$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/SVctKJTV3hpdCSwRvPmE4JghsN4.roa File: SVctKJTV3hpdCSwRvPmE4JghsN4.roa (raw, json) Hash identifier: 1SLswvZet+hfS/LvqisonTQhKPLF9nUMVAtJIdI+Kfw= Subject key identifier: 49:57:2D:28:94:D5:DE:1A:5D:09:2C:11:BC:F9:84:E0:98:21:B0:DE Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 12F4 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/SVctKJTV3hpdCSwRvPmE4JghsN4.roa Signing time: Fri 01 Sep 2023 09:24:18 +0000 ROA not before: Fri 01 Sep 2023 09:24:18 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131584 IP address blocks: 106.105.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4852 (0x12f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:18 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=49572D2894D5DE1A5D092C11BCF984E09821B0DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:b1:78:51:ef:57:c6:bb:90:d7:91:a3:73: f1:74:d3:f0:9b:70:0f:45:2d:3e:72:9a:b0:83:81: 2b:5c:0f:a3:22:6f:11:d0:56:23:d3:73:c6:23:a1: 67:35:a3:20:da:9c:cc:d2:5c:5a:e9:1d:e9:7b:f9: 3c:1b:8e:95:93:7a:5f:f1:a7:81:50:84:c9:cf:2e: 61:4a:76:91:95:73:43:d9:e8:3c:ad:21:26:dd:88: 89:75:7a:e1:54:62:a1:0f:e1:fe:ae:8e:7b:c1:d3: 09:30:49:49:c5:b9:ea:d4:3b:ef:71:30:d8:03:c1: fa:98:10:ff:ac:60:8d:17:fc:fc:8a:6f:63:49:99: bb:1e:b0:99:29:b2:85:13:5b:5b:0d:3e:a9:01:9d: ec:47:50:19:3f:13:6d:a8:b2:37:05:3c:d5:94:4e: 05:e7:c8:e6:c2:7d:b0:de:b2:6a:92:45:85:af:0f: 05:a5:76:1e:a1:8a:d1:1b:e5:d5:c0:9c:6c:e5:5d: 38:58:8b:0f:d9:5d:62:a6:d5:16:ca:e1:b6:72:4d: 14:9e:b5:84:4a:b9:52:a1:d4:80:41:eb:66:f2:21: 29:29:f6:6b:c0:a0:f0:7b:69:e4:f0:21:1e:88:cd: f1:1b:f9:60:79:11:ce:27:de:34:da:f8:72:34:47: a5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:57:2D:28:94:D5:DE:1A:5D:09:2C:11:BC:F9:84:E0:98:21:B0:DE X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/SVctKJTV3hpdCSwRvPmE4JghsN4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.176.0/23 Signature Algorithm: sha256WithRSAEncryption 82:e5:43:e7:d8:66:25:e0:20:cc:2e:f8:cc:c5:72:c5:09:12: 56:fb:f3:f1:07:b1:b5:66:a1:62:a4:98:1f:92:6c:ae:d6:9f: 9c:65:c5:e4:5d:f8:95:1d:64:28:51:68:1c:f9:72:3b:3d:3e: 17:6f:9c:43:1f:11:dd:92:60:19:61:9f:d9:f3:d8:a6:53:80: ce:1d:1f:1e:b4:48:12:fb:23:2f:a7:86:fd:fc:f1:4e:65:71: 7f:06:9d:71:c2:0e:e5:85:12:24:50:7b:3f:b7:8f:0e:27:67: fd:06:7d:b5:c0:b0:29:85:ac:b5:88:48:4d:77:35:06:17:3e: 79:5e:42:a6:cc:70:65:cc:10:7e:36:aa:27:11:9c:6b:e9:6a: c4:6a:1d:f8:65:5e:5d:f9:09:6e:20:34:91:83:bc:3b:b6:3a: a2:04:2f:e4:2c:39:60:61:2f:e2:fd:22:23:19:45:e5:01:7c: 72:9b:04:00:70:7e:85:20:9b:84:ad:a9:64:fe:90:0d:16:18: 4f:7c:08:41:f4:22:71:e2:22:bf:1a:46:24:39:d7:b2:4d:74: a6:16:2d:7a:06:94:c8:7a:96:5a:f4:64:bc:58:ed:9a:bf:d8: 78:12:cd:a3:46:74:b9:04:db:ec:f3:8d:1a:bc:38:d6:59:74: 0a:ae:f2:a0 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEvQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ5NTcyRDI4OTRENURF MUE1RDA5MkMxMUJDRjk4NEUwOTgyMUIwREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+67F4Ue9XxruQ15Gjc/F00/CbcA9FLT5ymrCDgStcD6MibxHQ ViPTc8YjoWc1oyDanMzSXFrpHel7+TwbjpWTel/xp4FQhMnPLmFKdpGVc0PZ6Dyt ISbdiIl1euFUYqEP4f6ujnvB0wkwSUnFuerUO+9xMNgDwfqYEP+sYI0X/PyKb2NJ mbsesJkpsoUTW1sNPqkBnexHUBk/E22osjcFPNWUTgXnyObCfbDesmqSRYWvDwWl dh6hitEb5dXAnGzlXThYiw/ZXWKm1RbK4bZyTRSetYRKuVKh1IBB62byISkp9mvA oPB7aeTwIR6IzfEb+WB5Ec4n3jTa+HI0R6WFAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUSVctKJTV3hpdCSwRvPmE4JghsN4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvU1ZjdEtKVFYzaHBkQ1N3UnZQbUU0 Smdoc040LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWppsDAN BgkqhkiG9w0BAQsFAAOCAQEAguVD59hmJeAgzC74zMVyxQkSVvvz8QextWahYqSY H5JsrtafnGXF5F34lR1kKFFoHPlyOz0+F2+cQx8R3ZJgGWGf2fPYplOAzh0fHrRI EvsjL6eG/fzxTmVxfwadccIO5YUSJFB7P7ePDidn/QZ9tcCwKYWstYhITXc1Bhc+ eV5CpsxwZcwQfjaqJxGca+lqxGod+GVeXfkJbiA0kYO8O7Y6ogQv5Cw5YGEv4v0i IxlF5QF8cpsEAHB+hSCbhK2pZP6QDRYYT3wIQfQiceIivxpGJDnXsk10phYtegaU yHqWWvRkvFjtmr/YeBLNo0Z0uQTb7PONGrw41ll0Cq7yoA== -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org