$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-wifPGu71I2pTRriuZKyyKDlgto.roa File: -wifPGu71I2pTRriuZKyyKDlgto.roa (raw, json) Hash identifier: XftAUhfyWWlGjBA4b/gTOLEmd0UG2z1eFxXV2V8/R0M= Subject key identifier: FB:08:9F:3C:6B:BB:D4:8D:A9:4D:1A:E2:B9:92:B2:C8:A0:E5:82:DA Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 12E5 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-wifPGu71I2pTRriuZKyyKDlgto.roa Signing time: Fri 01 Sep 2023 09:24:13 +0000 ROA not before: Fri 01 Sep 2023 09:24:13 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 106.105.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4837 (0x12e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:13 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FB089F3C6BBBD48DA94D1AE2B992B2C8A0E582DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bb:08:f6:95:ad:ec:d1:e7:63:0c:72:20:db: f3:22:df:9a:a0:27:99:b6:9d:f6:4b:9b:af:47:a4: be:f6:ec:a5:9d:12:a3:ef:2c:ee:3b:be:3d:6b:c6: 10:07:d0:cc:e5:73:b4:db:8d:e8:b5:9c:04:02:5a: 12:00:fd:ea:db:da:f2:58:01:18:27:45:87:f4:53: 09:69:c4:36:82:af:8b:71:be:e9:a6:71:bc:88:3a: b5:c2:0d:79:70:36:79:ab:7c:b2:91:6a:16:57:d0: 0f:31:da:e7:42:56:16:94:bb:3d:bb:a0:ee:49:89: 8b:86:5b:33:4f:08:e9:11:6f:9d:df:45:af:15:40: ad:0d:f1:a9:3c:34:80:db:8d:58:f4:0b:36:ae:98: e0:f2:e4:a3:5a:4d:4b:12:8a:9d:3c:6b:3f:3d:31: 76:f3:11:89:8e:46:30:d5:61:02:61:76:42:0d:79: 40:a8:1e:c2:82:2c:bf:c4:b4:af:c3:2d:f6:79:33: f8:4f:c4:8d:ad:08:6f:13:be:2a:bd:4f:a3:ae:4d: 70:8a:d7:10:33:f2:14:68:3f:dd:a8:c3:ad:d7:53: 28:92:66:89:25:8d:42:7d:21:42:77:f7:34:e4:68: be:fc:03:23:fb:d2:37:39:f3:81:ae:3e:a1:b6:7b: ef:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:08:9F:3C:6B:BB:D4:8D:A9:4D:1A:E2:B9:92:B2:C8:A0:E5:82:DA X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-wifPGu71I2pTRriuZKyyKDlgto.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.128.0/19 Signature Algorithm: sha256WithRSAEncryption 71:bb:9a:56:0e:5e:b9:6f:9d:28:13:88:09:a0:ff:de:4b:a7: 9d:a0:48:42:e5:d2:3b:ab:3a:72:9b:47:07:54:b2:b6:5b:c7: c3:bf:4c:a1:45:c7:eb:de:32:02:51:6c:19:c0:f1:c6:75:7f: 7e:c5:bc:db:4c:85:25:10:41:4d:f4:f6:3b:33:97:0c:89:90: 13:a6:5d:02:6b:6b:94:4d:e4:bb:c1:b4:12:98:16:0d:41:cc: f4:ef:94:f8:91:64:e9:49:0a:f4:73:53:d3:42:77:a7:89:68: c7:af:06:72:b7:e4:df:4d:7d:dd:93:2c:b8:86:97:2f:3a:b7: 08:88:71:e9:87:bd:87:7f:d9:ee:ce:f5:70:60:6a:06:0d:d9: cb:78:bc:5a:c0:5f:87:32:1e:71:60:38:ad:3b:7e:8e:13:9c: 05:8e:40:71:04:0a:a1:85:97:09:07:45:de:79:83:d2:8c:cc: e6:55:2e:26:e0:3a:3c:8c:3b:1b:55:d0:99:aa:b2:e7:a1:d6: 04:27:7a:c1:12:d3:c2:46:37:57:80:51:49:b4:f2:d9:5a:52: fb:a2:10:24:8a:8d:84:d6:b8:f6:c2:45:04:46:4a:b7:f3:9b: 85:5f:aa:f2:8b:1a:bb:73:7f:c5:35:01:b7:d6:b4:f5:0c:45: 7b:9f:f9:57 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEuUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZCMDg5RjNDNkJCQkQ0 OERBOTREMUFFMkI5OTJCMkM4QTBFNTgyREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2uwj2la3s0edjDHIg2/Mi35qgJ5m2nfZLm69HpL727KWdEqPv LO47vj1rxhAH0Mzlc7Tbjei1nAQCWhIA/erb2vJYARgnRYf0UwlpxDaCr4txvumm cbyIOrXCDXlwNnmrfLKRahZX0A8x2udCVhaUuz27oO5JiYuGWzNPCOkRb53fRa8V QK0N8ak8NIDbjVj0CzaumODy5KNaTUsSip08az89MXbzEYmORjDVYQJhdkINeUCo HsKCLL/EtK/DLfZ5M/hPxI2tCG8Tviq9T6OuTXCK1xAz8hRoP92ow63XUyiSZokl jUJ9IUJ39zTkaL78AyP70jc584GuPqG2e++lAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU+wifPGu71I2pTRriuZKyyKDlgtowHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvLXdpZlBHdTcxSTJwVFJyaXVaS3l5 S0RsZ3RvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBWppgDAN BgkqhkiG9w0BAQsFAAOCAQEAcbuaVg5euW+dKBOICaD/3kunnaBIQuXSO6s6cptH B1SytlvHw79MoUXH694yAlFsGcDxxnV/fsW820yFJRBBTfT2OzOXDImQE6ZdAmtr lE3ku8G0EpgWDUHM9O+U+JFk6UkK9HNT00J3p4lox68Gcrfk30193ZMsuIaXLzq3 CIhx6Ye9h3/Z7s71cGBqBg3Zy3i8WsBfhzIecWA4rTt+jhOcBY5AcQQKoYWXCQdF 3nmD0ozM5lUuJuA6PIw7G1XQmaqy56HWBCd6wRLTwkY3V4BRSbTy2VpS+6IQJIqN hNa49sJFBEZKt/ObhV+q8osau3N/xTUBt9a09QxFe5/5Vw== -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org