$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/oAV1PvB3WbK1DpR-SbC5PsnrDLs.roa File: oAV1PvB3WbK1DpR-SbC5PsnrDLs.roa (raw, json) Hash identifier: DHWyc9cbwOkP4WZFOGCqRaUd7dLybvCBuXFuPxVl0kY= Subject key identifier: A0:05:75:3E:F0:77:59:B2:B5:0E:94:7E:49:B0:B9:3E:C9:EB:0C:BB Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 161A Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/oAV1PvB3WbK1DpR-SbC5PsnrDLs.roa Signing time: Mon 26 Aug 2024 05:21:47 +0000 ROA not before: Mon 26 Aug 2024 05:21:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9674 IP address blocks: 106.107.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5658 (0x161a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:21:47 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A005753EF07759B2B50E947E49B0B93EC9EB0CBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d1:d4:75:2b:9c:df:da:f4:bb:d2:6b:82:48: 15:64:da:90:11:15:e9:40:25:d4:49:ae:31:fb:cb: 33:cf:16:36:97:f3:48:69:e6:bc:ad:8e:1e:b1:ec: 65:c5:73:eb:f8:f0:90:9e:4b:3b:3e:29:53:28:1b: d4:a5:ab:20:f9:6f:ad:aa:2e:e9:b9:2c:44:c6:b9: 38:d3:8b:20:d8:ce:76:cc:f6:23:82:ea:99:22:6d: d6:d7:8e:56:18:6a:d8:bc:45:7a:5b:26:e5:9c:4d: fd:5c:62:09:e0:b4:57:07:84:f2:9f:53:98:7c:9a: 9c:ce:48:7d:ea:16:1a:35:d8:68:5a:14:91:d2:cb: 14:20:fc:c5:98:8e:64:fc:ca:73:5f:e6:ed:e8:bd: 8c:b4:5e:27:d2:b8:99:73:c4:2b:4d:35:6a:96:a7: e8:3a:1b:fa:0e:a5:7c:12:5a:e3:2d:a7:70:78:a2: 23:87:3b:89:8b:e6:51:99:c7:5c:57:57:83:97:46: 3d:52:8b:2e:32:b7:ee:ef:26:58:61:5a:6d:51:d2: 62:1a:76:79:90:2e:d5:de:7c:97:95:4a:4c:24:ad: 0e:91:0c:1b:bd:7a:93:ae:7a:8b:20:fc:71:fb:1a: a2:5c:94:77:aa:f3:9e:fb:bf:f1:df:e8:60:fa:35: a3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:05:75:3E:F0:77:59:B2:B5:0E:94:7E:49:B0:B9:3E:C9:EB:0C:BB X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/oAV1PvB3WbK1DpR-SbC5PsnrDLs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.107.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1b:b9:8e:0b:98:01:b1:9b:f0:1c:00:97:2c:f5:a4:1a:84:b8: 78:9c:cb:20:42:92:c5:63:3f:b7:71:03:15:bd:8e:ac:65:66: 2d:9f:4f:10:12:f6:aa:d7:97:ee:0f:cf:50:6b:9c:bb:91:62: cf:cc:23:24:1d:4c:3e:db:4d:4b:02:21:20:d2:dd:b6:cd:b0: 58:c6:79:a0:20:1e:38:63:b4:f7:48:48:8f:37:47:4c:12:3b: 9a:fa:42:e1:72:e2:72:c5:59:6a:c2:b0:c8:ae:39:0d:8c:7f: df:73:d5:4a:52:fc:81:a1:13:77:14:6c:0b:06:5b:96:d8:85: 50:a2:a6:77:de:4a:c4:e6:88:f9:d5:f2:05:d1:e7:7e:79:63: 1c:3c:b9:09:8f:4d:33:ec:b7:9e:2b:91:8a:cb:60:e1:9c:aa: a3:e7:68:ec:f2:6e:71:ff:4c:9d:36:4a:49:aa:d1:05:e0:fd: 89:99:a1:64:96:40:70:23:f1:8d:3d:79:2e:a1:dc:41:8c:e1: c1:f6:f9:79:c7:de:a8:4f:06:c6:9b:d6:ef:ee:86:4d:99:5e: 51:1b:4b:c8:d9:79:26:90:51:ae:48:c2:ec:57:87:46:65:48: fa:a1:b9:90:04:ef:ac:1a:d8:ee:d3:8e:f4:53:60:b6:86:9f: 01:0a:e5:7f -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICFhowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIxNDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEwMDU3NTNFRjA3NzU5 QjJCNTBFOTQ3RTQ5QjBCOTNFQzlFQjBDQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR0dR1K5zf2vS70muCSBVk2pARFelAJdRJrjH7yzPPFjaX80hp 5rytjh6x7GXFc+v48JCeSzs+KVMoG9SlqyD5b62qLum5LETGuTjTiyDYznbM9iOC 6pkibdbXjlYYati8RXpbJuWcTf1cYgngtFcHhPKfU5h8mpzOSH3qFho12GhaFJHS yxQg/MWYjmT8ynNf5u3ovYy0XifSuJlzxCtNNWqWp+g6G/oOpXwSWuMtp3B4oiOH O4mL5lGZx1xXV4OXRj1Siy4yt+7vJlhhWm1R0mIadnmQLtXefJeVSkwkrQ6RDBu9 epOueosg/HH7GqJclHeq8577v/Hf6GD6NaPVAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUoAV1PvB3WbK1DpR+SbC5PsnrDLswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvb0FWMVB2QjNXYksxRHBSLVNiQzVQ c25yRExzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAGprMA0G CSqGSIb3DQEBCwUAA4IBAQAbuY4LmAGxm/AcAJcs9aQahLh4nMsgQpLFYz+3cQMV vY6sZWYtn08QEvaq15fuD89Qa5y7kWLPzCMkHUw+201LAiEg0t22zbBYxnmgIB44 Y7T3SEiPN0dMEjua+kLhcuJyxVlqwrDIrjkNjH/fc9VKUvyBoRN3FGwLBluW2IVQ oqZ33krE5oj51fIF0ed+eWMcPLkJj00z7LeeK5GKy2DhnKqj52js8m5x/0ydNkpJ qtEF4P2JmaFklkBwI/GNPXkuodxBjOHB9vl5x96oTwbGm9bv7oZNmV5RG0vI2Xkm kFGuSMLsV4dGZUj6obmQBO+sGtju0470U2C2hp8BCuV/ -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:11 2024 by rpki-client on console-ams.rpki-client.org