$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/x1Y3kCc1Yz_Ntgqyf7OTQbW8jSI.roa File: x1Y3kCc1Yz_Ntgqyf7OTQbW8jSI.roa (raw, json) Hash identifier: e1MoB22twT/pcy9Ugtd/mzQBcUySReZhPZYINJbZA/4= Subject key identifier: C7:56:37:90:27:35:63:3F:CD:B6:0A:B2:7F:B3:93:41:B5:BC:8D:22 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1305 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/x1Y3kCc1Yz_Ntgqyf7OTQbW8jSI.roa Signing time: Fri 01 Sep 2023 09:24:23 +0000 ROA not before: Fri 01 Sep 2023 09:24:23 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131627 IP address blocks: 106.105.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4869 (0x1305) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:23 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C75637902735633FCDB60AB27FB39341B5BC8D22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ef:27:11:72:ae:3a:30:a8:da:e1:2b:d3:e3: d5:c5:f9:4b:97:5a:00:b1:fa:4f:1d:44:13:5e:7a: b7:f0:79:94:6c:6f:56:4b:25:38:cb:3b:95:3f:91: 77:ad:41:36:5c:a2:e4:2c:66:20:9a:81:14:2c:13: 45:21:0e:b1:79:50:a2:18:d4:79:00:7e:50:03:d7: e1:bd:62:0f:a0:18:9d:da:02:49:2b:57:2e:8e:4d: 4c:49:90:ce:79:54:59:35:d4:7c:aa:ab:34:04:e7: 11:a1:52:d6:2c:ed:b1:14:23:3e:dd:23:50:dc:df: e6:3c:35:9f:ce:b2:e5:6d:e8:90:ad:ce:f2:46:59: 30:bc:6e:0c:5d:e5:79:10:f8:00:42:ff:ef:a0:30: 0f:0a:16:58:51:f9:fe:96:14:2c:88:4a:24:e0:19: 90:b9:47:c4:a2:f5:bb:77:14:2a:9d:f2:9d:bf:60: 23:6d:c8:c6:43:2d:80:2c:6c:1d:0b:6c:2f:aa:2c: 39:7f:90:3b:8e:02:f5:83:f4:c5:37:b1:0a:87:a4: 37:ea:15:97:f4:6c:71:1b:6e:61:5f:7b:44:af:fa: f3:a6:ab:f7:44:1d:f3:11:69:03:51:30:ae:0a:30: d2:3c:3e:a0:65:99:5d:0c:f3:20:0b:59:95:30:57: a6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:56:37:90:27:35:63:3F:CD:B6:0A:B2:7F:B3:93:41:B5:BC:8D:22 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/x1Y3kCc1Yz_Ntgqyf7OTQbW8jSI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.250.0/23 Signature Algorithm: sha256WithRSAEncryption 55:36:1b:1e:74:dc:02:0a:95:3d:dc:d8:05:e3:f6:47:e3:74: 12:b6:72:2f:43:51:1f:68:71:44:f2:a7:2a:94:c7:d0:41:3b: 34:dc:d6:18:71:01:b3:ed:dc:ae:fe:08:f7:bb:7f:b3:f0:15: 92:e7:60:9b:cf:ca:f9:3a:6b:79:db:9e:94:b5:e8:91:91:87: 3e:f7:8a:bd:c2:5c:08:53:5e:e1:a5:c4:bf:23:67:e1:09:8a: 6b:82:fd:49:64:d6:8b:b5:c6:72:2b:a5:d4:c2:cd:e7:ea:50: 57:da:6a:3f:e5:c5:a9:a5:bd:07:d9:6c:04:81:a8:2e:91:3b: 63:a6:e4:c0:09:1d:bb:c2:28:c3:6c:36:4f:a8:59:93:86:05: 5b:70:30:63:4f:8c:32:64:9c:87:6d:43:dd:a0:a5:4e:4e:32: d4:48:0f:8c:21:4e:6b:59:5c:f4:c5:36:81:21:6f:22:aa:f2: f8:fa:c6:57:6e:87:e7:76:05:97:06:78:db:a0:a6:2d:c7:a9: 7d:f7:e1:23:65:71:38:ff:96:bc:46:88:3b:99:a7:14:b8:90: 1b:7c:4d:14:60:8a:3a:75:12:74:e9:81:1a:ab:aa:88:99:63: 27:98:d5:18:45:1c:5b:2c:d7:8e:8b:fc:b4:45:03:9b:18:9c: bc:11:95:7b -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEwUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEM3NTYzNzkwMjczNTYz M0ZDREI2MEFCMjdGQjM5MzQxQjVCQzhEMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/7ycRcq46MKja4SvT49XF+UuXWgCx+k8dRBNeerfweZRsb1ZL JTjLO5U/kXetQTZcouQsZiCagRQsE0UhDrF5UKIY1HkAflAD1+G9Yg+gGJ3aAkkr Vy6OTUxJkM55VFk11HyqqzQE5xGhUtYs7bEUIz7dI1Dc3+Y8NZ/OsuVt6JCtzvJG WTC8bgxd5XkQ+ABC/++gMA8KFlhR+f6WFCyISiTgGZC5R8Si9bt3FCqd8p2/YCNt yMZDLYAsbB0LbC+qLDl/kDuOAvWD9MU3sQqHpDfqFZf0bHEbbmFfe0Sv+vOmq/dE HfMRaQNRMK4KMNI8PqBlmV0M8yALWZUwV6ZZAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUx1Y3kCc1Yz/Ntgqyf7OTQbW8jSIwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMveDFZM2tDYzFZel9OdGdxeWY3T1RR Ylc4alNJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWpp+jAN BgkqhkiG9w0BAQsFAAOCAQEAVTYbHnTcAgqVPdzYBeP2R+N0ErZyL0NRH2hxRPKn KpTH0EE7NNzWGHEBs+3crv4I97t/s/AVkudgm8/K+TpreduelLXokZGHPveKvcJc CFNe4aXEvyNn4QmKa4L9SWTWi7XGciul1MLN5+pQV9pqP+XFqaW9B9lsBIGoLpE7 Y6bkwAkdu8Iow2w2T6hZk4YFW3AwY0+MMmSch21D3aClTk4y1EgPjCFOa1lc9MU2 gSFvIqry+PrGV26H53YFlwZ426CmLcepfffhI2VxOP+WvEaIO5mnFLiQG3xNFGCK OnUSdOmBGquqiJljJ5jVGEUcWyzXjov8tEUDmxicvBGVew== -----END CERTIFICATE-----Generated at Mon May 20 11:12:53 2024 by rpki-client on console-ams.rpki-client.org