$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/zQ3UOEOPIV6Q0WEjkC61Lh3pY7c.roa File: zQ3UOEOPIV6Q0WEjkC61Lh3pY7c.roa (raw, json) Hash identifier: MT0r72LuTbrHIIhEtqHL2/ePOs0ED2T/bXdgMszbepU= Subject key identifier: CD:0D:D4:38:43:8F:21:5E:90:D1:61:23:90:2E:B5:2E:1D:E9:63:B7 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1308 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zQ3UOEOPIV6Q0WEjkC61Lh3pY7c.roa Signing time: Fri 01 Sep 2023 09:24:24 +0000 ROA not before: Fri 01 Sep 2023 09:24:24 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 42.0.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4872 (0x1308) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:24 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=CD0DD438438F215E90D16123902EB52E1DE963B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:59:d6:54:d4:40:ef:aa:29:25:ff:ea:69:fe: 07:c4:5c:3f:9b:22:77:c9:a4:2d:28:38:f6:71:cd: 8e:d7:01:50:c3:11:bb:f4:69:89:41:80:16:10:27: 98:a8:df:c2:f9:e7:d0:73:f8:0c:08:d8:07:f6:af: 6c:48:1f:8f:03:c9:bb:35:33:39:e0:9f:2a:32:25: eb:4f:c7:13:eb:ce:b3:ce:65:3c:fb:20:54:ca:fa: d0:66:21:9d:c7:e3:89:43:16:94:78:00:02:cc:96: 98:ff:2c:55:44:cf:02:74:e8:e6:27:37:c4:b9:be: ed:ba:9b:49:dd:3d:c6:3c:bf:59:4f:bd:b9:fb:f7: 85:6d:db:d0:26:41:50:49:1e:56:d3:9a:7b:56:b7: d4:6c:77:e6:bf:86:8c:30:32:d1:fb:50:14:d7:60: 22:6d:6e:1e:98:42:fd:ca:e1:7f:8c:33:cd:0e:df: 9d:a4:16:f1:be:9b:38:df:a2:5a:4a:db:c2:ad:ab: f3:e2:73:96:33:d3:6a:cf:61:98:66:cc:a8:b3:9b: b9:28:94:aa:c3:fa:5e:49:08:c0:c1:c7:bd:55:6d: 64:d2:58:0f:31:3e:99:1e:b9:58:19:07:f7:75:1e: 63:ae:6a:9b:a5:0d:43:09:00:82:ec:30:b8:77:6d: 43:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0D:D4:38:43:8F:21:5E:90:D1:61:23:90:2E:B5:2E:1D:E9:63:B7 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zQ3UOEOPIV6Q0WEjkC61Lh3pY7c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 42.0.64.0/18 Signature Algorithm: sha256WithRSAEncryption 4a:04:c0:1d:eb:d1:b6:6f:67:68:5f:09:58:a9:99:46:cb:aa: ca:b2:ed:3f:e8:d0:ed:fb:f3:71:0b:33:03:1d:42:ce:42:d9: 57:aa:45:42:d7:28:35:51:f7:c8:56:15:99:f2:16:62:4d:68: 25:bc:60:bd:24:fa:df:77:14:ed:5a:74:4c:c4:50:3c:e4:0d: 0f:68:e5:4d:6b:86:67:7d:99:0b:96:72:6c:ee:25:9f:1c:29: 29:21:ec:e1:e0:27:cf:95:9a:66:15:36:84:68:26:5d:60:b5: 5f:8c:98:2b:6b:9a:c8:73:ba:99:b4:c3:09:96:03:a1:c0:e9: ef:e7:7b:f8:0d:da:24:c4:69:ce:3d:8c:4e:84:a5:da:2f:03: 24:88:6d:6e:a8:6c:7e:84:28:1a:42:bf:95:b0:9b:52:2f:91: 0b:d3:bf:a6:d1:75:51:ae:da:5a:1c:4d:08:a2:d1:ac:0f:7f: 63:2a:96:17:68:da:fa:22:08:0d:d6:6c:92:ff:0c:6a:e6:0e: 91:b7:30:75:07:73:96:ac:76:67:86:38:fc:8e:df:86:ef:31: ad:3e:c7:c1:88:56:92:7d:41:0c:c4:89:96:15:c4:c2:b9:38: a8:54:11:a4:03:a1:5f:e8:47:4a:52:23:0f:a5:54:a1:3b:4b: ed:1b:b4:14 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEwgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENEMERENDM4NDM4RjIx NUU5MEQxNjEyMzkwMkVCNTJFMURFOTYzQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1WdZU1EDvqikl/+pp/gfEXD+bInfJpC0oOPZxzY7XAVDDEbv0 aYlBgBYQJ5io38L559Bz+AwI2Af2r2xIH48Dybs1MzngnyoyJetPxxPrzrPOZTz7 IFTK+tBmIZ3H44lDFpR4AALMlpj/LFVEzwJ06OYnN8S5vu26m0ndPcY8v1lPvbn7 94Vt29AmQVBJHlbTmntWt9Rsd+a/howwMtH7UBTXYCJtbh6YQv3K4X+MM80O352k FvG+mzjfolpK28Ktq/Pic5Yz02rPYZhmzKizm7kolKrD+l5JCMDBx71VbWTSWA8x PpkeuVgZB/d1HmOuapulDUMJAILsMLh3bUNlAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUzQ3UOEOPIV6Q0WEjkC61Lh3pY7cwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvelEzVU9FT1BJVjZRMFdFamtDNjFM aDNwWTdjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBioAQDAN BgkqhkiG9w0BAQsFAAOCAQEASgTAHevRtm9naF8JWKmZRsuqyrLtP+jQ7fvzcQsz Ax1CzkLZV6pFQtcoNVH3yFYVmfIWYk1oJbxgvST633cU7Vp0TMRQPOQND2jlTWuG Z32ZC5ZybO4lnxwpKSHs4eAnz5WaZhU2hGgmXWC1X4yYK2uayHO6mbTDCZYDocDp 7+d7+A3aJMRpzj2MToSl2i8DJIhtbqhsfoQoGkK/lbCbUi+RC9O/ptF1Ua7aWhxN CKLRrA9/YyqWF2ja+iIIDdZskv8MauYOkbcwdQdzlqx2Z4Y4/I7fhu8xrT7HwYhW kn1BDMSJlhXEwrk4qFQRpAOhX+hHSlIjD6VUoTtL7Ru0FA== -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org