$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/lb3Jqsyhe41el4NJ7qBiRUIyUNM.roa File: lb3Jqsyhe41el4NJ7qBiRUIyUNM.roa (raw, json) Hash identifier: Jm2jXUA+Vfzb3maJryvVtC1VC/5jP+FlTXdY2/T5rZY= Subject key identifier: 95:BD:C9:AA:CC:A1:7B:8D:5E:97:83:49:EE:A0:62:45:42:32:50:D3 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 133F Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/lb3Jqsyhe41el4NJ7qBiRUIyUNM.roa Signing time: Fri 01 Sep 2023 09:24:41 +0000 ROA not before: Fri 01 Sep 2023 09:24:41 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131627 IP address blocks: 106.105.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4927 (0x133f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:41 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=95BDC9AACCA17B8D5E978349EEA06245423250D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bb:15:0b:a6:9d:c3:b1:82:f1:40:ac:2d:1f: 5f:05:f8:48:f0:8d:19:40:de:d7:ab:80:7a:d0:39: e9:9b:75:92:23:47:0d:87:1b:e3:d3:3c:8a:eb:28: b3:78:83:ba:24:bb:a8:d1:ba:7c:33:68:f1:05:e9: e5:e8:58:41:fe:59:7d:52:28:da:48:b0:42:9d:77: a9:97:ca:78:5d:12:31:61:e6:63:75:53:50:0a:a0: a5:cf:2a:b9:8f:23:d7:d7:ab:8d:39:51:cc:48:94: ce:0a:66:2f:f2:92:98:7c:4d:b3:a2:4c:c1:54:ac: fd:e1:a1:3b:c3:e4:cf:91:ce:e5:b9:7b:87:36:73: 73:f3:3d:4e:21:31:ce:af:a6:9d:34:44:29:1f:91: 9c:48:56:91:0b:b8:57:82:cc:05:59:1b:dc:fe:63: 3b:fd:53:68:53:36:25:80:af:97:d6:45:05:61:29: 0f:b3:00:71:d7:63:49:31:72:98:12:04:2c:bd:f2: 7a:cc:83:d2:97:5b:f1:6e:39:eb:55:0b:b4:e5:1e: a7:4c:cc:59:3b:1b:c2:09:79:d4:b4:7e:34:04:8d: 4a:38:bb:f4:13:36:f5:c4:74:4b:5c:e8:19:5b:74: 8c:42:09:06:a7:5f:99:1f:24:57:5d:dc:4d:ff:de: 5b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BD:C9:AA:CC:A1:7B:8D:5E:97:83:49:EE:A0:62:45:42:32:50:D3 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/lb3Jqsyhe41el4NJ7qBiRUIyUNM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.104.0/22 Signature Algorithm: sha256WithRSAEncryption 66:c5:29:59:33:72:bb:ef:55:ac:06:ae:e3:3d:b0:e6:43:7e: ac:e2:af:34:de:be:e8:7b:ad:6a:b3:f0:aa:99:2d:a7:f2:7e: 45:b6:55:aa:88:71:1f:1b:7f:72:db:77:43:8a:3a:eb:07:93: 74:a7:de:96:e1:83:26:57:e3:e5:16:e0:be:dd:66:5f:40:5d: e8:8a:18:91:e6:2a:9d:f9:99:12:39:a6:76:64:79:c5:52:fc: cb:69:66:d5:86:22:7b:6c:cd:0e:c1:7b:e1:5e:ba:65:d7:ca: 00:cb:f6:15:dd:3f:c0:53:e5:51:a6:2a:24:6b:ce:a9:04:96: ca:e6:8d:e2:75:06:a0:84:85:6f:8d:53:ff:46:b4:70:63:11: 68:00:75:f4:99:aa:46:ca:6b:b9:18:5c:1c:63:e6:6a:e5:0c: 87:a6:8e:c9:35:5d:ca:ef:83:b8:f2:b7:b9:08:20:a6:d2:62: fc:5e:23:ee:59:d7:88:09:0b:6b:9c:e5:78:e7:a9:7b:44:d2: 5d:33:58:ac:40:0d:a1:16:de:a9:24:aa:de:79:8a:f8:6f:2d: 4d:18:bb:f3:87:f3:f2:b1:d1:7a:34:d0:c6:cc:3b:27:aa:26: 89:b1:16:3b:6c:12:d2:64:52:21:d0:f3:bc:31:46:df:58:56: 04:fc:f9:0e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEz8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk1QkRDOUFBQ0NBMTdC OEQ1RTk3ODM0OUVFQTA2MjQ1NDIzMjUwRDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvuxULpp3DsYLxQKwtH18F+EjwjRlA3tergHrQOembdZIjRw2H G+PTPIrrKLN4g7oku6jRunwzaPEF6eXoWEH+WX1SKNpIsEKdd6mXynhdEjFh5mN1 U1AKoKXPKrmPI9fXq405UcxIlM4KZi/ykph8TbOiTMFUrP3hoTvD5M+RzuW5e4c2 c3PzPU4hMc6vpp00RCkfkZxIVpELuFeCzAVZG9z+Yzv9U2hTNiWAr5fWRQVhKQ+z AHHXY0kxcpgSBCy98nrMg9KXW/FuOetVC7TlHqdMzFk7G8IJedS0fjQEjUo4u/QT NvXEdEtc6BlbdIxCCQanX5kfJFdd3E3/3ltfAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUlb3Jqsyhe41el4NJ7qBiRUIyUNMwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbGIzSnFzeWhlNDFlbDROSjdxQmlS VUl5VU5NLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmppaDAN BgkqhkiG9w0BAQsFAAOCAQEAZsUpWTNyu+9VrAau4z2w5kN+rOKvNN6+6HutarPw qpktp/J+RbZVqohxHxt/ctt3Q4o66weTdKfeluGDJlfj5Rbgvt1mX0Bd6IoYkeYq nfmZEjmmdmR5xVL8y2lm1YYie2zNDsF74V66ZdfKAMv2Fd0/wFPlUaYqJGvOqQSW yuaN4nUGoISFb41T/0a0cGMRaAB19JmqRspruRhcHGPmauUMh6aOyTVdyu+DuPK3 uQggptJi/F4j7lnXiAkLa5zleOepe0TSXTNYrEANoRbeqSSq3nmK+G8tTRi784fz 8rHRejTQxsw7J6omibEWO2wS0mRSIdDzvDFG31hWBPz5Dg== -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org