$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NETGUARD/XDzzC9NfKw1NfcMJNB5NP9Ue9Jw.roa File: XDzzC9NfKw1NfcMJNB5NP9Ue9Jw.roa (raw, json) Hash identifier: nT8OUboadoaD1W3A92n2Kl3qvE5vUwYxiP783JZJ7Nw= Subject key identifier: 5C:3C:F3:0B:D3:5F:2B:0D:4D:7D:C3:09:34:1E:4D:3F:D5:1E:F4:9C Certificate issuer: /CN=B2C11A2BBD411878ED1B44D79F137D9689C86840 Certificate serial: 0149 Authority key identifier: B2:C1:1A:2B:BD:41:18:78:ED:1B:44:D7:9F:13:7D:96:89:C8:68:40 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ssEaK71BGHjtG0TXnxN9lonIaEA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NETGUARD/XDzzC9NfKw1NfcMJNB5NP9Ue9Jw.roa Signing time: Mon 26 Aug 2024 05:23:03 +0000 ROA not before: Mon 26 Aug 2024 05:23:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131652 IP address blocks: 103.160.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NETGUARD/ssEaK71BGHjtG0TXnxN9lonIaEA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NETGUARD/ssEaK71BGHjtG0TXnxN9lonIaEA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ssEaK71BGHjtG0TXnxN9lonIaEA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2C11A2BBD411878ED1B44D79F137D9689C86840 Validity Not Before: Aug 26 05:23:03 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5C3CF30BD35F2B0D4D7DC309341E4D3FD51EF49C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f5:d0:a5:b6:22:45:62:fb:8f:0c:62:ef:46: f0:0e:22:cd:10:8a:a6:de:39:dd:f5:2f:97:a5:24: c9:d6:9f:01:89:33:b2:1e:f8:6a:cf:61:95:5b:3a: 67:0c:3f:32:86:52:7d:c4:30:c0:29:8f:40:62:aa: 32:c7:64:6d:ce:df:ad:bd:65:60:6d:19:4e:df:9f: f0:dd:8a:4f:2f:95:a6:d7:09:3c:04:6b:a0:b9:47: dd:19:71:22:c6:2d:0d:a7:ab:1c:15:0e:c3:24:4d: 47:b4:85:64:18:e9:af:d5:20:f4:d5:73:7b:e6:d4: 12:e3:9a:73:59:65:bc:c5:a9:ff:f8:2c:a2:75:22: 70:dd:43:8d:9f:be:12:2f:c1:d2:7c:0a:1b:07:ba: 73:bb:bb:08:3a:93:c3:ca:6c:4a:9c:c0:a9:22:9b: 84:01:ab:06:e0:18:25:86:cb:34:84:c6:8f:53:b3: b3:6c:ca:f1:7a:c0:4a:0e:2d:5b:dc:9d:26:c3:02: 49:25:fd:b4:3d:9e:85:c5:34:c1:a7:74:09:b9:88: 12:98:5f:19:c3:3f:d0:ce:bd:91:db:b0:df:86:24: 61:d3:a9:88:ea:6b:96:be:45:c6:9d:0c:90:87:0f: f4:a4:54:88:04:53:f0:f4:e6:d5:82:1d:df:79:15: ee:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3C:F3:0B:D3:5F:2B:0D:4D:7D:C3:09:34:1E:4D:3F:D5:1E:F4:9C X509v3 Authority Key Identifier: keyid:B2:C1:1A:2B:BD:41:18:78:ED:1B:44:D7:9F:13:7D:96:89:C8:68:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NETGUARD/ssEaK71BGHjtG0TXnxN9lonIaEA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ssEaK71BGHjtG0TXnxN9lonIaEA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NETGUARD/XDzzC9NfKw1NfcMJNB5NP9Ue9Jw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.160.224.0/23 