$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/NtjKZpAPVp4w66j4QER99G0n03M.roa File: NtjKZpAPVp4w66j4QER99G0n03M.roa (raw, json) Hash identifier: vmyA1LsIt5ZxgqA1aMMCKD2zjF3Wm28+i6M8m9AEEZ4= Subject key identifier: 36:D8:CA:66:90:0F:56:9E:30:EB:A8:F8:40:44:7D:F4:6D:27:D3:73 Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0B67 Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/NtjKZpAPVp4w66j4QER99G0n03M.roa Signing time: Fri 01 Sep 2023 09:45:56 +0000 ROA not before: Fri 01 Sep 2023 09:45:56 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18182 IP address blocks: 2404:80::/28 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 10:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2919 (0xb67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Sep 1 09:45:56 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=36D8CA66900F569E30EBA8F840447DF46D27D373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:da:ac:89:8f:3a:48:7f:9b:e4:10:ba:c2:cb: 99:1f:85:75:eb:6e:9f:80:60:cf:d6:cb:47:a8:33: ad:67:d0:4d:bc:a0:bf:cd:33:5c:86:99:c7:a6:8c: 01:57:12:56:43:56:ae:15:7d:8d:8b:b7:44:d2:1f: 82:9f:18:05:45:17:d7:cf:ae:42:ea:ac:ed:da:32: b2:76:35:96:49:e2:54:6c:f1:9c:1e:ed:c3:96:ca: b2:cf:92:d3:01:8a:b5:af:20:76:f4:06:74:40:fc: 16:cd:a1:04:20:2b:62:82:84:4a:ae:28:ee:97:bf: 2b:43:76:5f:b1:91:77:c9:1c:0b:1b:a8:60:f9:66: c8:d8:76:ba:23:c6:c0:16:ee:69:42:8b:44:ec:d0: 77:2e:ce:20:0b:d7:a7:db:42:57:4d:2c:b3:df:42: 27:7c:99:f1:4d:ed:cd:df:ba:c0:f0:ee:0d:0b:a9: 90:96:b5:1c:67:b8:e7:17:5d:bb:bd:59:70:48:1d: 51:0e:9a:ad:e3:c2:ef:3a:b5:89:64:5a:f9:87:09: 68:3f:90:65:92:4c:68:56:6d:b6:3b:ac:88:ad:ae: d2:f0:d9:7b:d9:81:6b:a2:e5:2c:16:81:2f:17:49: 9b:90:2c:00:99:e9:74:06:b5:7f:66:0d:59:70:69: 4e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D8:CA:66:90:0F:56:9E:30:EB:A8:F8:40:44:7D:F4:6D:27:D3:73 X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/NtjKZpAPVp4w66j4QER99G0n03M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:80::/28 Signature Algorithm: sha256WithRSAEncryption 5e:b2:58:bd:6b:ae:c1:66:e8:06:b4:e4:b3:6b:92:8f:bc:88: d4:bf:7d:2f:8b:72:e7:13:dd:0a:94:bd:27:9a:70:3a:fb:9d: c5:0c:e5:58:e4:58:5d:50:64:e8:a1:bc:e0:2c:0d:19:7b:a4: c6:f7:33:a8:f2:e0:29:2f:f8:b7:92:56:7a:c6:45:99:44:31: c8:92:d6:7c:20:72:70:ff:31:22:38:3e:c4:ec:1d:83:b5:79: 18:47:f8:c1:92:e9:d1:a6:7a:ab:24:47:fc:58:30:68:92:35: 0c:4b:4e:82:00:a6:25:99:9c:ea:5e:3d:d7:a0:09:c1:a5:e8: 13:46:ca:2b:a5:91:a1:86:0c:35:53:94:10:57:eb:2c:43:eb: 29:c5:c9:77:4e:f3:45:79:4b:77:ba:c9:ac:72:03:69:b3:4e: b2:26:fa:e3:7e:3a:91:ad:ac:2f:7b:49:32:7f:9d:38:86:c0: d1:1c:30:17:96:47:9a:06:98:8f:14:2b:89:bd:09:b3:c1:5b: b3:c1:35:65:2c:cd:3e:c6:c4:e2:3b:f1:86:06:0f:83:29:d5: 8e:3d:3a:cd:1e:c8:98:82:6a:d6:08:23:1b:62:fc:bb:bc:f5: 87:a4:88:4b:4b:41:a0:63:5c:8f:06:6f:fd:b7:1e:0f:48:d4: de:fb:12:16 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICC2cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yMzA5MDEw OTQ1NTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM2RDhDQTY2OTAwRjU2 OUUzMEVCQThGODQwNDQ3REY0NkQyN0QzNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB2qyJjzpIf5vkELrCy5kfhXXrbp+AYM/Wy0eoM61n0E28oL/N M1yGmcemjAFXElZDVq4VfY2Lt0TSH4KfGAVFF9fPrkLqrO3aMrJ2NZZJ4lRs8Zwe 7cOWyrLPktMBirWvIHb0BnRA/BbNoQQgK2KChEquKO6XvytDdl+xkXfJHAsbqGD5 ZsjYdrojxsAW7mlCi0Ts0HcuziAL16fbQldNLLPfQid8mfFN7c3fusDw7g0LqZCW tRxnuOcXXbu9WXBIHVEOmq3jwu86tYlkWvmHCWg/kGWSTGhWbbY7rIitrtLw2XvZ gWui5SwWgS8XSZuQLACZ6XQGtX9mDVlwaU6vAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUNtjKZpAPVp4w66j4QER99G0n03MwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9OdGpLWnBBUFZwNHc2Nmo0UUVS OTlHMG4wM00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJAQA gDANBgkqhkiG9w0BAQsFAAOCAQEAXrJYvWuuwWboBrTks2uSj7yI1L99L4ty5xPd CpS9J5pwOvudxQzlWORYXVBk6KG84CwNGXukxvczqPLgKS/4t5JWesZFmUQxyJLW fCBycP8xIjg+xOwdg7V5GEf4wZLp0aZ6qyRH/FgwaJI1DEtOggCmJZmc6l4916AJ waXoE0bKK6WRoYYMNVOUEFfrLEPrKcXJd07zRXlLd7rJrHIDabNOsib64346ka2s L3tJMn+dOIbA0RwwF5ZHmgaYjxQrib0Js8Fbs8E1ZSzNPsbE4jvxhgYPgynVjj06 zR7ImIJq1ggjG2L8u7z1h6SIS0tBoGNcjwZv/bceD0jU3vsSFg== -----END CERTIFICATE-----Generated at Sat Jun 1 22:20:21 2024 by rpki-client on console-fra.rpki-client.org