$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NARL/nUZwSJE0BrslxgU-ITWWeJBx3JA.roa File: nUZwSJE0BrslxgU-ITWWeJBx3JA.roa (raw, json) Hash identifier: PDrfyo1sOWkhJfBj+ZeoD6HfWxZnx5VELeoO5iBjMj0= Subject key identifier: 9D:46:70:48:91:34:06:BB:25:C6:05:3E:21:35:96:78:90:71:DC:90 Certificate issuer: /CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0 Certificate serial: 0B41 Authority key identifier: 45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/nUZwSJE0BrslxgU-ITWWeJBx3JA.roa Signing time: Fri 01 Sep 2023 09:21:36 +0000 ROA not before: Fri 01 Sep 2023 09:21:36 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7539 IP address blocks: 103.124.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2881 (0xb41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0 Validity Not Before: Sep 1 09:21:36 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9D467048913406BB25C6053E213596789071DC90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2b:b8:f4:1e:94:db:6c:36:70:6c:e1:9c:5e: 70:f1:ab:c3:52:47:d0:14:41:3f:76:6d:64:84:2c: 51:07:5f:2a:f2:c3:08:d6:26:09:0a:2c:b1:c5:1a: 25:cd:fe:c1:67:57:52:40:cb:45:81:e0:fb:1b:42: 72:b2:dc:82:d4:bb:bd:4c:10:11:b2:a9:06:77:b5: 48:1e:61:32:08:c7:40:d5:05:e3:a9:77:31:2f:83: d8:8b:9f:8e:d5:f9:1f:74:f8:27:59:b7:bc:dd:42: e8:89:b8:c5:a4:2a:21:28:cd:40:84:4e:67:b0:a5: b9:d0:13:7b:3a:3a:dd:0f:da:9f:5e:74:f2:78:33: fe:54:0e:99:96:f5:84:8b:f0:8e:8d:49:94:97:e2: 81:0c:dc:3d:a0:90:87:6e:14:8b:22:0a:d2:2c:74: 43:cd:dc:c7:bc:e9:e4:d1:26:70:7c:59:8a:d2:f2: 6d:d4:4f:a8:17:74:d6:d2:ba:97:85:34:fa:53:09: ca:5e:6b:30:2d:3a:38:14:94:74:e1:4a:18:d8:eb: 39:81:9e:83:da:04:56:64:da:8c:7c:22:0f:5c:3a: 2e:d6:9d:2d:43:34:97:11:4a:d7:d8:fe:f8:b8:60: 14:eb:20:a8:3b:ac:ea:9a:7c:01:2c:b7:71:38:87: 1f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:46:70:48:91:34:06:BB:25:C6:05:3E:21:35:96:78:90:71:DC:90 X509v3 Authority Key Identifier: keyid:45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/nUZwSJE0BrslxgU-ITWWeJBx3JA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.124.72.0/22 Signature Algorithm: sha256WithRSAEncryption 59:6a:76:15:9f:b0:30:89:52:2a:a4:ff:97:1f:27:8d:e3:95: af:e4:83:8c:20:02:57:ea:83:d2:ac:31:e1:5a:b3:41:b9:14: d3:14:ca:37:49:80:ae:73:51:86:b4:fb:16:5d:ef:c3:d8:82: 87:c6:af:f9:75:8b:40:2f:83:29:e7:81:60:44:65:80:88:e5: 28:ca:1d:61:27:89:8a:d3:d9:f5:28:16:ea:d5:e7:3f:1b:43: f2:67:07:61:e4:4b:d0:29:ea:ab:d9:5a:b9:59:c1:61:24:76: a3:34:0c:d1:40:a0:f2:77:c3:04:bf:55:e3:76:b1:01:f7:77: 93:02:e4:04:1d:2c:bc:08:11:31:a0:e7:50:49:a3:31:87:16: 0a:f8:09:76:93:9e:3d:40:9a:64:7e:13:96:96:fd:f6:ca:f9: 4e:63:01:3e:33:34:41:0a:6f:27:0e:92:a8:ad:1e:4c:d4:c5: 1f:5f:0f:ca:19:b2:0c:38:9d:96:5c:0c:e3:07:a8:21:1f:56: 4a:3c:64:bc:b9:7f:70:85:06:8b:c4:3d:a0:1b:bb:c3:5f:27: 5e:cd:9a:0f:10:e4:9c:b3:51:19:ef:82:4c:00:46:69:34:9a: 1f:e6:22:6b:b0:e9:79:a7:6b:a8:bb:0e:a2:68:30:69:ff:2d: b8:51:7f:41 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICC0EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDUx RUY5MzU5QTk4NEY2QTRDRjkxRkU5MDA0RUFFQjA4OUE5ODRDMDAeFw0yMzA5MDEw OTIxMzZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlENDY3MDQ4OTEzNDA2 QkIyNUM2MDUzRTIxMzU5Njc4OTA3MURDOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLK7j0HpTbbDZwbOGcXnDxq8NSR9AUQT92bWSELFEHXyrywwjW JgkKLLHFGiXN/sFnV1JAy0WB4PsbQnKy3ILUu71MEBGyqQZ3tUgeYTIIx0DVBeOp dzEvg9iLn47V+R90+CdZt7zdQuiJuMWkKiEozUCETmewpbnQE3s6Ot0P2p9edPJ4 M/5UDpmW9YSL8I6NSZSX4oEM3D2gkIduFIsiCtIsdEPN3Me86eTRJnB8WYrS8m3U T6gXdNbSupeFNPpTCcpeazAtOjgUlHThShjY6zmBnoPaBFZk2ox8Ig9cOi7WnS1D NJcRStfY/vi4YBTrIKg7rOqafAEst3E4hx/lAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUnUZwSJE0BrslxgU+ITWWeJBx3JAwHwYDVR0jBBgwFoAURR75NZqYT2pM+R/p AE6usImphMAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkFSTC9S Ujc1TlpxWVQycE0tUl9wQUU2dXNJbXBoTUEuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L1JSNzVOWnFZVDJwTS1SX3BBRTZ1c0ltcGhNQS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05BUkwvblVad1NKRTBCcnNseGdVLUlUV1dl SkJ4M0pBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmd8SDAN BgkqhkiG9w0BAQsFAAOCAQEAWWp2FZ+wMIlSKqT/lx8njeOVr+SDjCACV+qD0qwx 4VqzQbkU0xTKN0mArnNRhrT7Fl3vw9iCh8av+XWLQC+DKeeBYERlgIjlKModYSeJ itPZ9SgW6tXnPxtD8mcHYeRL0Cnqq9lauVnBYSR2ozQM0UCg8nfDBL9V43axAfd3 kwLkBB0svAgRMaDnUEmjMYcWCvgJdpOePUCaZH4Tlpb99sr5TmMBPjM0QQpvJw6S qK0eTNTFH18PyhmyDDidllwM4weoIR9WSjxkvLl/cIUGi8Q9oBu7w18nXs2aDxDk nLNRGe+CTABGaTSaH+Yia7DpeadrqLsOomgwaf8tuFF/QQ== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:47 2024 by rpki-client on console-ams.rpki-client.org