$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/pDyymapQ9L6WTr-_HPV72B3uHlU.roa File: pDyymapQ9L6WTr-_HPV72B3uHlU.roa (raw, json) Hash identifier: yebbV3bsOEogIHfp9B1nILnCAbKdLqWET/BdNjBXeM4= Subject key identifier: A4:3C:B2:99:AA:50:F4:BE:96:4E:BF:BF:1C:F5:7B:D8:1D:EE:1E:55 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 13CB Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pDyymapQ9L6WTr-_HPV72B3uHlU.roa Signing time: Fri 01 Sep 2023 09:25:27 +0000 ROA not before: Fri 01 Sep 2023 09:25:27 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 123.205.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5067 (0x13cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:27 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A43CB299AA50F4BE964EBFBF1CF57BD81DEE1E55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c9:c9:37:d8:c1:4b:c2:37:88:36:ea:5d:40: aa:0c:11:a8:e8:2e:0f:83:bc:66:67:79:1c:e7:25: 61:c3:e2:cb:b2:89:44:3e:6a:b3:3d:4d:24:f9:ba: 77:5b:67:43:9f:8e:7b:41:e2:32:f8:91:33:26:6b: 2e:ad:19:2d:04:dd:7e:8d:9f:cd:c2:24:e3:5e:9f: cf:8e:0a:78:56:41:4c:66:55:33:0f:53:6f:92:af: ff:16:0c:4b:02:24:d6:f7:8c:e2:4b:89:eb:00:6e: da:de:2d:b1:e8:a2:2b:a1:0c:1a:51:db:7c:4f:10: 89:72:4e:6d:33:df:53:92:8b:ec:03:8e:72:86:36: fa:10:5b:9e:dd:cb:c6:16:0e:87:69:99:e3:10:d9: b5:be:4e:d9:f3:68:c7:27:75:34:14:3f:bf:b4:93: 7b:13:8c:aa:8d:aa:19:e2:32:ae:ec:90:fb:ba:ef: 7c:f3:09:e5:0c:37:9b:60:29:ed:4b:2d:54:43:eb: 69:6f:7d:71:10:e8:fe:4a:ce:64:8d:53:c7:ee:c6: 33:53:96:b7:63:f4:2b:8c:a4:6f:b5:ba:e8:e6:61: 53:c0:68:46:35:06:4c:ea:dc:ff:0f:c1:a4:33:32: a6:a2:68:68:f5:26:7e:ae:f2:de:c7:7d:14:37:1e: 98:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3C:B2:99:AA:50:F4:BE:96:4E:BF:BF:1C:F5:7B:D8:1D:EE:1E:55 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pDyymapQ9L6WTr-_HPV72B3uHlU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.205.64.0/19 Signature Algorithm: sha256WithRSAEncryption b6:49:b2:d4:07:7c:42:82:0d:69:9a:f9:93:3a:a4:6f:48:19: e4:be:85:8e:56:45:51:ce:15:61:43:af:72:80:95:c4:ad:fa: 18:4c:a0:0f:78:8e:66:ba:82:7b:d0:6e:bd:40:c5:b9:8e:eb: 62:a2:10:06:ee:e7:e6:17:82:4d:a6:b3:82:2f:bb:d5:82:3c: 94:05:14:0b:a3:db:ee:23:3a:8f:a8:0c:b5:b9:93:bc:f9:a2: ec:91:ee:52:bb:fa:a6:35:b1:3b:57:ff:3d:9d:a5:2d:df:3d: ce:58:ec:51:14:06:dd:df:50:b2:b5:2c:7d:38:94:8b:c0:5b: 7c:a0:9c:3b:0a:aa:db:65:8a:20:81:99:22:ad:6a:8d:21:27: e3:b2:72:55:20:f2:be:6e:8b:b5:2d:91:20:31:74:86:6f:36: 99:10:03:85:82:99:92:ce:26:97:9c:3c:7a:72:53:89:a0:7d: 5f:36:3a:ac:19:09:e9:72:78:ba:45:5e:49:8e:c4:0b:a7:c5: 2e:10:68:52:70:d3:de:8b:49:ed:57:b3:48:e3:91:c5:09:56: 5d:0d:b0:f2:70:68:c4:a4:96:75:4c:49:04:8d:d7:0c:5c:5e: eb:c1:7c:e6:0b:e9:55:54:db:fb:83:26:c0:7a:b6:ba:28:0c: c6:58:19:90 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE8swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MjdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE0M0NCMjk5QUE1MEY0 QkU5NjRFQkZCRjFDRjU3QkQ4MURFRTFFNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbyck32MFLwjeINupdQKoMEajoLg+DvGZneRznJWHD4suyiUQ+ arM9TST5undbZ0OfjntB4jL4kTMmay6tGS0E3X6Nn83CJONen8+OCnhWQUxmVTMP U2+Sr/8WDEsCJNb3jOJLiesAbtreLbHooiuhDBpR23xPEIlyTm0z31OSi+wDjnKG NvoQW57dy8YWDodpmeMQ2bW+TtnzaMcndTQUP7+0k3sTjKqNqhniMq7skPu673zz CeUMN5tgKe1LLVRD62lvfXEQ6P5KzmSNU8fuxjNTlrdj9CuMpG+1uujmYVPAaEY1 Bkzq3P8PwaQzMqaiaGj1Jn6u8t7HfRQ3HpiJAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUpDyymapQ9L6WTr+/HPV72B3uHlUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvcER5eW1hcFE5TDZXVHItX0hQVjcy QjN1SGxVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXvNQDAN BgkqhkiG9w0BAQsFAAOCAQEAtkmy1Ad8QoINaZr5kzqkb0gZ5L6FjlZFUc4VYUOv coCVxK36GEygD3iOZrqCe9BuvUDFuY7rYqIQBu7n5heCTaazgi+71YI8lAUUC6Pb 7iM6j6gMtbmTvPmi7JHuUrv6pjWxO1f/PZ2lLd89zljsURQG3d9QsrUsfTiUi8Bb fKCcOwqq22WKIIGZIq1qjSEn47JyVSDyvm6LtS2RIDF0hm82mRADhYKZks4ml5w8 enJTiaB9XzY6rBkJ6XJ4ukVeSY7EC6fFLhBoUnDT3otJ7VezSOORxQlWXQ2w8nBo xKSWdUxJBI3XDFxe68F85gvpVVTb+4MmwHq2uigMxlgZkA== -----END CERTIFICATE-----Generated at Sat Jun 1 22:20:18 2024 by rpki-client on console-fra.rpki-client.org