$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/unNQeo22FQU4GlgBdUqCH3Sr8OY.roa File: unNQeo22FQU4GlgBdUqCH3Sr8OY.roa (raw, json) Hash identifier: kGii/pZ6RmIn8CvrutsgIZHQOQv6LEsSSu262Zf3LGA= Subject key identifier: BA:73:50:7A:8D:B6:15:05:38:1A:58:01:75:4A:82:1F:74:AB:F0:E6 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 13B9 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/unNQeo22FQU4GlgBdUqCH3Sr8OY.roa Signing time: Fri 01 Sep 2023 09:25:20 +0000 ROA not before: Fri 01 Sep 2023 09:25:20 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 61.56.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5049 (0x13b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:20 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=BA73507A8DB61505381A5801754A821F74ABF0E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4e:2b:15:dd:23:6d:ff:6e:cc:6a:a1:f6:b9: 2c:46:ac:31:b0:fd:57:c4:0d:36:00:1f:09:cd:0a: 38:f9:07:cc:bb:15:e7:5e:a7:68:21:17:e8:52:12: b5:4d:35:70:09:76:fc:b7:23:bf:07:0c:bb:8a:00: bf:bf:ab:ff:f1:54:43:2e:42:a5:16:d1:5a:be:9a: 57:ed:07:d9:78:72:c6:78:31:d1:a9:aa:ce:3d:8a: 75:95:9b:0a:8a:13:ba:e2:fc:c4:8e:00:c3:78:54: 6e:ef:d3:89:db:83:bd:83:a8:a3:aa:e7:3c:e8:e3: 23:0f:2b:4c:ec:90:e8:2e:cf:a3:90:72:0e:ef:80: 27:91:0c:53:a8:76:cf:39:10:6f:88:19:25:76:f2: 11:6c:70:ab:6d:2b:6c:c8:fc:df:7a:b7:cf:0c:69: 9d:74:d5:81:ac:1f:dc:da:96:81:28:95:78:43:8c: 3a:39:ac:95:ea:5d:99:aa:d0:31:f6:5c:54:36:72: 77:66:d1:6c:75:9d:4c:9d:d0:8b:7d:69:6c:99:0a: dc:0c:38:7d:1f:40:9e:96:0b:c2:7d:55:df:ab:ce: 27:bd:13:1e:50:5e:8b:fe:9d:4e:bf:a1:dd:12:f1: 34:72:1c:c0:f5:96:fc:8d:b6:5d:a1:51:e0:42:5d: 3c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:73:50:7A:8D:B6:15:05:38:1A:58:01:75:4A:82:1F:74:AB:F0:E6 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/unNQeo22FQU4GlgBdUqCH3Sr8OY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.192.0/19 Signature Algorithm: sha256WithRSAEncryption 5b:a4:c9:d8:e1:de:ec:0a:fd:20:99:8f:d3:5f:af:1c:ce:18: b1:ad:e1:73:90:54:1d:0e:37:2c:95:78:d5:be:18:55:9e:0e: 3b:6a:7e:51:06:f5:6b:e9:fd:c4:ec:d6:09:42:77:67:0e:ab: 71:f6:93:e1:59:2e:fd:c0:d6:2e:a4:cc:0c:77:84:96:21:97: ec:e9:7a:06:b1:02:1c:3d:3c:4c:9a:a4:66:28:9b:3b:b0:a7: 31:ec:47:90:33:05:52:13:f7:e3:c4:4d:6b:d7:19:4c:f1:53: 3a:0e:f2:f6:fb:ba:d0:e2:4f:0d:b2:1c:60:b6:9b:67:ea:e3: cc:4d:31:f5:16:ec:15:4f:42:d3:09:ce:f7:33:38:fc:df:78: cf:15:a9:ad:18:f6:d2:7b:19:d1:7c:8b:27:a7:5e:97:dd:16: d8:74:cb:36:15:92:d3:39:70:15:04:26:a1:f6:e8:c6:f3:6e: bf:e2:89:25:a7:82:f6:59:1b:3c:10:ee:27:22:4b:d8:8b:20: dd:be:83:29:9f:72:ae:da:16:57:e9:86:0d:cd:11:69:b6:42: f9:ec:c9:1f:2b:19:9c:ac:cf:35:66:5a:b8:ed:dd:53:86:5d: d8:be:bc:4a:ba:0e:28:09:6e:f7:0b:b7:d9:22:29:06:45:0a: a6:60:55:45 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE7kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEJBNzM1MDdBOERCNjE1 MDUzODFBNTgwMTc1NEE4MjFGNzRBQkYwRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjTisV3SNt/27MaqH2uSxGrDGw/VfEDTYAHwnNCjj5B8y7Fede p2ghF+hSErVNNXAJdvy3I78HDLuKAL+/q//xVEMuQqUW0Vq+mlftB9l4csZ4MdGp qs49inWVmwqKE7ri/MSOAMN4VG7v04nbg72DqKOq5zzo4yMPK0zskOguz6OQcg7v gCeRDFOods85EG+IGSV28hFscKttK2zI/N96t88MaZ101YGsH9zaloEolXhDjDo5 rJXqXZmq0DH2XFQ2cndm0Wx1nUyd0It9aWyZCtwMOH0fQJ6WC8J9Vd+rzie9Ex5Q Xov+nU6/od0S8TRyHMD1lvyNtl2hUeBCXTynAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUunNQeo22FQU4GlgBdUqCH3Sr8OYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvdW5OUWVvMjJGUVU0R2xnQmRVcUNI M1NyOE9ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBT04wDAN BgkqhkiG9w0BAQsFAAOCAQEAW6TJ2OHe7Ar9IJmP01+vHM4Ysa3hc5BUHQ43LJV4 1b4YVZ4OO2p+UQb1a+n9xOzWCUJ3Zw6rcfaT4Vku/cDWLqTMDHeEliGX7Ol6BrEC HD08TJqkZiibO7CnMexHkDMFUhP348RNa9cZTPFTOg7y9vu60OJPDbIcYLabZ+rj zE0x9RbsFU9C0wnO9zM4/N94zxWprRj20nsZ0XyLJ6del90W2HTLNhWS0zlwFQQm ofboxvNuv+KJJaeC9lkbPBDuJyJL2Isg3b6DKZ9yrtoWV+mGDc0RabZC+ezJHysZ nKzPNWZauO3dU4Zd2L68SroOKAlu9wu32SIpBkUKpmBVRQ== -----END CERTIFICATE-----Generated at Mon May 20 11:12:53 2024 by rpki-client on console-ams.rpki-client.org