$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZDSta0Q4DImNBMMXZl_91vsKq2w.roa File: ZDSta0Q4DImNBMMXZl_91vsKq2w.roa (raw, json) Hash identifier: iLMrtrozFabcIAi00NTgSSyOM5gEiH0KVPAAO2x9Xw8= Subject key identifier: 64:34:AD:6B:44:38:0C:89:8D:04:C3:17:66:5F:FD:D6:FB:0A:AB:6C Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 130D Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZDSta0Q4DImNBMMXZl_91vsKq2w.roa Signing time: Fri 01 Sep 2023 09:24:25 +0000 ROA not before: Fri 01 Sep 2023 09:24:25 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 60.245.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4877 (0x130d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:25 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6434AD6B44380C898D04C317665FFDD6FB0AAB6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b3:77:da:7f:fe:63:a5:8e:0a:bc:d8:fa:81: d6:cb:a8:3c:ce:a2:e8:f1:ed:bc:12:98:56:6c:44: 49:28:3a:36:e0:06:99:53:a5:14:f5:b5:7e:3d:60: 42:54:ca:cf:2e:9b:61:49:05:2f:38:0b:40:93:2c: b0:e9:d9:1e:15:64:08:61:e2:56:fd:af:ff:d7:12: 30:5c:75:45:75:b4:af:23:e3:15:59:6b:3e:03:d6: 7a:04:a6:bb:d1:89:db:1a:10:a0:f5:99:b7:47:d9: b8:f6:95:0d:79:e3:8f:c4:64:4a:c4:5f:7b:03:8c: 6b:65:57:ef:81:78:65:f3:6f:42:cd:11:d2:a2:e3: 52:d5:23:06:5a:cb:e6:a1:b5:a7:bb:61:8e:2b:5f: b5:ad:00:4b:56:d8:40:55:a6:42:d1:71:2d:89:54: 4d:6e:55:42:46:83:5a:cb:1a:a6:04:f8:ec:c0:8f: 41:41:2d:50:88:02:0b:0e:d8:f0:0e:8f:32:24:19: 93:30:94:8b:af:98:d4:a3:20:74:3d:2f:d8:ac:86: 68:4b:3b:64:c3:c1:7e:8d:14:d2:da:f4:0b:a0:24: e0:9f:86:77:43:fe:24:5f:e9:03:6e:a4:ab:43:75: 80:26:61:4d:e0:38:91:28:fb:d1:eb:43:b9:6b:8e: 2c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:34:AD:6B:44:38:0C:89:8D:04:C3:17:66:5F:FD:D6:FB:0A:AB:6C X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZDSta0Q4DImNBMMXZl_91vsKq2w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.245.96.0/19 Signature Algorithm: sha256WithRSAEncryption 16:b4:37:88:fd:01:78:57:ca:46:ed:c1:c2:a3:3a:e7:47:70: 4d:9f:64:cc:60:7d:9c:07:f8:45:af:b9:b3:bb:10:dd:5a:65: 05:22:30:4d:9a:ca:d5:a2:96:37:c8:ea:c4:2e:1b:8a:3b:7d: 92:29:22:2d:39:eb:76:86:ef:cf:03:c3:4f:bb:0c:39:2c:24: 03:b4:7b:ee:01:9a:34:6e:7d:53:30:37:ab:41:73:e6:1f:05: f1:1d:40:0d:39:01:f2:f9:e9:f1:d7:93:58:6c:43:68:da:df: 6f:73:d8:57:71:d6:e4:3a:35:40:7e:9d:cf:f6:8e:6c:93:45: 53:d4:66:c8:cb:5b:06:b5:cc:42:b2:37:6c:96:9a:1d:49:c4: 50:e6:2b:b1:97:1a:c2:25:2c:44:bf:bf:01:28:5d:48:63:82: 2d:fa:1d:6e:bc:75:27:b3:49:78:d5:a5:f0:9e:0c:08:06:e4: bf:c1:ff:a4:d2:01:79:41:e5:ed:8f:53:7e:54:f3:71:69:bf: 2c:cb:03:a2:55:47:3f:a2:fa:69:93:82:11:f9:30:16:71:ed: ff:14:4e:21:78:7f:67:d2:a3:09:48:57:bd:c2:d1:f9:fb:cd: 20:42:e3:b5:2d:2b:97:73:31:89:45:10:78:18:02:83:be:6d: 6f:5b:5d:b1 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEw0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MjVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY0MzRBRDZCNDQzODBD ODk4RDA0QzMxNzY2NUZGREQ2RkIwQUFCNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCUs3faf/5jpY4KvNj6gdbLqDzOoujx7bwSmFZsREkoOjbgBplT pRT1tX49YEJUys8um2FJBS84C0CTLLDp2R4VZAhh4lb9r//XEjBcdUV1tK8j4xVZ az4D1noEprvRidsaEKD1mbdH2bj2lQ1544/EZErEX3sDjGtlV++BeGXzb0LNEdKi 41LVIwZay+ahtae7YY4rX7WtAEtW2EBVpkLRcS2JVE1uVUJGg1rLGqYE+OzAj0FB LVCIAgsO2PAOjzIkGZMwlIuvmNSjIHQ9L9ishmhLO2TDwX6NFNLa9AugJOCfhndD /iRf6QNupKtDdYAmYU3gOJEo+9HrQ7lrjizjAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUZDSta0Q4DImNBMMXZl/91vsKq2wwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvWkRTdGEwUTRESW1OQk1NWFpsXzkx dnNLcTJ3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBTz1YDAN BgkqhkiG9w0BAQsFAAOCAQEAFrQ3iP0BeFfKRu3BwqM650dwTZ9kzGB9nAf4Ra+5 s7sQ3VplBSIwTZrK1aKWN8jqxC4bijt9kikiLTnrdobvzwPDT7sMOSwkA7R77gGa NG59UzA3q0Fz5h8F8R1ADTkB8vnp8deTWGxDaNrfb3PYV3HW5Do1QH6dz/aObJNF U9RmyMtbBrXMQrI3bJaaHUnEUOYrsZcawiUsRL+/AShdSGOCLfodbrx1J7NJeNWl 8J4MCAbkv8H/pNIBeUHl7Y9TflTzcWm/LMsDolVHP6L6aZOCEfkwFnHt/xROIXh/ Z9KjCUhXvcLR+fvNIELjtS0rl3MxiUUQeBgCg75tb1tdsQ== -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org