$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/d3SLtTlRIjJxXi0pzyMGjHGYhd4.roa File: d3SLtTlRIjJxXi0pzyMGjHGYhd4.roa (raw, json) Hash identifier: yZz9Mb+TkSluTnBXTmESiomeWFz95BFtwLdS494RHPQ= Subject key identifier: 77:74:8B:B5:39:51:22:32:71:5E:2D:29:CF:23:06:8C:71:98:85:DE Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1316 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/d3SLtTlRIjJxXi0pzyMGjHGYhd4.roa Signing time: Fri 01 Sep 2023 09:24:28 +0000 ROA not before: Fri 01 Sep 2023 09:24:28 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131584 IP address blocks: 106.105.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4886 (0x1316) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:28 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=77748BB539512232715E2D29CF23068C719885DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:52:d8:60:21:25:01:76:00:ce:09:8f:85:01: 37:00:9f:f5:9e:49:4f:c7:d6:e3:cf:d9:79:f1:ea: af:d0:f1:6d:68:10:62:ce:99:80:45:05:98:3f:04: a1:25:de:73:39:fd:5c:c1:10:02:97:a8:4d:3e:92: e0:a2:5e:57:ff:56:ab:d7:8b:34:b6:f9:cf:ba:82: 73:eb:a1:42:f2:71:11:f1:54:cf:83:a3:bb:24:99: 18:59:f3:c7:95:0b:2c:6c:21:10:b7:fe:3b:83:20: 51:96:ee:52:ee:0f:b5:0b:9e:32:1f:e1:d5:56:f0: ac:b1:4e:87:5a:8c:af:61:fb:40:2a:8c:b1:cb:33: cc:b7:82:91:e3:65:34:6e:26:b5:31:f7:a1:38:e4: 67:14:46:b7:50:53:79:d2:f5:f5:c9:67:b0:55:c8: 6d:78:2e:56:9e:91:29:16:73:b2:09:1a:81:3c:f3: e5:c8:c5:cf:b8:01:00:e2:26:f4:08:17:b5:73:d8: 8e:35:26:b9:08:e1:a9:1e:67:6d:05:37:42:e3:f1: c1:e4:c0:3c:90:7e:a2:07:fa:ea:fc:d6:6a:e7:01: 83:67:17:4c:64:9c:db:1a:75:46:22:26:6d:c4:05: 81:cd:2d:9f:8c:94:cb:aa:57:b1:02:b7:a5:29:37: 65:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:74:8B:B5:39:51:22:32:71:5E:2D:29:CF:23:06:8C:71:98:85:DE X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/d3SLtTlRIjJxXi0pzyMGjHGYhd4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.183.0/24 Signature Algorithm: sha256WithRSAEncryption 67:77:46:40:e8:5a:52:df:8f:31:0e:ad:c7:6c:42:28:85:1d: 3d:0b:58:e8:16:1c:61:bb:ce:84:ac:a5:5e:b6:ea:e4:42:56: 02:c0:0f:dc:8f:d2:6d:5c:e3:b4:f1:de:ab:76:32:90:2a:41: 68:3d:13:e5:7d:5a:c8:01:e9:8f:ba:99:3f:6b:ef:19:7e:f9: 60:df:33:16:fb:c9:32:a6:80:84:09:32:e1:89:57:4f:84:32: d8:df:39:18:7b:5c:96:15:af:ec:0e:36:4f:b9:21:da:57:01: c7:d7:0a:a7:69:ab:09:e6:5d:fe:41:ce:40:66:f8:56:92:86: 07:ee:53:83:66:d5:3e:2b:5a:63:d1:64:16:90:6c:2c:3f:b2: e3:c7:04:d3:3f:c9:e2:32:87:40:36:91:96:00:6e:33:8a:84: 4f:5d:3e:58:c6:30:70:b4:42:43:95:d9:c7:58:a1:75:7a:bf: 7c:36:c8:78:60:27:d7:11:dc:30:38:64:4c:b2:1c:20:98:36: ad:d8:19:a1:0f:cf:d8:e4:86:4d:25:eb:cc:64:06:3e:92:ed: d8:2d:31:62:61:72:e1:e6:78:d6:22:8d:fc:dd:80:4b:78:08: 4e:11:f0:67:ea:72:e5:34:cd:ba:f4:66:4d:87:36:5c:8f:cf: 24:23:d1:34 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICExYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MjhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc3NzQ4QkI1Mzk1MTIy MzI3MTVFMkQyOUNGMjMwNjhDNzE5ODg1REUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkUthgISUBdgDOCY+FATcAn/WeSU/H1uPP2Xnx6q/Q8W1oEGLO mYBFBZg/BKEl3nM5/VzBEAKXqE0+kuCiXlf/VqvXizS2+c+6gnProULycRHxVM+D o7skmRhZ88eVCyxsIRC3/juDIFGW7lLuD7ULnjIf4dVW8KyxTodajK9h+0AqjLHL M8y3gpHjZTRuJrUx96E45GcURrdQU3nS9fXJZ7BVyG14LlaekSkWc7IJGoE88+XI xc+4AQDiJvQIF7Vz2I41JrkI4akeZ20FN0Lj8cHkwDyQfqIH+ur81mrnAYNnF0xk nNsadUYiJm3EBYHNLZ+MlMuqV7ECt6UpN2XbAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUd3SLtTlRIjJxXi0pzyMGjHGYhd4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZDNTTHRUbFJJakp4WGkwcHp5TUdq SEdZaGQ0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGpptzAN BgkqhkiG9w0BAQsFAAOCAQEAZ3dGQOhaUt+PMQ6tx2xCKIUdPQtY6BYcYbvOhKyl Xrbq5EJWAsAP3I/SbVzjtPHeq3YykCpBaD0T5X1ayAHpj7qZP2vvGX75YN8zFvvJ MqaAhAky4YlXT4Qy2N85GHtclhWv7A42T7kh2lcBx9cKp2mrCeZd/kHOQGb4VpKG B+5Tg2bVPitaY9FkFpBsLD+y48cE0z/J4jKHQDaRlgBuM4qET10+WMYwcLRCQ5XZ x1ihdXq/fDbIeGAn1xHcMDhkTLIcIJg2rdgZoQ/P2OSGTSXrzGQGPpLt2C0xYmFy 4eZ41iKN/N2AS3gIThHwZ+py5TTNuvRmTYc2XI/PJCPRNA== -----END CERTIFICATE-----Generated at Sat Jun 1 23:25:38 2024 by rpki-client on console-ams.rpki-client.org