9f:4b: b7:27:5c:31:a8:76:92:ae:a2:a6:c9:51:1b:e1:e6:e6:83:13: 76:d2:40:5a:70:a6:68:8b:3a:c9:96:21:11:2d:79:04:4a:1e: 91:08:03:8a:5c:bf:d1:24:22:77:8b:58:ed:f4:4a:a9:fa:d5: df:15:2c:68:3b:62:3d:74:ec:5e:e0:58:74:b1:48:47:1f:77: 3f:6a:ec:b9:02:88:b2:47:2d:bf:7e:cf:3e:f0:78:cf:19:86: 7d:ce:34:c6:d1:73:8b:30:7a:09:ee:a6:19:0e:0a:7f:86:64: 50:b4:8e:49:3e:17:18:c6:34:5e:6d:97:a0:26:fc:0b:87:46: 94:8f:9e:97:a3:31:7a:16:29:31:9e:60:0f:7a:be:7d:a9:9e: 69:e2:70:81 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDYowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI5MTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM1QzQyOUZBQTJGREJB NTkxMUY0NDlCNzQzQTBDQjA5OUU4MDgzQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz9E2EJHakNfE4Ht+K0htyZT7raL5XOZ5Jc7OZPQKughmgrd/b LAfCeumKF/evsI4MuhyHVf5O7PlyHnZ4Rbxc9C+1V5Mg++6ntP8Bteb3BvH9w0JT NiBubWvWPM0IH+poRz6m0LxJ+EWT71MQfr8noCO3HJwGZBxIdTVoZ72xgwApljXt /HbTUr6uFNpx/Tynr+FZg0XNKU7Dyd9vcl3TGLlFbS233k4ajpbKrd+a9tB7KTRX kOBkF2ZZ8wbI6WZ59RZEzQ6xBHf/uOlKVFSUHJhwhKuCca9i+QwYEz7euWcfJZij sOsE+zk2jMlNsrr+yhPYB/K5YtMHJ1CRXl93AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUNcQp+qL9ulkR9Em3Q6DLCZ6Ag8AwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL05jUXAtcUw5dWxrUjlFbTNRNkRMQ1o2 QWc4QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSySAwDQYJ KoZIhvcNAQELBQADggEBAELP4uwpE2JyvbWr49ejNnR/LNe4EnB0YUnUbKKwptCy MG24Mfy0GWCXHrqIBOBYyRudVHr04JVlknqwlvFeMqBeYglp1gcv3lM2TuWsoi1X z7E6oqvD9V2KcwL1G+D1DPXN1/F9U8QaaNyfS7cnXDGodpKuoqbJURvh5uaDE3bS QFpwpmiLOsmWIREteQRKHpEIA4pcv9EkIneLWO30Sqn61d8VLGg7Yj107F7gWHSx SEcfdz9q7LkCiLJHLb9+zz7weM8Zhn3ONMbRc4swegnuphkOCn+GZFC0jkk+FxjG NF5tl6Am/AuHRpSPnpejMXoWKTGeYA96vn2pnmnicIE= -----END CERTIFICATE-----Generated at Sun Jun 2 21:48:26 2024 by rpki-client on console-ams.rpki-client.org