$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/iySnCtXdgOlH_anVzzhtzCKiWIA.roa File: iySnCtXdgOlH_anVzzhtzCKiWIA.roa (raw, json) Hash identifier: batrMI6vL4RAl7q5MSWmFriGwa/Wt6z7xzV9aVAbrKY= Subject key identifier: 8B:24:A7:0A:D5:DD:80:E9:47:FD:A9:D5:CF:38:6D:CC:22:A2:58:80 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 13BF Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iySnCtXdgOlH_anVzzhtzCKiWIA.roa Signing time: Fri 01 Sep 2023 09:25:22 +0000 ROA not before: Fri 01 Sep 2023 09:25:22 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9674 IP address blocks: 106.107.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5055 (0x13bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:22 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8B24A70AD5DD80E947FDA9D5CF386DCC22A25880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:17:82:a0:38:3b:23:e3:28:0e:9e:9f:3b: 17:ca:4c:dd:24:d1:8b:62:61:9f:4f:39:96:6d:63: d0:99:91:d9:2f:90:88:d9:45:be:45:02:28:ce:d8: 88:e9:82:2e:4a:0e:5b:c6:e2:f9:94:cd:ca:1f:e4: 8c:2f:ba:4f:d9:1e:f2:ba:ea:b0:5b:03:d7:a7:a5: 6d:a1:df:e1:2b:e7:fb:10:4f:51:7e:66:35:e1:f1: 4e:bc:14:fb:2c:7a:ec:8a:5c:7c:b4:b9:a0:31:8a: ad:61:68:bd:8a:49:18:29:de:d0:e1:ee:7d:53:15: a4:62:13:ef:e8:94:22:49:72:55:5b:d2:eb:04:1a: 41:87:ef:98:6b:d7:d8:47:28:c0:7f:17:24:e6:c2: 5a:fa:62:43:f1:c9:f8:03:f6:af:1c:33:f7:6e:b5: 65:1d:7f:66:cf:37:c1:98:48:9e:88:bb:02:fd:e8: 04:47:7f:f7:23:bd:cc:d3:f5:18:e6:00:b0:3b:f7: 2d:09:02:21:f8:41:8a:d3:2b:9c:f0:65:12:8c:4b: 32:92:79:c7:8d:a9:ca:7a:be:2d:55:48:98:c7:9b: 49:2f:62:d1:0b:eb:6b:d1:93:5f:9e:ba:e7:d7:b4: ac:1b:f0:c3:e1:8d:ed:47:17:30:0f:9f:fe:5d:c3: a9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:24:A7:0A:D5:DD:80:E9:47:FD:A9:D5:CF:38:6D:CC:22:A2:58:80 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iySnCtXdgOlH_anVzzhtzCKiWIA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.107.0.0/16 Signature Algorithm: sha256WithRSAEncryption c1:0b:bb:62:d8:69:a0:52:8a:12:91:e5:4f:c3:26:c7:05:47: c8:a6:2b:d1:42:c6:1b:10:11:54:30:16:d0:2e:df:a4:90:f6: 74:cd:86:69:79:7d:71:18:18:88:22:45:6e:be:75:c4:a7:50: 5b:fb:5a:1a:d5:04:b8:2b:14:22:68:d8:4e:04:8d:ce:a5:c4: 3b:73:fc:99:29:90:da:46:ea:df:53:d2:56:9b:7e:24:1a:71: c3:a4:5c:46:05:53:d1:79:ae:f1:ed:84:9f:dd:1a:d9:0b:85: c5:d9:a9:1e:34:44:89:74:24:0a:7f:42:8d:97:99:fc:30:a3: 92:10:7d:be:3f:95:40:32:83:99:76:e1:f5:25:94:6e:d2:44: 4f:15:5e:92:54:5f:5b:c5:1a:96:f9:e6:36:10:9b:a7:4c:de: 44:5b:4a:54:ae:10:28:68:25:9d:20:87:16:44:9a:1f:34:4e: 2c:c3:1d:79:7d:5b:5d:d8:72:76:dc:e7:4b:90:69:59:bb:f3: da:fe:bc:2d:54:ea:66:b0:d8:d9:be:8a:93:f1:6e:b5:04:74: 64:96:53:49:21:87:e2:50:25:71:79:b0:2d:ba:b1:0b:1d:1c: d8:db:53:d1:9a:9b:c5:3d:ac:4d:2c:9a:e4:2f:9f:61:3b:47: 51:80:17:71 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICE78wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MjJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhCMjRBNzBBRDVERDgw RTk0N0ZEQTlENUNGMzg2RENDMjJBMjU4ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrRReCoDg7I+MoDp6fOxfKTN0k0YtiYZ9POZZtY9CZkdkvkIjZ Rb5FAijO2Ijpgi5KDlvG4vmUzcof5Iwvuk/ZHvK66rBbA9enpW2h3+Er5/sQT1F+ ZjXh8U68FPsseuyKXHy0uaAxiq1haL2KSRgp3tDh7n1TFaRiE+/olCJJclVb0usE GkGH75hr19hHKMB/FyTmwlr6YkPxyfgD9q8cM/dutWUdf2bPN8GYSJ6IuwL96ARH f/cjvczT9RjmALA79y0JAiH4QYrTK5zwZRKMSzKSeceNqcp6vi1VSJjHm0kvYtEL 62vRk1+euufXtKwb8MPhje1HFzAPn/5dw6lvAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUiySnCtXdgOlH/anVzzhtzCKiWIAwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvaXlTbkN0WGRnT2xIX2FuVnp6aHR6 Q0tpV0lBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAGprMA0G CSqGSIb3DQEBCwUAA4IBAQDBC7ti2GmgUooSkeVPwybHBUfIpivRQsYbEBFUMBbQ Lt+kkPZ0zYZpeX1xGBiIIkVuvnXEp1Bb+1oa1QS4KxQiaNhOBI3OpcQ7c/yZKZDa RurfU9JWm34kGnHDpFxGBVPRea7x7YSf3RrZC4XF2akeNESJdCQKf0KNl5n8MKOS EH2+P5VAMoOZduH1JZRu0kRPFV6SVF9bxRqW+eY2EJunTN5EW0pUrhAoaCWdIIcW RJofNE4swx15fVtd2HJ23OdLkGlZu/Pa/rwtVOpmsNjZvoqT8W61BHRkllNJIYfi UCVxebAturELHRzY21PRmpvFPaxNLJrkL59hO0dRgBdx -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org