$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/sd4YBT_Ac6UAONeK_XjuO8sSlK0.roa File: sd4YBT_Ac6UAONeK_XjuO8sSlK0.roa (raw, json) Hash identifier: RAp5NwvLsBZiSHsXWpkHpXWKmYSmWFDBK+1GHT4/qxo= Subject key identifier: B1:DE:18:05:3F:C0:73:A5:00:38:D7:8A:FD:78:EE:3B:CB:12:94:AD Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 135F Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sd4YBT_Ac6UAONeK_XjuO8sSlK0.roa Signing time: Fri 01 Sep 2023 09:24:51 +0000 ROA not before: Fri 01 Sep 2023 09:24:51 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 123.204.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4959 (0x135f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:51 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B1DE18053FC073A50038D78AFD78EE3BCB1294AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:80:c1:c1:e2:ba:f1:09:f9:be:e6:a4:38: 22:33:0f:26:40:8e:85:04:4c:61:2b:24:9f:00:49: 97:c9:39:39:ba:af:fd:76:21:8f:77:12:b6:b6:63: 14:31:6f:e9:8c:05:50:22:7e:d5:7c:a7:47:7c:eb: 11:7f:a7:06:9f:27:2a:f8:ed:60:8d:44:db:63:0b: 41:fd:91:79:9e:85:20:3e:6f:c9:30:17:70:74:28: 53:14:8c:29:2a:84:87:bd:8a:d6:f5:f2:fa:c7:d6: 4c:4e:25:b3:67:7a:79:14:c1:ef:43:24:17:7e:81: 4e:19:9a:ac:73:80:e4:83:0e:a2:ab:ee:14:3e:cf: 07:5f:81:22:82:56:2a:0c:9e:ee:55:73:c6:39:15: 89:15:1f:e2:ac:f0:9e:b7:93:ac:da:10:c6:d8:ed: 09:ec:83:a9:b4:97:dd:f2:05:a5:c1:1d:ad:f3:e9: 2b:8d:99:02:f5:f0:2f:8e:67:18:32:ea:d3:24:eb: bd:e2:78:58:4f:8c:30:df:c0:e7:bd:c3:08:b5:a2: f0:62:e4:7c:de:91:86:39:2d:4b:1a:ba:78:2b:d5: 2e:ed:6e:10:5a:92:15:4a:cc:56:fd:b7:cc:d1:00: d1:33:dc:9b:a4:10:08:68:8d:84:6b:b3:2b:de:06: 26:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DE:18:05:3F:C0:73:A5:00:38:D7:8A:FD:78:EE:3B:CB:12:94:AD X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sd4YBT_Ac6UAONeK_XjuO8sSlK0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.204.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4b:8c:27:f6:cb:83:06:87:99:29:6b:de:6d:7e:c7:b6:94:e9: 4f:0a:6c:1c:6c:a9:88:d2:a3:e4:a9:80:3a:0c:82:59:4c:bd: 24:a9:bb:21:9e:64:93:ca:4d:50:28:5e:25:76:19:c1:8e:a4: 59:39:88:23:62:13:ab:82:05:3d:26:e5:48:a7:3a:bf:77:78: 6b:4c:16:dd:46:e0:f8:3a:ee:79:3c:84:50:c5:08:c8:d7:e3: a1:09:10:75:9a:b7:86:8c:bc:54:95:fb:53:37:0b:61:d0:99: cf:3f:1f:ba:a8:26:7e:5d:83:56:05:45:7c:8a:6a:5d:56:c0: 53:1a:af:a9:d5:bd:70:0c:07:ce:98:98:01:a2:99:28:0d:1c: 81:60:bc:2a:86:0d:fb:4e:8c:e7:46:8e:b2:b3:aa:76:a2:da: 8a:4e:22:36:77:a0:6c:7b:47:c7:17:3d:5b:51:65:34:87:71: 68:d8:37:e3:e4:c7:c7:49:96:d6:5d:63:43:58:d3:b1:95:35: e6:2c:b1:63:ee:05:8f:a5:d1:39:10:a1:dd:6e:b8:02:7b:79: c6:1d:8e:6e:97:53:d6:02:50:6f:0c:83:a8:ac:ef:c1:56:e2: dc:54:57:0c:71:9f:66:52:83:cb:f6:81:a2:e1:9c:e8:77:5f: c8:85:c4:2d -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICE18wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEIxREUxODA1M0ZDMDcz QTUwMDM4RDc4QUZENzhFRTNCQ0IxMjk0QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFpYDBweK68Qn5vuakOCIzDyZAjoUETGErJJ8ASZfJOTm6r/12 IY93Era2YxQxb+mMBVAiftV8p0d86xF/pwafJyr47WCNRNtjC0H9kXmehSA+b8kw F3B0KFMUjCkqhIe9itb18vrH1kxOJbNnenkUwe9DJBd+gU4ZmqxzgOSDDqKr7hQ+ zwdfgSKCVioMnu5Vc8Y5FYkVH+Ks8J63k6zaEMbY7Qnsg6m0l93yBaXBHa3z6SuN mQL18C+OZxgy6tMk673ieFhPjDDfwOe9wwi1ovBi5HzekYY5LUsaungr1S7tbhBa khVKzFb9t8zRANEz3JukEAhojYRrsyveBibzAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUsd4YBT/Ac6UAONeK/XjuO8sSlK0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvc2Q0WUJUX0FjNlVBT05lS19YanVP OHNTbEswLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAHvMMA0G CSqGSIb3DQEBCwUAA4IBAQBLjCf2y4MGh5kpa95tfse2lOlPCmwcbKmI0qPkqYA6 DIJZTL0kqbshnmSTyk1QKF4ldhnBjqRZOYgjYhOrggU9JuVIpzq/d3hrTBbdRuD4 Ou55PIRQxQjI1+OhCRB1mreGjLxUlftTNwth0JnPPx+6qCZ+XYNWBUV8impdVsBT Gq+p1b1wDAfOmJgBopkoDRyBYLwqhg37ToznRo6ys6p2otqKTiI2d6Bse0fHFz1b UWU0h3Fo2Dfj5MfHSZbWXWNDWNOxlTXmLLFj7gWPpdE5EKHdbrgCe3nGHY5ul1PW AlBvDIOorO/BVuLcVFcMcZ9mUoPL9oGi4Zzod1/IhcQt -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org