$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/p9SeyvIPZT0Mpl3LvougPqerX7M.roa File: p9SeyvIPZT0Mpl3LvougPqerX7M.roa (raw, json) Hash identifier: gmqyzJMbLiA0vF9Y3F2pRTltfIGzGZGZ2xWUVRhQCeY= Subject key identifier: A7:D4:9E:CA:F2:0F:65:3D:0C:A6:5D:CB:BE:8B:A0:3E:A7:AB:5F:B3 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 13AC Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/p9SeyvIPZT0Mpl3LvougPqerX7M.roa Signing time: Fri 01 Sep 2023 09:25:17 +0000 ROA not before: Fri 01 Sep 2023 09:25:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 23675 IP address blocks: 106.105.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5036 (0x13ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A7D49ECAF20F653D0CA65DCBBE8BA03EA7AB5FB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:60:93:f4:8f:c0:c3:89:3c:2e:ef:16:29: 78:98:06:d6:35:7c:5a:fa:cb:3a:fd:70:f7:fc:e4: 5d:f8:a5:3d:ca:29:87:f8:c3:b0:c1:56:ad:05:41: 13:d1:93:12:be:8e:ce:df:62:b8:01:d5:7f:ec:cb: 3c:fd:de:81:ed:ba:c2:5a:14:2f:4f:9f:95:b2:45: 09:ed:9e:9f:35:83:d1:f5:db:79:54:f0:69:e4:5b: 13:cc:09:35:46:0f:79:43:d4:59:22:d7:29:e7:0c: 45:67:d7:82:e3:63:0c:1f:94:53:94:65:75:f1:a9: 17:cb:fc:37:9e:2e:62:b3:ec:bc:26:5c:bd:ec:e7: 33:fc:ed:16:7b:9a:a9:c0:db:67:a5:9c:0b:54:be: f5:29:5b:77:75:ba:3f:3c:56:43:9f:5f:e3:6e:3c: 51:d1:5f:54:b9:50:81:5f:a4:52:33:fe:4e:b2:53: 05:f3:d4:87:54:bb:6a:bf:42:d8:24:ed:87:2c:87: b1:51:6b:fd:7e:26:ad:34:c4:98:3e:a4:8b:c5:8c: dc:4b:55:91:89:bc:16:ff:7f:5a:5f:a4:58:ec:8e: f7:71:3b:12:82:67:16:1d:3d:54:10:19:ce:4a:39: 07:72:66:66:e1:c7:00:25:9b:ee:ef:31:61:9d:65: 95:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D4:9E:CA:F2:0F:65:3D:0C:A6:5D:CB:BE:8B:A0:3E:A7:AB:5F:B3 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/p9SeyvIPZT0Mpl3LvougPqerX7M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.110.0/24 Signature Algorithm: sha256WithRSAEncryption 00:8a:39:dd:03:e6:19:b7:80:be:29:e6:28:ae:b9:6d:d1:62: 8d:04:d1:a2:80:47:83:71:86:bd:88:1d:b9:fd:b1:c9:71:ba: 52:81:b7:46:11:63:7a:88:e6:aa:5e:ec:df:16:58:3c:e8:01: cf:0b:7e:92:5c:99:61:11:6b:dc:08:bf:60:e1:23:30:5e:c1: c9:7a:2e:81:bb:67:82:cd:cc:c6:fc:90:e8:9b:5f:a7:75:98: 57:44:3f:b7:52:0e:a4:5c:2f:6d:33:1e:37:8d:ba:47:ba:6a: 1b:6f:04:ed:f2:34:9c:f3:24:88:6f:7e:bb:f3:8a:2c:c4:b2: 08:75:3a:ab:27:02:4e:bb:b7:5a:e8:00:ae:7f:1e:de:38:10: ea:ed:04:4c:ff:0c:0d:de:d5:28:14:6b:a7:5c:c2:f4:a0:67: c7:85:0a:ea:78:cb:85:93:10:84:68:54:b3:de:bf:6a:82:ee: c2:a9:11:85:9b:4d:7e:6f:52:c3:ab:6e:8f:35:32:50:ca:12: dc:80:92:2c:87:2b:12:58:5d:e2:96:4d:e4:08:10:33:41:c3: de:46:70:a1:66:23:ed:26:3e:9f:fa:af:d8:08:52:c0:24:88: 01:3f:8a:f1:c3:f6:96:89:25:fe:26:5d:37:1f:6e:f9:d7:bb: 4b:52:16:f0 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE6wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE3RDQ5RUNBRjIwRjY1 M0QwQ0E2NURDQkJFOEJBMDNFQTdBQjVGQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCza2CT9I/Aw4k8Lu8WKXiYBtY1fFr6yzr9cPf85F34pT3KKYf4 w7DBVq0FQRPRkxK+js7fYrgB1X/syzz93oHtusJaFC9Pn5WyRQntnp81g9H123lU 8GnkWxPMCTVGD3lD1Fki1ynnDEVn14LjYwwflFOUZXXxqRfL/DeeLmKz7LwmXL3s 5zP87RZ7mqnA22elnAtUvvUpW3d1uj88VkOfX+NuPFHRX1S5UIFfpFIz/k6yUwXz 1IdUu2q/Qtgk7Ycsh7FRa/1+Jq00xJg+pIvFjNxLVZGJvBb/f1pfpFjsjvdxOxKC ZxYdPVQQGc5KOQdyZmbhxwAlm+7vMWGdZZX5AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUp9SeyvIPZT0Mpl3LvougPqerX7MwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvcDlTZXl2SVBaVDBNcGwzTHZvdWdQ cWVyWDdNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGppbjAN BgkqhkiG9w0BAQsFAAOCAQEAAIo53QPmGbeAvinmKK65bdFijQTRooBHg3GGvYgd uf2xyXG6UoG3RhFjeojmql7s3xZYPOgBzwt+klyZYRFr3Ai/YOEjMF7ByXougbtn gs3MxvyQ6Jtfp3WYV0Q/t1IOpFwvbTMeN426R7pqG28E7fI0nPMkiG9+u/OKLMSy CHU6qycCTru3WugArn8e3jgQ6u0ETP8MDd7VKBRrp1zC9KBnx4UK6njLhZMQhGhU s96/aoLuwqkRhZtNfm9Sw6tujzUyUMoS3ICSLIcrElhd4pZN5AgQM0HD3kZwoWYj 7SY+n/qv2AhSwCSIAT+K8cP2lokl/iZdNx9u+de7S1IW8A== -----END CERTIFICATE-----Generated at Sun Jun 2 07:14:23 2024 by rpki-client on console-fra.rpki-client.org