$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/lFdmktooD40ZwEaxFHXNHp-Ihbg.roa File: lFdmktooD40ZwEaxFHXNHp-Ihbg.roa (raw, json) Hash identifier: i1wJspTDOefSUyl0b6aAz20cbXzMx/8bXQ0khSrzm34= Subject key identifier: 94:57:66:92:DA:28:0F:8D:19:C0:46:B1:14:75:CD:1E:9F:88:85:B8 Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 0DA9 Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/lFdmktooD40ZwEaxFHXNHp-Ihbg.roa Signing time: Fri 01 Sep 2023 09:24:29 +0000 ROA not before: Fri 01 Sep 2023 09:24:29 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 192.72.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 17:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3497 (0xda9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Sep 1 09:24:29 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=94576692DA280F8D19C046B11475CD1E9F8885B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b4:6f:34:d8:77:d5:dc:18:af:1e:8e:fa:69: 3c:c2:d1:48:1d:6e:ac:d0:3b:ae:23:b0:f8:a0:a4: 7c:49:47:ab:5c:97:31:09:e3:05:1f:de:e4:5c:69: 3b:86:46:ce:8c:fc:9c:f3:dc:f5:15:26:de:bf:ce: 27:63:eb:d7:9e:82:d1:4e:dc:92:60:6c:4c:c4:4e: 05:ad:52:31:e6:c1:13:b6:0b:99:35:fb:b7:5a:24: 3a:be:97:29:b6:2a:5b:d4:7d:c5:3e:12:54:87:19: 50:a9:eb:a6:76:74:89:5d:cf:38:5a:6c:9d:18:6c: 9a:65:8c:d4:f4:26:f7:74:30:a5:87:6c:de:36:bc: d5:58:55:2e:81:d1:94:be:3e:39:39:78:24:38:10: 7b:28:cd:92:6d:91:9b:e9:8d:ce:71:4f:ba:b5:61: 93:e0:c9:84:7c:a4:c5:eb:da:7c:6d:da:cb:f3:a3: 88:df:c8:2d:c6:49:30:17:15:d4:c1:f0:b3:5b:58: 8b:f1:3e:7e:82:c4:b9:8b:08:1e:d4:02:47:d7:63: 7f:cc:c8:e7:3f:60:4e:67:6a:b5:d6:ee:d5:ec:f7: fe:62:94:7b:f2:e4:09:50:ac:9e:bd:45:83:37:89: e6:e6:72:a7:71:7f:63:61:da:4f:b4:bb:94:b0:0b: 79:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:57:66:92:DA:28:0F:8D:19:C0:46:B1:14:75:CD:1E:9F:88:85:B8 X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/lFdmktooD40ZwEaxFHXNHp-Ihbg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.252.0/24 Signature Algorithm: sha256WithRSAEncryption 38:60:93:47:cd:a5:42:88:fd:88:d0:a5:a6:04:2d:ef:c7:56: ed:c4:36:ab:1f:f8:b4:c6:33:8f:bf:b6:7c:94:17:a6:01:8a: 55:72:1d:12:a3:7c:74:81:1f:88:6d:ef:0a:cd:68:c4:c5:4f: c4:72:25:34:a6:cf:c4:a6:14:45:8b:d3:eb:8b:03:69:32:29: 71:c6:12:c2:5f:62:6a:13:9d:1e:f5:ae:0f:b3:32:49:31:89: ed:36:ab:9f:88:70:a6:f0:17:3c:8e:64:31:90:9e:33:b7:27: 0b:00:98:40:36:9b:50:90:91:4c:5b:f4:8e:f0:ef:74:23:3e: bf:7d:66:80:7c:62:19:d7:d1:84:07:41:65:a8:39:37:3c:69: 65:a1:1b:89:b3:15:b0:0d:24:f6:58:29:3a:73:0a:d3:62:cb: 00:1f:9f:59:11:4a:48:83:58:ad:63:98:62:25:2e:7b:ef:4d: 26:1e:70:58:2e:eb:f1:87:f3:33:a9:d4:d1:60:a0:04:60:8f: 4f:9e:01:a1:2d:45:c0:58:2f:70:bc:d0:da:49:5b:f0:98:a8: 15:43:36:f1:f7:fc:4a:af:c7:a8:95:b8:54:bc:4a:7f:53:ff: b1:4b:a9:45:ad:99:f4:39:bd:b7:b6:95:26:37:a3:85:eb:d1: 63:0d:59:eb -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yMzA5MDEw OTI0MjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk0NTc2NjkyREEyODBG OEQxOUMwNDZCMTE0NzVDRDFFOUY4ODg1QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9tG802HfV3BivHo76aTzC0UgdbqzQO64jsPigpHxJR6tclzEJ 4wUf3uRcaTuGRs6M/Jzz3PUVJt6/zidj69eegtFO3JJgbEzETgWtUjHmwRO2C5k1 +7daJDq+lym2KlvUfcU+ElSHGVCp66Z2dIldzzhabJ0YbJpljNT0Jvd0MKWHbN42 vNVYVS6B0ZS+Pjk5eCQ4EHsozZJtkZvpjc5xT7q1YZPgyYR8pMXr2nxt2svzo4jf yC3GSTAXFdTB8LNbWIvxPn6CxLmLCB7UAkfXY3/MyOc/YE5narXW7tXs9/5ilHvy 5AlQrJ69RYM3iebmcqdxf2Nh2k+0u5SwC3kHAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUlFdmktooD40ZwEaxFHXNHp+IhbgwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbEZkbWt0b29ENDBad0VheEZIWE5I cC1JaGJnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBI/DAN BgkqhkiG9w0BAQsFAAOCAQEAOGCTR82lQoj9iNClpgQt78dW7cQ2qx/4tMYzj7+2 fJQXpgGKVXIdEqN8dIEfiG3vCs1oxMVPxHIlNKbPxKYURYvT64sDaTIpccYSwl9i ahOdHvWuD7MySTGJ7Tarn4hwpvAXPI5kMZCeM7cnCwCYQDabUJCRTFv0jvDvdCM+ v31mgHxiGdfRhAdBZag5NzxpZaEbibMVsA0k9lgpOnMK02LLAB+fWRFKSINYrWOY YiUue+9NJh5wWC7r8YfzM6nU0WCgBGCPT54BoS1FwFgvcLzQ2klb8JioFUM28ff8 Sq/HqJW4VLxKf1P/sUupRa2Z9Dm9t7aVJjejhevRYw1Z6w== -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org