$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/hoWIfxBeu0x_m7vrJoCgpLsr7D4.roa File: hoWIfxBeu0x_m7vrJoCgpLsr7D4.roa (raw, json) Hash identifier: 3fHAHsyc2w+M+HO1/LNJ+6TQxXbfcNbLg9MujhkWRCM= Subject key identifier: 86:85:88:7F:10:5E:BB:4C:7F:9B:BB:EB:26:80:A0:A4:BB:2B:EC:3E Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1323 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hoWIfxBeu0x_m7vrJoCgpLsr7D4.roa Signing time: Fri 01 Sep 2023 09:24:31 +0000 ROA not before: Fri 01 Sep 2023 09:24:31 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18049 IP address blocks: 106.105.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4899 (0x1323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:31 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8685887F105EBB4C7F9BBBEB2680A0A4BB2BEC3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:15:1e:28:16:a6:b3:04:6b:c9:bf:ca:af:be: 90:5a:22:93:56:d4:a0:8f:d7:9c:42:b5:32:48:c3: e9:c6:fe:8b:45:c4:49:ba:f1:db:ad:95:e8:3d:54: 99:b2:01:70:97:84:37:3f:de:71:2e:17:21:c9:0a: bf:11:08:08:20:99:a5:a6:72:e2:6e:13:c6:4e:6c: 66:33:0e:de:58:97:36:df:22:49:a2:38:70:1d:31: 2c:57:57:92:93:d2:a0:54:e6:b9:81:82:82:4f:fb: 2b:e2:21:46:16:23:46:e6:30:f7:a4:25:b5:0b:e1: cd:70:b6:58:b6:c3:c1:66:a7:11:40:36:e7:0d:8a: e3:35:4d:5f:b6:05:bb:1b:78:59:39:3e:4e:67:9d: b0:a5:02:10:e7:e5:1d:0b:84:4d:dd:71:37:3c:53: 6b:ad:a8:fc:96:e1:71:a2:0b:4b:63:9f:dc:6a:59: 23:8d:01:58:9e:ee:34:f7:95:3a:61:55:2d:d4:c9: 44:bb:c4:14:bb:d5:b4:6a:fa:0e:2f:90:a5:7f:38: b9:d7:09:20:dc:84:4e:a8:64:bb:30:ef:63:2f:04: 5b:c8:21:4e:32:f3:e0:af:be:4b:fb:cc:b5:d0:c0: 27:bb:bd:cd:d3:d0:01:c5:ee:51:ae:23:a9:71:10: af:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:85:88:7F:10:5E:BB:4C:7F:9B:BB:EB:26:80:A0:A4:BB:2B:EC:3E X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hoWIfxBeu0x_m7vrJoCgpLsr7D4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.64.0/19 Signature Algorithm: sha256WithRSAEncryption 21:4f:4c:e9:c2:82:1c:32:f3:ca:62:b4:58:a9:6a:d7:3c:5a: cb:cf:73:9d:fe:62:4b:a8:ac:79:57:5a:be:73:29:53:83:f2: da:39:0f:93:73:5c:6b:45:2d:7f:e7:33:fb:d5:ce:54:5e:f7: 96:51:c4:d6:8e:6e:df:71:2b:b2:2f:db:7b:90:e5:ee:fb:1d: ef:ba:c9:dd:cb:c9:94:7e:a4:12:d5:e2:e1:ce:97:34:a9:f1: 99:d7:43:70:62:7c:a1:6d:65:eb:cd:f4:62:54:82:0a:26:6c: b0:9d:b8:82:5b:f6:ee:18:d1:c3:8e:b1:be:06:37:d0:fd:75: 45:1a:73:ab:35:cd:60:9e:53:6e:22:9c:9a:ad:de:b9:d6:68: 31:10:8a:47:95:98:8a:07:6c:59:28:69:26:51:40:13:46:cf: a8:d9:d1:42:df:6e:44:b7:93:06:f4:73:30:7b:b9:17:3a:a3: fa:78:a8:16:23:d3:6b:37:2a:bd:1a:cc:d6:e8:54:cd:e9:4c: a9:fe:f1:72:d9:77:6a:39:7d:e3:2e:10:59:37:52:02:ce:ef: 5f:fe:2c:4e:b7:17:53:69:15:48:df:26:fe:8e:37:4a:7f:aa: 56:25:3d:b6:ac:d8:18:11:31:9d:74:c2:dd:23:3d:75:04:a0: a4:dd:bc:db -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEyMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg2ODU4ODdGMTA1RUJC NEM3RjlCQkJFQjI2ODBBMEE0QkIyQkVDM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcFR4oFqazBGvJv8qvvpBaIpNW1KCP15xCtTJIw+nG/otFxEm6 8dutleg9VJmyAXCXhDc/3nEuFyHJCr8RCAggmaWmcuJuE8ZObGYzDt5YlzbfIkmi OHAdMSxXV5KT0qBU5rmBgoJP+yviIUYWI0bmMPekJbUL4c1wtli2w8FmpxFANucN iuM1TV+2BbsbeFk5Pk5nnbClAhDn5R0LhE3dcTc8U2utqPyW4XGiC0tjn9xqWSON AVie7jT3lTphVS3UyUS7xBS71bRq+g4vkKV/OLnXCSDchE6oZLsw72MvBFvIIU4y 8+Cvvkv7zLXQwCe7vc3T0AHF7lGuI6lxEK9lAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUhoWIfxBeu0x/m7vrJoCgpLsr7D4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvaG9XSWZ4QmV1MHhfbTd2ckpvQ2dw THNyN0Q0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBWppQDAN BgkqhkiG9w0BAQsFAAOCAQEAIU9M6cKCHDLzymK0WKlq1zxay89znf5iS6iseVda vnMpU4Py2jkPk3Nca0Utf+cz+9XOVF73llHE1o5u33Ersi/be5Dl7vsd77rJ3cvJ lH6kEtXi4c6XNKnxmddDcGJ8oW1l6830YlSCCiZssJ24glv27hjRw46xvgY30P11 RRpzqzXNYJ5TbiKcmq3eudZoMRCKR5WYigdsWShpJlFAE0bPqNnRQt9uRLeTBvRz MHu5Fzqj+nioFiPTazcqvRrM1uhUzelMqf7xctl3ajl94y4QWTdSAs7vX/4sTrcX U2kVSN8m/o43Sn+qViU9tqzYGBExnXTC3SM9dQSgpN282w== -----END CERTIFICATE-----Generated at Sun Jun 2 07:14:23 2024 by rpki-client on console-fra.rpki-client.org