$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/mO9sE6SU1AK9Kx7NZkGYBwAMsuc.roa File: mO9sE6SU1AK9Kx7NZkGYBwAMsuc.roa (raw, json) Hash identifier: 322u9+WYkB0wSWmCr6VEGYZw4vKmuYc/tCvgglU1xG0= Subject key identifier: 98:EF:6C:13:A4:94:D4:02:BD:2B:1E:CD:66:41:98:07:00:0C:B2:E7 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1362 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mO9sE6SU1AK9Kx7NZkGYBwAMsuc.roa Signing time: Fri 01 Sep 2023 09:24:52 +0000 ROA not before: Fri 01 Sep 2023 09:24:52 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 211.78.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4962 (0x1362) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:52 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=98EF6C13A494D402BD2B1ECD66419807000CB2E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:37:f7:19:af:1f:b7:50:eb:e3:db:be:a3:8c: 7f:74:8b:d3:3c:82:6a:29:59:d9:08:14:a7:1d:74: f3:c6:20:f7:7a:dd:56:4b:cb:d4:48:91:7a:3f:da: 7f:2b:9a:7f:cb:25:5c:45:5c:c5:c1:13:6c:1d:5b: c0:85:00:b0:fb:33:07:f4:aa:d6:55:3e:93:5f:84: a4:d7:3d:cf:27:5a:4e:e1:6d:f8:79:e0:8a:a3:42: 55:c5:1e:bb:df:2f:14:35:a6:29:18:01:82:c7:38: a2:8f:3f:94:4c:23:5f:cb:29:0b:a8:64:8d:ed:a4: 98:dc:ed:81:8f:54:30:11:28:6f:83:e7:bd:e6:38: 30:81:ec:14:73:79:49:9e:d4:cd:fc:1b:10:23:51: 53:31:3c:c6:44:2c:ea:18:b8:96:ac:f3:ca:b4:4c: af:33:2b:53:e1:4b:43:cd:21:b4:d2:64:bf:08:02: a4:64:dc:44:ab:68:2e:fd:31:37:20:30:92:ea:9d: 2d:ea:73:16:1a:44:61:1b:32:1a:b8:a7:d4:d0:1f: 7c:86:f4:42:09:70:16:52:7e:91:06:bd:38:20:c2: bb:08:43:d4:2f:c5:d0:04:01:7b:eb:e1:cc:09:d5: 85:2a:b8:5d:56:8e:5a:5e:5e:bb:a8:22:37:0a:76: 86:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:EF:6C:13:A4:94:D4:02:BD:2B:1E:CD:66:41:98:07:00:0C:B2:E7 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mO9sE6SU1AK9Kx7NZkGYBwAMsuc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.128.0/19 Signature Algorithm: sha256WithRSAEncryption 6d:e5:cd:4d:17:eb:d6:ee:8a:d8:62:f9:90:47:1c:df:4e:fa: 64:b7:c0:2c:f4:e7:84:21:4b:36:be:97:11:d8:54:c2:61:25: ed:62:b9:6e:f0:d8:28:38:65:6b:67:ee:e5:7b:6c:f3:c8:1e: 96:b8:59:7a:f8:42:ae:c4:0a:12:f0:bc:da:14:38:e8:07:1a: 8c:b1:99:98:14:17:83:24:cc:a3:45:b7:d3:f6:9f:bb:a0:7b: c1:98:7d:d8:e5:63:18:22:2e:4e:07:67:bf:9e:f9:5f:c2:c2: c1:a3:88:60:41:d4:63:73:9e:19:fa:12:1a:e4:e0:b6:cb:f1: 30:c9:59:ec:bb:b7:dd:f2:d2:f8:60:c8:53:d4:58:bf:f0:bf: eb:1a:af:d4:c0:8d:bc:7f:4f:96:bc:86:2e:87:0c:36:b8:06: 58:2b:a7:54:7c:3d:51:9e:73:3c:d8:8d:8d:08:57:2d:c7:f7: 05:56:33:4d:6d:a4:98:e9:c7:46:c9:5a:6f:6f:d0:1e:c0:e0: f4:a7:d1:14:91:18:54:55:13:72:4a:0f:e5:07:de:95:b4:50: 0a:25:5b:27:03:fb:c9:32:75:e3:43:86:fb:02:13:47:a6:01: 58:f1:09:16:5b:65:af:7d:e7:30:1d:66:8f:bf:08:e8:a3:86: 16:d6:e2:54 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE2IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk4RUY2QzEzQTQ5NEQ0 MDJCRDJCMUVDRDY2NDE5ODA3MDAwQ0IyRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtN/cZrx+3UOvj276jjH90i9M8gmopWdkIFKcddPPGIPd63VZL y9RIkXo/2n8rmn/LJVxFXMXBE2wdW8CFALD7Mwf0qtZVPpNfhKTXPc8nWk7hbfh5 4IqjQlXFHrvfLxQ1pikYAYLHOKKPP5RMI1/LKQuoZI3tpJjc7YGPVDARKG+D573m ODCB7BRzeUme1M38GxAjUVMxPMZELOoYuJas88q0TK8zK1PhS0PNIbTSZL8IAqRk 3ESraC79MTcgMJLqnS3qcxYaRGEbMhq4p9TQH3yG9EIJcBZSfpEGvTggwrsIQ9Qv xdAEAXvr4cwJ1YUquF1WjlpeXruoIjcKdoZvAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUmO9sE6SU1AK9Kx7NZkGYBwAMsucwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbU85c0U2U1UxQUs5S3g3TlprR1lC d0FNc3VjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdNOgDAN BgkqhkiG9w0BAQsFAAOCAQEAbeXNTRfr1u6K2GL5kEcc3076ZLfALPTnhCFLNr6X EdhUwmEl7WK5bvDYKDhla2fu5Xts88gelrhZevhCrsQKEvC82hQ46AcajLGZmBQX gyTMo0W30/afu6B7wZh92OVjGCIuTgdnv575X8LCwaOIYEHUY3OeGfoSGuTgtsvx MMlZ7Lu33fLS+GDIU9RYv/C/6xqv1MCNvH9PlryGLocMNrgGWCunVHw9UZ5zPNiN jQhXLcf3BVYzTW2kmOnHRslab2/QHsDg9KfRFJEYVFUTckoP5QfelbRQCiVbJwP7 yTJ140OG+wITR6YBWPEJFltlr33nMB1mj78I6KOGFtbiVA== -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org