$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/khT3rMTz6yTp680fP-fSYFQsj2o.roa File: khT3rMTz6yTp680fP-fSYFQsj2o.roa (raw, json) Hash identifier: csZ04Ej2XA1ufofqhyd6pngNWi5FCrfB047WG5hE1Jc= Subject key identifier: 92:14:F7:AC:C4:F3:EB:24:E9:EB:CD:1F:3F:E7:D2:60:54:2C:8F:6A Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 12EC Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/khT3rMTz6yTp680fP-fSYFQsj2o.roa Signing time: Fri 01 Sep 2023 09:24:16 +0000 ROA not before: Fri 01 Sep 2023 09:24:16 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 122.146.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4844 (0x12ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:16 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9214F7ACC4F3EB24E9EBCD1F3FE7D260542C8F6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:16:2c:36:73:22:ef:06:2a:03:51:70:d8: 81:ad:40:72:4b:16:ba:33:66:cf:dd:96:72:42:4c: d4:5e:f0:c9:53:2e:d7:12:f5:5f:07:ea:c1:82:9c: 07:d1:9b:5c:5b:3b:17:1e:f1:4f:c5:97:0f:7e:6c: 69:5d:da:ca:95:fe:5f:83:e8:32:3a:26:3c:aa:23: 03:16:13:99:15:94:9e:2d:28:24:56:93:5d:6e:99: 55:90:09:c2:ef:60:a6:a5:5b:b8:02:9a:65:b4:65: a2:74:8e:5d:3b:06:da:fc:74:1c:b3:3f:a2:92:2f: 9b:15:14:c0:e1:3f:29:0c:54:c7:8c:86:7b:31:06: 0d:e6:24:79:85:2b:11:36:54:45:a1:90:5d:fa:a1: 4b:68:a0:0c:61:ec:27:be:5c:8f:73:f5:60:6c:f9: 24:dc:a1:71:8c:01:8f:c7:92:c1:ed:27:e3:d9:ab: 00:8e:69:b2:5e:75:d8:e1:99:f9:c5:00:ce:01:e9: 55:17:fb:4e:d7:42:0b:0c:7b:74:a0:f7:4e:77:95: 48:a2:8b:a8:b1:e7:8b:10:16:3d:cc:fa:7b:77:48: 28:c4:8b:a1:07:75:fb:ff:48:4e:76:61:f1:6c:69: b5:64:8f:32:ed:27:08:32:a8:4e:cd:7a:7d:e6:5f: 9b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:14:F7:AC:C4:F3:EB:24:E9:EB:CD:1F:3F:E7:D2:60:54:2C:8F:6A X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/khT3rMTz6yTp680fP-fSYFQsj2o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.146.104.0/22 Signature Algorithm: sha256WithRSAEncryption 12:bd:c8:1e:2c:ec:72:1b:61:ce:8e:dc:e2:be:49:58:ea:60: d1:b8:c7:e3:66:57:2e:81:c9:61:49:69:d4:4d:8c:9a:41:c3: 7d:c0:ef:d2:df:f8:19:bf:d2:56:9b:fe:2c:ab:bc:43:e5:52: f8:46:fe:1e:de:f4:47:12:dd:17:a0:a1:23:7a:88:d2:07:e6: ff:81:83:ef:dd:4e:c1:ac:a3:d9:06:f9:23:44:de:d5:b9:b0: 0b:20:20:e3:54:00:ba:28:1b:52:ba:fb:8d:2a:d3:18:ea:66: ce:03:15:a6:34:ee:b1:bc:59:64:d4:52:2b:27:d8:d2:9e:7d: 0a:e4:cf:fd:c4:db:e5:a2:bc:e8:25:69:1e:2f:4b:24:49:4b: 82:dd:e3:3a:38:8c:e9:10:b3:95:e0:46:ff:1e:b7:b6:66:60: c1:2c:7e:35:b8:fe:d5:2a:7c:53:28:45:7b:db:31:2d:9d:eb: da:5c:e2:24:99:b2:c6:ca:c0:cb:d4:51:ed:72:a6:c3:45:e2: 35:51:e9:6e:34:99:aa:df:dc:d3:9d:18:af:97:a0:e1:58:3f: 40:ae:69:28:6f:aa:bd:1b:e2:56:3f:e2:e8:70:ed:a1:93:fa: 3b:79:5c:32:10:29:96:25:bb:1d:71:24:67:be:89:64:8d:a2: 02:ca:62:49 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEuwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDkyMTRGN0FDQzRGM0VC MjRFOUVCQ0QxRjNGRTdEMjYwNTQyQzhGNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8oBYsNnMi7wYqA1Fw2IGtQHJLFrozZs/dlnJCTNRe8MlTLtcS 9V8H6sGCnAfRm1xbOxce8U/Flw9+bGld2sqV/l+D6DI6JjyqIwMWE5kVlJ4tKCRW k11umVWQCcLvYKalW7gCmmW0ZaJ0jl07Btr8dByzP6KSL5sVFMDhPykMVMeMhnsx Bg3mJHmFKxE2VEWhkF36oUtooAxh7Ce+XI9z9WBs+STcoXGMAY/HksHtJ+PZqwCO abJeddjhmfnFAM4B6VUX+07XQgsMe3Sg9053lUiii6ix54sQFj3M+nt3SCjEi6EH dfv/SE52YfFsabVkjzLtJwgyqE7Nen3mX5vPAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUkhT3rMTz6yTp680fP+fSYFQsj2owHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMva2hUM3JNVHo2eVRwNjgwZlAtZlNZ RlFzajJvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnqSaDAN BgkqhkiG9w0BAQsFAAOCAQEAEr3IHizschthzo7c4r5JWOpg0bjH42ZXLoHJYUlp 1E2MmkHDfcDv0t/4Gb/SVpv+LKu8Q+VS+Eb+Ht70RxLdF6ChI3qI0gfm/4GD791O wayj2Qb5I0Te1bmwCyAg41QAuigbUrr7jSrTGOpmzgMVpjTusbxZZNRSKyfY0p59 CuTP/cTb5aK86CVpHi9LJElLgt3jOjiM6RCzleBG/x63tmZgwSx+Nbj+1Sp8UyhF e9sxLZ3r2lziJJmyxsrAy9RR7XKmw0XiNVHpbjSZqt/c050Yr5eg4Vg/QK5pKG+q vRviVj/i6HDtoZP6O3lcMhApliW7HXEkZ76JZI2iAspiSQ== -----END CERTIFICATE-----Generated at Sat Jun 1 22:20:18 2024 by rpki-client on console-fra.rpki-client.org