$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/eQs-JCI7gd6G0OhK7nfrwnJ1EJ0.roa File: eQs-JCI7gd6G0OhK7nfrwnJ1EJ0.roa (raw, json) Hash identifier: D4N+vOaU12Rs4BAkICO/iIl48/V+fGY7UNGySG2VoBE= Subject key identifier: 79:0B:3E:24:22:3B:81:DE:86:D0:E8:4A:EE:77:EB:C2:72:75:10:9D Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 13DA Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/eQs-JCI7gd6G0OhK7nfrwnJ1EJ0.roa Signing time: Fri 01 Sep 2023 09:25:31 +0000 ROA not before: Fri 01 Sep 2023 09:25:31 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 106.106.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5082 (0x13da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:31 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=790B3E24223B81DE86D0E84AEE77EBC27275109D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:fc:b4:3c:59:e0:7e:ea:57:5c:a9:48:e6:aa: 23:dc:68:b2:9a:8f:61:9a:d2:e0:da:7f:c8:2c:b2: 1e:6c:f4:24:09:01:41:01:c5:b1:07:2f:41:38:44: 76:37:f8:a6:9a:c6:77:72:33:84:57:0d:e5:8d:2c: 1c:50:5c:45:ad:2b:7f:71:1d:08:ed:72:b4:33:a4: ea:32:35:bc:16:86:41:b5:56:f3:27:3d:da:e5:fc: af:66:26:cc:fd:1a:bc:c7:b0:0a:1e:c6:2a:60:0e: ab:4d:45:21:e9:b1:dc:28:ff:c1:a3:37:a0:1a:14: 20:2e:55:a3:02:e4:7e:ab:ba:15:a6:f9:96:57:f1: 7c:c4:ab:37:7c:e6:4a:71:7a:31:cd:f5:72:8c:3f: 36:df:38:fd:ac:5e:ce:cc:8d:11:f4:28:d3:8e:ea: d9:5f:bc:1f:56:bb:c8:07:3d:4f:66:54:53:10:71: 12:75:65:89:11:36:b4:9b:5d:27:b9:40:3b:fe:75: 2e:50:72:73:82:ca:a5:83:11:20:a6:0a:f7:0b:da: d4:b0:aa:88:5a:a9:b5:27:62:0c:6e:0d:b7:8c:b2: 74:5f:36:9c:25:04:d9:21:fc:c2:b7:b3:ea:ce:a4: 92:9a:a7:13:3a:2e:3c:ab:27:28:64:9a:36:4a:4f: c6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0B:3E:24:22:3B:81:DE:86:D0:E8:4A:EE:77:EB:C2:72:75:10:9D X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/eQs-JCI7gd6G0OhK7nfrwnJ1EJ0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.106.197.0/24 Signature Algorithm: sha256WithRSAEncryption 85:67:1d:d8:47:4b:39:95:df:09:77:a4:d6:cb:58:3c:81:3a: 85:51:70:dc:4d:0c:24:f6:66:c1:73:54:93:17:a3:03:4a:1f: 99:52:95:4c:4e:7e:39:68:f2:73:68:8a:46:58:34:f6:5a:f4: 01:c4:cc:14:bd:e2:1d:71:35:db:c8:2f:0e:86:f2:83:24:06: 6a:c9:31:8c:36:37:3a:91:87:88:45:f6:f1:5d:c9:c6:92:1b: 16:25:a4:2a:26:6c:dd:ef:68:df:d3:ce:65:8f:17:10:18:23: 5a:17:f4:fd:87:b8:dc:5a:46:79:40:6e:98:ce:eb:9f:eb:d4: ea:8a:af:7d:62:79:48:62:dd:e6:1c:8a:d6:5e:ba:40:17:00: 02:ee:59:54:a7:69:f4:37:9e:3a:b7:e7:b8:df:df:66:b6:57: 2c:9d:41:24:9b:3f:2f:f4:b9:e0:71:89:3b:d1:0c:2f:30:bb: 51:ea:0f:92:0c:ac:e6:02:5f:99:2a:10:58:1b:ce:7e:3a:2e: 9e:4d:22:85:0b:b5:8e:4c:93:a6:92:32:3e:b4:c6:26:81:ff: eb:3d:2b:b1:85:a4:cd:42:99:85:04:70:0e:dd:65:cd:ee:4d: 5f:72:47:5a:1d:76:16:2d:60:4d:d3:05:f8:1f:9b:94:82:f7: 7a:3b:f0:17 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE9owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc5MEIzRTI0MjIzQjgx REU4NkQwRTg0QUVFNzdFQkMyNzI3NTEwOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD8/LQ8WeB+6ldcqUjmqiPcaLKaj2Ga0uDaf8gssh5s9CQJAUEB xbEHL0E4RHY3+KaaxndyM4RXDeWNLBxQXEWtK39xHQjtcrQzpOoyNbwWhkG1VvMn Pdrl/K9mJsz9GrzHsAoexipgDqtNRSHpsdwo/8GjN6AaFCAuVaMC5H6ruhWm+ZZX 8XzEqzd85kpxejHN9XKMPzbfOP2sXs7MjRH0KNOO6tlfvB9Wu8gHPU9mVFMQcRJ1 ZYkRNrSbXSe5QDv+dS5QcnOCyqWDESCmCvcL2tSwqohaqbUnYgxuDbeMsnRfNpwl BNkh/MK3s+rOpJKapxM6LjyrJyhkmjZKT8b1AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUeQs+JCI7gd6G0OhK7nfrwnJ1EJ0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZVFzLUpDSTdnZDZHME9oSzduZnJ3 bkoxRUowLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGpqxTAN BgkqhkiG9w0BAQsFAAOCAQEAhWcd2EdLOZXfCXek1stYPIE6hVFw3E0MJPZmwXNU kxejA0ofmVKVTE5+OWjyc2iKRlg09lr0AcTMFL3iHXE128gvDobygyQGaskxjDY3 OpGHiEX28V3JxpIbFiWkKiZs3e9o39POZY8XEBgjWhf0/Ye43FpGeUBumM7rn+vU 6oqvfWJ5SGLd5hyK1l66QBcAAu5ZVKdp9DeeOrfnuN/fZrZXLJ1BJJs/L/S54HGJ O9EMLzC7UeoPkgys5gJfmSoQWBvOfjounk0ihQu1jkyTppIyPrTGJoH/6z0rsYWk zUKZhQRwDt1lze5NX3JHWh12Fi1gTdMF+B+blIL3ejvwFw== -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org