$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/NIPCgJ_83ZEvkZS79wxv-WsS8f8.roa File: NIPCgJ_83ZEvkZS79wxv-WsS8f8.roa (raw, json) Hash identifier: ohXME+te4s5MOFdDn/Zaf65cqOcWN6lr75sAdLq0kXY= Subject key identifier: 34:83:C2:80:9F:FC:DD:91:2F:91:94:BB:F7:0C:6F:F9:6B:12:F1:FF Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0C0E Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/NIPCgJ_83ZEvkZS79wxv-WsS8f8.roa Signing time: Fri 01 Sep 2023 09:13:56 +0000 ROA not before: Fri 01 Sep 2023 09:13:56 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9922 IP address blocks: 61.61.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3086 (0xc0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Sep 1 09:13:56 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3483C2809FFCDD912F9194BBF70C6FF96B12F1FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f1:a2:c2:68:7e:37:0e:d8:98:8e:27:be:e2: 67:01:39:56:2a:46:6f:90:cd:2d:92:cf:72:b4:b1: c4:e1:aa:43:a3:10:ee:de:60:d9:e1:e0:9f:be:44: a4:31:36:b3:34:cd:5a:0d:c1:e0:7c:c1:24:1f:53: be:cb:63:a7:95:e1:2a:ad:e8:cb:50:67:46:c4:fd: 36:9a:08:42:80:85:48:09:3f:0d:c0:cd:fe:36:15: 11:57:8a:ef:a8:c1:ab:be:63:fe:98:e8:10:3a:02: b1:e4:52:82:d7:b6:e3:77:b3:20:8a:b8:82:77:0d: 46:29:33:6e:b2:2d:99:a4:87:7c:c8:6b:5a:fa:56: 4e:68:42:f5:a9:5f:f1:18:cc:0b:03:45:60:95:ed: 47:eb:8c:05:15:76:83:74:70:ff:49:82:7e:09:45: 2c:6a:22:cc:98:dd:9f:3c:99:39:38:3d:33:a6:95: e7:55:d3:09:15:d1:4c:04:af:a4:b3:29:d8:81:52: 28:2d:57:c6:10:cc:e1:5b:be:58:1d:57:4d:da:5e: 08:f5:ff:2a:b9:20:87:07:f2:21:42:92:e0:8c:67: c2:88:36:44:ea:45:18:32:61:6b:0f:b7:52:ab:d8: 53:7c:ff:dd:d8:11:eb:30:4d:35:95:0f:b9:f2:72: fd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:83:C2:80:9F:FC:DD:91:2F:91:94:BB:F7:0C:6F:F9:6B:12:F1:FF X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/NIPCgJ_83ZEvkZS79wxv-WsS8f8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.80.0/20 Signature Algorithm: sha256WithRSAEncryption a4:86:d9:53:e3:f5:65:cf:1a:a2:49:64:93:29:6d:2f:52:86: 72:55:9a:d4:a5:25:d8:83:34:97:07:c7:79:74:6c:f0:e7:85: e1:f1:91:4b:87:3c:2e:f4:80:38:fd:2e:93:c3:2a:ca:c7:ce: 27:af:0f:88:58:ac:27:55:70:ff:66:9c:d7:56:eb:d1:7d:85: 05:2b:5f:b9:fb:23:a4:01:96:b4:d8:6c:9a:58:59:3f:d1:8e: 25:f3:4c:8d:66:0d:c5:57:eb:af:12:17:61:0a:8b:4f:f4:e9: 19:e3:9b:27:c0:44:9f:64:64:67:4e:c9:40:a4:67:e2:29:38: 0e:0a:f4:cb:5d:86:70:9c:49:c2:54:18:59:9c:83:ee:a9:c9: 2c:a8:00:a4:11:13:5d:f2:2e:b5:5c:3d:64:69:17:a0:7a:a6: 39:a6:fa:c3:e5:91:9c:ea:58:4b:5c:c5:06:fe:09:38:6f:96: 27:57:0a:81:62:67:78:03:9f:08:ef:98:86:6e:75:b2:56:76: d3:e0:66:c2:ee:f8:14:37:3f:93:57:4e:ab:4d:d3:be:24:a7: 76:49:cb:b3:49:b9:30:2a:40:6d:ea:77:90:85:a1:e1:86:e4: a7:99:5e:b0:84:07:28:c4:19:fb:f9:e7:78:ef:84:d2:33:80: 43:66:6e:d5 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDA4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yMzA5MDEw OTEzNTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM0ODNDMjgwOUZGQ0RE OTEyRjkxOTRCQkY3MEM2RkY5NkIxMkYxRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/8aLCaH43DtiYjie+4mcBOVYqRm+QzS2Sz3K0scThqkOjEO7e YNnh4J++RKQxNrM0zVoNweB8wSQfU77LY6eV4Sqt6MtQZ0bE/TaaCEKAhUgJPw3A zf42FRFXiu+owau+Y/6Y6BA6ArHkUoLXtuN3syCKuIJ3DUYpM26yLZmkh3zIa1r6 Vk5oQvWpX/EYzAsDRWCV7UfrjAUVdoN0cP9Jgn4JRSxqIsyY3Z88mTk4PTOmledV 0wkV0UwEr6SzKdiBUigtV8YQzOFbvlgdV03aXgj1/yq5IIcH8iFCkuCMZ8KINkTq RRgyYWsPt1Kr2FN8/93YEeswTTWVD7nycv31AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUNIPCgJ/83ZEvkZS79wxv+WsS8f8wHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL05JUENnSl84M1pFdmtaUzc5d3h2LVdz UzhmOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9PVAwDQYJ KoZIhvcNAQELBQADggEBAKSG2VPj9WXPGqJJZJMpbS9ShnJVmtSlJdiDNJcHx3l0 bPDnheHxkUuHPC70gDj9LpPDKsrHzievD4hYrCdVcP9mnNdW69F9hQUrX7n7I6QB lrTYbJpYWT/RjiXzTI1mDcVX668SF2EKi0/06RnjmyfARJ9kZGdOyUCkZ+IpOA4K 9MtdhnCcScJUGFmcg+6pySyoAKQRE13yLrVcPWRpF6B6pjmm+sPlkZzqWEtcxQb+ CThvlidXCoFiZ3gDnwjvmIZudbJWdtPgZsLu+BQ3P5NXTqtN074kp3ZJy7NJuTAq QG3qd5CFoeGG5KeZXrCEByjEGfv553jvhNIzgENmbtU= -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:40 2024 by rpki-client on console-fra.rpki-client.org