$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/A0DXoo25C5LVe9nE0GU-lC81Ps4.roa File: A0DXoo25C5LVe9nE0GU-lC81Ps4.roa (raw, json) Hash identifier: 2xxNk7AvhS/W7ssmXBj8NCSf8L/vKhIrflle+G5ZJ8A= Subject key identifier: 03:40:D7:A2:8D:B9:0B:92:D5:7B:D9:C4:D0:65:3E:94:2F:35:3E:CE Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1352 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/A0DXoo25C5LVe9nE0GU-lC81Ps4.roa Signing time: Fri 01 Sep 2023 09:24:46 +0000 ROA not before: Fri 01 Sep 2023 09:24:46 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 122.146.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4946 (0x1352) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:46 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0340D7A28DB90B92D57BD9C4D0653E942F353ECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cd:2d:ef:d0:bf:e6:7b:a4:d1:6f:1d:40:18: bd:86:52:4d:a7:cd:6e:92:ba:73:f9:dd:da:b8:4e: 6a:93:69:77:c3:f4:15:dc:fe:80:3b:06:ab:09:75: 83:23:be:9d:98:d0:83:ad:57:87:ad:ab:f5:1f:bc: 85:00:a2:ea:39:57:f1:d3:d7:86:db:8b:99:4a:97: 5b:26:1b:b3:0f:75:e5:5e:46:ec:82:7a:53:d3:25: e4:24:c4:a3:45:d9:e0:e4:ad:81:ae:10:32:a2:b9: 3a:e1:ee:52:2c:0a:5b:b3:36:a8:56:78:ae:e1:64: b8:b1:ea:04:54:77:c4:0f:fb:1e:8b:8a:4a:62:e5: 43:50:6b:c2:54:6c:83:68:d0:ca:77:d1:73:7e:44: 32:3a:94:b7:ab:bc:c2:6e:49:62:9d:f6:f3:83:d9: 0d:56:c9:ea:3b:51:ee:10:e4:76:75:a3:59:63:23: 94:1a:0a:a9:49:1a:52:a0:05:95:d1:3c:db:29:bc: 0b:32:df:03:75:95:3e:3f:24:75:f9:36:40:47:8b: c0:59:34:8c:88:bd:af:b9:25:d4:69:e0:35:36:55: 47:bc:81:93:9c:70:65:a7:3c:0b:c7:b0:3a:cf:c0: 82:3a:59:dc:d3:8e:0a:51:0f:19:7a:17:d8:ef:ca: 74:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:40:D7:A2:8D:B9:0B:92:D5:7B:D9:C4:D0:65:3E:94:2F:35:3E:CE X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/A0DXoo25C5LVe9nE0GU-lC81Ps4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.146.96.0/19 Signature Algorithm: sha256WithRSAEncryption b0:89:46:a4:71:ed:a6:22:6a:86:e2:58:bc:bb:68:4a:43:9b: 77:7f:3a:f6:84:e0:ed:3c:cf:a9:ef:1f:3c:47:70:94:40:77: f3:81:ee:82:47:33:37:e3:fd:4b:e5:6e:13:00:7f:55:36:be: 90:95:c2:47:11:99:57:78:62:aa:f8:cc:28:70:da:94:2e:a9: bc:9f:19:a6:34:83:b1:bf:f9:f9:41:de:10:37:59:56:03:27: a3:51:06:26:83:87:95:2d:a2:7a:69:24:c9:b6:d3:c8:00:2e: 21:46:85:f3:47:a6:13:32:79:66:5b:ea:c6:0f:7d:ad:17:2d: a8:a6:92:93:a7:aa:d3:22:02:6c:35:c4:8d:ef:5c:d7:fd:14: 5d:78:e1:35:8d:20:6b:1d:4a:93:d1:9a:b7:9b:27:6b:e0:d0: 38:57:ed:3f:55:a9:cd:b6:1c:12:30:84:05:61:fe:35:c8:82: 11:71:a1:24:bc:61:34:0a:fa:e4:fc:e1:8e:6d:30:6c:9a:49: 4b:6f:74:ee:e5:d2:77:6b:2b:d9:90:57:a1:e2:ca:2c:6e:b5: 47:4e:4b:af:14:69:67:da:ff:08:48:7f:c1:8e:d8:7a:d9:0f: 20:f4:3c:bb:b3:ad:24:57:f2:3a:fb:d5:bc:08:fe:bb:2e:21: d9:6b:04:27 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE1IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAzNDBEN0EyOERCOTBC OTJENTdCRDlDNEQwNjUzRTk0MkYzNTNFQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzzS3v0L/me6TRbx1AGL2GUk2nzW6SunP53dq4TmqTaXfD9BXc /oA7BqsJdYMjvp2Y0IOtV4etq/UfvIUAouo5V/HT14bbi5lKl1smG7MPdeVeRuyC elPTJeQkxKNF2eDkrYGuEDKiuTrh7lIsCluzNqhWeK7hZLix6gRUd8QP+x6Likpi 5UNQa8JUbINo0Mp30XN+RDI6lLervMJuSWKd9vOD2Q1Wyeo7Ue4Q5HZ1o1ljI5Qa CqlJGlKgBZXRPNspvAsy3wN1lT4/JHX5NkBHi8BZNIyIva+5JdRp4DU2VUe8gZOc cGWnPAvHsDrPwII6WdzTjgpRDxl6F9jvynR5AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUA0DXoo25C5LVe9nE0GU+lC81Ps4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQTBEWG9vMjVDNUxWZTluRTBHVS1s QzgxUHM0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXqSYDAN BgkqhkiG9w0BAQsFAAOCAQEAsIlGpHHtpiJqhuJYvLtoSkObd3869oTg7TzPqe8f PEdwlEB384HugkczN+P9S+VuEwB/VTa+kJXCRxGZV3hiqvjMKHDalC6pvJ8ZpjSD sb/5+UHeEDdZVgMno1EGJoOHlS2iemkkybbTyAAuIUaF80emEzJ5Zlvqxg99rRct qKaSk6eq0yICbDXEje9c1/0UXXjhNY0gax1Kk9Gat5sna+DQOFftP1WpzbYcEjCE BWH+NciCEXGhJLxhNAr65Pzhjm0wbJpJS2907uXSd2sr2ZBXoeLKLG61R05LrxRp Z9r/CEh/wY7YetkPIPQ8u7OtJFfyOvvVvAj+uy4h2WsEJw== -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org