$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/QR0Q3R_XEUUqnw5n_aHGm2rrnSc.roa File: QR0Q3R_XEUUqnw5n_aHGm2rrnSc.roa (raw, json) Hash identifier: jAa2Y14oBEwF0KbvHYrPlsWg0VAXWYAbelqdL+Gq3bQ= Subject key identifier: 41:1D:10:DD:1F:D7:11:45:2A:9F:0E:67:FD:A1:C6:9B:6A:EB:9D:27 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1340 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QR0Q3R_XEUUqnw5n_aHGm2rrnSc.roa Signing time: Fri 01 Sep 2023 09:24:42 +0000 ROA not before: Fri 01 Sep 2023 09:24:42 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 136543 IP address blocks: 115.30.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4928 (0x1340) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:42 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=411D10DD1FD711452A9F0E67FDA1C69B6AEB9D27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7d:22:1d:79:bb:8a:9b:b3:4e:13:a6:28:ed: c2:0c:b3:a6:70:45:25:71:d5:45:f1:fa:e1:37:34: 02:51:81:2e:e3:e5:7d:1f:ce:27:9d:4d:f2:66:9e: 3b:4c:d9:0c:68:e4:ae:8d:ca:89:72:f4:05:c4:ed: 32:9d:57:e8:80:c5:ec:39:39:30:58:8b:5c:5c:9d: e2:88:10:32:1a:ea:eb:92:87:65:50:8a:83:86:e6: 82:0f:39:fb:ce:e3:85:5d:a6:05:12:b0:a6:a8:96: d9:0c:dd:40:0c:17:1f:a9:c8:a3:ae:5d:ae:b0:e5: 4c:66:26:dc:47:22:ce:6c:e4:ea:8a:f1:f8:d8:e5: 40:0c:82:47:e6:f1:cc:96:64:fb:f2:c8:bc:b2:c2: ef:bb:93:3c:4f:df:7a:50:17:46:56:e4:c7:ff:83: 61:97:3e:93:36:8c:89:ca:6e:60:53:df:cb:c5:5f: c7:be:c6:bb:47:54:dc:aa:d1:9c:bb:9a:fa:15:3e: 49:bb:c6:ba:78:c4:7c:e5:38:e4:e6:69:35:b3:59: 20:53:20:ed:fc:55:9d:d0:eb:38:bd:28:42:d4:c0: b3:52:3e:1d:21:fe:46:45:1d:76:82:25:5a:4c:ac: 01:df:26:b1:5a:52:36:ef:dd:83:0a:26:bc:95:e2: 54:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1D:10:DD:1F:D7:11:45:2A:9F:0E:67:FD:A1:C6:9B:6A:EB:9D:27 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QR0Q3R_XEUUqnw5n_aHGm2rrnSc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.30.65.0/24 Signature Algorithm: sha256WithRSAEncryption 84:3c:c9:26:b4:e6:93:ad:e4:19:6b:b2:c7:d9:75:b7:01:54: 56:72:37:42:2b:fa:5e:f1:29:95:dd:58:ff:2a:19:9f:0e:b7: 99:34:4c:7e:2c:91:06:be:ed:34:98:44:57:13:ff:98:c9:98: a0:df:29:78:aa:ea:18:07:6f:57:f7:90:f7:88:e8:40:9f:88: 09:31:8f:61:f7:83:e4:83:97:20:98:8b:43:28:28:90:89:d4: 3c:d5:95:49:c5:1d:0a:ca:a6:53:0e:5e:d1:4d:21:ee:0c:96: 3a:59:1e:36:15:cc:fd:9d:70:e2:9a:1c:95:09:e1:95:8d:77: 6f:bd:da:8e:a0:fa:ca:eb:ad:11:1d:a7:33:d2:98:2b:31:6e: fc:95:0b:be:46:f2:27:2f:39:f1:df:17:ee:37:90:d0:31:0e: 51:cb:df:c9:73:da:bf:80:3c:56:4a:2d:c5:90:f6:c3:0b:35: 72:e3:6a:93:5f:3e:9b:f9:7f:fa:e0:7e:cc:fb:73:bb:f7:93: 78:16:32:5c:93:01:ce:01:bf:d0:14:5e:8d:bd:1e:43:b1:69: 9a:0e:d8:67:a0:48:c4:ce:cf:fb:42:2a:4d:42:af:e6:92:33: 8d:d5:d2:7b:e7:12:1e:2c:1e:1a:38:d1:a4:ec:af:76:b4:49: d6:12:c8:f9 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE0AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQxMUQxMEREMUZENzEx NDUyQTlGMEU2N0ZEQTFDNjlCNkFFQjlEMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgfSIdebuKm7NOE6Yo7cIMs6ZwRSVx1UXx+uE3NAJRgS7j5X0f ziedTfJmnjtM2Qxo5K6Nyoly9AXE7TKdV+iAxew5OTBYi1xcneKIEDIa6uuSh2VQ ioOG5oIPOfvO44VdpgUSsKaoltkM3UAMFx+pyKOuXa6w5UxmJtxHIs5s5OqK8fjY 5UAMgkfm8cyWZPvyyLyywu+7kzxP33pQF0ZW5Mf/g2GXPpM2jInKbmBT38vFX8e+ xrtHVNyq0Zy7mvoVPkm7xrp4xHzlOOTmaTWzWSBTIO38VZ3Q6zi9KELUwLNSPh0h /kZFHXaCJVpMrAHfJrFaUjbv3YMKJryV4lStAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUQR0Q3R/XEUUqnw5n/aHGm2rrnScwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvUVIwUTNSX1hFVVVxbnc1bl9hSEdt MnJyblNjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHMeQTAN BgkqhkiG9w0BAQsFAAOCAQEAhDzJJrTmk63kGWuyx9l1twFUVnI3Qiv6XvEpld1Y /yoZnw63mTRMfiyRBr7tNJhEVxP/mMmYoN8peKrqGAdvV/eQ94joQJ+ICTGPYfeD 5IOXIJiLQygokInUPNWVScUdCsqmUw5e0U0h7gyWOlkeNhXM/Z1w4poclQnhlY13 b73ajqD6yuutER2nM9KYKzFu/JULvkbyJy858d8X7jeQ0DEOUcvfyXPav4A8Vkot xZD2wws1cuNqk18+m/l/+uB+zPtzu/eTeBYyXJMBzgG/0BRejb0eQ7Fpmg7YZ6BI xM7P+0IqTUKv5pIzjdXSe+cSHiweGjjRpOyvdrRJ1hLI+Q== -----END CERTIFICATE-----Generated at Sun Jun 2 07:14:23 2024 by rpki-client on console-fra.rpki-client.org