$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Dkh-AKL8BorlrBhQWM7X3WZRPAQ.roa File: Dkh-AKL8BorlrBhQWM7X3WZRPAQ.roa (raw, json) Hash identifier: WGqFpPQYfNOLs0sMrAIfp5/tDIfi9nIgv30YU3iXrxg= Subject key identifier: 0E:48:7E:00:A2:FC:06:8A:E5:AC:18:50:58:CE:D7:DD:66:51:3C:04 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1384 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Dkh-AKL8BorlrBhQWM7X3WZRPAQ.roa Signing time: Fri 01 Sep 2023 09:25:05 +0000 ROA not before: Fri 01 Sep 2023 09:25:05 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 221.169.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4996 (0x1384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:05 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0E487E00A2FC068AE5AC185058CED7DD66513C04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:30:ce:18:ce:6f:b0:16:38:c7:c9:98:37:0a: 3b:5f:1c:e7:93:9a:9d:fa:2f:c1:c4:56:1b:c5:11: cc:fa:2a:1b:94:09:1a:f9:16:7e:b0:09:94:b0:1b: d7:18:7b:fe:18:1b:c6:cf:e9:9e:3c:5b:9a:16:4f: 07:53:d6:1e:e0:1e:4a:22:bb:01:58:2d:1d:89:61: f4:a0:ee:8b:fa:05:7e:aa:33:d3:1d:bc:a7:2b:a0: 81:e7:a2:52:96:42:00:c5:d2:0a:3b:b7:72:90:c7: 9b:76:6a:86:c4:6b:97:1c:0c:fc:e7:5b:0b:8c:61: 7b:65:0a:1b:df:a5:22:fe:07:6f:18:ee:17:1d:dd: 5c:f5:4b:74:8e:37:bb:b2:71:3f:4e:56:d7:d9:4f: c9:74:c4:f5:c1:c0:e9:93:13:4d:0e:d7:dd:64:c0: 47:16:4e:5a:25:bc:a9:b9:cb:51:2f:10:ff:15:19: 57:bc:35:12:ea:a0:c5:6f:dc:0c:19:e3:59:b7:66: 88:51:cd:7e:38:86:f4:37:93:9c:7c:a9:33:52:50: df:b1:12:24:0e:ad:5e:23:fa:2b:e5:8f:5d:32:28: 1a:42:6a:77:3d:e3:f4:23:a5:61:22:d4:fc:d6:9b: eb:15:ea:f3:a9:bc:b3:a6:57:8d:5d:37:52:12:5a: 33:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:48:7E:00:A2:FC:06:8A:E5:AC:18:50:58:CE:D7:DD:66:51:3C:04 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Dkh-AKL8BorlrBhQWM7X3WZRPAQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 221.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 21:8d:71:72:eb:ef:9c:4e:cb:c7:79:38:1e:c1:fc:5e:27:00: 5a:f1:cc:0c:be:88:88:16:9b:a6:b0:32:4b:15:c0:90:12:27: d1:52:be:3a:5b:b5:4f:59:8e:a4:f4:3c:52:bd:e5:7d:8a:44: b6:3c:e9:03:21:bb:b9:b3:e2:eb:66:e7:0f:35:48:97:92:43: 16:62:07:f5:49:cf:2c:c5:8e:08:62:e0:49:85:82:12:7f:3a: 1f:f3:df:07:28:53:25:96:65:af:fa:ca:99:15:34:91:b8:5e: b4:90:2f:9e:51:f3:9d:b5:b8:a8:04:e1:e4:c4:29:23:83:ad: 09:13:d4:0b:0f:a8:80:85:05:69:6b:76:cd:53:81:b3:33:01: 99:b0:88:b5:e5:73:44:4b:da:8d:35:ca:e6:1e:77:08:8e:1d: 3d:68:18:a4:15:9a:7a:bd:15:2e:33:8b:01:ca:33:67:40:d9: 6f:04:37:ad:d8:7f:e0:22:69:37:ad:60:48:0e:08:31:3f:88: b2:96:8d:e1:a2:86:d7:ac:62:01:b7:83:ca:ae:6e:2d:c3:0a: 63:7b:02:93:6a:ed:b8:01:98:c2:18:f3:d7:59:f7:59:1a:1b: 2a:c0:4d:6c:0d:4c:1a:31:bc:e8:ee:68:e1:e9:ec:7d:ef:08: 21:74:69:1b -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICE4QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBFNDg3RTAwQTJGQzA2 OEFFNUFDMTg1MDU4Q0VEN0RENjY1MTNDMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgMM4Yzm+wFjjHyZg3CjtfHOeTmp36L8HEVhvFEcz6KhuUCRr5 Fn6wCZSwG9cYe/4YG8bP6Z48W5oWTwdT1h7gHkoiuwFYLR2JYfSg7ov6BX6qM9Md vKcroIHnolKWQgDF0go7t3KQx5t2aobEa5ccDPznWwuMYXtlChvfpSL+B28Y7hcd 3Vz1S3SON7uycT9OVtfZT8l0xPXBwOmTE00O191kwEcWTlolvKm5y1EvEP8VGVe8 NRLqoMVv3AwZ41m3ZohRzX44hvQ3k5x8qTNSUN+xEiQOrV4j+ivlj10yKBpCanc9 4/QjpWEi1PzWm+sV6vOpvLOmV41dN1ISWjOfAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUDkh+AKL8BorlrBhQWM7X3WZRPAQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRGtoLUFLTDhCb3JsckJoUVdNN1gz V1pSUEFRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAN2pMA0G CSqGSIb3DQEBCwUAA4IBAQAhjXFy6++cTsvHeTgewfxeJwBa8cwMvoiIFpumsDJL FcCQEifRUr46W7VPWY6k9DxSveV9ikS2POkDIbu5s+LrZucPNUiXkkMWYgf1Sc8s xY4IYuBJhYISfzof898HKFMllmWv+sqZFTSRuF60kC+eUfOdtbioBOHkxCkjg60J E9QLD6iAhQVpa3bNU4GzMwGZsIi15XNES9qNNcrmHncIjh09aBikFZp6vRUuM4sB yjNnQNlvBDet2H/gImk3rWBIDggxP4iylo3hoobXrGIBt4PKrm4twwpjewKTau24 AZjCGPPXWfdZGhsqwE1sDUwaMbzo7mjh6ex97wghdGkb -----END CERTIFICATE-----Generated at Sun Jun 2 09:37:17 2024 by rpki-client on console-ams.rpki-client.org