$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/BQbQ7W7jowxifsfXnaxASXjtkF0.roa File: BQbQ7W7jowxifsfXnaxASXjtkF0.roa (raw, json) Hash identifier: m9S6UnOBUYu1XmLxghCrMFf09YLMm+owlxK2bzZsoa4= Subject key identifier: 05:06:D0:ED:6E:E3:A3:0C:62:7E:C7:D7:9D:AC:40:49:78:ED:90:5D Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1302 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BQbQ7W7jowxifsfXnaxASXjtkF0.roa Signing time: Fri 01 Sep 2023 09:24:22 +0000 ROA not before: Fri 01 Sep 2023 09:24:22 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 211.74.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4866 (0x1302) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:22 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0506D0ED6EE3A30C627EC7D79DAC404978ED905D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c8:1b:e5:4b:da:91:85:b0:5a:c8:04:a8:7e: 23:cb:10:44:ad:68:d3:ef:e6:c1:d1:11:00:37:43: 15:c7:8c:51:aa:68:b1:81:c8:cb:4a:6a:3f:3c:08: e1:39:64:a2:18:26:49:c9:75:6c:b2:10:bb:e8:19: 43:5f:f3:47:98:42:1b:a8:8d:10:36:82:0f:c7:bb: 9a:b7:0d:63:4c:1d:7e:9d:d3:9c:ee:a9:64:69:48: 20:af:79:bd:22:1f:73:55:9d:1e:ac:3d:91:f2:2b: d2:27:0f:8d:95:19:45:69:77:33:53:72:48:ed:1c: 6a:67:19:b7:83:21:b1:09:32:68:1f:5b:a2:87:2c: 8d:a2:02:86:cf:a4:e0:af:d5:1d:3c:65:e7:0c:67: 15:05:b5:74:d5:21:14:ea:9b:24:29:de:e4:25:a0: 5d:9d:fb:2c:12:d7:45:32:53:72:79:19:64:75:1b: c9:76:d9:b7:8a:88:34:3c:b4:a1:f0:d8:4b:dd:7e: 2c:47:45:8b:c7:84:5d:c3:2a:bc:6e:8c:84:36:cf: d4:75:4f:d3:6d:5b:a1:e9:72:64:37:32:9d:f7:98: 00:94:bf:63:a0:82:45:98:eb:b7:6a:23:02:9c:4b: a0:d1:94:99:2c:aa:6f:75:e8:85:a2:89:91:c7:8f: ab:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:06:D0:ED:6E:E3:A3:0C:62:7E:C7:D7:9D:AC:40:49:78:ED:90:5D X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BQbQ7W7jowxifsfXnaxASXjtkF0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.74.0.0/16 Signature Algorithm: sha256WithRSAEncryption a8:b2:b0:cd:4c:6f:ce:13:1e:95:45:b1:08:68:0a:12:cd:58: 76:f4:29:15:05:43:8d:f2:c1:a1:b8:a8:db:a2:48:23:53:2b: 62:a2:3d:52:b6:89:a1:ff:4c:73:85:77:5d:3e:99:5d:da:75: 61:3e:88:47:e4:53:3a:01:36:7a:1f:ab:4e:f7:76:45:87:a6: 2f:35:18:dc:8f:47:e8:ab:23:4e:ea:cd:71:aa:6d:27:bc:59: 6e:5b:7c:1e:ed:a4:58:c0:ce:8f:7b:09:91:12:13:0c:bf:f6: e0:4b:b3:d0:bc:c0:30:27:d8:00:d7:e7:7f:8a:bc:80:ec:a0: 6f:a3:d0:86:53:8a:f5:8d:9a:97:ee:e4:42:bb:40:18:fe:bf: cf:03:0a:be:60:8e:9e:52:f1:69:39:37:b6:10:99:6c:97:33: fa:4f:f9:71:f6:b9:fe:88:ce:fd:f3:34:d7:f1:02:81:c1:cd: 0d:44:e7:2b:4e:33:ee:34:c0:17:b3:3a:98:ac:7f:59:b7:14: b9:7a:1b:79:95:7c:6f:9b:9c:5e:60:4c:a3:d6:84:1b:5b:78: a0:69:d7:30:8d:eb:4f:5c:50:a5:3d:ef:6a:61:a4:40:3d:2a: da:6d:e3:92:eb:18:3c:b5:a8:dd:ae:51:66:6e:5c:85:f8:ef: 05:d0:90:4a -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICEwIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MjJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA1MDZEMEVENkVFM0Ez MEM2MjdFQzdENzlEQUM0MDQ5NzhFRDkwNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpyBvlS9qRhbBayASofiPLEEStaNPv5sHREQA3QxXHjFGqaLGB yMtKaj88COE5ZKIYJknJdWyyELvoGUNf80eYQhuojRA2gg/Hu5q3DWNMHX6d05zu qWRpSCCveb0iH3NVnR6sPZHyK9InD42VGUVpdzNTckjtHGpnGbeDIbEJMmgfW6KH LI2iAobPpOCv1R08ZecMZxUFtXTVIRTqmyQp3uQloF2d+ywS10UyU3J5GWR1G8l2 2beKiDQ8tKHw2EvdfixHRYvHhF3DKrxujIQ2z9R1T9NtW6HpcmQ3Mp33mACUv2Og gkWY67dqIwKcS6DRlJksqm916IWiiZHHj6uVAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUBQbQ7W7jowxifsfXnaxASXjtkF0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQlFiUTdXN2pvd3hpZnNmWG5heEFT WGp0a0YwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANNKMA0G CSqGSIb3DQEBCwUAA4IBAQCosrDNTG/OEx6VRbEIaAoSzVh29CkVBUON8sGhuKjb okgjUytioj1Stomh/0xzhXddPpld2nVhPohH5FM6ATZ6H6tO93ZFh6YvNRjcj0fo qyNO6s1xqm0nvFluW3we7aRYwM6PewmREhMMv/bgS7PQvMAwJ9gA1+d/iryA7KBv o9CGU4r1jZqX7uRCu0AY/r/PAwq+YI6eUvFpOTe2EJlslzP6T/lx9rn+iM798zTX 8QKBwc0NROcrTjPuNMAXszqYrH9ZtxS5eht5lXxvm5xeYEyj1oQbW3igadcwjetP XFClPe9qYaRAPSrabeOS6xg8tajdrlFmblyF+O8F0JBK -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org