$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/KRrJRahZ2CyQ_9B2lf4c1XpJwIk.roa File: KRrJRahZ2CyQ_9B2lf4c1XpJwIk.roa (raw, json) Hash identifier: 8aFs3smcxAOswIbyS5V4TrQZMU0NKQK60bTMcz8gREY= Subject key identifier: 29:1A:C9:45:A8:59:D8:2C:90:FF:D0:76:95:FE:1C:D5:7A:49:C0:89 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 137C Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/KRrJRahZ2CyQ_9B2lf4c1XpJwIk.roa Signing time: Fri 01 Sep 2023 09:25:00 +0000 ROA not before: Fri 01 Sep 2023 09:25:00 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 175.183.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4988 (0x137c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:00 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=291AC945A859D82C90FFD07695FE1CD57A49C089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7e:e1:93:80:77:41:32:88:fa:cd:20:70:28: 71:b2:03:fe:20:9f:42:42:e0:56:9b:a0:1f:c7:d1: c5:a7:e9:2d:bf:d7:00:b5:84:ff:a1:75:99:10:5e: 71:8b:4c:8f:8d:a9:f3:fa:94:4d:f0:df:0b:33:3b: 2e:35:81:86:50:20:8d:76:08:ea:a2:70:14:1d:78: 1a:53:9e:36:97:6b:43:c8:32:8b:6d:28:c3:2b:c3: 15:c8:a0:05:06:13:33:31:1b:6b:e1:71:36:26:d8: a1:7a:e8:d7:fa:d6:02:d8:1e:d5:4b:27:52:22:82: f0:71:0d:24:e4:9e:ce:38:b9:0d:03:03:87:a0:3b: 38:ca:eb:38:af:bf:18:6d:3a:7a:f4:a1:2e:74:9d: a9:60:0a:62:1d:56:6c:53:0a:f5:4a:16:ab:05:c2: 21:77:ea:8d:14:39:6e:2e:ff:ac:57:eb:51:bd:20: ef:66:53:bb:03:04:d5:86:2f:62:4a:09:76:e8:7b: 3d:49:80:97:db:87:b2:d7:40:42:5b:e4:9c:31:b7: c5:fb:9a:01:aa:9a:c1:40:bc:d8:20:89:02:e7:39: 73:27:e3:37:9f:2f:e2:d9:ed:b5:ea:3f:96:4a:a9: dd:63:07:75:f2:a6:18:44:5c:e0:45:29:34:51:2c: 7b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1A:C9:45:A8:59:D8:2C:90:FF:D0:76:95:FE:1C:D5:7A:49:C0:89 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/KRrJRahZ2CyQ_9B2lf4c1XpJwIk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.183.136.0/23 Signature Algorithm: sha256WithRSAEncryption 45:99:4b:c3:75:2d:2a:2d:e6:37:ed:f6:d7:78:ee:c5:7d:d5: 1a:bd:87:98:9a:0d:6e:9e:5c:e5:ea:59:36:fa:1c:c7:ab:20: 93:19:72:a0:69:a1:ad:5e:04:94:14:c0:f1:2a:b3:0f:7e:ae: 91:63:1d:07:13:14:2e:1b:4b:b4:14:f9:ed:c9:a1:98:e8:8b: 66:c2:ce:25:6d:0d:94:6a:45:12:25:64:37:e6:c5:7f:40:8a: 2b:f1:cd:85:cf:6a:99:51:fc:38:2f:66:6f:dd:96:6c:65:9f: 4b:7e:2f:28:16:d4:36:8f:92:98:c1:45:a6:f1:b9:d6:7d:fd: c4:e0:98:86:85:f7:80:e7:d8:b5:68:1c:b1:23:22:49:06:b0: 2f:50:8e:70:e6:8d:cf:4b:1f:d9:db:62:2b:90:3c:0d:47:73: 39:58:fe:dd:0f:9d:a8:9b:70:59:a7:1a:bd:a9:4d:2e:7e:f7: f0:b9:e2:8c:02:ef:28:ae:9c:3d:c2:91:85:53:13:96:34:28: 3f:f0:37:7f:1a:72:c8:2c:60:a6:e1:a2:ff:00:88:c3:1a:64: a0:72:9a:63:fa:33:27:1b:8e:ef:b0:97:60:90:4f:e7:09:52: f1:28:9d:0d:6a:34:73:57:3b:37:39:a9:7f:de:f4:67:92:27: 70:8d:e1:1a -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE3wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI5MUFDOTQ1QTg1OUQ4 MkM5MEZGRDA3Njk1RkUxQ0Q1N0E0OUMwODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTfuGTgHdBMoj6zSBwKHGyA/4gn0JC4FaboB/H0cWn6S2/1wC1 hP+hdZkQXnGLTI+NqfP6lE3w3wszOy41gYZQII12COqicBQdeBpTnjaXa0PIMott KMMrwxXIoAUGEzMxG2vhcTYm2KF66Nf61gLYHtVLJ1IigvBxDSTkns44uQ0DA4eg OzjK6zivvxhtOnr0oS50nalgCmIdVmxTCvVKFqsFwiF36o0UOW4u/6xX61G9IO9m U7sDBNWGL2JKCXboez1JgJfbh7LXQEJb5Jwxt8X7mgGqmsFAvNggiQLnOXMn4zef L+LZ7bXqP5ZKqd1jB3XyphhEXOBFKTRRLHsPAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUKRrJRahZ2CyQ/9B2lf4c1XpJwIkwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvS1JySlJhaFoyQ3lRXzlCMmxmNGMx WHBKd0lrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAa+3iDAN BgkqhkiG9w0BAQsFAAOCAQEARZlLw3UtKi3mN+3213juxX3VGr2HmJoNbp5c5epZ Nvocx6sgkxlyoGmhrV4ElBTA8SqzD36ukWMdBxMULhtLtBT57cmhmOiLZsLOJW0N lGpFEiVkN+bFf0CKK/HNhc9qmVH8OC9mb92WbGWfS34vKBbUNo+SmMFFpvG51n39 xOCYhoX3gOfYtWgcsSMiSQawL1COcOaNz0sf2dtiK5A8DUdzOVj+3Q+dqJtwWaca valNLn738LnijALvKK6cPcKRhVMTljQoP/A3fxpyyCxgpuGi/wCIwxpkoHKaY/oz JxuO77CXYJBP5wlS8SidDWo0c1c7Nzmpf970Z5IncI3hGg== -----END CERTIFICATE-----Generated at Sat Jun 1 22:20:17 2024 by rpki-client on console-fra.rpki-client.org