$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCCC/zqsiuqeq9TA1lZKcfQ-puRT8Tfg.roa File: zqsiuqeq9TA1lZKcfQ-puRT8Tfg.roa (raw, json) Hash identifier: InLCkeSetyD9ZDWEMLbN9dNxQ3dDeHWIimoSVhIL+0g= Subject key identifier: CE:AB:22:BA:A7:AA:F5:30:35:95:92:9C:7D:0F:A9:B9:14:FC:4D:F8 Certificate issuer: /CN=07E36A3D219A8AFC84F88B30553E638CE6C2CECE Certificate serial: 03 Authority key identifier: 07:E3:6A:3D:21:9A:8A:FC:84:F8:8B:30:55:3E:63:8C:E6:C2:CE:CE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/B-NqPSGaivyE-IswVT5jjObCzs4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/zqsiuqeq9TA1lZKcfQ-puRT8Tfg.roa Signing time: Tue 12 Mar 2024 05:38:26 +0000 ROA not before: Tue 12 Mar 2024 05:38:26 +0000 ROA not after: Wed 26 Feb 2025 15:30:21 +0000 asID: 150772 IP address blocks: 157.20.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/B-NqPSGaivyE-IswVT5jjObCzs4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/B-NqPSGaivyE-IswVT5jjObCzs4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/B-NqPSGaivyE-IswVT5jjObCzs4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 05:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07E36A3D219A8AFC84F88B30553E638CE6C2CECE Validity Not Before: Mar 12 05:38:26 2024 GMT Not After : Feb 26 15:30:21 2025 GMT Subject: CN=CEAB22BAA7AAF5303595929C7D0FA9B914FC4DF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f2:f4:bf:32:b6:16:b0:db:fd:42:71:94:b7: 26:b1:cc:a1:bc:f9:de:f5:b4:b0:80:fd:30:ba:b9: 2c:71:54:e1:c6:20:8d:a1:16:92:ff:06:79:f0:d1: 69:c2:f4:f3:8a:af:ae:86:55:94:50:27:d8:c8:be: 65:26:92:4f:34:f8:90:19:d0:7f:bc:6c:e2:8e:b2: 33:0d:40:8f:34:30:2e:91:fd:fe:ae:0e:93:3b:ea: fe:da:42:a1:69:22:12:7d:cf:3f:e1:60:55:a4:6f: 7c:b7:7a:6d:79:78:c5:9a:b2:53:b4:62:94:ee:c5: 93:a6:11:47:77:f3:a3:ca:07:e2:15:58:ab:96:27: 88:51:56:4c:b7:39:ef:6c:d1:54:94:f8:5d:46:67: ac:64:7e:04:fd:41:3d:af:2a:04:b6:b7:17:27:b4: 4f:17:e9:84:28:f8:0e:9b:24:83:9e:4c:f8:32:f0: 43:c9:be:8a:29:16:af:19:68:ed:00:39:88:0c:90: 0d:f0:07:db:85:ea:69:77:20:ea:68:2c:7f:cd:c8: 90:cb:77:1d:03:55:fd:aa:75:3d:bd:7e:fa:8d:80: 3c:a9:85:cd:d9:f6:cb:5d:cb:24:55:7c:6c:22:b6: ed:ae:d2:77:29:07:e0:4b:d4:b7:60:3b:54:81:55: 55:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AB:22:BA:A7:AA:F5:30:35:95:92:9C:7D:0F:A9:B9:14:FC:4D:F8 X509v3 Authority Key Identifier: keyid:07:E3:6A:3D:21:9A:8A:FC:84:F8:8B:30:55:3E:63:8C:E6:C2:CE:CE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/B-NqPSGaivyE-IswVT5jjObCzs4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/B-NqPSGaivyE-IswVT5jjObCzs4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/zqsiuqeq9TA1lZKcfQ-puRT8Tfg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.106.0/23 