$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/sNoYGo9_k1t0SdEW2V04LfqYHiI.roa File: sNoYGo9_k1t0SdEW2V04LfqYHiI.roa (raw, json) Hash identifier: LWocGeQfwe5SC8anmqB9h+urvKMOS7yzVKj0m+1b4JU= Subject key identifier: B0:DA:18:1A:8F:7F:93:5B:74:49:D1:16:D9:5D:38:2D:FA:98:1E:22 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 12F1 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sNoYGo9_k1t0SdEW2V04LfqYHiI.roa Signing time: Fri 01 Sep 2023 09:24:17 +0000 ROA not before: Fri 01 Sep 2023 09:24:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 203.73.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4849 (0x12f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B0DA181A8F7F935B7449D116D95D382DFA981E22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:45:15:ac:d0:dd:8f:6e:a0:a9:c5:fd:31:db: 41:a3:0c:9c:d6:2e:1f:2d:f8:04:22:87:ad:0b:16: cc:2f:ec:ba:35:94:90:85:fd:d2:60:3b:2b:62:c3: 0b:e5:57:cf:b6:82:5d:da:73:82:55:44:3d:8a:49: ca:e8:65:71:f5:62:01:4b:aa:9d:91:47:8d:8d:2f: ed:06:b5:d3:0c:80:a2:0b:1a:c8:99:43:48:98:21: f7:3d:f8:7a:5a:8a:f6:5b:44:ae:47:87:10:50:7f: c2:52:48:05:fb:2c:cb:2f:21:bf:38:1d:50:04:28: 5d:44:86:1c:dd:03:86:23:9d:f9:28:16:a0:a9:33: 9f:d8:a2:a0:6a:3a:d1:22:49:08:5d:41:de:0b:31: 5c:ea:7b:4b:db:b8:9d:aa:90:31:3f:9d:f4:df:0e: 59:aa:9f:54:e1:d8:9e:b4:2b:a2:e8:84:59:4c:eb: ae:e1:7f:ee:75:a3:cf:7c:c7:be:d7:42:20:9f:74: 55:2b:6c:a7:d6:f3:57:20:14:94:f1:6b:87:f0:92: 49:9e:2c:24:14:4a:b6:60:09:d0:71:34:ce:1a:35: 81:3c:5f:88:7e:50:70:17:88:47:2e:43:ac:f6:22: 11:fd:70:24:5c:64:d6:fd:83:3e:6d:9e:da:ca:7a: 55:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DA:18:1A:8F:7F:93:5B:74:49:D1:16:D9:5D:38:2D:FA:98:1E:22 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sNoYGo9_k1t0SdEW2V04LfqYHiI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.73.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7f:fe:1c:4b:0d:aa:5b:12:f2:2d:4a:d7:3f:63:e1:79:9c:4e: 60:3b:37:0d:a2:bd:9d:44:f2:43:56:93:39:ab:bc:8d:67:fc: 2b:22:24:10:4c:21:22:7e:08:62:59:2e:1c:72:a8:0f:1b:89: 8f:70:eb:8f:1d:0d:80:98:c3:9a:e0:37:7f:0a:6e:b7:2a:43: 1e:fb:31:0d:fc:2e:0d:43:2d:46:99:d5:8a:28:eb:66:91:08: a1:60:20:13:47:50:6d:b2:e3:7d:be:a4:c8:a3:98:fc:e5:b5: c5:21:14:26:e5:ea:9a:4e:f9:be:36:aa:14:3a:bf:4e:59:55: d5:19:11:87:94:06:0c:9d:2e:be:b3:a4:49:05:f9:30:94:5c: c0:73:37:ad:af:0c:b7:1c:b6:5c:00:3c:82:75:da:31:d1:3f: f3:3a:fa:29:54:aa:61:3c:42:b6:fb:b0:f1:1c:11:4f:df:97: 73:ba:9b:33:b3:2f:5a:13:3a:0b:1f:46:ef:d1:c2:a0:54:a9: a7:32:4a:85:6a:74:63:b1:68:0c:dd:b8:ff:2b:43:c0:2c:1f: 41:25:63:78:c1:83:be:2c:ff:ec:d3:48:8f:95:ee:0c:f7:ca: 4c:53:de:b2:1a:a2:5f:e9:87:ad:30:11:bd:49:9b:77:f1:44: 0d:4c:2d:f5 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICEvEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEIwREExODFBOEY3Rjkz NUI3NDQ5RDExNkQ5NUQzODJERkE5ODFFMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDuRRWs0N2PbqCpxf0x20GjDJzWLh8t+AQih60LFswv7Lo1lJCF /dJgOytiwwvlV8+2gl3ac4JVRD2KScroZXH1YgFLqp2RR42NL+0GtdMMgKILGsiZ Q0iYIfc9+HpaivZbRK5HhxBQf8JSSAX7LMsvIb84HVAEKF1EhhzdA4YjnfkoFqCp M5/YoqBqOtEiSQhdQd4LMVzqe0vbuJ2qkDE/nfTfDlmqn1Th2J60K6LohFlM667h f+51o898x77XQiCfdFUrbKfW81cgFJTxa4fwkkmeLCQUSrZgCdBxNM4aNYE8X4h+ UHAXiEcuQ6z2IhH9cCRcZNb9gz5tntrKelVjAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUsNoYGo9/k1t0SdEW2V04LfqYHiIwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvc05vWUdvOV9rMXQwU2RFVzJWMDRM ZnFZSGlJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMtJMA0G CSqGSIb3DQEBCwUAA4IBAQB//hxLDapbEvItStc/Y+F5nE5gOzcNor2dRPJDVpM5 q7yNZ/wrIiQQTCEifghiWS4ccqgPG4mPcOuPHQ2AmMOa4Dd/Cm63KkMe+zEN/C4N Qy1GmdWKKOtmkQihYCATR1BtsuN9vqTIo5j85bXFIRQm5eqaTvm+NqoUOr9OWVXV GRGHlAYMnS6+s6RJBfkwlFzAczetrwy3HLZcADyCddox0T/zOvopVKphPEK2+7Dx HBFP35dzupszsy9aEzoLH0bv0cKgVKmnMkqFanRjsWgM3bj/K0PALB9BJWN4wYO+ LP/s00iPle4M98pMU96yGqJf6YetMBG9SZt38UQNTC31 -----END CERTIFICATE-----Generated at Sat Jun 1 23:25:38 2024 by rpki-client on console-ams.rpki-client.org