$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/A81Fbw4IsSG_KnzAXXT1jQy7ziY.roa File: A81Fbw4IsSG_KnzAXXT1jQy7ziY.roa (raw, json) Hash identifier: d+z2I5h7MhKeCcZiCxFx0JSF2spo9Ryap7YxeFxdLlA= Subject key identifier: 03:CD:45:6F:0E:08:B1:21:BF:2A:7C:C0:5D:74:F5:8D:0C:BB:CE:26 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 134C Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/A81Fbw4IsSG_KnzAXXT1jQy7ziY.roa Signing time: Fri 01 Sep 2023 09:24:45 +0000 ROA not before: Fri 01 Sep 2023 09:24:45 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 123.204.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4940 (0x134c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:45 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=03CD456F0E08B121BF2A7CC05D74F58D0CBBCE26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:de:58:f1:b9:10:fd:d7:bf:dd:df:76:c3:79: 5e:65:e9:67:49:5d:92:50:75:fa:a8:e1:7a:21:c2: 82:94:6c:f1:9d:03:34:66:b1:53:7e:f5:83:49:9a: 4d:ba:88:72:bf:44:af:f5:39:4c:94:9e:c6:fd:ac: 03:fb:3c:5d:d8:8c:16:a3:c1:0b:c7:6b:7c:b6:6c: 1b:07:52:89:d0:c6:c2:ce:5d:e2:28:ee:1c:7a:22: 69:4e:15:5c:46:d5:61:28:d7:de:03:4a:54:09:85: f1:1d:6d:e9:ac:fa:4b:48:6b:3c:3e:59:82:a3:29: 2d:39:61:7c:f5:68:a5:0b:a8:cb:b0:87:eb:3d:32: e6:ff:7e:b3:27:34:db:40:ad:11:15:39:47:ea:45: c5:75:01:db:3f:b8:36:19:dc:4d:54:01:59:d4:84: 1b:10:fc:d7:a5:34:b4:57:93:24:69:0f:2a:43:f2: ca:0b:5e:e3:3b:34:2b:b1:75:0e:87:ae:be:1d:a7: 09:cf:70:8c:8b:52:b2:34:08:72:d5:9a:68:12:91: 7a:d4:87:78:07:08:97:d3:b5:b0:4a:69:4e:0d:34: df:01:19:5e:08:be:a0:2c:4e:14:9b:f2:bf:5f:56: 04:9e:5e:76:9b:64:09:b7:b2:fd:0a:b9:de:d6:ac: d2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CD:45:6F:0E:08:B1:21:BF:2A:7C:C0:5D:74:F5:8D:0C:BB:CE:26 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/A81Fbw4IsSG_KnzAXXT1jQy7ziY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.204.0.0/15 Signature Algorithm: sha256WithRSAEncryption bc:11:dc:69:cf:a5:6d:d3:b3:f9:cf:ec:31:02:8b:d2:d6:a6: d2:b6:23:47:dc:8b:30:9a:7c:88:88:25:44:cd:7e:10:8b:5e: 74:2b:eb:b7:9c:d0:e5:c9:04:27:0c:17:9d:0b:58:34:e6:b8: e2:63:6d:80:31:06:26:d0:c2:4e:c6:80:79:cf:2c:63:53:59: 12:57:ce:ce:46:0f:b2:b9:e9:0d:f6:28:0a:31:10:12:76:aa: 7f:d6:de:8e:49:f3:64:9d:1e:00:f9:ef:fc:58:0d:19:86:02: 31:87:70:5d:47:42:b7:9b:85:8f:ba:18:2f:0d:a1:9c:2c:a0: 60:68:bb:84:34:4e:2d:67:1c:c4:c7:d8:ea:32:a8:b6:44:55: 08:13:f1:02:83:6e:bb:5b:78:de:47:62:44:68:e3:ba:e8:e7: 47:54:c8:bf:59:3c:5c:be:b6:92:39:d4:e6:0a:e0:cd:69:fe: 6f:7d:df:1a:1d:9b:98:76:5a:be:09:6d:f1:56:c0:7a:46:7e: dd:33:03:bf:7d:21:4b:1f:6b:14:17:d7:14:50:75:59:82:2d: df:29:f8:bf:ba:4d:9f:d8:11:35:05:df:58:12:0b:a8:8e:f3: 8b:2f:2d:ba:1a:1b:81:a1:af:42:01:44:5d:4c:3d:82:28:c5: a5:26:50:2c -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICE0wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAzQ0Q0NTZGMEUwOEIx MjFCRjJBN0NDMDVENzRGNThEMENCQkNFMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCp3ljxuRD917/d33bDeV5l6WdJXZJQdfqo4XohwoKUbPGdAzRm sVN+9YNJmk26iHK/RK/1OUyUnsb9rAP7PF3YjBajwQvHa3y2bBsHUonQxsLOXeIo 7hx6ImlOFVxG1WEo194DSlQJhfEdbems+ktIazw+WYKjKS05YXz1aKULqMuwh+s9 Mub/frMnNNtArREVOUfqRcV1Ads/uDYZ3E1UAVnUhBsQ/NelNLRXkyRpDypD8soL XuM7NCuxdQ6Hrr4dpwnPcIyLUrI0CHLVmmgSkXrUh3gHCJfTtbBKaU4NNN8BGV4I vqAsThSb8r9fVgSeXnabZAm3sv0Kud7WrNI1AgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUA81Fbw4IsSG/KnzAXXT1jQy7ziYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQTgxRmJ3NElzU0dfS256QVhYVDFq UXk3emlZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAXvMMA0G CSqGSIb3DQEBCwUAA4IBAQC8Edxpz6Vt07P5z+wxAovS1qbStiNH3IswmnyIiCVE zX4Qi150K+u3nNDlyQQnDBedC1g05rjiY22AMQYm0MJOxoB5zyxjU1kSV87ORg+y uekN9igKMRASdqp/1t6OSfNknR4A+e/8WA0ZhgIxh3BdR0K3m4WPuhgvDaGcLKBg aLuENE4tZxzEx9jqMqi2RFUIE/ECg267W3jeR2JEaOO66OdHVMi/WTxcvraSOdTm CuDNaf5vfd8aHZuYdlq+CW3xVsB6Rn7dMwO/fSFLH2sUF9cUUHVZgi3fKfi/uk2f 2BE1Bd9YEguojvOLLy26GhuBoa9CAURdTD2CKMWlJlAs -----END CERTIFICATE-----Generated at Sun Jun 2 07:14:23 2024 by rpki-client on console-fra.rpki-client.org