$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/s_KPthwtmRzd-stixQvNXwCcY0I.roa File: s_KPthwtmRzd-stixQvNXwCcY0I.roa (raw, json) Hash identifier: hToOVg0YRTVbdy42B2CqvOZUlpqgQR9uUNSiXPvMd0o= Subject key identifier: B3:F2:8F:B6:1C:2D:99:1C:DD:FA:CB:62:C5:0B:CD:5F:00:9C:63:42 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1382 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/s_KPthwtmRzd-stixQvNXwCcY0I.roa Signing time: Fri 01 Sep 2023 09:25:04 +0000 ROA not before: Fri 01 Sep 2023 09:25:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131627 IP address blocks: 106.105.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4994 (0x1382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:04 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B3F28FB61C2D991CDDFACB62C50BCD5F009C6342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:d5:c4:b7:ed:f0:15:99:8a:2d:e0:73:ed: 31:a7:68:49:65:27:41:ef:bc:08:dc:c5:97:cb:d1: 34:45:c1:30:e1:3a:8c:c4:59:91:10:6f:06:3b:25: eb:8c:6c:b6:8a:94:18:e9:71:c4:62:8e:ef:8d:60: 79:c5:33:f8:bf:3a:d3:34:3d:e9:12:fc:94:84:57: 4c:e4:e7:46:c4:db:8c:df:2e:9f:15:51:fd:cd:4a: 7d:09:7c:6e:b7:ea:00:62:f5:e5:0f:83:dd:49:d7: eb:ee:f4:70:3f:8a:42:5d:0a:ee:a6:2b:df:a6:b4: 00:7f:78:7d:bd:28:e3:9f:e8:2f:d2:b4:ca:a3:5f: 25:97:4d:0d:c2:eb:80:4c:ea:22:9c:a9:9b:d5:13: 8f:e0:70:03:c5:b7:64:aa:51:eb:ed:4a:40:62:ca: a7:5b:e3:53:0f:47:5a:f7:59:f9:9f:9a:2e:74:94: 81:d1:77:60:73:50:2d:ef:ff:48:34:e0:c0:bd:60: 3c:f1:61:e9:56:52:b7:00:bc:54:6f:1c:a0:10:a5: 77:48:9a:88:e5:d5:d4:99:70:8d:17:29:30:ed:8a: f1:11:f0:be:68:95:87:08:57:5e:37:5f:31:ab:00: f5:7c:ee:ec:9c:de:b5:c9:ec:d3:72:f2:f1:f2:7c: 23:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F2:8F:B6:1C:2D:99:1C:DD:FA:CB:62:C5:0B:CD:5F:00:9C:63:42 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/s_KPthwtmRzd-stixQvNXwCcY0I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.252.0/22 Signature Algorithm: sha256WithRSAEncryption 67:ba:1f:33:25:de:27:4c:b2:b8:90:f4:b4:11:18:c6:e8:2e: df:c2:9f:36:e5:e6:8a:48:57:e7:39:f0:11:3d:e0:d3:18:be: b7:82:1e:20:50:8e:84:5e:ac:f5:ad:5b:b7:61:7c:f4:fb:ef: d4:64:29:55:2a:07:02:93:86:eb:51:6e:29:fe:26:45:f3:6d: 94:af:ef:33:2b:a0:c0:d3:d4:9c:08:96:c8:27:a6:62:e9:b2: f2:41:b2:f3:3f:75:6e:75:99:83:6f:6d:63:48:ff:2f:46:c5: 2e:66:9f:54:90:e3:98:a9:bd:c8:30:26:03:cf:90:21:2d:5f: ef:91:ec:c8:24:78:01:8f:54:98:45:c7:c9:d3:f8:94:92:14: c0:b5:b9:1d:04:19:4b:fc:95:b6:d3:c9:f6:d1:f7:23:85:38: ea:93:07:ef:51:be:85:6d:e3:f6:ac:59:d5:8d:c1:30:ed:60: 00:a4:4a:2c:61:4a:72:43:09:45:6b:f9:10:75:11:6d:85:b2: f7:6f:92:18:6a:61:57:13:f6:29:18:d7:fc:01:ef:5a:e1:5d: 1d:aa:32:59:e4:3e:1c:6e:31:b0:f9:23:73:82:e1:01:cc:f9: 0b:e2:45:06:df:a4:bf:ae:ad:7c:89:f8:90:d8:1f:81:9c:00: 62:f4:c4:e5 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE4IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEIzRjI4RkI2MUMyRDk5 MUNEREZBQ0I2MkM1MEJDRDVGMDA5QzYzNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKOdXEt+3wFZmKLeBz7TGnaEllJ0HvvAjcxZfL0TRFwTDhOozE WZEQbwY7JeuMbLaKlBjpccRiju+NYHnFM/i/OtM0PekS/JSEV0zk50bE24zfLp8V Uf3NSn0JfG636gBi9eUPg91J1+vu9HA/ikJdCu6mK9+mtAB/eH29KOOf6C/StMqj XyWXTQ3C64BM6iKcqZvVE4/gcAPFt2SqUevtSkBiyqdb41MPR1r3Wfmfmi50lIHR d2BzUC3v/0g04MC9YDzxYelWUrcAvFRvHKAQpXdImojl1dSZcI0XKTDtivER8L5o lYcIV143XzGrAPV87uyc3rXJ7NNy8vHyfCMFAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUs/KPthwtmRzd+stixQvNXwCcY0IwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvc19LUHRod3RtUnpkLXN0aXhRdk5Y d0NjWTBJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmpp/DAN BgkqhkiG9w0BAQsFAAOCAQEAZ7ofMyXeJ0yyuJD0tBEYxugu38KfNuXmikhX5znw ET3g0xi+t4IeIFCOhF6s9a1bt2F89Pvv1GQpVSoHApOG61FuKf4mRfNtlK/vMyug wNPUnAiWyCemYumy8kGy8z91bnWZg29tY0j/L0bFLmafVJDjmKm9yDAmA8+QIS1f 75HsyCR4AY9UmEXHydP4lJIUwLW5HQQZS/yVttPJ9tH3I4U46pMH71G+hW3j9qxZ 1Y3BMO1gAKRKLGFKckMJRWv5EHURbYWy92+SGGphVxP2KRjX/AHvWuFdHaoyWeQ+ HG4xsPkjc4LhAcz5C+JFBt+kv66tfIn4kNgfgZwAYvTE5Q== -----END CERTIFICATE-----Generated at Sat Jun 1 23:25:38 2024 by rpki-client on console-ams.rpki-client.org