$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/m47ZER27AUFg2SHditWZVVD0eX4.roa File: m47ZER27AUFg2SHditWZVVD0eX4.roa (raw, json) Hash identifier: xCbQcDOsjA1UgryfI2nI6pUZNMpn7APrC7xRm/wZP8w= Subject key identifier: 9B:8E:D9:11:1D:BB:01:41:60:D9:21:DD:8A:D5:99:55:50:F4:79:7E Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1342 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/m47ZER27AUFg2SHditWZVVD0eX4.roa Signing time: Fri 01 Sep 2023 09:24:42 +0000 ROA not before: Fri 01 Sep 2023 09:24:42 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 113.196.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4930 (0x1342) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:42 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9B8ED9111DBB014160D921DD8AD5995550F4797E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:41:a5:a5:e8:9c:6e:84:6d:bc:6a:4c:28:9e: 5b:fa:c0:74:e8:cb:f2:b7:fc:66:db:05:09:22:70: ed:8e:e9:7f:b2:f2:58:f0:da:cb:b6:44:9e:f2:7d: e6:47:c5:0e:f5:e3:2d:52:89:24:ff:03:e9:3f:5a: e4:46:c9:87:f1:1d:ab:4b:39:6a:6e:63:33:66:e0: 4a:eb:31:56:5e:e1:eb:4c:24:a4:a5:ac:77:b3:57: d5:b9:91:60:03:06:67:24:15:74:92:b2:cf:a0:d6: 1c:64:7b:a1:e8:ee:d2:90:25:21:ce:d2:6f:e0:7b: 0e:c1:64:f8:2c:f8:80:e1:e0:8e:8a:95:e2:4e:cc: a4:2a:d7:f8:c8:11:ae:7d:d9:23:ef:bf:2f:f7:a7: c5:40:cc:c1:5b:48:e6:aa:b3:60:8c:c9:95:2a:be: ec:c6:81:ca:42:cd:6e:e2:8e:e8:54:47:43:c2:14: 6f:e3:fa:3b:8f:c1:3d:da:6a:9e:1c:61:c9:2a:3c: cc:3c:b3:70:5d:73:04:56:94:59:29:0a:a0:93:dd: 86:b8:01:d2:78:58:8f:d2:96:05:48:4f:3e:60:ea: 28:4b:eb:5b:cb:50:7e:7a:d8:88:b0:c8:70:58:04: 9a:ed:69:9c:06:78:58:ae:fd:14:d7:01:6a:69:2b: db:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8E:D9:11:1D:BB:01:41:60:D9:21:DD:8A:D5:99:55:50:F4:79:7E X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/m47ZER27AUFg2SHditWZVVD0eX4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.196.128.0/20 Signature Algorithm: sha256WithRSAEncryption 50:3d:4c:f4:fd:56:ac:f9:9c:f6:63:87:c3:78:9d:df:0b:48: 24:a0:a5:11:c2:7a:cc:08:67:5f:25:d6:b9:c8:2b:dc:75:66: 8b:d1:19:ec:d7:ed:5d:6b:7e:fa:05:1e:eb:ed:85:0a:da:bd: d1:6e:91:c6:6a:a8:f5:a6:03:55:3d:ad:59:9e:3d:7d:e4:4c: 64:f2:28:d9:d3:00:02:e2:43:83:3c:e6:69:ed:55:4d:e0:1a: af:bb:ce:79:97:c2:26:c1:4d:c7:ac:fb:d5:98:8c:0a:53:99: ea:13:be:c2:92:0d:b6:43:98:20:52:4d:2d:39:6b:1d:e4:62: 33:13:51:89:9d:c4:e4:9b:23:d4:cc:bb:5c:99:5b:66:b6:be: e5:f0:db:94:f7:dd:2f:11:e1:fe:a1:25:94:f6:e0:9c:fe:40: 90:fb:95:35:bf:5b:34:53:5e:d6:8f:9b:70:65:54:e6:18:b6: f1:6a:f9:80:ea:c5:66:a6:89:c3:d6:a7:96:d1:5a:32:1e:7f: ed:58:ee:92:41:59:49:c1:c2:f6:df:33:48:6c:a7:67:13:a2: ba:a8:19:7d:32:82:e6:da:a2:0e:a4:aa:b6:9b:3c:cd:61:30: 96:79:77:c1:4a:63:31:0e:bb:58:31:14:47:87:42:f6:19:eb: e8:05:03:b1 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE0IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlCOEVEOTExMURCQjAx NDE2MEQ5MjFERDhBRDU5OTU1NTBGNDc5N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKQaWl6JxuhG28akwonlv6wHToy/K3/GbbBQkicO2O6X+y8ljw 2su2RJ7yfeZHxQ714y1SiST/A+k/WuRGyYfxHatLOWpuYzNm4ErrMVZe4etMJKSl rHezV9W5kWADBmckFXSSss+g1hxke6Ho7tKQJSHO0m/gew7BZPgs+IDh4I6KleJO zKQq1/jIEa592SPvvy/3p8VAzMFbSOaqs2CMyZUqvuzGgcpCzW7ijuhUR0PCFG/j +juPwT3aap4cYckqPMw8s3BdcwRWlFkpCqCT3Ya4AdJ4WI/SlgVITz5g6ihL61vL UH562IiwyHBYBJrtaZwGeFiu/RTXAWppK9tbAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUm47ZER27AUFg2SHditWZVVD0eX4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbTQ3WkVSMjdBVUZnMlNIZGl0V1pW VkQwZVg0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHHEgDAN BgkqhkiG9w0BAQsFAAOCAQEAUD1M9P1WrPmc9mOHw3id3wtIJKClEcJ6zAhnXyXW ucgr3HVmi9EZ7NftXWt++gUe6+2FCtq90W6Rxmqo9aYDVT2tWZ49feRMZPIo2dMA AuJDgzzmae1VTeAar7vOeZfCJsFNx6z71ZiMClOZ6hO+wpINtkOYIFJNLTlrHeRi MxNRiZ3E5Jsj1My7XJlbZra+5fDblPfdLxHh/qEllPbgnP5AkPuVNb9bNFNe1o+b cGVU5hi28Wr5gOrFZqaJw9anltFaMh5/7VjukkFZScHC9t8zSGynZxOiuqgZfTKC 5tqiDqSqtps8zWEwlnl3wUpjMQ67WDEUR4dC9hnr6AUDsQ== -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org