$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ywgb8VH0abH29J0ZW_CQfXmNieE.roa File: Ywgb8VH0abH29J0ZW_CQfXmNieE.roa (raw, json) Hash identifier: 77MpG1RMkJbxrr8cGgmsiwnXXwPE7p8ZZae8KJ67nR8= Subject key identifier: 63:08:1B:F1:51:F4:69:B1:F6:F4:9D:19:5B:F0:90:7D:79:8D:89:E1 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 136F Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ywgb8VH0abH29J0ZW_CQfXmNieE.roa Signing time: Fri 01 Sep 2023 09:24:56 +0000 ROA not before: Fri 01 Sep 2023 09:24:56 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 103.234.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4975 (0x136f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:56 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=63081BF151F469B1F6F49D195BF0907D798D89E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:33:56:56:ab:f5:2a:1f:7f:e3:bb:8e:a2:ef: a7:83:1c:94:fc:59:9a:9e:3a:4b:fb:03:8f:8a:6c: 24:1d:68:46:31:d4:77:43:1c:23:7c:46:41:b3:d6: 3e:bf:04:0c:cb:46:2f:d6:24:db:cc:54:b0:dd:63: 3c:a0:41:3e:30:b5:2b:4f:a7:f0:1e:60:62:d3:97: ab:0a:b6:57:29:1c:a3:96:7c:72:7f:35:f2:8e:92: 8e:3e:6b:55:7b:e8:08:7a:97:da:bb:0d:43:ae:60: 58:df:a0:93:22:2b:ab:b9:e0:c6:4c:28:d4:ae:b8: 6b:67:b2:73:e5:c6:e3:48:4d:08:df:60:e2:e4:14: e5:89:a3:81:cc:a1:e0:ba:27:52:9b:c9:a5:d3:93: bc:85:75:ed:ca:17:36:bc:6c:6a:c6:44:49:cf:ce: d6:44:2b:d6:99:ec:d4:f8:7d:f3:e8:3a:4b:82:50: 86:c3:b1:17:e8:4e:b3:67:0a:7a:e1:0c:97:b0:3b: 2a:ce:59:43:86:1e:7b:a5:14:d6:af:8a:71:32:71: db:45:e4:f6:7c:5c:45:a1:8e:a1:e5:8d:6d:31:32: af:ac:e1:04:81:d0:59:9b:e5:36:90:1e:2a:f2:61: 63:4a:41:f8:d7:8c:12:30:34:40:9e:69:6e:02:6b: b8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:08:1B:F1:51:F4:69:B1:F6:F4:9D:19:5B:F0:90:7D:79:8D:89:E1 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ywgb8VH0abH29J0ZW_CQfXmNieE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.234.40.0/22 Signature Algorithm: sha256WithRSAEncryption b5:be:1b:2a:d5:ca:9e:6e:b6:f5:12:02:9d:20:c0:0b:1b:3a: e2:73:de:02:d9:f8:fa:98:08:ff:e1:34:86:c7:67:92:df:71: ad:11:7b:e4:81:3a:9c:36:d0:33:7e:6a:88:93:5e:4c:0a:51: e3:13:ca:0e:b7:76:3b:91:a0:79:39:fb:2c:57:13:fa:30:72: 12:a8:b4:9a:1d:3b:3d:e0:17:f0:66:07:a8:f3:30:3f:8d:b9: 3c:aa:e9:13:ba:07:8e:94:18:f5:4b:b5:e3:79:90:91:fe:6e: ce:55:d6:86:47:62:a6:b9:9b:75:5f:4e:d5:f3:60:a7:ef:f3: 82:15:04:55:a4:c7:dd:3e:88:b1:1b:d0:7c:5d:69:11:fd:46: 83:69:dd:88:b0:09:b6:6f:ae:ea:6f:1d:b6:e1:62:7d:9b:f0: 81:51:34:8b:67:47:53:0d:69:90:29:8b:4e:b4:e6:00:cd:76: d7:6b:75:ff:91:fd:54:17:cb:f3:93:2f:7a:de:49:a8:89:f3: d8:97:e2:f6:ba:90:cb:9b:22:15:51:f1:e4:70:9f:86:38:a0: e4:81:40:69:4a:ea:35:9c:77:ad:5d:22:95:71:04:8a:4c:69: 20:bb:fc:fe:c1:f0:b0:cc:58:1b:86:68:07:42:0f:cf:42:a7: 08:cd:63:f5 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE28wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDYzMDgxQkYxNTFGNDY5 QjFGNkY0OUQxOTVCRjA5MDdENzk4RDg5RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCUM1ZWq/UqH3/ju46i76eDHJT8WZqeOkv7A4+KbCQdaEYx1HdD HCN8RkGz1j6/BAzLRi/WJNvMVLDdYzygQT4wtStPp/AeYGLTl6sKtlcpHKOWfHJ/ NfKOko4+a1V76Ah6l9q7DUOuYFjfoJMiK6u54MZMKNSuuGtnsnPlxuNITQjfYOLk FOWJo4HMoeC6J1KbyaXTk7yFde3KFza8bGrGREnPztZEK9aZ7NT4ffPoOkuCUIbD sRfoTrNnCnrhDJewOyrOWUOGHnulFNavinEycdtF5PZ8XEWhjqHljW0xMq+s4QSB 0Fmb5TaQHiryYWNKQfjXjBIwNECeaW4Ca7iRAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUYwgb8VH0abH29J0ZW/CQfXmNieEwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvWXdnYjhWSDBhYkgyOUowWldfQ1Fm WG1OaWVFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmfqKDAN BgkqhkiG9w0BAQsFAAOCAQEAtb4bKtXKnm629RICnSDACxs64nPeAtn4+pgI/+E0 hsdnkt9xrRF75IE6nDbQM35qiJNeTApR4xPKDrd2O5GgeTn7LFcT+jByEqi0mh07 PeAX8GYHqPMwP425PKrpE7oHjpQY9Uu143mQkf5uzlXWhkdiprmbdV9O1fNgp+/z ghUEVaTH3T6IsRvQfF1pEf1Gg2ndiLAJtm+u6m8dtuFifZvwgVE0i2dHUw1pkCmL TrTmAM1212t1/5H9VBfL85Mvet5JqInz2Jfi9rqQy5siFVHx5HCfhjig5IFAaUrq NZx3rV0ilXEEikxpILv8/sHwsMxYG4ZoB0IPz0KnCM1j9Q== -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org