$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MKY/BalBOrYy9dlaoToEQjGPsF5hlSA.roa File: BalBOrYy9dlaoToEQjGPsF5hlSA.roa (raw, json) Hash identifier: nYrXhGhteZm2wR9bTU/gLDX7ku/MiCh1hBM00b2xYkY= Subject key identifier: 05:A9:41:3A:B6:32:F5:D9:5A:A1:3A:04:42:31:8F:B0:5E:61:95:20 Certificate issuer: /CN=9D9E97B00D2E15C41AE7071732018C2B137E53A1 Certificate serial: 0B37 Authority key identifier: 9D:9E:97:B0:0D:2E:15:C4:1A:E7:07:17:32:01:8C:2B:13:7E:53:A1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/BalBOrYy9dlaoToEQjGPsF5hlSA.roa Signing time: Fri 01 Sep 2023 09:20:30 +0000 ROA not before: Fri 01 Sep 2023 09:20:30 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7478 IP address blocks: 211.76.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2871 (0xb37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D9E97B00D2E15C41AE7071732018C2B137E53A1 Validity Not Before: Sep 1 09:20:30 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=05A9413AB632F5D95AA13A0442318FB05E619520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:77:c9:b2:93:1c:9c:3b:cb:3f:34:52:96:f0: 5e:3b:ca:16:ed:d6:56:31:6b:70:84:72:ff:d6:3f: 5b:d2:e4:10:ff:11:32:32:b1:0f:93:11:36:14:5d: d8:e5:a0:59:b0:5f:41:b0:94:65:e6:74:af:11:1a: 27:36:c8:15:50:b2:9a:78:49:37:21:5e:3d:6e:78: 72:18:89:df:57:b2:10:00:f7:fc:c5:b6:33:7a:9f: 41:ca:ff:d1:df:7c:a8:0f:6f:07:f1:7e:a2:59:3f: ce:4a:db:65:a4:fd:19:ef:ff:fe:68:2c:35:80:16: e1:6d:c9:90:c4:4d:c9:fa:35:be:fd:d7:48:e8:d3: c8:0c:6a:13:e7:37:fa:f4:0a:6b:74:1f:45:ef:f6: a4:80:3b:00:63:b0:c0:27:a6:6d:e1:27:98:02:e4: c5:7f:c6:fa:35:55:e2:94:f2:69:77:c3:05:c0:78: c3:65:52:24:3e:c7:cf:1c:c8:05:ba:e0:84:dd:93: 4d:33:2f:36:2b:be:8a:8f:53:e5:61:1a:26:ce:eb: 4d:8b:95:fb:4f:d7:c9:aa:21:5a:ff:e2:b6:54:3f: de:ad:ac:df:d8:ba:10:8d:8d:ab:f4:b2:a0:04:d7: f4:1a:7b:52:3b:6e:6e:f3:7a:8b:09:5e:79:1f:48: 59:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A9:41:3A:B6:32:F5:D9:5A:A1:3A:04:42:31:8F:B0:5E:61:95:20 X509v3 Authority Key Identifier: keyid:9D:9E:97:B0:0D:2E:15:C4:1A:E7:07:17:32:01:8C:2B:13:7E:53:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/BalBOrYy9dlaoToEQjGPsF5hlSA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.0.0/19 Signature Algorithm: sha256WithRSAEncryption 99:ed:fd:d9:90:b1:d0:1d:dd:0d:f4:45:87:79:f6:d5:3b:20: 18:aa:72:13:85:f2:38:f9:11:4a:ef:c7:2e:22:14:c3:ee:5c: d9:03:9f:77:59:95:2d:ca:26:4a:35:01:c0:40:cf:44:a1:07: 1c:e0:26:c5:de:9b:8b:9a:8c:c7:52:bf:56:2a:f3:b0:fc:86: 65:03:24:0d:a5:84:9e:58:aa:cf:85:72:3d:dc:48:5e:bb:73: e3:20:aa:10:64:ff:dc:56:85:db:9e:a5:25:46:2f:55:ab:2f: db:f8:e9:40:d2:ce:e0:a2:bc:eb:69:91:92:c4:02:ec:03:91: 99:99:7c:6b:cf:0b:ff:eb:6c:e9:ba:65:16:1a:12:b3:88:cb: bf:88:89:31:3f:96:5c:f3:de:5f:27:2a:1f:73:43:12:f1:bb: 70:1a:d5:85:04:89:f6:b9:50:d4:ae:97:9a:24:ef:ab:79:6f: cf:30:30:67:60:39:58:24:9c:97:ed:00:d8:a4:03:f3:69:3f: 6e:1a:e6:0d:e8:26:69:3a:14:1a:82:bf:be:bc:6c:f4:a1:38: be:d7:0f:de:59:66:dd:9c:99:94:2a:ab:82:55:c9:66:69:f5: b2:b2:fd:c6:d6:e9:9f:b5:01:4c:92:f3:f9:1f:1d:cc:1d:52: 3e:1c:03:c5 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUQ5 RTk3QjAwRDJFMTVDNDFBRTcwNzE3MzIwMThDMkIxMzdFNTNBMTAeFw0yMzA5MDEw OTIwMzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA1QTk0MTNBQjYzMkY1 RDk1QUExM0EwNDQyMzE4RkIwNUU2MTk1MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxd8mykxycO8s/NFKW8F47yhbt1lYxa3CEcv/WP1vS5BD/ETIy sQ+TETYUXdjloFmwX0GwlGXmdK8RGic2yBVQspp4STchXj1ueHIYid9XshAA9/zF tjN6n0HK/9HffKgPbwfxfqJZP85K22Wk/Rnv//5oLDWAFuFtyZDETcn6Nb7910jo 08gMahPnN/r0Cmt0H0Xv9qSAOwBjsMAnpm3hJ5gC5MV/xvo1VeKU8ml3wwXAeMNl UiQ+x88cyAW64ITdk00zLzYrvoqPU+VhGibO602LlftP18mqIVr/4rZUP96trN/Y uhCNjav0sqAE1/Qae1I7bm7zeosJXnkfSFkBAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUBalBOrYy9dlaoToEQjGPsF5hlSAwHwYDVR0jBBgwFoAUnZ6XsA0uFcQa5wcX MgGMKxN+U6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUtZL25a NlhzQTB1RmNRYTV3Y1hNZ0dNS3hOLVU2RS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev blo2WHNBMHVGY1FhNXdjWE1nR01LeE4tVTZFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvTUtZL0JhbEJPcll5OWRsYW9Ub0VRakdQc0Y1 aGxTQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXTTAAwDQYJ KoZIhvcNAQELBQADggEBAJnt/dmQsdAd3Q30RYd59tU7IBiqchOF8jj5EUrvxy4i FMPuXNkDn3dZlS3KJko1AcBAz0ShBxzgJsXem4uajMdSv1Yq87D8hmUDJA2lhJ5Y qs+Fcj3cSF67c+MgqhBk/9xWhduepSVGL1WrL9v46UDSzuCivOtpkZLEAuwDkZmZ fGvPC//rbOm6ZRYaErOIy7+IiTE/llzz3l8nKh9zQxLxu3Aa1YUEifa5UNSul5ok 76t5b88wMGdgOVgknJftANikA/NpP24a5g3oJmk6FBqCv768bPShOL7XD95ZZt2c mZQqq4JVyWZp9bKy/cbW6Z+1AUyS8/kfHcwdUj4cA8U= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:01 2024 by rpki-client on console-fra.rpki-client.org