$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/22tGqLukUs75NqqrPvuxM9K1--s.roa File: 22tGqLukUs75NqqrPvuxM9K1--s.roa (raw, json) Hash identifier: K2Hm+Q0iqOmjEoyhQ3VsyJ3lkSBv0apenGZXHsxylfo= Subject key identifier: DB:6B:46:A8:BB:A4:52:CE:F9:36:AA:AB:3E:FB:B1:33:D2:B5:FB:EB Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 13D4 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/22tGqLukUs75NqqrPvuxM9K1--s.roa Signing time: Fri 01 Sep 2023 09:25:30 +0000 ROA not before: Fri 01 Sep 2023 09:25:30 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18049 IP address blocks: 106.105.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5076 (0x13d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:30 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DB6B46A8BBA452CEF936AAAB3EFBB133D2B5FBEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d7:6f:cb:04:6a:4e:42:8d:0c:89:62:9c:f9: 33:5c:35:34:2a:aa:09:ea:c7:0e:14:c5:a4:1b:4b: 48:32:6d:2c:0c:21:1d:b8:36:98:5f:ad:36:46:0b: 87:0a:d5:55:bb:cf:57:c3:14:ac:25:46:6b:dc:90: 94:4b:77:8b:34:9b:93:2a:cf:31:82:6b:7c:2e:33: d1:42:3d:d6:1e:f0:4b:ef:ce:56:c4:9b:a5:72:99: 60:c7:93:c1:46:a0:91:aa:d9:00:9a:dc:78:75:f1: 45:0a:c8:68:68:51:be:08:48:65:b8:7c:8f:09:2f: ef:ec:c0:b6:b7:6e:d3:43:20:d8:26:d6:be:0d:56: f1:9a:c0:95:18:9b:e6:58:c4:cf:e4:b6:63:37:cf: 68:b2:d7:51:91:4c:6d:67:37:2b:91:86:22:ce:f1: 18:03:e0:03:4d:8f:fb:a0:ba:65:43:fe:23:64:57: 30:8a:15:70:90:62:7c:3b:5f:ba:76:ad:b4:bb:18: 42:86:20:7d:7e:c9:a5:a0:6e:4e:2a:fd:01:94:44: dc:41:9d:1a:3e:54:76:90:ac:54:ab:19:99:a2:34: 28:68:59:f0:37:f4:18:a1:94:60:6c:58:fc:59:9f: 79:ec:05:f7:52:af:a4:19:20:63:42:f6:0b:72:65: 61:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6B:46:A8:BB:A4:52:CE:F9:36:AA:AB:3E:FB:B1:33:D2:B5:FB:EB X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/22tGqLukUs75NqqrPvuxM9K1--s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.112.0/20 Signature Algorithm: sha256WithRSAEncryption 4f:df:2a:c9:7b:68:22:ed:66:fd:91:4f:90:4f:b9:cd:fb:73: db:23:ed:19:4e:34:84:7f:d8:c3:46:02:10:62:48:3e:6d:43: 38:e9:40:cc:d9:ec:6c:c5:71:61:4d:ff:f1:27:17:50:25:c9: 63:69:29:dc:bc:88:6c:85:b8:21:c5:57:5d:54:92:ac:db:1f: 7b:8b:88:5c:4f:83:4b:89:95:e1:0e:81:46:75:2f:f3:13:fb: 1e:06:61:8d:5c:bf:ab:2d:77:bf:7e:ff:77:fa:56:c1:61:3d: f5:18:72:f7:b2:e9:fb:96:ba:cd:68:43:87:00:d8:c4:11:be: e0:34:67:ed:34:27:25:a5:b0:7d:84:8b:e8:d2:6a:f0:52:c1: cc:ea:e0:7d:1b:9e:3f:de:4d:d8:81:52:d9:f3:c6:e0:9b:a4: e0:72:d0:7f:a0:bf:4b:7e:89:5a:e5:15:ef:ea:17:5b:f0:a2: 64:1a:dc:1e:f5:a2:cf:cf:84:d5:45:38:c9:9e:d2:46:9c:4f: df:6a:f3:16:8d:64:f3:14:75:4d:20:3d:6a:b5:91:33:99:40: b0:27:c0:7d:cc:dd:61:2f:f0:be:c9:6a:a6:80:52:4d:4e:a3: e3:b9:82:77:29:71:99:26:af:02:c9:de:6d:fa:87:94:57:24: 61:0b:7c:75 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE9QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERCNkI0NkE4QkJBNDUy Q0VGOTM2QUFBQjNFRkJCMTMzRDJCNUZCRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+12/LBGpOQo0MiWKc+TNcNTQqqgnqxw4UxaQbS0gybSwMIR24 NphfrTZGC4cK1VW7z1fDFKwlRmvckJRLd4s0m5MqzzGCa3wuM9FCPdYe8EvvzlbE m6VymWDHk8FGoJGq2QCa3Hh18UUKyGhoUb4ISGW4fI8JL+/swLa3btNDINgm1r4N VvGawJUYm+ZYxM/ktmM3z2iy11GRTG1nNyuRhiLO8RgD4ANNj/ugumVD/iNkVzCK FXCQYnw7X7p2rbS7GEKGIH1+yaWgbk4q/QGURNxBnRo+VHaQrFSrGZmiNChoWfA3 9BihlGBsWPxZn3nsBfdSr6QZIGNC9gtyZWFhAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU22tGqLukUs75NqqrPvuxM9K1++swHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMjJ0R3FMdWtVczc1TnFxclB2dXhN OUsxLS1zLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGppcDAN BgkqhkiG9w0BAQsFAAOCAQEAT98qyXtoIu1m/ZFPkE+5zftz2yPtGU40hH/Yw0YC EGJIPm1DOOlAzNnsbMVxYU3/8ScXUCXJY2kp3LyIbIW4IcVXXVSSrNsfe4uIXE+D S4mV4Q6BRnUv8xP7HgZhjVy/qy13v37/d/pWwWE99Rhy97Lp+5a6zWhDhwDYxBG+ 4DRn7TQnJaWwfYSL6NJq8FLBzOrgfRueP95N2IFS2fPG4Juk4HLQf6C/S36JWuUV 7+oXW/CiZBrcHvWiz8+E1UU4yZ7SRpxP32rzFo1k8xR1TSA9arWRM5lAsCfAfczd YS/wvslqpoBSTU6j47mCdylxmSavAsnebfqHlFckYQt8dQ== -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org