Signature Algorithm: sha256WithRSAEncryption aa:42:7a:72:1f:3d:b8:d7:01:54:a6:c7:88:5a:95:52:d8:19: 60:93:e0:c5:fd:5e:f8:93:d4:87:0e:38:96:05:a5:a3:0c:eb: cd:13:c6:45:55:7c:33:a2:98:3d:4e:2f:dd:b9:79:58:55:8c: 63:e6:07:93:df:d9:b7:09:2d:85:f5:46:3a:a6:7e:80:d7:1e: 6f:1f:fc:34:ea:fa:06:2b:0a:ab:3d:41:08:f7:26:5d:fa:76: f4:47:a3:81:86:3c:29:80:af:f3:2e:d2:83:bb:7c:c2:6d:3c: d8:9f:ab:b3:3a:06:79:55:55:ff:a9:89:5f:7d:7d:d6:36:80: 18:37:f0:48:8c:9f:b1:aa:e4:e2:58:e9:f1:8d:ee:c9:c1:db: da:fb:a1:38:92:f2:24:80:7f:e5:3f:2e:bd:da:25:10:38:89: 31:e2:04:34:4a:86:0f:f6:11:16:02:72:c3:18:13:f9:0e:13: c5:55:2e:c8:22:4a:5a:ab:f5:e8:da:c9:96:5e:87:25:b5:1a: 83:fa:8f:97:40:47:d2:fb:2c:f9:03:e6:5e:9b:4f:e2:db:5f: 4e:05:7f:76:24:83:aa:01:ac:a3:e4:b8:66:6b:35:b9:55:0f: 33:a0:18:79:54:6b:1f:97:66:25:53:31:fd:57:40:4b:45:48: ed:d2:c2:82 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD MTFBMkJCRDQxMTg3OEVEMUI0NEQ3OUYxMzdEOTY4OUM4Njg0MDAeFw0yNDA4MjYw NTIzMDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVDM0NGMzBCRDM1RjJC MEQ0RDdEQzMwOTM0MUU0RDNGRDUxRUY0OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDc9dCltiJFYvuPDGLvRvAOIs0QiqbeOd31L5elJMnWnwGJM7Ie +GrPYZVbOmcMPzKGUn3EMMApj0BiqjLHZG3O3629ZWBtGU7fn/Ddik8vlabXCTwE a6C5R90ZcSLGLQ2nqxwVDsMkTUe0hWQY6a/VIPTVc3vm1BLjmnNZZbzFqf/4LKJ1 InDdQ42fvhIvwdJ8ChsHunO7uwg6k8PKbEqcwKkim4QBqwbgGCWGyzSExo9Ts7Ns yvF6wEoOLVvcnSbDAkkl/bQ9noXFNMGndAm5iBKYXxnDP9DOvZHbsN+GJGHTqYjq a5a+RcadDJCHD/SkVIgEU/D05tWCHd95Fe5rAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUXDzzC9NfKw1NfcMJNB5NP9Ue9JwwHwYDVR0jBBgwFoAUssEaK71BGHjtG0TX nxN9lonIaEAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkVUR1VB UkQvc3NFYUs3MUJHSGp0RzBUWG54Tjlsb25JYUVBLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9zc0VhSzcxQkdIanRHMFRYbnhOOWxvbklhRUEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ORVRHVUFSRC9YRHp6QzlOZkt3MU5m Y01KTkI1TlA5VWU5Sncucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6DgMA0GCSqGSIb3DQEBCwUAA4IBAQCqQnpyHz241wFUpseIWpVS2Blgk+DF /V74k9SHDjiWBaWjDOvNE8ZFVXwzopg9Ti/duXlYVYxj5geT39m3CS2F9UY6pn6A 1x5vH/w06voGKwqrPUEI9yZd+nb0R6OBhjwpgK/zLtKDu3zCbTzYn6uzOgZ5VVX/ qYlffX3WNoAYN/BIjJ+xquTiWOnxje7Jwdva+6E4kvIkgH/lPy692iUQOIkx4gQ0 SoYP9hEWAnLDGBP5DhPFVS7IIkpaq/Xo2smWXocltRqD+o+XQEfS+yz5A+Zem0/i 219OBX92JIOqAayj5LhmazW5VQ8zoBh5VGsfl2YlUzH9V0BLRUjt0sKC -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:32 2024 by rpki-client on console-fra.rpki-client.org