$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ymrOwOdw79gNV5MeDRshL3XvoRs.roa File: ymrOwOdw79gNV5MeDRshL3XvoRs.roa (raw, json) Hash identifier: 9iu3jBc2F5IVEyhXZCHeD6wZ1dUgxviVzasDNba2m5w= Subject key identifier: CA:6A:CE:C0:E7:70:EF:D8:0D:57:93:1E:0D:1B:21:2F:75:EF:A1:1B Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 13E6 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ymrOwOdw79gNV5MeDRshL3XvoRs.roa Signing time: Fri 01 Sep 2023 09:25:34 +0000 ROA not before: Fri 01 Sep 2023 09:25:34 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 123.51.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5094 (0x13e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:34 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=CA6ACEC0E770EFD80D57931E0D1B212F75EFA11B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:94:67:67:88:8f:81:e5:4c:da:cb:26:93: 45:16:a9:cb:ed:8e:69:ee:1f:7d:d9:3c:0a:b9:e6: c7:70:f7:66:4b:2c:61:24:6e:dc:c0:b6:f9:c3:7e: d8:96:0e:a1:4a:98:e3:46:09:fc:1f:e8:c1:4c:f8: 6e:ea:77:85:07:3a:c5:64:7a:0d:b6:01:ba:1f:32: 1d:25:e0:a8:e5:12:8a:c4:9a:b2:d2:86:7c:73:2a: ff:ec:e8:a8:6d:db:69:95:3f:a5:6c:fb:8b:25:0d: 20:77:2b:f5:11:7c:b3:a0:84:0f:a1:f4:a1:5f:dd: 10:b3:f3:be:dc:09:93:14:fc:bb:74:06:2f:35:dc: e0:87:7c:68:48:fe:bc:62:f6:2a:0f:bc:14:23:9b: 0c:12:af:c1:c2:35:8b:41:05:8a:e1:22:7e:39:41: 9f:07:fb:65:81:51:0a:44:62:f3:97:15:9c:7b:3e: f3:d3:bf:71:52:5c:86:f5:3d:3e:0a:9e:02:b8:ad: ec:25:5f:8f:43:d5:19:c3:1f:b3:3d:70:53:9f:06: 2d:a1:91:f0:ab:b7:82:26:4a:e5:2a:67:bc:3c:14: 8f:83:19:ac:84:2d:ea:cc:59:c5:bc:d9:ef:b7:dd: 64:88:ea:fa:f5:b3:27:e5:65:27:b3:b0:78:fe:a5: d4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6A:CE:C0:E7:70:EF:D8:0D:57:93:1E:0D:1B:21:2F:75:EF:A1:1B X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ymrOwOdw79gNV5MeDRshL3XvoRs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.51.180.0/24 Signature Algorithm: sha256WithRSAEncryption 68:07:04:32:37:08:f4:a6:a8:bf:71:e9:0f:5d:96:0e:79:b9: 5f:bc:55:60:9c:b6:5b:88:68:65:bd:ca:fd:68:e0:d8:64:04: b7:53:ce:67:4f:57:3f:5b:87:0d:05:9e:7f:86:98:de:f9:ea: fd:39:3d:60:d2:89:99:a4:74:c1:ad:2f:c2:7b:8d:aa:17:75: b6:54:9c:0b:77:c1:40:e3:6d:5a:ef:12:85:c4:c2:2e:6e:2b: 33:02:74:5a:a8:de:c1:66:4f:9c:52:29:1e:43:ec:6d:67:c0: f6:7c:56:2e:ac:2d:0d:6b:86:78:d0:8d:ae:d2:13:cd:c5:64: 91:ba:33:0c:e2:8a:1f:19:e7:24:ab:64:85:1d:09:05:05:19: a1:78:e6:4f:44:a2:34:7f:54:3b:4f:34:4e:48:93:32:93:04: a5:4b:93:b9:e8:ba:1e:f9:a4:80:cd:48:f5:98:12:bb:1f:a8: 87:75:b1:2d:8e:c7:7c:6f:df:16:a6:64:43:ec:5d:22:f0:a1: 76:00:47:04:db:0d:24:b1:cb:8c:4e:a2:5a:6c:37:be:f8:a9: 8f:f0:7e:c4:2a:8e:8b:4a:82:2a:a9:7a:1d:7f:a8:86:fd:8c: ba:0c:8b:23:21:d9:bf:f0:20:59:69:2a:89:03:ae:99:36:5e: 03:e3:6d:db -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE+YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MzRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENBNkFDRUMwRTc3MEVG RDgwRDU3OTMxRTBEMUIyMTJGNzVFRkExMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMcpRnZ4iPgeVM2ssmk0UWqcvtjmnuH33ZPAq55sdw92ZLLGEk btzAtvnDftiWDqFKmONGCfwf6MFM+G7qd4UHOsVkeg22AbofMh0l4KjlEorEmrLS hnxzKv/s6Kht22mVP6Vs+4slDSB3K/URfLOghA+h9KFf3RCz877cCZMU/Lt0Bi81 3OCHfGhI/rxi9ioPvBQjmwwSr8HCNYtBBYrhIn45QZ8H+2WBUQpEYvOXFZx7PvPT v3FSXIb1PT4KngK4rewlX49D1RnDH7M9cFOfBi2hkfCrt4ImSuUqZ7w8FI+DGayE LerMWcW82e+33WSI6vr1syflZSezsHj+pdRRAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUymrOwOdw79gNV5MeDRshL3XvoRswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMveW1yT3dPZHc3OWdOVjVNZURSc2hM M1h2b1JzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHsztDAN BgkqhkiG9w0BAQsFAAOCAQEAaAcEMjcI9Kaov3HpD12WDnm5X7xVYJy2W4hoZb3K /Wjg2GQEt1POZ09XP1uHDQWef4aY3vnq/Tk9YNKJmaR0wa0vwnuNqhd1tlScC3fB QONtWu8ShcTCLm4rMwJ0WqjewWZPnFIpHkPsbWfA9nxWLqwtDWuGeNCNrtITzcVk kbozDOKKHxnnJKtkhR0JBQUZoXjmT0SiNH9UO080TkiTMpMEpUuTuei6HvmkgM1I 9ZgSux+oh3WxLY7HfG/fFqZkQ+xdIvChdgBHBNsNJLHLjE6iWmw3vvipj/B+xCqO i0qCKql6HX+ohv2MugyLIyHZv/AgWWkqiQOumTZeA+Nt2w== -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org