$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ho6KvMqQpckj4TFWU_IxZxU-Ibs.roa File: Ho6KvMqQpckj4TFWU_IxZxU-Ibs.roa (raw, json) Hash identifier: x7nCKP4YSph25opnisUHAG7IsH1xZuOxv47vZ3WpOBg= Subject key identifier: 1E:8E:8A:BC:CA:90:A5:C9:23:E1:31:56:53:F2:31:67:15:3E:21:BB Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 0DB5 Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ho6KvMqQpckj4TFWU_IxZxU-Ibs.roa Signing time: Fri 01 Sep 2023 09:25:04 +0000 ROA not before: Fri 01 Sep 2023 09:25:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 192.72.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 17:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3509 (0xdb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Sep 1 09:25:04 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1E8E8ABCCA90A5C923E1315653F23167153E21BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1f:41:1d:93:22:35:84:9b:e6:e6:11:dc:c1: 79:87:47:8a:71:7c:62:40:66:58:9a:f4:10:75:15: 2e:29:40:07:5f:55:79:3c:ce:b5:92:30:a1:e7:c3: b2:07:c2:00:d6:aa:36:42:7c:ff:8c:96:9e:25:82: 57:a2:d7:01:14:ba:54:4b:34:7f:2e:a4:8e:22:65: 6e:eb:be:8e:1a:87:28:9a:04:27:3c:88:80:75:72: 10:b5:1b:d7:c8:2d:45:4e:7f:06:aa:dd:e4:52:c5: 58:68:3e:ca:17:83:3c:bb:c8:1e:a0:e1:73:ef:59: 60:00:be:85:2f:b0:76:0d:37:63:3f:2c:62:ae:d5: cb:18:30:c6:1c:45:14:8f:cc:8b:28:cd:8c:7c:75: c6:98:50:06:db:8d:dd:75:34:9a:f0:67:e1:a2:83: 63:18:a0:4d:b4:b2:96:e3:79:12:55:99:cd:4d:6d: 42:43:e1:31:4e:39:11:eb:8c:6f:a6:a9:c7:d3:eb: 6c:57:4e:bd:bb:0a:85:94:9f:2e:e0:5c:da:fc:d5: f8:00:c2:99:a5:fa:1d:53:ef:2a:b6:75:06:c7:72: 25:0f:eb:66:56:6c:fe:d8:39:00:76:b8:a9:c2:f3: 47:0b:46:8b:fd:f4:1b:6c:70:46:af:92:0b:2b:65: 2e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8E:8A:BC:CA:90:A5:C9:23:E1:31:56:53:F2:31:67:15:3E:21:BB X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ho6KvMqQpckj4TFWU_IxZxU-Ibs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.32.0/19 Signature Algorithm: sha256WithRSAEncryption ab:98:60:3a:58:2a:be:6a:4a:3f:bd:13:af:1a:80:16:05:11: fb:35:10:a6:bc:c9:bc:38:2a:17:70:03:eb:bc:e4:98:48:d0: 09:0c:39:34:6c:1e:ea:15:2d:8c:6c:3e:4e:92:b9:9c:e2:f0: 60:6e:b5:1e:f5:44:eb:1b:29:92:9e:a6:4e:0b:3e:c3:8f:b6: 2e:f5:35:4c:a6:f4:53:0e:cf:95:7d:1d:9c:dc:39:c3:ba:5c: 5a:15:52:e6:af:bc:79:ad:17:39:ef:66:af:bd:12:66:b0:c4: 62:9d:c3:23:d6:4d:52:85:85:3d:14:f1:68:a6:bc:bc:ab:de: 97:6b:16:1f:36:98:74:c1:2b:5c:6e:22:31:bd:d3:e3:82:b5: 1d:2c:5a:fa:97:0b:15:01:b3:d3:da:78:81:71:87:17:57:3a: 8e:54:06:17:32:2f:5f:5c:74:68:ed:dc:65:47:0d:da:44:09: 45:ae:71:14:67:fe:20:2d:67:f6:03:4f:0f:f9:50:e9:e1:15: aa:a1:3b:0f:df:7a:e2:c7:82:70:70:82:a0:7b:df:33:b0:c5: 6b:dc:3f:86:71:ac:78:01:27:76:6d:09:a8:14:8c:aa:31:be: e4:32:a0:ef:01:47:11:44:87:9f:2c:8d:da:f2:df:46:fc:69: ea:8e:2e:5e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDbUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yMzA5MDEw OTI1MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFFOEU4QUJDQ0E5MEE1 QzkyM0UxMzE1NjUzRjIzMTY3MTUzRTIxQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhH0EdkyI1hJvm5hHcwXmHR4pxfGJAZlia9BB1FS4pQAdfVXk8 zrWSMKHnw7IHwgDWqjZCfP+Mlp4lglei1wEUulRLNH8upI4iZW7rvo4ahyiaBCc8 iIB1chC1G9fILUVOfwaq3eRSxVhoPsoXgzy7yB6g4XPvWWAAvoUvsHYNN2M/LGKu 1csYMMYcRRSPzIsozYx8dcaYUAbbjd11NJrwZ+Gig2MYoE20spbjeRJVmc1NbUJD 4TFOORHrjG+mqcfT62xXTr27CoWUny7gXNr81fgAwpml+h1T7yq2dQbHciUP62ZW bP7YOQB2uKnC80cLRov99BtscEavkgsrZS5DAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUHo6KvMqQpckj4TFWU/IxZxU+IbswHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSG82S3ZNcVFwY2tqNFRGV1VfSXha eFUtSWJzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcBIIDAN BgkqhkiG9w0BAQsFAAOCAQEAq5hgOlgqvmpKP70TrxqAFgUR+zUQprzJvDgqF3AD 67zkmEjQCQw5NGwe6hUtjGw+TpK5nOLwYG61HvVE6xspkp6mTgs+w4+2LvU1TKb0 Uw7PlX0dnNw5w7pcWhVS5q+8ea0XOe9mr70SZrDEYp3DI9ZNUoWFPRTxaKa8vKve l2sWHzaYdMErXG4iMb3T44K1HSxa+pcLFQGz09p4gXGHF1c6jlQGFzIvX1x0aO3c ZUcN2kQJRa5xFGf+IC1n9gNPD/lQ6eEVqqE7D9964seCcHCCoHvfM7DFa9w/hnGs eAEndm0JqBSMqjG+5DKg7wFHEUSHnyyN2vLfRvxp6o4uXg== -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org