$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/QNKqXggQvy1uapE7DE7gWRbpKLE.roa File: QNKqXggQvy1uapE7DE7gWRbpKLE.roa (raw, json) Hash identifier: tR1pnbWeXvDTtJp4Kbn4tpXId6kJLKukp7N1EpMpxNI= Subject key identifier: 40:D2:AA:5E:08:10:BF:2D:6E:6A:91:3B:0C:4E:E0:59:16:E9:28:B1 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 136E Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QNKqXggQvy1uapE7DE7gWRbpKLE.roa Signing time: Fri 01 Sep 2023 09:24:55 +0000 ROA not before: Fri 01 Sep 2023 09:24:55 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 211.78.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4974 (0x136e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:55 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=40D2AA5E0810BF2D6E6A913B0C4EE05916E928B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:9e:0d:7c:68:b8:a5:a4:be:02:c9:22:ee: c1:23:4c:c6:8e:83:d6:5e:60:f3:0f:d8:9c:8a:74: b2:10:30:4b:d1:08:53:8e:25:91:09:a4:25:03:cb: 6c:c7:c6:f6:56:8a:e5:22:45:2a:d6:3b:3f:31:17: e5:76:71:16:67:a9:f6:1c:d0:f9:38:53:42:22:92: 2b:fa:a7:04:ef:7d:8e:15:3b:74:fd:95:cc:20:fb: a5:4a:9b:09:a9:c8:c4:c1:38:f7:47:73:8c:51:65: 83:fd:36:6a:96:8d:ca:c0:e1:53:eb:e7:32:81:92: 6a:a8:87:54:7f:1f:1c:58:5f:c4:70:15:25:41:e4: 00:ba:0b:0a:ea:2f:f2:50:cc:df:12:ed:5f:14:5d: 4e:ae:8d:4d:80:82:a8:1c:38:71:65:6d:eb:4c:d7: 7e:5c:bc:64:3a:8f:3a:81:86:98:90:bf:9f:99:01: 3d:fa:37:91:63:08:4d:db:dd:f4:3d:eb:3b:cb:14: 2c:4b:f5:d3:27:7b:0f:09:37:a1:20:3e:40:f7:f9: 39:4a:9e:74:5e:9a:55:43:f9:66:d4:8a:6c:86:c2: 40:93:e3:8d:6a:e3:de:14:5f:05:b8:26:82:52:66: 6f:61:07:f3:4a:7c:0f:0e:92:01:aa:74:8e:a7:ae: 56:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D2:AA:5E:08:10:BF:2D:6E:6A:91:3B:0C:4E:E0:59:16:E9:28:B1 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QNKqXggQvy1uapE7DE7gWRbpKLE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.96.0/19 Signature Algorithm: sha256WithRSAEncryption 27:a5:a4:30:60:2a:51:74:61:53:0c:ce:c3:27:34:aa:2a:43: 44:91:18:d7:fb:58:a9:f0:e8:f2:1a:68:5d:53:50:61:86:d9: 21:c4:5e:44:18:bf:30:c0:57:f0:59:48:22:5e:df:c9:2b:cd: 01:96:48:ed:41:07:02:cb:6d:f8:9e:23:ff:db:1b:55:d5:a9: 05:35:f8:70:66:31:24:15:64:6c:21:35:82:95:49:d2:0d:84: 20:03:8b:7b:31:fa:7c:d4:4d:24:24:9f:c1:1d:ba:cb:1c:c3: 8a:24:5b:94:28:8f:79:3c:02:29:f4:d6:ae:9f:19:f2:ef:d3: c4:d9:a2:8b:cc:cc:8c:5d:5a:ac:31:0d:ce:5f:c2:63:c1:52: a8:6d:0c:1f:ce:61:03:4f:12:ab:61:ee:3a:3c:b0:c7:c1:3f: b7:10:37:87:05:51:38:6b:70:81:95:ea:a0:88:19:e0:18:97: 27:eb:4d:dd:3f:3a:2d:ff:c9:0e:71:26:e3:46:57:43:b9:2c: 9e:dc:10:a3:9e:e3:50:f9:72:c8:17:e8:bc:d8:2f:fc:1d:10: 2c:ee:52:ed:b9:16:05:75:c3:53:77:c0:75:2d:05:9d:30:74: ee:36:71:ef:43:a2:41:1d:7b:c7:a2:47:f5:61:f6:f8:e7:27: 93:69:a0:59 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE24wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQwRDJBQTVFMDgxMEJG MkQ2RTZBOTEzQjBDNEVFMDU5MTZFOTI4QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7Vp4NfGi4paS+Aski7sEjTMaOg9ZeYPMP2JyKdLIQMEvRCFOO JZEJpCUDy2zHxvZWiuUiRSrWOz8xF+V2cRZnqfYc0Pk4U0Iikiv6pwTvfY4VO3T9 lcwg+6VKmwmpyMTBOPdHc4xRZYP9NmqWjcrA4VPr5zKBkmqoh1R/HxxYX8RwFSVB 5AC6CwrqL/JQzN8S7V8UXU6ujU2AgqgcOHFlbetM135cvGQ6jzqBhpiQv5+ZAT36 N5FjCE3b3fQ96zvLFCxL9dMnew8JN6EgPkD3+TlKnnRemlVD+WbUimyGwkCT441q 494UXwW4JoJSZm9hB/NKfA8OkgGqdI6nrlZ/AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUQNKqXggQvy1uapE7DE7gWRbpKLEwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvUU5LcVhnZ1F2eTF1YXBFN0RFN2dX UmJwS0xFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdNOYDAN BgkqhkiG9w0BAQsFAAOCAQEAJ6WkMGAqUXRhUwzOwyc0qipDRJEY1/tYqfDo8hpo XVNQYYbZIcReRBi/MMBX8FlIIl7fySvNAZZI7UEHAstt+J4j/9sbVdWpBTX4cGYx JBVkbCE1gpVJ0g2EIAOLezH6fNRNJCSfwR26yxzDiiRblCiPeTwCKfTWrp8Z8u/T xNmii8zMjF1arDENzl/CY8FSqG0MH85hA08Sq2HuOjywx8E/txA3hwVROGtwgZXq oIgZ4BiXJ+tN3T86Lf/JDnEm40ZXQ7ksntwQo57jUPlyyBfovNgv/B0QLO5S7bkW BXXDU3fAdS0FnTB07jZx70OiQR17x6JH9WH2+Ocnk2mgWQ== -----END CERTIFICATE-----Generated at Sun Jun 2 07:14:23 2024 by rpki-client on console-fra.rpki-client.org