$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ly7WjdkATJsgMO_OEFb6tSMFUS8.roa File: ly7WjdkATJsgMO_OEFb6tSMFUS8.roa (raw, json) Hash identifier: QHU4alT9EbPsaacfkcwuoOmVnkr3k4OnKA65xJd2N3g= Subject key identifier: 97:2E:D6:8D:D9:00:4C:9B:20:30:EF:CE:10:56:FA:B5:23:05:51:2F Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 13EB Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ly7WjdkATJsgMO_OEFb6tSMFUS8.roa Signing time: Fri 01 Sep 2023 09:25:36 +0000 ROA not before: Fri 01 Sep 2023 09:25:36 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 175.182.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5099 (0x13eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:36 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=972ED68DD9004C9B2030EFCE1056FAB52305512F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8a:d1:06:bd:7a:92:c8:ec:5f:89:71:98:0d: 8c:9f:c0:f3:03:0e:53:4f:29:9a:78:cf:18:b1:7a: 13:3e:c9:ac:e0:6d:ff:6c:d9:8f:ef:d2:d3:5a:99: ea:8b:e0:f2:33:6b:fd:24:6c:5a:e2:c2:10:b7:f5: 23:cb:60:bd:a4:a1:4a:ce:6c:e7:50:49:75:b6:05: 79:2e:30:b5:53:80:fa:d7:ba:ef:37:6c:d3:a9:62: 1e:0e:1a:8e:13:d4:aa:ad:bd:c3:f3:a5:e8:fe:94: 36:d2:12:1d:80:69:9e:35:e9:bb:20:dd:9b:fd:8a: 07:e8:b0:e6:83:0e:86:27:bb:cc:05:e8:f6:60:6e: ca:96:f2:e8:09:ad:31:71:7d:dc:58:a7:2f:6a:08: 3a:cb:2d:fd:8f:ba:82:97:93:ea:62:61:f4:68:6b: 2d:d8:fe:99:3a:a7:fc:3f:f6:f7:18:20:fd:42:6e: 68:51:8e:b9:b4:9c:6c:b6:99:95:19:37:94:52:0d: 1f:7a:10:5e:9c:74:28:04:cc:ea:43:e2:a6:20:8d: 17:dd:9e:b4:e0:28:c4:b8:f4:81:08:2a:23:e3:4e: 69:8b:14:0b:5c:d5:b0:23:11:7f:40:ed:1d:26:ee: bc:e5:43:3d:f3:3c:f1:d7:20:1c:57:e7:d6:40:4c: d6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2E:D6:8D:D9:00:4C:9B:20:30:EF:CE:10:56:FA:B5:23:05:51:2F X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ly7WjdkATJsgMO_OEFb6tSMFUS8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.182.0.0/16 Signature Algorithm: sha256WithRSAEncryption 91:0c:86:a6:e5:8c:13:df:99:8c:b3:44:e4:e7:e1:69:dc:37: 84:f8:25:20:22:38:75:b7:a1:c6:02:c1:81:e3:00:4b:6b:19: 93:82:11:fa:74:0d:74:15:f3:64:84:34:2b:e6:41:b4:c9:ac: 83:8a:92:98:e0:bd:29:10:fb:1a:a4:e0:f2:ed:08:88:da:55: e7:12:2b:4a:9a:10:c5:c9:48:1c:b1:b6:2d:34:18:e2:f2:c7: ac:37:48:ef:ee:ed:69:7c:c2:ed:1f:79:00:3d:5b:78:cc:35: b9:fb:f7:2d:91:25:31:33:cc:c7:34:81:50:ac:7f:78:53:8a: cc:9f:90:e2:83:39:32:c6:6b:03:32:de:88:bb:b3:cd:18:80: b0:bc:b7:54:32:25:31:2f:17:b4:e6:c6:18:65:75:a1:9a:f4: 33:66:01:c7:e4:f4:8c:c8:6a:dc:ed:79:68:b6:57:6e:44:e6: 12:cc:ea:bc:6a:c4:aa:00:b0:d9:eb:f0:0d:e1:99:0c:ce:eb: a1:0b:9e:0e:f2:b8:f1:b2:81:28:73:49:04:eb:a9:98:ca:dc: e9:9c:c1:35:ea:84:7a:fd:1b:5c:e6:84:4e:62:0a:ad:37:0a: af:c2:89:71:3a:67:7b:2b:a5:19:72:e9:5c:fc:2b:0c:39:50: 0e:39:52:2f -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICE+swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MzZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk3MkVENjhERDkwMDRD OUIyMDMwRUZDRTEwNTZGQUI1MjMwNTUxMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0itEGvXqSyOxfiXGYDYyfwPMDDlNPKZp4zxixehM+yazgbf9s 2Y/v0tNameqL4PIza/0kbFriwhC39SPLYL2koUrObOdQSXW2BXkuMLVTgPrXuu83 bNOpYh4OGo4T1KqtvcPzpej+lDbSEh2AaZ416bsg3Zv9igfosOaDDoYnu8wF6PZg bsqW8ugJrTFxfdxYpy9qCDrLLf2PuoKXk+piYfRoay3Y/pk6p/w/9vcYIP1CbmhR jrm0nGy2mZUZN5RSDR96EF6cdCgEzOpD4qYgjRfdnrTgKMS49IEIKiPjTmmLFAtc 1bAjEX9A7R0m7rzlQz3zPPHXIBxX59ZATNZjAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUly7WjdkATJsgMO/OEFb6tSMFUS8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbHk3V2pka0FUSnNnTU9fT0VGYjZ0 U01GVVM4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAK+2MA0G CSqGSIb3DQEBCwUAA4IBAQCRDIam5YwT35mMs0Tk5+Fp3DeE+CUgIjh1t6HGAsGB 4wBLaxmTghH6dA10FfNkhDQr5kG0yayDipKY4L0pEPsapODy7QiI2lXnEitKmhDF yUgcsbYtNBji8sesN0jv7u1pfMLtH3kAPVt4zDW5+/ctkSUxM8zHNIFQrH94U4rM n5DigzkyxmsDMt6Iu7PNGICwvLdUMiUxLxe05sYYZXWhmvQzZgHH5PSMyGrc7Xlo tlduROYSzOq8asSqALDZ6/AN4ZkMzuuhC54O8rjxsoEoc0kE66mYytzpnME16oR6 /Rtc5oROYgqtNwqvwolxOmd7K6UZculc/CsMOVAOOVIv -----END CERTIFICATE-----Generated at Sat Jun 1 22:20:18 2024 by rpki-client on console-fra.rpki-client.org