$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/q7u-WAjwXrFuQrOgDgV8yXch9Fc.roa File: q7u-WAjwXrFuQrOgDgV8yXch9Fc.roa (raw, json) Hash identifier: 4XJ01FoLIIxLEtWTEwJm+PNeTxM6yGvhKGSNhO58pEQ= Subject key identifier: AB:BB:BE:58:08:F0:5E:B1:6E:42:B3:A0:0E:05:7C:C9:77:21:F4:57 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 12E3 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/q7u-WAjwXrFuQrOgDgV8yXch9Fc.roa Signing time: Fri 01 Sep 2023 09:24:13 +0000 ROA not before: Fri 01 Sep 2023 09:24:13 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18049 IP address blocks: 106.105.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4835 (0x12e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:13 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=ABBBBE5808F05EB16E42B3A00E057CC97721F457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4c:8b:f1:e4:73:82:ad:5d:f3:d1:a6:cc:d6: 46:27:a0:dc:fd:64:9c:90:44:c3:34:3f:d7:07:59: 46:0f:13:ff:4f:80:e1:ab:03:0b:fe:9e:8e:1f:86: b8:21:da:16:08:cd:ee:5d:32:e8:b9:af:e8:8d:85: 80:c6:56:51:79:fe:e9:4e:4b:de:3d:2f:a8:2c:53: ea:c0:20:ce:67:7e:85:1a:e9:21:79:52:2e:4a:62: 45:6f:a0:7c:44:04:5d:80:e1:f5:58:62:4f:45:df: 05:bc:8c:8d:15:c9:30:93:5b:2c:74:ce:51:b8:fb: 87:6d:bb:bd:45:a4:bf:63:24:df:1a:85:5a:86:9c: 57:78:91:1b:24:d9:40:26:bc:12:94:10:35:13:c0: 1a:f5:db:32:11:f2:99:15:ef:36:16:ac:0b:5d:53: 6e:ba:d6:25:75:0c:2b:4b:fe:a2:2d:49:51:a5:79: a2:49:59:d4:e7:8b:14:4c:fc:ae:be:3f:d6:86:a7: 3e:c7:85:ae:97:2d:a7:e9:67:93:fb:c4:07:30:bd: 2f:42:da:ae:89:8d:d5:5d:37:30:9c:75:f5:6d:5c: 63:97:6f:d1:d4:8d:ca:18:8b:cb:11:de:95:86:26: b4:69:00:8a:86:06:c9:8b:1c:9f:43:f3:94:f3:de: 85:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BB:BE:58:08:F0:5E:B1:6E:42:B3:A0:0E:05:7C:C9:77:21:F4:57 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/q7u-WAjwXrFuQrOgDgV8yXch9Fc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.72.0/21 Signature Algorithm: sha256WithRSAEncryption ad:e8:bd:95:06:90:84:b3:a9:76:82:2a:94:92:9a:a1:8b:92: ca:ec:48:c8:c2:36:1b:45:5e:14:4e:43:a2:d5:b6:19:55:19: a0:5d:64:ea:13:da:0a:fd:0e:b3:67:0d:16:55:b1:56:15:13: 3b:a9:dc:26:ee:e4:01:4f:f6:40:fb:dc:d7:5f:a9:13:f7:04: 46:e3:08:40:c9:f3:a6:0c:83:b8:21:a4:30:1c:d1:17:b8:1c: 10:4c:09:cb:e1:8a:01:52:8f:7b:01:86:ef:26:4d:16:d1:99: 9f:d0:c3:87:7c:80:c8:6d:d8:0a:03:da:3d:b3:da:07:5d:50: a1:d5:52:d4:5e:1d:d0:aa:57:b6:6b:52:65:06:9c:72:df:76: c6:bf:56:9e:17:a8:ca:f2:d0:72:d4:04:fc:1d:8c:24:3e:26: 8b:b2:32:e1:b5:c2:1c:8b:52:7f:13:18:34:c6:7e:06:62:df: bf:55:b6:4b:1c:e8:32:31:06:7b:a3:10:9d:07:71:86:61:39: 1b:82:19:62:f5:cb:b9:93:51:bb:42:f9:cc:93:fc:e7:d4:bf: 90:8c:b2:10:88:cb:85:8a:fd:bd:c6:4f:6a:6f:d4:a1:5c:f9: 55:30:89:72:1e:2f:b6:7d:60:24:c8:df:67:2b:7d:c9:52:86: 42:a3:42:d0 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEuMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFCQkJCRTU4MDhGMDVF QjE2RTQyQjNBMDBFMDU3Q0M5NzcyMUY0NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfTIvx5HOCrV3z0abM1kYnoNz9ZJyQRMM0P9cHWUYPE/9PgOGr Awv+no4fhrgh2hYIze5dMui5r+iNhYDGVlF5/ulOS949L6gsU+rAIM5nfoUa6SF5 Ui5KYkVvoHxEBF2A4fVYYk9F3wW8jI0VyTCTWyx0zlG4+4dtu71FpL9jJN8ahVqG nFd4kRsk2UAmvBKUEDUTwBr12zIR8pkV7zYWrAtdU2661iV1DCtL/qItSVGleaJJ WdTnixRM/K6+P9aGpz7Hha6XLafpZ5P7xAcwvS9C2q6JjdVdNzCcdfVtXGOXb9HU jcoYi8sR3pWGJrRpAIqGBsmLHJ9D85Tz3oUNAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUq7u+WAjwXrFuQrOgDgV8yXch9FcwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvcTd1LVdBandYckZ1UXJPZ0RnVjh5 WGNoOUZjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2ppSDAN BgkqhkiG9w0BAQsFAAOCAQEArei9lQaQhLOpdoIqlJKaoYuSyuxIyMI2G0VeFE5D otW2GVUZoF1k6hPaCv0Os2cNFlWxVhUTO6ncJu7kAU/2QPvc11+pE/cERuMIQMnz pgyDuCGkMBzRF7gcEEwJy+GKAVKPewGG7yZNFtGZn9DDh3yAyG3YCgPaPbPaB11Q odVS1F4d0KpXtmtSZQacct92xr9WnheoyvLQctQE/B2MJD4mi7Iy4bXCHItSfxMY NMZ+BmLfv1W2SxzoMjEGe6MQnQdxhmE5G4IZYvXLuZNRu0L5zJP859S/kIyyEIjL hYr9vcZPam/UoVz5VTCJch4vtn1gJMjfZyt9yVKGQqNC0A== -----END CERTIFICATE-----Generated at Sun Jun 2 09:37:18 2024 by rpki-client on console-ams.rpki-client.org