$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/StqAcyEnT2qHSpY3k3iCmo6o1C4.roa File: StqAcyEnT2qHSpY3k3iCmo6o1C4.roa (raw, json) Hash identifier: xQxSCIYXHXMit3p0l7vFNE28oKKcU0y9aoep1AxIBq0= Subject key identifier: 4A:DA:80:73:21:27:4F:6A:87:4A:96:37:93:78:82:9A:8E:A8:D4:2E Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 138C Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/StqAcyEnT2qHSpY3k3iCmo6o1C4.roa Signing time: Fri 01 Sep 2023 09:25:08 +0000 ROA not before: Fri 01 Sep 2023 09:25:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 122.147.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5004 (0x138c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4ADA807321274F6A874A96379378829A8EA8D42E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3e:e5:50:25:7c:2e:b8:ff:02:54:37:f4:cd: 9d:b0:7f:39:f2:76:e3:45:40:15:9e:17:e7:15:a1: 24:11:f4:dc:54:17:b0:31:75:c0:52:e6:19:02:cd: 3c:db:52:85:c3:b8:16:76:87:a8:e5:fe:e5:97:a5: b3:30:ad:68:e9:79:44:33:5a:9a:50:22:79:bd:81: 62:b1:87:0b:4e:ec:98:d1:ac:03:b6:fa:f4:68:e2: 07:6d:85:ef:d1:70:d4:7c:b6:1f:70:b3:6d:ca:01: a1:5b:95:d1:ec:2d:95:76:7c:8f:f6:4f:de:14:a4: d6:e5:24:a8:9d:35:6e:4b:be:6c:dc:f9:d3:9e:a7: c4:22:47:bc:3f:f7:d0:19:cf:dc:9f:34:e3:00:a7: 65:8e:65:db:54:f9:f5:61:b5:61:93:89:80:8d:0f: 8d:b0:7f:6e:54:c1:f7:f9:78:a0:bc:29:f9:d5:4d: 57:b6:1f:16:2f:c7:39:5b:22:0f:f8:2e:6a:07:9a: 7a:60:99:06:5d:e3:70:7f:10:12:e6:f5:a3:b4:fa: 48:64:a6:9b:65:03:7d:9d:f0:67:7b:b6:41:08:c9: 32:8a:f5:ca:20:fe:ec:24:08:fb:67:e3:36:be:02: a3:07:18:5d:65:4c:a1:a0:d8:0b:1f:2d:78:ea:33: 13:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DA:80:73:21:27:4F:6A:87:4A:96:37:93:78:82:9A:8E:A8:D4:2E X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/StqAcyEnT2qHSpY3k3iCmo6o1C4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.147.160.0/19 Signature Algorithm: sha256WithRSAEncryption 7d:fb:23:25:f7:9b:13:00:a0:15:cb:b2:d7:01:87:97:b8:ef: f0:f4:de:59:7e:33:a7:0a:06:85:7e:e2:02:73:c8:5e:2c:5f: 67:ac:da:12:92:8b:3e:74:9e:91:c0:9a:cd:22:e5:ce:7c:6c: 3b:2a:a8:cd:62:6b:3a:46:73:17:1e:90:c0:b0:8e:09:53:4f: 9f:23:3c:2e:42:8e:15:14:ae:df:47:4b:b9:c4:41:c8:46:8a: 0a:2c:75:a4:92:f2:d3:89:81:de:cd:d4:a2:41:2c:11:06:78: 34:af:6c:60:81:a0:e2:05:24:10:85:bd:b3:9f:1c:91:65:c2: 07:57:41:8f:01:39:c4:19:a8:2d:57:21:22:ad:f1:16:cd:aa: d3:06:e1:4a:03:2c:70:6e:45:4f:c2:8a:78:7b:6e:cb:65:d9: ec:f2:46:ad:1c:a1:be:16:f8:52:6d:51:49:cb:24:67:c0:d7: 9c:2a:d9:60:b6:c3:fa:a3:f5:7d:9d:73:ff:84:a0:f0:c9:6c: da:df:02:44:96:10:76:ec:97:d2:e8:31:1c:20:14:4e:c2:2f: e1:3d:9a:b8:03:29:4a:84:0c:8b:e7:46:9e:0e:5c:12:09:91: ff:b0:2c:32:21:3d:45:15:e6:bf:db:7a:20:03:0a:08:54:ad: 4b:ea:1e:dd -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE4wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRBREE4MDczMjEyNzRG NkE4NzRBOTYzNzkzNzg4MjlBOEVBOEQ0MkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGPuVQJXwuuP8CVDf0zZ2wfznyduNFQBWeF+cVoSQR9NxUF7Ax dcBS5hkCzTzbUoXDuBZ2h6jl/uWXpbMwrWjpeUQzWppQInm9gWKxhwtO7JjRrAO2 +vRo4gdthe/RcNR8th9ws23KAaFbldHsLZV2fI/2T94UpNblJKidNW5Lvmzc+dOe p8QiR7w/99AZz9yfNOMAp2WOZdtU+fVhtWGTiYCND42wf25Uwff5eKC8KfnVTVe2 HxYvxzlbIg/4LmoHmnpgmQZd43B/EBLm9aO0+khkpptlA32d8Gd7tkEIyTKK9cog /uwkCPtn4za+AqMHGF1lTKGg2AsfLXjqMxOvAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUStqAcyEnT2qHSpY3k3iCmo6o1C4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvU3RxQWN5RW5UMnFIU3BZM2szaUNt bzZvMUM0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXqToDAN BgkqhkiG9w0BAQsFAAOCAQEAffsjJfebEwCgFcuy1wGHl7jv8PTeWX4zpwoGhX7i AnPIXixfZ6zaEpKLPnSekcCazSLlznxsOyqozWJrOkZzFx6QwLCOCVNPnyM8LkKO FRSu30dLucRByEaKCix1pJLy04mB3s3UokEsEQZ4NK9sYIGg4gUkEIW9s58ckWXC B1dBjwE5xBmoLVchIq3xFs2q0wbhSgMscG5FT8KKeHtuy2XZ7PJGrRyhvhb4Um1R ScskZ8DXnCrZYLbD+qP1fZ1z/4Sg8Mls2t8CRJYQduyX0ugxHCAUTsIv4T2auAMp SoQMi+dGng5cEgmR/7AsMiE9RRXmv9t6IAMKCFStS+oe3Q== -----END CERTIFICATE-----Generated at Sun Jun 2 09:37:18 2024 by rpki-client on console-ams.rpki-client.org