Signature Algorithm: sha256WithRSAEncryption d1:fa:c6:5d:a1:01:c8:cd:ac:d2:13:d1:c4:81:eb:3c:e1:b2: ae:05:cc:a8:64:6f:43:44:17:e8:c3:74:9d:20:7d:a7:7f:0b: c0:b1:c4:8b:45:88:dd:a5:7c:19:1f:e3:7d:94:0b:d4:90:08: 17:61:cb:26:13:eb:26:fe:2c:8f:00:98:7b:d0:82:4a:1d:95: 20:8e:51:d3:ee:06:2e:50:8d:9f:5b:b1:3a:eb:5b:10:f4:ee: d5:b8:4b:4c:91:bc:39:da:47:14:3c:35:34:93:af:64:56:e0: b1:97:47:3d:ae:73:4f:3d:b0:b0:51:fe:07:cc:27:c9:4a:2f: 9d:16:c2:d0:4f:6a:ab:67:95:67:b6:97:8f:d2:f0:5c:37:d5: ed:f0:bd:80:40:e7:36:45:b9:4c:41:36:00:12:66:18:88:13: 5c:53:01:c4:c0:84:f6:ea:81:2d:da:d9:1c:da:c8:cc:0c:2e: 71:0a:c1:5f:bb:aa:c2:78:d0:76:fe:11:6a:1b:93:c3:b2:eb: 5d:d2:39:ef:33:4e:f0:77:fa:ed:df:9f:73:e9:47:93:ab:c6: d4:81:2b:df:95:4d:17:34:ef:b6:f3:a4:4a:cd:76:4b:f1:f3: b1:5b:74:d9:7d:3a:55:04:89:e7:c3:d2:20:2f:1c:83:45:54: 9f:9f:84:da -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwN0Uz NkEzRDIxOUE4QUZDODRGODhCMzA1NTNFNjM4Q0U2QzJDRUNFMB4XDTI0MDMxMjA1 MzgyNloXDTI1MDIyNjE1MzAyMVowMzExMC8GA1UEAxMoQ0VBQjIyQkFBN0FBRjUz MDM1OTU5MjlDN0QwRkE5QjkxNEZDNERGODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANry9L8ythaw2/1CcZS3JrHMobz53vW0sID9MLq5LHFU4cYgjaEW kv8GefDRacL084qvroZVlFAn2Mi+ZSaSTzT4kBnQf7xs4o6yMw1AjzQwLpH9/q4O kzvq/tpCoWkiEn3PP+FgVaRvfLd6bXl4xZqyU7RilO7Fk6YRR3fzo8oH4hVYq5Yn iFFWTLc572zRVJT4XUZnrGR+BP1BPa8qBLa3Fye0TxfphCj4Dpskg55M+DLwQ8m+ iikWrxlo7QA5iAyQDfAH24XqaXcg6mgsf83IkMt3HQNV/ap1Pb1++o2APKmFzdn2 y13LJFV8bCK27a7SdykH4EvUt2A7VIFVVa0CAwEAAaOCAeowggHmMB0GA1UdDgQW BBTOqyK6p6r1MDWVkpx9D6m5FPxN+DAfBgNVHSMEGDAWgBQH42o9IZqK/IT4izBV PmOM5sLOzjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGA1UdHwRTMFEwT6BN oEuGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9OQ0NDL0It TnFQU0dhaXZ5RS1Jc3dWVDVqak9iQ3pzNC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev Qi1OcVBTR2FpdnlFLUlzd1ZUNWpqT2JDenM0LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZoGCCsGAQUFBwELBIGNMIGKMFUGCCsGAQUFBzALhklyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvTkNDQy96cXNpdXFlcTlUQTFsWktjZlEtcHVS VDhUZmcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJk cC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnRRqMA0G CSqGSIb3DQEBCwUAA4IBAQDR+sZdoQHIzazSE9HEges84bKuBcyoZG9DRBfow3Sd IH2nfwvAscSLRYjdpXwZH+N9lAvUkAgXYcsmE+sm/iyPAJh70IJKHZUgjlHT7gYu UI2fW7E661sQ9O7VuEtMkbw52kcUPDU0k69kVuCxl0c9rnNPPbCwUf4HzCfJSi+d FsLQT2qrZ5VntpeP0vBcN9Xt8L2AQOc2RblMQTYAEmYYiBNcUwHEwIT26oEt2tkc 2sjMDC5xCsFfu6rCeNB2/hFqG5PDsutd0jnvM07wd/rt359z6UeTq8bUgSvflU0X NO+286RKzXZL8fOxW3TZfTpVBInnw9IgLxyDRVSfn4Ta -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:41 2024 by rpki-client on console-fra.rpki-client.org