$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/v3MTPBVjy5nqFGkSSYXaqbY1m2g.roa File: v3MTPBVjy5nqFGkSSYXaqbY1m2g.roa (raw, json) Hash identifier: W8J9Qnejhyscuy8cu8A6xGgddq1Ei2G8d05El2/mSFM= Subject key identifier: BF:73:13:3C:15:63:CB:99:EA:14:69:12:49:85:DA:A9:B6:35:9B:68 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 15ED Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/v3MTPBVjy5nqFGkSSYXaqbY1m2g.roa Signing time: Mon 26 Aug 2024 05:21:36 +0000 ROA not before: Mon 26 Aug 2024 05:21:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 220.228.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5613 (0x15ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:21:36 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BF73133C1563CB99EA1469124985DAA9B6359B68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:34:3b:42:9f:a2:98:48:3e:dd:a1:85:0a:83: 5a:bd:90:02:d4:84:b0:48:90:d6:d5:a7:f5:fc:af: c1:e7:e4:60:f4:86:20:23:92:c7:06:69:38:44:a1: bf:06:68:20:ed:9c:1b:69:18:2a:81:ea:81:2d:69: 57:74:bf:2d:f1:db:1b:7d:16:58:c6:e0:7c:92:ec: b8:5f:e9:83:4d:ac:39:0d:ff:9c:bf:1f:8f:e5:a7: 95:c5:21:c6:ee:a5:d2:f0:d8:a1:71:d6:77:e6:02: 0f:81:7a:0a:a2:1a:9b:b9:11:6f:cd:a3:2d:e6:6a: 3d:c4:96:cd:2f:4b:de:d7:25:81:58:52:29:29:e0: 43:e0:56:af:24:73:1a:d3:93:91:d8:19:80:72:e5: 7a:1f:95:b5:87:ba:54:23:75:98:cd:95:41:5a:69: 7f:51:95:af:12:4e:f0:18:42:e5:f2:3c:66:b9:ab: bc:1a:6e:08:44:d0:b4:cb:07:a2:ea:be:21:72:50: 48:e9:5b:e2:d4:f7:22:f4:7a:aa:4b:47:46:14:50: db:7d:95:9d:b9:35:b4:10:c6:5f:24:c1:a0:e1:95: c2:3c:5a:fd:c3:1d:74:67:f7:53:35:c8:17:31:f3: cc:1b:da:f7:58:8f:7a:8e:a4:20:41:ab:04:06:f4: 77:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:73:13:3C:15:63:CB:99:EA:14:69:12:49:85:DA:A9:B6:35:9B:68 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/v3MTPBVjy5nqFGkSSYXaqbY1m2g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.228.0.0/16 Signature Algorithm: sha256WithRSAEncryption 15:fb:2b:bb:5c:43:aa:4e:39:df:27:73:ea:ec:dd:28:f0:41: 73:c5:d0:17:0f:2e:53:45:c7:ec:6e:02:a2:89:e3:d9:7e:c1: b4:7c:a1:6d:9b:fa:62:a1:66:89:37:09:3d:51:7b:31:7f:11: 72:25:98:77:da:14:ca:d2:c0:65:13:67:aa:87:c8:28:94:cd: bf:b2:32:6d:15:e0:da:eb:df:27:f1:6f:d6:34:a5:aa:43:53: ad:d3:14:84:ad:a7:9e:e0:5b:ae:ec:21:07:25:8e:4a:7b:ec: 24:f9:ea:25:48:0e:97:22:82:5f:f2:2d:2f:c0:13:e1:d2:af: fb:2a:b4:ff:44:d2:54:7d:1b:7b:38:9a:1c:7f:10:d5:17:d2: 23:bd:6e:fd:e2:10:78:70:f0:38:c6:43:42:e0:bd:cf:31:17: b7:c1:28:9a:d9:65:03:32:ef:14:0b:50:35:73:57:5a:1b:3f: 1a:89:73:05:45:99:fb:5a:b0:e0:d2:df:80:55:c0:e2:ce:74: f1:6b:88:78:51:9f:91:a8:eb:7b:ac:1c:a2:71:e2:33:97:91: 4a:bb:bf:e3:d3:f8:74:5e:d6:f0:a2:23:32:79:8b:be:91:55: bf:e4:bd:d0:ef:df:9a:89:2e:33:a5:18:e5:7a:b5:a8:e5:c6: fd:db:c8:6c -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICFe0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIxMzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJGNzMxMzNDMTU2M0NC OTlFQTE0NjkxMjQ5ODVEQUE5QjYzNTlCNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2NDtCn6KYSD7doYUKg1q9kALUhLBIkNbVp/X8r8Hn5GD0hiAj kscGaThEob8GaCDtnBtpGCqB6oEtaVd0vy3x2xt9FljG4HyS7Lhf6YNNrDkN/5y/ H4/lp5XFIcbupdLw2KFx1nfmAg+BegqiGpu5EW/Noy3maj3Els0vS97XJYFYUikp 4EPgVq8kcxrTk5HYGYBy5XoflbWHulQjdZjNlUFaaX9Rla8STvAYQuXyPGa5q7wa bghE0LTLB6LqviFyUEjpW+LU9yL0eqpLR0YUUNt9lZ25NbQQxl8kwaDhlcI8Wv3D HXRn91M1yBcx88wb2vdYj3qOpCBBqwQG9HejAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUv3MTPBVjy5nqFGkSSYXaqbY1m2gwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvdjNNVFBCVmp5NW5xRkdrU1NZWGFx YlkxbTJnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANzkMA0G CSqGSIb3DQEBCwUAA4IBAQAV+yu7XEOqTjnfJ3Pq7N0o8EFzxdAXDy5TRcfsbgKi iePZfsG0fKFtm/pioWaJNwk9UXsxfxFyJZh32hTK0sBlE2eqh8golM2/sjJtFeDa 698n8W/WNKWqQ1Ot0xSEraee4Fuu7CEHJY5Ke+wk+eolSA6XIoJf8i0vwBPh0q/7 KrT/RNJUfRt7OJocfxDVF9IjvW794hB4cPA4xkNC4L3PMRe3wSia2WUDMu8UC1A1 c1daGz8aiXMFRZn7WrDg0t+AVcDiznTxa4h4UZ+RqOt7rByiceIzl5FKu7/j0/h0 XtbwoiMyeYu+kVW/5L3Q79+aiS4zpRjlerWo5cb928hs -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:42 2024 by rpki-client on console-fra.rpki-client.org