$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/NDdFndGB_INXYfGfZcsS2MXe8Ok.roa File: NDdFndGB_INXYfGfZcsS2MXe8Ok.roa (raw, json) Hash identifier: k/1gISUCCbrHGqqqvn32bwmwlfzi7FJ63Q9877SLQ08= Subject key identifier: 34:37:45:9D:D1:81:FC:83:57:61:F1:9F:65:CB:12:D8:C5:DE:F0:E9 Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Certificate serial: 0BFE Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/NDdFndGB_INXYfGfZcsS2MXe8Ok.roa Signing time: Fri 01 Sep 2023 09:11:51 +0000 ROA not before: Fri 01 Sep 2023 09:11:51 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9416 IP address blocks: 119.14.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3070 (0xbfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Validity Not Before: Sep 1 09:11:51 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3437459DD181FC835761F19F65CB12D8C5DEF0E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:03:2e:f6:2e:d0:d9:dd:93:c1:22:dd:bf:24: 02:c5:65:bf:40:b6:80:2a:f2:7f:34:63:24:8d:c7: 37:1c:66:f0:28:a4:fc:43:6e:e0:19:70:0e:94:ba: ec:82:34:96:18:10:66:e2:ab:8c:4a:64:1f:3a:b8: 27:51:51:fc:51:3a:3b:60:43:ed:95:c0:23:ae:e8: a1:5b:19:7e:02:3a:ec:d4:35:e2:2d:83:36:17:29: fe:10:58:d0:cf:b9:b4:b8:41:2d:d6:bf:f9:10:ee: bf:05:a0:61:50:74:7f:f6:60:ec:ee:e1:21:dd:fc: 48:95:07:87:e9:98:92:64:49:2b:e4:1f:43:5e:42: e0:24:28:47:16:2a:3b:f6:46:0e:f0:48:90:6b:50: 77:b1:95:4e:09:4e:ab:51:6b:54:16:14:58:06:45: 43:b7:08:17:51:18:02:a6:12:c0:60:a8:fe:b3:a2: b7:6e:bd:05:90:b7:13:e1:74:29:8b:58:be:31:e4: d2:2e:bf:8c:ab:09:14:ef:76:5e:d0:da:1a:e6:30: 2b:15:af:cc:7d:f9:75:89:bb:24:04:69:45:19:49: 8b:35:f5:a2:7e:34:64:97:08:67:ea:c0:95:43:0d: a9:89:b1:20:f3:95:ec:26:8f:c3:42:02:78:27:80: 60:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:37:45:9D:D1:81:FC:83:57:61:F1:9F:65:CB:12:D8:C5:DE:F0:E9 X509v3 Authority Key Identifier: keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/NDdFndGB_INXYfGfZcsS2MXe8Ok.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.14.128.0/17 Signature Algorithm: sha256WithRSAEncryption 7c:95:45:9c:dd:7d:80:68:f1:6e:43:cb:ca:99:c0:77:bf:d5: d6:9c:76:22:36:55:3e:4e:ee:2f:ba:f7:01:a8:9a:8a:fa:e3: 47:dd:a5:79:5d:cf:83:e9:59:3e:4a:ac:cf:12:ff:98:b7:1a: f3:74:f0:38:73:5c:96:d5:e2:0c:c2:7e:c5:1f:35:4c:e7:ec: e1:a6:13:52:cb:57:aa:9e:31:c5:81:aa:0f:e5:28:f0:76:f8: fe:e7:97:a0:a9:2d:1a:f2:61:20:ef:b9:61:d9:1c:aa:fd:e5: bf:1f:91:58:2d:0a:e5:48:b3:66:d3:21:5b:1a:bd:c9:74:fc: c0:2f:c4:08:8c:92:bc:70:f9:5e:20:f4:eb:94:a6:f2:a1:e8: 5d:1d:4f:50:fe:2b:a1:1b:fb:ed:0b:45:b9:55:53:c7:74:df: fe:5b:95:d0:ae:57:4a:0d:85:c3:3d:f8:01:a1:00:b5:8c:e9: 4b:dc:35:dd:29:bc:ad:8b:67:a5:d3:75:7e:18:33:1f:2f:0d: fb:c5:a0:cd:8d:d7:d3:b6:a5:8c:42:26:ba:24:d4:dd:d9:71: b8:7c:98:7f:ad:74:50:f1:5f:3d:5a:6b:c0:3e:50:74:00:88: 54:79:ed:97:1b:4a:6b:7b:ad:ea:69:fe:f7:96:78:a4:32:b5: 53:9f:8a:db -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICC/4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5 QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yMzA5MDEw OTExNTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM0Mzc0NTlERDE4MUZD ODM1NzYxRjE5RjY1Q0IxMkQ4QzVERUYwRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGAy72LtDZ3ZPBIt2/JALFZb9AtoAq8n80YySNxzccZvAopPxD buAZcA6UuuyCNJYYEGbiq4xKZB86uCdRUfxROjtgQ+2VwCOu6KFbGX4COuzUNeIt gzYXKf4QWNDPubS4QS3Wv/kQ7r8FoGFQdH/2YOzu4SHd/EiVB4fpmJJkSSvkH0Ne QuAkKEcWKjv2Rg7wSJBrUHexlU4JTqtRa1QWFFgGRUO3CBdRGAKmEsBgqP6zordu vQWQtxPhdCmLWL4x5NIuv4yrCRTvdl7Q2hrmMCsVr8x9+XWJuyQEaUUZSYs19aJ+ NGSXCGfqwJVDDamJsSDzlewmj8NCAngngGA5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUNDdFndGB/INXYfGfZcsS2MXe8OkwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL05EZEZuZEdCX0lOWFlmR2Za Y3NTMk1YZThPay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd3 DoAwDQYJKoZIhvcNAQELBQADggEBAHyVRZzdfYBo8W5Dy8qZwHe/1dacdiI2VT5O 7i+69wGomor640fdpXldz4PpWT5KrM8S/5i3GvN08DhzXJbV4gzCfsUfNUzn7OGm E1LLV6qeMcWBqg/lKPB2+P7nl6CpLRryYSDvuWHZHKr95b8fkVgtCuVIs2bTIVsa vcl0/MAvxAiMkrxw+V4g9OuUpvKh6F0dT1D+K6Eb++0LRblVU8d03/5bldCuV0oN hcM9+AGhALWM6UvcNd0pvK2LZ6XTdX4YMx8vDfvFoM2N19O2pYxCJrok1N3Zcbh8 mH+tdFDxXz1aa8A+UHQAiFR57ZcbSmt7repp/veWeKQytVOfits= -----END CERTIFICATE-----Generated at Sun Jun 2 07:14:22 2024 by rpki-client on console-fra.rpki-client.org