$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/cNDs9ttFHUvuPJEVEA_878wX_Fc.roa File: cNDs9ttFHUvuPJEVEA_878wX_Fc.roa (raw, json) Hash identifier: dBKJV/lobfJ7XkzOudXv0byRNUifaZ33A/iHaV0OOn8= Subject key identifier: 70:D0:EC:F6:DB:45:1D:4B:EE:3C:91:15:10:0F:FC:EF:CC:17:FC:57 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 12F0 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/cNDs9ttFHUvuPJEVEA_878wX_Fc.roa Signing time: Fri 01 Sep 2023 09:24:17 +0000 ROA not before: Fri 01 Sep 2023 09:24:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 175.182.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4848 (0x12f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=70D0ECF6DB451D4BEE3C9115100FFCEFCC17FC57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b5:39:b5:16:d1:60:81:81:73:0f:ef:d4:84: 71:fd:35:a4:6e:ca:7f:da:8e:59:32:07:b9:15:a0: 41:39:ae:46:c9:16:3d:61:88:2c:b9:8d:52:56:86: b6:e5:3b:4e:e3:db:71:ad:42:ad:d8:aa:c3:63:50: da:b6:15:28:43:d1:b3:0a:93:59:ed:60:f4:78:29: e4:f1:f6:6f:c3:01:75:ac:2e:57:26:a4:9e:d6:94: 31:80:fe:81:88:a4:1b:45:51:f6:b6:91:e6:45:46: 0f:a2:3b:c2:40:cd:f3:cf:c5:8a:d6:d1:f5:f1:c6: aa:48:7d:bb:4f:20:70:18:57:da:9c:9c:70:94:ac: 71:37:87:9b:86:07:4a:57:0c:ff:a9:ac:d2:81:55: 53:92:af:35:de:56:e9:25:cf:6c:23:9f:8f:cc:c8: 95:9b:c5:88:e6:2b:77:db:a5:32:bd:ec:bc:0b:0d: 27:dc:30:53:cb:ef:17:bb:5c:dc:b7:aa:99:56:b6: 85:9d:58:b8:ba:9d:59:b4:ea:bb:b6:19:3e:26:5a: 3c:1b:ee:58:07:b8:96:92:36:ac:ff:8a:57:f6:5e: 92:b8:0c:96:e0:9f:98:85:cc:91:1e:90:2f:fd:ed: 4c:42:ff:44:70:a6:7a:7d:ac:3f:fc:39:ad:51:b9: 51:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D0:EC:F6:DB:45:1D:4B:EE:3C:91:15:10:0F:FC:EF:CC:17:FC:57 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/cNDs9ttFHUvuPJEVEA_878wX_Fc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.182.77.0/24 Signature Algorithm: sha256WithRSAEncryption 66:1a:f3:a0:b7:e6:50:8d:e4:29:ce:2a:57:de:5d:73:ee:ab: 79:70:a6:f6:21:68:a3:92:77:70:6b:a7:e8:59:90:c3:34:7a: 2b:06:97:b7:7d:3b:cf:f5:b5:3a:d2:1c:1a:61:43:e5:67:14: 0e:aa:3e:76:b1:5c:16:bc:e2:40:08:af:ae:4f:53:ab:d8:0f: d5:1c:ff:c2:9b:5f:7f:2a:d2:25:c4:2f:f6:fd:25:7d:10:6b: 43:64:4a:8f:31:6a:33:0a:50:bb:4f:e5:8a:6d:80:8d:45:8a: 7d:ef:32:99:fe:c5:19:7b:57:6b:18:82:3e:be:8e:d0:73:9c: 59:8e:d5:fb:34:8d:78:b5:f5:ec:b0:9a:a0:6f:5d:9a:93:64: 25:c0:b0:d7:b3:32:3b:00:39:0f:64:f5:81:d3:4c:1b:1f:be: b0:ea:e6:c8:e0:1a:28:f4:b7:a2:2c:8a:27:5b:f0:27:8c:16: ec:63:ba:11:68:56:47:a1:51:8b:d0:b8:3c:0f:3c:b4:b6:bc: 1c:23:f2:49:af:bb:a6:76:a2:c8:b0:e8:be:9c:a8:05:1e:e0: 3f:3d:87:ac:27:d4:14:5f:f9:70:24:a2:0d:ac:9d:8d:66:e7: d9:2c:27:c6:5d:29:85:07:79:86:dc:4b:e5:47:80:f5:c7:0e: c8:84:69:60 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEvAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDcwRDBFQ0Y2REI0NTFE NEJFRTNDOTExNTEwMEZGQ0VGQ0MxN0ZDNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwtTm1FtFggYFzD+/UhHH9NaRuyn/ajlkyB7kVoEE5rkbJFj1h iCy5jVJWhrblO07j23GtQq3YqsNjUNq2FShD0bMKk1ntYPR4KeTx9m/DAXWsLlcm pJ7WlDGA/oGIpBtFUfa2keZFRg+iO8JAzfPPxYrW0fXxxqpIfbtPIHAYV9qcnHCU rHE3h5uGB0pXDP+prNKBVVOSrzXeVuklz2wjn4/MyJWbxYjmK3fbpTK97LwLDSfc MFPL7xe7XNy3qplWtoWdWLi6nVm06ru2GT4mWjwb7lgHuJaSNqz/ilf2XpK4DJbg n5iFzJEekC/97UxC/0Rwpnp9rD/8Oa1RuVF3AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUcNDs9ttFHUvuPJEVEA/878wX/FcwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvY05Eczl0dEZIVXZ1UEpFVkVBXzg3 OHdYX0ZjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAK+2TTAN BgkqhkiG9w0BAQsFAAOCAQEAZhrzoLfmUI3kKc4qV95dc+6reXCm9iFoo5J3cGun 6FmQwzR6KwaXt307z/W1OtIcGmFD5WcUDqo+drFcFrziQAivrk9Tq9gP1Rz/wptf fyrSJcQv9v0lfRBrQ2RKjzFqMwpQu0/lim2AjUWKfe8ymf7FGXtXaxiCPr6O0HOc WY7V+zSNeLX17LCaoG9dmpNkJcCw17MyOwA5D2T1gdNMGx++sOrmyOAaKPS3oiyK J1vwJ4wW7GO6EWhWR6FRi9C4PA88tLa8HCPySa+7pnaiyLDovpyoBR7gPz2HrCfU FF/5cCSiDaydjWbn2Swnxl0phQd5htxL5UeA9ccOyIRpYA== -----END CERTIFICATE-----Generated at Sat Jun 1 22:20:18 2024 by rpki-client on console-fra.rpki-client.org