$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/NLZuxWPiW5CV-JzeTSFCRK_-0ow.roa File: NLZuxWPiW5CV-JzeTSFCRK_-0ow.roa (raw, json) Hash identifier: A1qNrh1A8Z5cvDsskYEMXT5RZrJaMGYOsT2eKmCUmQg= Subject key identifier: 34:B6:6E:C5:63:E2:5B:90:95:F8:9C:DE:4D:21:42:44:AF:FE:D2:8C Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0C2B Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/NLZuxWPiW5CV-JzeTSFCRK_-0ow.roa Signing time: Fri 01 Sep 2023 09:14:03 +0000 ROA not before: Fri 01 Sep 2023 09:14:03 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18049 IP address blocks: 61.61.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3115 (0xc2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Sep 1 09:14:03 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=34B66EC563E25B9095F89CDE4D214244AFFED28C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:17:e2:4c:fe:06:4c:94:5d:86:ab:77:28:4d: 33:a0:0f:7c:f3:e1:75:35:02:eb:c8:45:76:39:38: ee:09:ef:83:7a:c5:25:fb:c8:f8:54:6c:d7:9e:bd: ea:3d:1f:69:b3:84:51:86:84:1b:22:52:5c:67:da: 7f:a7:4d:ca:ad:e1:ed:65:20:4a:78:a7:35:48:a4: b9:a8:33:4b:85:23:cf:e1:41:8f:95:7b:9a:94:03: a4:7d:96:c1:cc:0d:2c:c5:32:0b:8a:19:75:61:0d: 6f:bc:f0:4f:c0:0d:e6:b1:8c:13:f7:dc:60:31:c6: 48:62:ca:18:db:33:52:0c:57:f2:03:30:d8:10:5f: a1:c7:7d:4a:fc:bb:31:07:a2:97:58:46:2c:2e:56: b9:66:d3:d6:8c:de:8a:93:b5:73:d8:b0:57:f0:0f: 97:f4:67:1d:5d:36:f8:af:9a:ef:04:2d:8d:4f:07: 14:b4:53:b9:99:2b:5b:15:7b:9d:50:6b:07:24:d7: 43:38:84:13:e8:a7:80:55:16:11:ba:49:ef:f6:4d: 7a:13:5b:2c:2d:27:dc:4a:c2:83:60:be:2c:15:24: 34:29:da:4a:a5:64:9a:f8:65:20:69:b2:64:41:48: 33:17:51:52:8c:c5:29:31:de:ac:0c:21:15:98:73: 2a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B6:6E:C5:63:E2:5B:90:95:F8:9C:DE:4D:21:42:44:AF:FE:D2:8C X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/NLZuxWPiW5CV-JzeTSFCRK_-0ow.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.72.0/22 Signature Algorithm: sha256WithRSAEncryption a7:6a:86:aa:0f:d0:90:09:a6:ab:4f:2d:e0:59:b0:c8:9a:99: cc:78:be:fa:78:34:cd:e3:46:b0:f6:0b:67:e3:fb:70:72:37: d7:b1:12:1b:91:88:91:10:be:ff:51:08:e5:43:c2:8a:0b:1e: ed:1f:54:e8:9b:8f:31:b9:cc:5d:ea:3b:8f:d5:98:60:a9:cb: 23:e5:66:eb:d3:2a:7f:ae:35:91:09:0d:fa:f4:ec:36:cc:f2: c7:06:af:cc:c7:30:8e:f3:7e:e8:7a:56:59:fd:59:35:91:5d: 9c:46:53:02:04:98:b6:6b:06:08:34:2a:fb:0c:9b:96:52:1d: 46:bb:cd:16:d1:c2:83:4f:85:23:4d:90:b3:22:c1:60:46:c0: e6:2a:e5:02:1e:4f:c6:14:56:cd:21:52:f3:b3:f4:2f:b7:f1: 48:ab:9e:d4:5d:d8:62:8f:73:62:6d:71:c1:7c:6e:d8:f7:e8: 99:87:24:03:e7:a5:1e:a0:be:fc:5f:7c:f7:f2:b5:76:78:3a: 25:70:78:2d:6c:76:01:24:12:82:3c:3b:80:a1:08:25:8a:7c: 94:ee:87:bc:e4:16:1e:04:1f:fe:fe:9c:3f:1c:af:ad:4c:8d: 22:ed:eb:d4:3e:2f:2e:c5:01:db:07:48:ca:9a:cd:d4:cf:fc: be:10:b7:f3 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDCswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yMzA5MDEw OTE0MDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM0QjY2RUM1NjNFMjVC OTA5NUY4OUNERTREMjE0MjQ0QUZGRUQyOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoF+JM/gZMlF2Gq3coTTOgD3zz4XU1AuvIRXY5OO4J74N6xSX7 yPhUbNeeveo9H2mzhFGGhBsiUlxn2n+nTcqt4e1lIEp4pzVIpLmoM0uFI8/hQY+V e5qUA6R9lsHMDSzFMguKGXVhDW+88E/ADeaxjBP33GAxxkhiyhjbM1IMV/IDMNgQ X6HHfUr8uzEHopdYRiwuVrlm09aM3oqTtXPYsFfwD5f0Zx1dNvivmu8ELY1PBxS0 U7mZK1sVe51Qawck10M4hBPop4BVFhG6Se/2TXoTWywtJ9xKwoNgviwVJDQp2kql ZJr4ZSBpsmRBSDMXUVKMxSkx3qwMIRWYcypZAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUNLZuxWPiW5CV+JzeTSFCRK/+0owwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL05MWnV4V1BpVzVDVi1KemVUU0ZDUktf LTBvdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9PUgwDQYJ KoZIhvcNAQELBQADggEBAKdqhqoP0JAJpqtPLeBZsMiamcx4vvp4NM3jRrD2C2fj +3ByN9exEhuRiJEQvv9RCOVDwooLHu0fVOibjzG5zF3qO4/VmGCpyyPlZuvTKn+u NZEJDfr07DbM8scGr8zHMI7zfuh6Vln9WTWRXZxGUwIEmLZrBgg0KvsMm5ZSHUa7 zRbRwoNPhSNNkLMiwWBGwOYq5QIeT8YUVs0hUvOz9C+38UirntRd2GKPc2JtccF8 btj36JmHJAPnpR6gvvxffPfytXZ4OiVweC1sdgEkEoI8O4ChCCWKfJTuh7zkFh4E H/7+nD8cr61MjSLt69Q+Ly7FAdsHSMqazdTP/L4Qt/M= -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:40 2024 by rpki-client on console-fra.rpki-client.org