$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-vMD8SwTuP2fVCqHv_mFJLoJfy8.roa File: -vMD8SwTuP2fVCqHv_mFJLoJfy8.roa (raw, json) Hash identifier: H3lvKsJ50E8/BtRhlT1BqJc1ys5VSXNC6T5dx2jtmH4= Subject key identifier: FA:F3:03:F1:2C:13:B8:FD:9F:54:2A:87:BF:F9:85:24:BA:09:7F:2F Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 137D Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-vMD8SwTuP2fVCqHv_mFJLoJfy8.roa Signing time: Fri 01 Sep 2023 09:25:01 +0000 ROA not before: Fri 01 Sep 2023 09:25:01 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131627 IP address blocks: 106.105.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4989 (0x137d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:01 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FAF303F12C13B8FD9F542A87BFF98524BA097F2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:11:fd:80:a0:ae:44:4b:0a:c8:a2:86:49:9e: 0e:0a:c7:0b:9c:87:d2:da:ad:0c:f7:35:0b:c8:8e: 91:75:05:8c:d7:e9:87:e6:ed:20:15:69:24:c0:fc: 26:5b:2e:38:e7:a4:33:f1:28:a5:dd:6c:c9:e1:f7: cb:a5:e5:fd:d9:74:e2:94:40:71:f6:44:4b:7d:af: f9:5d:c8:44:29:48:0a:26:30:52:9e:3e:ec:6d:ab: 68:71:f5:bc:eb:53:ff:7f:cd:1b:30:79:83:8f:25: 97:3d:ab:d2:ff:f1:11:d9:7e:ed:93:7d:00:8f:6f: e9:40:83:eb:c4:16:40:e6:93:66:4e:c1:4d:3a:23: e2:b8:a3:8e:31:b0:04:c3:3e:fd:fc:11:fd:f3:1e: 5d:c0:35:9a:ce:94:52:0d:c0:b8:09:95:d5:2f:c2: 95:5f:8f:6e:f4:bf:47:1e:9a:5f:4a:7b:95:73:47: fc:e7:a4:dc:dd:e0:dd:35:92:81:16:87:43:23:3b: 64:e0:48:44:21:69:a2:c2:d3:ff:7a:51:fb:64:15: a9:90:47:15:3b:7f:15:56:c7:02:62:83:fe:41:b1: 55:09:23:ac:c8:76:b4:ec:eb:0e:8e:da:b7:d0:27: 94:ce:2d:fe:05:86:22:14:57:33:6c:bc:a1:ef:40: 49:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F3:03:F1:2C:13:B8:FD:9F:54:2A:87:BF:F9:85:24:BA:09:7F:2F X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-vMD8SwTuP2fVCqHv_mFJLoJfy8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.0.0/20 Signature Algorithm: sha256WithRSAEncryption a6:8c:12:66:61:9d:a9:b4:83:e3:8e:f6:53:f5:41:1f:3b:66: 8a:66:f7:24:b2:dc:e1:62:ff:3e:d0:75:0c:8d:2d:9f:93:bc: c1:1b:50:18:0a:c3:fe:4b:82:0f:9c:87:b6:97:42:81:dc:fa: 36:a7:80:fd:c6:87:1a:4f:98:1f:0b:c9:84:f6:00:d6:50:5f: 31:55:0f:81:27:67:d0:79:ac:31:5c:5b:e3:fe:5d:be:8b:d1: eb:55:6c:28:c3:f8:fd:75:3c:4d:a6:df:04:e5:9c:58:5a:6c: e1:ad:e6:e9:b9:8a:12:d0:b9:dd:5b:f5:6b:ff:77:ee:7f:6f: 38:e8:d1:b0:31:ac:19:57:a4:8e:d8:48:12:04:f7:41:8c:22: 86:53:1f:4f:ae:25:27:91:fc:08:64:f5:1d:9b:52:c4:d1:64: 53:ba:3f:85:37:a8:0a:fe:26:dc:53:3f:dd:60:7c:19:c7:e0: 0f:4a:ec:d5:d0:55:dc:2b:36:3b:5e:18:90:8c:c0:27:6e:da: fc:7e:f3:bf:41:67:a3:28:6b:13:51:f8:7d:7d:c0:8e:bb:96: c7:2d:9a:46:01:a3:5b:57:b5:7a:9f:83:30:e6:85:30:cf:d9: a9:dd:bd:ca:08:fa:af:8b:73:24:14:ad:3a:94:2c:94:db:f5: 68:99:17:3a -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE30wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZBRjMwM0YxMkMxM0I4 RkQ5RjU0MkE4N0JGRjk4NTI0QkEwOTdGMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4Ef2AoK5ESwrIooZJng4Kxwuch9LarQz3NQvIjpF1BYzX6Yfm 7SAVaSTA/CZbLjjnpDPxKKXdbMnh98ul5f3ZdOKUQHH2REt9r/ldyEQpSAomMFKe Puxtq2hx9bzrU/9/zRsweYOPJZc9q9L/8RHZfu2TfQCPb+lAg+vEFkDmk2ZOwU06 I+K4o44xsATDPv38Ef3zHl3ANZrOlFINwLgJldUvwpVfj270v0ceml9Ke5VzR/zn pNzd4N01koEWh0MjO2TgSEQhaaLC0/96UftkFamQRxU7fxVWxwJig/5BsVUJI6zI drTs6w6O2rfQJ5TOLf4FhiIUVzNsvKHvQEk5AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU+vMD8SwTuP2fVCqHv/mFJLoJfy8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvLXZNRDhTd1R1UDJmVkNxSHZfbUZK TG9KZnk4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGppADAN BgkqhkiG9w0BAQsFAAOCAQEApowSZmGdqbSD4472U/VBHztmimb3JLLc4WL/PtB1 DI0tn5O8wRtQGArD/kuCD5yHtpdCgdz6NqeA/caHGk+YHwvJhPYA1lBfMVUPgSdn 0HmsMVxb4/5dvovR61VsKMP4/XU8TabfBOWcWFps4a3m6bmKEtC53Vv1a/937n9v OOjRsDGsGVekjthIEgT3QYwihlMfT64lJ5H8CGT1HZtSxNFkU7o/hTeoCv4m3FM/ 3WB8GcfgD0rs1dBV3Cs2O14YkIzAJ27a/H7zv0FnoyhrE1H4fX3AjruWxy2aRgGj W1e1ep+DMOaFMM/Zqd29ygj6r4tzJBStOpQslNv1aJkXOg== -----END CERTIFICATE-----Generated at Sun Jun 2 09:37:17 2024 by rpki-client on console-ams.rpki-client.org