$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/s0UiSUMWfMJSKkY9JZT-uJVewZI.roa File: s0UiSUMWfMJSKkY9JZT-uJVewZI.roa (raw, json) Hash identifier: nTgohkH/809WZUD/a3FXYqSwq7huLSwABdSZh65Fi5c= Subject key identifier: B3:45:22:49:43:16:7C:C2:52:2A:46:3D:25:94:FE:B8:95:5E:C1:92 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 136B Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/s0UiSUMWfMJSKkY9JZT-uJVewZI.roa Signing time: Fri 01 Sep 2023 09:24:54 +0000 ROA not before: Fri 01 Sep 2023 09:24:54 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 2401:a040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4971 (0x136b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:54 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B345224943167CC2522A463D2594FEB8955EC192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:ca:8e:cd:40:2f:3d:4d:00:91:68:6a:0f: 7d:93:b9:de:68:a0:7b:84:45:a7:eb:1e:21:68:31: 89:b9:d1:e4:c0:8c:3c:88:ac:ea:41:79:78:70:6b: c9:7c:cc:bf:f9:56:83:bd:8c:f5:a6:5d:e7:60:a7: 8c:66:47:2c:9b:b4:9e:a3:15:79:78:ae:13:27:5f: 10:af:d0:5f:55:20:1d:a4:f9:a8:9d:94:ef:9d:f9: b1:47:ee:65:ff:50:b3:70:14:bb:0c:fc:4c:e2:80: d6:1e:4a:30:b4:ae:52:bc:0a:17:46:07:4c:10:99: a8:59:09:c2:32:35:a7:10:08:8b:5e:e1:14:96:54: f7:a7:69:b9:e4:8c:d9:cc:80:82:e8:d6:0c:99:9c: 88:85:cf:db:42:b4:97:8a:92:a3:0b:78:93:f4:99: af:70:38:e1:f8:43:06:9c:be:af:ad:62:fe:bf:27: 48:62:44:58:de:6b:42:fe:35:a0:c7:5d:90:d8:55: 4e:c3:3a:7a:38:a3:53:32:09:d7:a1:10:9e:b2:ae: 31:c9:e3:3f:0e:3a:7a:ce:c8:2f:15:2a:44:39:98: 56:ee:69:6c:5f:74:33:3f:c6:20:bf:c7:91:ba:57: 89:8c:15:e1:9e:7d:4f:3f:a3:c2:a5:de:45:a8:bc: e2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:45:22:49:43:16:7C:C2:52:2A:46:3D:25:94:FE:B8:95:5E:C1:92 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/s0UiSUMWfMJSKkY9JZT-uJVewZI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:a040::/32 Signature Algorithm: sha256WithRSAEncryption 65:a1:ae:d8:1c:70:c8:b9:a0:0d:fb:56:a1:e9:f7:c7:7c:74: 47:3b:7c:f8:7c:98:a0:c6:74:f8:79:75:59:7e:f4:46:02:42: e6:00:0f:73:66:c1:20:9a:ed:f5:c7:bb:81:5b:f5:47:55:c0: 79:c4:06:a7:f7:14:f1:67:e6:4c:b6:4b:eb:27:df:0d:a8:8e: 13:a5:8d:6e:a6:ea:42:46:2e:6a:e3:fb:0d:2e:01:e8:cd:80: 26:55:1e:f5:f6:91:52:eb:91:fa:4c:ae:e1:9d:db:21:70:62: 53:28:44:b7:ce:3a:86:b8:98:a9:08:6a:7c:58:de:e4:33:89: ca:86:37:99:77:b4:cb:84:35:0b:70:ce:8e:f0:fc:92:37:a8: d9:71:ed:a6:0c:32:93:dd:6a:c6:02:db:2d:57:d7:4e:a3:26: 05:0c:ef:7e:11:ae:c8:0a:12:a8:9a:55:7a:b9:62:38:0e:28: 5e:d7:75:77:99:13:a3:72:6c:3d:f2:fe:f3:e7:47:40:46:85: 58:4d:a5:00:43:4a:22:f6:4a:55:55:38:67:87:28:a7:c4:32: fc:68:7e:52:3f:e4:b4:3a:59:ad:d4:c1:f2:17:ee:c1:ea:c7: 06:bb:59:47:0b:b7:dd:66:ac:ae:92:bf:b3:9f:85:da:32:28: fb:d3:66:99 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICE2swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEIzNDUyMjQ5NDMxNjdD QzI1MjJBNDYzRDI1OTRGRUI4OTU1RUMxOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/WsqOzUAvPU0AkWhqD32Tud5ooHuERafrHiFoMYm50eTAjDyI rOpBeXhwa8l8zL/5VoO9jPWmXedgp4xmRyybtJ6jFXl4rhMnXxCv0F9VIB2k+aid lO+d+bFH7mX/ULNwFLsM/EzigNYeSjC0rlK8ChdGB0wQmahZCcIyNacQCIte4RSW VPenabnkjNnMgILo1gyZnIiFz9tCtJeKkqMLeJP0ma9wOOH4Qwacvq+tYv6/J0hi RFjea0L+NaDHXZDYVU7DOno4o1MyCdehEJ6yrjHJ4z8OOnrOyC8VKkQ5mFbuaWxf dDM/xiC/x5G6V4mMFeGefU8/o8Kl3kWovOJ9AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUs0UiSUMWfMJSKkY9JZT+uJVewZIwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvczBVaVNVTVdmTUpTS2tZOUpaVC11 SlZld1pJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBoEAw DQYJKoZIhvcNAQELBQADggEBAGWhrtgccMi5oA37VqHp98d8dEc7fPh8mKDGdPh5 dVl+9EYCQuYAD3NmwSCa7fXHu4Fb9UdVwHnEBqf3FPFn5ky2S+sn3w2ojhOljW6m 6kJGLmrj+w0uAejNgCZVHvX2kVLrkfpMruGd2yFwYlMoRLfOOoa4mKkIanxY3uQz icqGN5l3tMuENQtwzo7w/JI3qNlx7aYMMpPdasYC2y1X106jJgUM734RrsgKEqia VXq5YjgOKF7XdXeZE6NybD3y/vPnR0BGhVhNpQBDSiL2SlVVOGeHKKfEMvxoflI/ 5LQ6Wa3UwfIX7sHqxwa7WUcLt91mrK6Sv7OfhdoyKPvTZpk= -----END CERTIFICATE-----Generated at Sun Jun 2 09:37:18 2024 by rpki-client on console-ams.rpki-client.org