$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Sf8aFsNuZM1E--uPhTYVTNAgtIE.roa File: Sf8aFsNuZM1E--uPhTYVTNAgtIE.roa (raw, json) Hash identifier: ij8ElI0Ae6bFxE+dAj/tK2lWPfANCQZGbZTtmMqm1tE= Subject key identifier: 49:FF:1A:16:C3:6E:64:CD:44:FB:EB:8F:85:36:15:4C:D0:20:B4:81 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 132F Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Sf8aFsNuZM1E--uPhTYVTNAgtIE.roa Signing time: Fri 01 Sep 2023 09:24:35 +0000 ROA not before: Fri 01 Sep 2023 09:24:35 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18049 IP address blocks: 106.107.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4911 (0x132f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:35 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=49FF1A16C36E64CD44FBEB8F8536154CD020B481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bc:2a:d1:a3:11:de:02:ad:52:d7:b6:c4:90: 7f:00:a8:1d:c9:e9:40:28:d5:6d:93:c8:8f:f3:46: 56:34:95:84:30:c4:7c:65:6c:5d:85:3d:cb:3c:a6: f7:ea:4d:62:a9:f6:5c:a0:6a:e7:65:d0:6e:90:43: 9a:db:1e:d2:d3:75:81:2a:6c:4b:1a:be:d6:ec:3c: ad:ee:65:c2:55:78:47:f7:6d:ac:ce:35:91:5c:2d: 61:be:09:47:c3:ab:a5:59:18:b6:df:0a:6f:41:90: 1d:58:a7:33:02:dd:82:10:08:7c:91:a5:58:2b:41: e8:11:90:de:aa:23:b7:60:99:73:27:e9:37:dd:40: c9:2f:1c:a3:4a:78:44:15:ba:28:8b:44:8f:5e:0b: ad:92:24:e8:09:86:53:41:72:ca:e5:8c:0a:71:04: 72:5e:e1:95:70:89:5b:a9:a7:2a:d9:64:92:fa:fc: ae:7d:9b:d7:6a:d6:e3:f9:f2:a0:bd:91:68:9b:a1: 0d:42:db:c0:8e:7a:8d:73:1f:1f:2d:9d:5b:14:f6: fe:a0:d2:7f:36:c3:e8:e4:0b:ea:74:c2:78:83:9c: 48:90:36:b2:99:86:ea:db:02:70:08:82:68:02:04: 0a:07:59:d7:9c:cc:36:8c:73:c4:50:b7:69:51:32: f8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FF:1A:16:C3:6E:64:CD:44:FB:EB:8F:85:36:15:4C:D0:20:B4:81 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Sf8aFsNuZM1E--uPhTYVTNAgtIE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.107.128.0/20 Signature Algorithm: sha256WithRSAEncryption a8:d6:e3:f9:ed:38:f8:2b:cf:64:b0:1b:fc:21:d2:f8:ab:ef: c5:d3:a2:75:38:c0:4e:b2:cc:e6:8f:c4:94:b1:50:91:d6:72: 7a:34:93:3e:25:b9:9e:68:0c:df:33:29:b2:89:9a:ae:e8:b9: 54:f5:c0:3d:0c:38:93:15:38:22:1d:f5:13:6d:ea:c5:88:12: a6:01:ac:12:f4:62:67:e0:9d:43:20:45:7d:98:97:ee:61:d1: 76:f7:aa:0e:3e:21:1f:13:d2:40:da:fc:48:3b:48:f4:f5:d0: 76:d1:e4:fa:a4:0d:4a:cb:7b:a6:74:02:20:79:17:17:11:6a: 63:d1:02:39:ce:96:0d:fd:51:f5:a5:7a:0a:fe:60:c7:94:19: f9:04:32:d9:6f:08:ac:51:9f:6e:41:0a:55:bf:a4:56:bf:1f: 85:ac:d2:15:78:aa:be:82:72:30:65:16:78:97:ce:f1:13:41: b1:cf:0b:ff:97:7f:7e:07:a8:90:19:3e:d2:22:1d:0b:35:2a: a4:17:24:32:b1:e1:2b:e9:1a:71:a7:6d:a7:4c:d8:a0:fc:a2: bb:75:5d:e3:b1:be:4e:56:31:2b:30:1e:cf:1d:f3:5c:b7:3f: d7:8d:6a:0b:22:58:de:ea:e1:e9:93:9e:e6:9a:71:9b:2c:e0: d3:bb:82:ef -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEy8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MzVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ5RkYxQTE2QzM2RTY0 Q0Q0NEZCRUI4Rjg1MzYxNTRDRDAyMEI0ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzvCrRoxHeAq1S17bEkH8AqB3J6UAo1W2TyI/zRlY0lYQwxHxl bF2FPcs8pvfqTWKp9lygaudl0G6QQ5rbHtLTdYEqbEsavtbsPK3uZcJVeEf3bazO NZFcLWG+CUfDq6VZGLbfCm9BkB1YpzMC3YIQCHyRpVgrQegRkN6qI7dgmXMn6Tfd QMkvHKNKeEQVuiiLRI9eC62SJOgJhlNBcsrljApxBHJe4ZVwiVuppyrZZJL6/K59 m9dq1uP58qC9kWiboQ1C28COeo1zHx8tnVsU9v6g0n82w+jkC+p0wniDnEiQNrKZ hurbAnAIgmgCBAoHWdeczDaMc8RQt2lRMvgFAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUSf8aFsNuZM1E++uPhTYVTNAgtIEwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvU2Y4YUZzTnVaTTFFLS11UGhUWVZU TkFndElFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGprgDAN BgkqhkiG9w0BAQsFAAOCAQEAqNbj+e04+CvPZLAb/CHS+KvvxdOidTjATrLM5o/E lLFQkdZyejSTPiW5nmgM3zMpsomarui5VPXAPQw4kxU4Ih31E23qxYgSpgGsEvRi Z+CdQyBFfZiX7mHRdveqDj4hHxPSQNr8SDtI9PXQdtHk+qQNSst7pnQCIHkXFxFq Y9ECOc6WDf1R9aV6Cv5gx5QZ+QQy2W8IrFGfbkEKVb+kVr8fhazSFXiqvoJyMGUW eJfO8RNBsc8L/5d/fgeokBk+0iIdCzUqpBckMrHhK+kacadtp0zYoPyiu3Vd47G+ TlYxKzAezx3zXLc/141qCyJY3urh6ZOe5ppxmyzg07uC7w== -----END CERTIFICATE-----Generated at Sat Jun 1 23:25:37 2024 by rpki-client on console-ams.rpki-client.org