$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/MtY5CrLDDGS_SQyIEVJlJjDCr3I.roa File: MtY5CrLDDGS_SQyIEVJlJjDCr3I.roa (raw, json) Hash identifier: RY/dBhuSxwxrHhyMid74WIe5ARpe3YzJnFrRsvtJoJ4= Subject key identifier: 32:D6:39:0A:B2:C3:0C:64:BF:49:0C:88:11:52:65:26:30:C2:AF:72 Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 0DBD Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/MtY5CrLDDGS_SQyIEVJlJjDCr3I.roa Signing time: Fri 01 Sep 2023 09:25:26 +0000 ROA not before: Fri 01 Sep 2023 09:25:26 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 192.72.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 17:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3517 (0xdbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Sep 1 09:25:26 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=32D6390AB2C30C64BF490C881152652630C2AF72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:19:49:9c:1e:5d:e6:85:dc:fb:90:b5:01:33: 22:5c:4d:31:9e:14:d6:bf:fb:fd:58:ce:3b:b5:88: 1c:47:60:e1:f8:ad:31:28:54:00:51:a1:78:30:c8: 4f:9d:65:bf:90:4a:3b:78:50:f3:63:87:52:c8:5b: 77:6e:da:1e:a6:25:ce:28:e9:d7:66:72:8c:40:b2: c4:ff:b0:16:4f:e0:fe:2b:44:66:78:41:9f:e6:b6: e9:8c:73:b1:fb:22:c2:e9:28:7b:c0:ae:25:f0:7e: 6c:f1:f5:56:2b:8c:d0:46:a5:e8:ab:bd:79:99:2b: 67:e8:8a:05:46:66:9b:b6:19:7a:16:34:9c:89:b2: 8a:65:a4:4e:cf:4a:b9:55:1f:7a:cb:79:ca:2a:11: 45:53:94:aa:bf:41:02:b3:e5:70:cd:72:d0:07:50: 8e:f9:09:f7:20:17:15:63:a4:1b:95:34:e3:35:55: af:0f:3e:60:00:da:68:52:62:e6:4a:17:d8:f0:29: c3:6c:b5:39:dc:de:97:70:6e:62:a6:df:fd:78:98: 40:6f:6d:bc:ec:d4:f6:94:fd:c4:0f:a0:5c:66:e3: 5f:03:bb:6f:23:a4:54:b9:d6:3d:72:89:d9:f4:ca: 09:71:4f:d8:07:e5:ab:ae:f0:76:f1:3f:90:36:5b: 2f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D6:39:0A:B2:C3:0C:64:BF:49:0C:88:11:52:65:26:30:C2:AF:72 X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/MtY5CrLDDGS_SQyIEVJlJjDCr3I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.224.0/20 Signature Algorithm: sha256WithRSAEncryption 8b:f4:95:d2:38:62:e0:f5:80:30:dd:69:bb:c0:61:f1:e6:4f: b2:96:ae:4c:62:8b:05:a6:40:7e:70:df:da:f2:5e:0a:ed:00: ac:0b:cd:f9:5a:76:c4:4b:14:ac:99:0a:f3:28:df:a8:e5:8b: 83:f4:9b:59:0f:7e:7a:b7:02:92:f8:62:b0:f3:25:68:e6:87: f7:12:34:e8:dd:c6:98:22:54:e5:94:f0:62:11:a9:08:22:02: 11:fa:4b:87:ef:0a:0e:3e:e5:3d:24:e4:9c:df:7e:57:da:10: 9e:e4:e7:d9:ae:9c:9f:c8:f3:5e:70:f7:58:4f:9c:33:60:8f: 41:be:cc:c1:d4:b4:ef:df:d1:d0:ee:3f:f8:51:33:78:0c:a0: 49:6e:9f:42:7a:d3:8a:95:e5:b8:0c:05:ba:87:a2:9f:11:93: e8:28:8b:e1:8e:57:d0:47:ac:f4:71:17:67:15:72:7c:df:7f: e2:ee:94:4e:22:43:cf:eb:7f:39:fb:74:1c:f4:fd:cd:df:4b: 42:a4:d9:ab:86:46:05:28:f9:0e:ee:35:b8:17:b5:c8:59:cb: 0e:77:93:a2:bf:23:0f:4d:db:9c:d8:d2:be:74:e2:bb:67:dc: d9:95:00:c5:84:a4:91:a0:7c:ec:91:8a:65:16:7e:e1:78:a9: ce:0d:af:7d -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDb0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yMzA5MDEw OTI1MjZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDMyRDYzOTBBQjJDMzBD NjRCRjQ5MEM4ODExNTI2NTI2MzBDMkFGNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYGUmcHl3mhdz7kLUBMyJcTTGeFNa/+/1Yzju1iBxHYOH4rTEo VABRoXgwyE+dZb+QSjt4UPNjh1LIW3du2h6mJc4o6ddmcoxAssT/sBZP4P4rRGZ4 QZ/mtumMc7H7IsLpKHvAriXwfmzx9VYrjNBGpeirvXmZK2foigVGZpu2GXoWNJyJ soplpE7PSrlVH3rLecoqEUVTlKq/QQKz5XDNctAHUI75CfcgFxVjpBuVNOM1Va8P PmAA2mhSYuZKF9jwKcNstTnc3pdwbmKm3/14mEBvbbzs1PaU/cQPoFxm418Du28j pFS51j1yidn0yglxT9gH5auu8HbxP5A2Wy+LAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUMtY5CrLDDGS/SQyIEVJlJjDCr3IwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvTXRZNUNyTERER1NfU1F5SUVWSmxK akRDcjNJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMBI4DAN BgkqhkiG9w0BAQsFAAOCAQEAi/SV0jhi4PWAMN1pu8Bh8eZPspauTGKLBaZAfnDf 2vJeCu0ArAvN+Vp2xEsUrJkK8yjfqOWLg/SbWQ9+ercCkvhisPMlaOaH9xI06N3G mCJU5ZTwYhGpCCICEfpLh+8KDj7lPSTknN9+V9oQnuTn2a6cn8jzXnD3WE+cM2CP Qb7MwdS079/R0O4/+FEzeAygSW6fQnrTipXluAwFuoeinxGT6CiL4Y5X0Ees9HEX ZxVyfN9/4u6UTiJDz+t/Oft0HPT9zd9LQqTZq4ZGBSj5Du41uBe1yFnLDneTor8j D03bnNjSvnTiu2fc2ZUAxYSkkaB87JGKZRZ+4Xipzg2vfQ== -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org