$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/chuzTnM3f3nQnyV9p1JMi9jvO_0.roa File: chuzTnM3f3nQnyV9p1JMi9jvO_0.roa (raw, json) Hash identifier: f8QAuIWcq53ZYyfJgUD6TkX2EU90UXNlfjRzjrpBU7A= Subject key identifier: 72:1B:B3:4E:73:37:7F:79:D0:9F:25:7D:A7:52:4C:8B:D8:EF:3B:FD Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1318 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/chuzTnM3f3nQnyV9p1JMi9jvO_0.roa Signing time: Fri 01 Sep 2023 09:24:28 +0000 ROA not before: Fri 01 Sep 2023 09:24:28 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 122.147.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4888 (0x1318) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:28 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=721BB34E73377F79D09F257DA7524C8BD8EF3BFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ec:ff:a1:db:cb:4e:ab:b0:02:af:86:a0:86: f2:87:19:48:c4:1d:fc:53:f6:d4:4a:58:75:c6:4a: fc:1c:e7:ee:cb:32:77:bf:fb:81:40:7b:a4:8d:81: 9e:fc:03:34:7d:6b:65:70:00:ea:d7:e4:01:af:9a: 7f:a3:ce:aa:8e:19:ff:87:28:5e:4c:f9:10:6d:86: 11:09:c9:00:79:57:2c:15:c8:db:72:51:d7:09:20: 38:0a:3b:14:1e:7f:59:76:af:a9:0b:ac:71:b5:d2: 3d:5a:72:35:e1:89:25:0d:61:e7:9a:21:14:b8:26: 2f:47:fb:ac:fd:8b:c7:be:5b:9e:b7:23:43:aa:77: 44:a4:18:34:0c:0e:33:ba:3f:fc:fd:bd:8d:8b:d9: a4:d8:fa:dc:68:eb:01:b2:b1:9a:f8:11:3d:03:7b: dc:7e:37:06:25:17:d0:d6:66:54:01:4c:b1:36:14: 2e:4d:38:06:ef:b8:c5:6b:d9:13:c7:fb:c7:c6:ff: ac:b6:43:6d:4a:ba:59:92:35:e8:ab:18:21:ea:2c: f0:ba:9a:72:24:01:39:bf:1e:30:cc:d8:79:57:02: 68:13:ab:ea:a5:a6:a4:81:e9:d0:d8:cb:5b:8d:88: 7b:07:5a:a4:ec:7d:64:17:f9:46:8c:f0:d0:ed:8b: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1B:B3:4E:73:37:7F:79:D0:9F:25:7D:A7:52:4C:8B:D8:EF:3B:FD X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/chuzTnM3f3nQnyV9p1JMi9jvO_0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.147.32.0/19 Signature Algorithm: sha256WithRSAEncryption 7c:7f:31:df:7b:11:11:4f:07:d5:16:7b:9c:a0:3c:b4:da:d9: 89:86:b0:0d:ca:24:12:24:42:3f:e5:59:cf:b4:ea:00:6a:5b: 41:c4:7d:de:3f:9d:da:be:66:01:b4:8c:a3:01:a2:f8:2d:f0: bb:6c:bb:91:dd:cd:ab:66:41:43:25:f1:1b:d0:b0:cf:cc:01: df:87:c4:20:32:41:6c:4c:3e:3c:de:98:bd:e0:ba:5a:d9:ff: 1f:8c:b1:32:03:73:a6:20:b8:02:f3:7f:76:09:d9:53:ed:d6: a4:66:b1:fe:b4:d0:cb:d0:67:7b:f1:ad:08:ef:e9:ca:1a:61: 74:4a:a1:52:48:66:4e:00:08:c0:25:55:4b:4b:1a:a0:02:ff: 07:e8:3b:80:ef:46:eb:70:87:fe:5c:c1:9e:0e:6c:13:62:1a: 9c:8e:f5:d1:7c:ab:10:7b:c1:95:f1:93:07:79:19:70:e1:26: f7:3d:94:e7:1e:fc:bf:5b:d8:26:8d:5e:19:89:d2:95:c5:f5: cf:04:83:d2:a9:8b:9d:84:11:cf:aa:cb:c1:c4:f5:8d:9e:e8: b3:03:aa:aa:6a:4c:73:53:ae:2b:b0:16:63:05:71:11:dd:2c: 8d:af:55:b0:36:37:5c:f1:54:8b:70:c8:f8:1c:bd:4d:29:fc: ed:b1:01:52 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICExgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MjhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDcyMUJCMzRFNzMzNzdG NzlEMDlGMjU3REE3NTI0QzhCRDhFRjNCRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCj7P+h28tOq7ACr4aghvKHGUjEHfxT9tRKWHXGSvwc5+7LMne/ +4FAe6SNgZ78AzR9a2VwAOrX5AGvmn+jzqqOGf+HKF5M+RBthhEJyQB5VywVyNty UdcJIDgKOxQef1l2r6kLrHG10j1acjXhiSUNYeeaIRS4Ji9H+6z9i8e+W563I0Oq d0SkGDQMDjO6P/z9vY2L2aTY+txo6wGysZr4ET0De9x+NwYlF9DWZlQBTLE2FC5N OAbvuMVr2RPH+8fG/6y2Q21KulmSNeirGCHqLPC6mnIkATm/HjDM2HlXAmgTq+ql pqSB6dDYy1uNiHsHWqTsfWQX+UaM8NDtiwdxAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUchuzTnM3f3nQnyV9p1JMi9jvO/0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvY2h1elRuTTNmM25RbnlWOXAxSk1p OWp2T18wLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXqTIDAN BgkqhkiG9w0BAQsFAAOCAQEAfH8x33sREU8H1RZ7nKA8tNrZiYawDcokEiRCP+VZ z7TqAGpbQcR93j+d2r5mAbSMowGi+C3wu2y7kd3Nq2ZBQyXxG9Cwz8wB34fEIDJB bEw+PN6YveC6Wtn/H4yxMgNzpiC4AvN/dgnZU+3WpGax/rTQy9Bne/GtCO/pyhph dEqhUkhmTgAIwCVVS0saoAL/B+g7gO9G63CH/lzBng5sE2IanI710XyrEHvBlfGT B3kZcOEm9z2U5x78v1vYJo1eGYnSlcX1zwSD0qmLnYQRz6rLwcT1jZ7oswOqqmpM c1OuK7AWYwVxEd0sja9VsDY3XPFUi3DI+By9TSn87bEBUg== -----END CERTIFICATE-----Generated at Sun Jun 2 09:37:18 2024 by rpki-client on console-ams.rpki-client.org