$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/9xbHdyMP6PbEv9eOy9gFlb7qXeY.roa File: 9xbHdyMP6PbEv9eOy9gFlb7qXeY.roa (raw, json) Hash identifier: U7MEojl3qCgRHWJ17rlHhTOkCHJ7vDl4l/Eeg9pYpLw= Subject key identifier: F7:16:C7:77:23:0F:E8:F6:C4:BF:D7:8E:CB:D8:05:95:BE:EA:5D:E6 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1347 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9xbHdyMP6PbEv9eOy9gFlb7qXeY.roa Signing time: Fri 01 Sep 2023 09:24:43 +0000 ROA not before: Fri 01 Sep 2023 09:24:43 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18419 IP address blocks: 106.105.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4935 (0x1347) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:43 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F716C777230FE8F6C4BFD78ECBD80595BEEA5DE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b5:2e:17:99:20:0d:a8:b4:35:47:4d:9c:6f: dd:49:20:94:f7:bc:a7:16:d1:de:9b:64:a2:d6:3d: a0:f3:f0:86:0c:98:79:7e:d2:42:4f:de:8b:6d:67: ac:14:92:3d:fb:be:9d:bc:c1:99:ca:e2:0d:71:33: 7a:08:2a:10:e2:34:96:13:c2:12:b7:e9:65:8a:a7: e7:eb:2c:76:92:27:c9:ae:de:c7:a6:c8:75:a8:35: 85:7e:e5:da:36:ca:78:cc:c0:79:8b:51:43:d4:76: 50:88:41:af:a2:97:d2:b6:1a:9a:d4:ab:dc:55:a2: c4:24:04:53:b0:7d:69:3f:f5:f9:fd:9e:f9:c3:f8: 5a:1f:1b:36:1c:ab:b8:67:ac:73:b6:f6:95:bc:08: 62:44:5e:29:d0:a6:bf:f1:f1:f4:f4:ce:d4:c9:fc: d1:24:7d:44:89:65:76:7f:ac:92:a0:20:95:ec:4e: ed:ce:1b:e0:69:5f:55:33:2e:fe:72:34:9e:1d:42: fa:88:3d:9b:b6:a3:0a:9a:67:05:73:d2:a9:f1:6a: 0e:2a:2a:8a:0f:fb:d0:e9:4a:49:c1:4b:98:63:ea: 34:29:a5:80:9b:5f:ec:a3:6b:8f:59:10:9c:2b:1a: b1:c0:2e:74:7b:c3:fa:b9:b6:8e:56:f0:a2:9a:d0: 3b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:16:C7:77:23:0F:E8:F6:C4:BF:D7:8E:CB:D8:05:95:BE:EA:5D:E6 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9xbHdyMP6PbEv9eOy9gFlb7qXeY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.184.0/21 Signature Algorithm: sha256WithRSAEncryption 6c:49:45:38:91:fe:3b:63:df:8d:97:4d:7c:23:2e:ef:29:a7: 15:dc:61:fa:56:ee:b8:7b:8c:6e:ee:88:f5:c1:65:07:5e:53: 62:07:a0:f8:5f:48:69:95:8d:cb:55:fb:c6:8a:f8:1e:2e:7d: 1e:12:43:d1:41:1d:bb:08:52:b5:c4:fe:cb:74:3f:4a:a6:18: 0a:71:54:74:34:11:7b:66:9e:6a:9f:6e:a1:6d:ec:e0:e4:8c: 88:9f:d8:5b:e6:c7:5c:6f:e7:8d:55:23:b5:af:1f:a9:8d:0f: e8:8b:7c:c7:a5:f2:6b:0e:e3:b6:17:b5:81:48:33:2a:c1:69: a8:8a:d3:93:09:ac:fa:e0:29:c8:50:3a:45:d1:a4:a0:91:f9: aa:c5:51:e8:9b:7e:db:56:b7:3f:67:c0:cd:52:a6:a9:9d:c9: 8c:dc:76:b8:7f:6b:7d:1f:1f:12:01:c1:bc:01:8c:fd:0f:ac: c2:47:8c:b4:6a:c7:00:54:f4:11:aa:e4:d2:72:1e:81:41:c0: dc:df:2d:c7:69:6f:63:f2:92:a7:e1:f3:cc:16:37:a2:53:4a: 81:80:94:e9:84:99:18:a1:f9:c0:64:a3:e7:3f:c5:c4:ce:6f: 31:2d:6d:7f:2c:aa:20:ff:0d:86:40:3e:6f:b1:2a:24:69:8c: 1e:33:e6:a4 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE0cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY3MTZDNzc3MjMwRkU4 RjZDNEJGRDc4RUNCRDgwNTk1QkVFQTVERTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUtS4XmSANqLQ1R02cb91JIJT3vKcW0d6bZKLWPaDz8IYMmHl+ 0kJP3ottZ6wUkj37vp28wZnK4g1xM3oIKhDiNJYTwhK36WWKp+frLHaSJ8mu3sem yHWoNYV+5do2ynjMwHmLUUPUdlCIQa+il9K2GprUq9xVosQkBFOwfWk/9fn9nvnD +FofGzYcq7hnrHO29pW8CGJEXinQpr/x8fT0ztTJ/NEkfUSJZXZ/rJKgIJXsTu3O G+BpX1UzLv5yNJ4dQvqIPZu2owqaZwVz0qnxag4qKooP+9DpSknBS5hj6jQppYCb X+yja49ZEJwrGrHALnR7w/q5to5W8KKa0DsXAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU9xbHdyMP6PbEv9eOy9gFlb7qXeYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvOXhiSGR5TVA2UGJFdjllT3k5Z0Zs YjdxWGVZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2ppuDAN BgkqhkiG9w0BAQsFAAOCAQEAbElFOJH+O2PfjZdNfCMu7ymnFdxh+lbuuHuMbu6I 9cFlB15TYgeg+F9IaZWNy1X7xor4Hi59HhJD0UEduwhStcT+y3Q/SqYYCnFUdDQR e2aeap9uoW3s4OSMiJ/YW+bHXG/njVUjta8fqY0P6It8x6Xyaw7jthe1gUgzKsFp qIrTkwms+uApyFA6RdGkoJH5qsVR6Jt+21a3P2fAzVKmqZ3JjNx2uH9rfR8fEgHB vAGM/Q+swkeMtGrHAFT0Eark0nIegUHA3N8tx2lvY/KSp+HzzBY3olNKgYCU6YSZ GKH5wGSj5z/FxM5vMS1tfyyqIP8NhkA+b7EqJGmMHjPmpA== -----END CERTIFICATE-----Generated at Sat Jun 1 22:20:17 2024 by rpki-client on console-fra.rpki-client.org