$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/qvSNO4KHV33FXIkhruxNSv-lors.roa File: qvSNO4KHV33FXIkhruxNSv-lors.roa (raw, json) Hash identifier: xIS5BCJZlwZCjTAV4voLYePnx3s5wvtY39ZnUhBgiaQ= Subject key identifier: AA:F4:8D:3B:82:87:57:7D:C5:5C:89:21:AE:EC:4D:4A:FF:A5:A2:BB Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1307 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/qvSNO4KHV33FXIkhruxNSv-lors.roa Signing time: Fri 01 Sep 2023 09:24:24 +0000 ROA not before: Fri 01 Sep 2023 09:24:24 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 211.78.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4871 (0x1307) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:24 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=AAF48D3B8287577DC55C8921AEEC4D4AFFA5A2BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:cc:f8:5e:55:35:0c:4c:ce:59:7b:43:35:05: 96:6d:f5:dc:4c:e6:8e:d3:db:c9:87:2e:06:af:75: 18:0a:97:8b:bf:88:cb:c9:18:84:b0:4e:48:e4:fe: 6f:67:22:56:f0:16:4a:4d:06:3a:ca:7a:3d:d2:18: 5c:14:0d:08:92:fb:7c:d7:a8:c0:1d:57:79:6e:91: 3b:4c:cf:41:ce:19:b8:1b:7a:39:5e:35:f2:eb:16: 26:33:4f:98:01:07:e1:47:75:75:78:8b:a9:23:14: aa:63:c1:1a:9a:83:b7:ee:c8:7b:83:a9:dd:e2:4e: 7c:29:c6:36:83:53:80:bd:e0:b7:4a:2e:68:52:72: 66:b6:d7:08:8f:9a:3f:33:4b:27:e9:09:93:54:47: dd:2e:77:26:e3:40:2f:4a:37:35:b1:9c:f5:92:29: cd:ef:c5:ba:96:9b:e0:3b:a5:33:72:19:51:f2:1d: 7e:20:a3:d0:3f:ff:ac:55:7f:c6:e8:2d:74:93:9b: 7f:b6:74:c3:f4:94:b3:24:94:42:99:ca:0b:93:6e: fd:2d:0f:53:be:46:b1:eb:47:a2:e2:dd:89:90:e6: 21:f6:a4:ac:6a:7d:22:e7:a4:c0:32:e5:cf:bd:b1: e1:a7:51:c0:10:8d:8f:4a:97:70:52:5d:a4:23:61: 13:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F4:8D:3B:82:87:57:7D:C5:5C:89:21:AE:EC:4D:4A:FF:A5:A2:BB X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/qvSNO4KHV33FXIkhruxNSv-lors.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.160.0/19 Signature Algorithm: sha256WithRSAEncryption ac:4d:be:f1:38:32:fe:93:dc:17:06:2a:b0:f8:b4:b0:24:f4: b4:73:89:86:de:d0:8c:4b:7f:3d:e3:6b:41:b5:79:d5:59:f6: e1:1b:d4:ea:a5:2a:a2:01:b0:4d:46:ab:fc:00:90:1f:09:8e: 35:95:fe:05:4c:f2:6a:db:f8:43:8e:ef:70:41:e8:2b:a0:95: 36:b2:f8:00:f1:45:cb:27:6c:7d:20:ab:28:02:1b:f9:48:ed: 6f:7b:3b:96:e6:2a:a1:9c:ed:4e:b5:f4:40:67:74:51:56:2b: ae:b6:f8:fc:18:94:ce:19:41:f1:7c:55:db:7f:28:d7:c3:b2: 1a:e9:ca:01:1b:7c:e9:1e:1b:3e:d0:d4:b0:c9:a1:0d:a0:f0: c0:77:6f:1b:44:3e:66:d7:1e:05:4c:70:b7:0d:65:6d:fc:98: 6e:38:bd:58:8b:0b:d2:d5:a3:00:57:c9:80:32:a3:f3:3c:5d: 13:00:ee:8b:f6:e8:e9:d9:cb:63:bb:2c:a8:48:0d:1c:88:1b: 0a:74:88:d1:b1:2c:a2:3c:df:9d:c0:72:a4:f9:af:df:c7:8e: 2a:53:02:34:06:16:71:4a:15:ba:cb:ce:a1:2f:75:63:77:f0: 64:3c:6c:89:c8:b2:f2:62:8a:8e:53:f4:6e:a2:04:66:8b:6b: e6:3f:e5:51 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEwcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFBRjQ4RDNCODI4NzU3 N0RDNTVDODkyMUFFRUM0RDRBRkZBNUEyQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3zPheVTUMTM5Ze0M1BZZt9dxM5o7T28mHLgavdRgKl4u/iMvJ GISwTkjk/m9nIlbwFkpNBjrKej3SGFwUDQiS+3zXqMAdV3lukTtMz0HOGbgbejle NfLrFiYzT5gBB+FHdXV4i6kjFKpjwRqag7fuyHuDqd3iTnwpxjaDU4C94LdKLmhS cma21wiPmj8zSyfpCZNUR90udybjQC9KNzWxnPWSKc3vxbqWm+A7pTNyGVHyHX4g o9A//6xVf8boLXSTm3+2dMP0lLMklEKZyguTbv0tD1O+RrHrR6Li3YmQ5iH2pKxq fSLnpMAy5c+9seGnUcAQjY9Kl3BSXaQjYRPdAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUqvSNO4KHV33FXIkhruxNSv+lorswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvcXZTTk80S0hWMzNGWElraHJ1eE5T di1sb3JzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdNOoDAN BgkqhkiG9w0BAQsFAAOCAQEArE2+8Tgy/pPcFwYqsPi0sCT0tHOJht7QjEt/PeNr QbV51Vn24RvU6qUqogGwTUar/ACQHwmONZX+BUzyatv4Q47vcEHoK6CVNrL4APFF yydsfSCrKAIb+Ujtb3s7luYqoZztTrX0QGd0UVYrrrb4/BiUzhlB8XxV238o18Oy GunKARt86R4bPtDUsMmhDaDwwHdvG0Q+ZtceBUxwtw1lbfyYbji9WIsL0tWjAFfJ gDKj8zxdEwDui/bo6dnLY7ssqEgNHIgbCnSI0bEsojzfncBypPmv38eOKlMCNAYW cUoVusvOoS91Y3fwZDxsiciy8mKKjlP0bqIEZotr5j/lUQ== -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org