$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/0Qjv66WeGICIK38VYpCvU9MT-6Q.roa File: 0Qjv66WeGICIK38VYpCvU9MT-6Q.roa (raw, json) Hash identifier: j9BWGrY041sYzyj1DqNv9QG7u4RQG+KIxXL+MZ+7hjM= Subject key identifier: D1:08:EF:EB:A5:9E:18:80:88:2B:7F:15:62:90:AF:53:D3:13:FB:A4 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1699 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/0Qjv66WeGICIK38VYpCvU9MT-6Q.roa Signing time: Mon 26 Aug 2024 05:22:22 +0000 ROA not before: Mon 26 Aug 2024 05:22:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 136543 IP address blocks: 115.30.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5785 (0x1699) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D108EFEBA59E1880882B7F156290AF53D313FBA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f1:c8:59:50:1c:38:19:d1:f3:7a:22:f0:bd: 71:49:a4:c9:d2:f9:32:14:57:3d:c7:47:42:08:26: 71:97:e3:77:a2:07:c5:90:e8:67:2c:24:9f:db:88: 0b:9a:85:ad:98:ea:33:1f:49:b2:e7:71:17:de:b4: 1a:4b:ba:17:ec:98:5f:b7:18:32:d4:31:ab:22:0f: a4:d4:99:83:11:d2:0d:87:c0:76:db:f8:e4:24:9e: 69:87:92:24:63:a9:18:91:cb:b9:9f:06:94:c6:81: d2:c9:7e:97:e1:9b:e4:4c:76:8a:c5:bd:0e:d0:bc: 4b:4c:c2:ad:b7:08:a3:d2:d1:d7:ba:4e:2c:2f:f1: c5:76:d1:d7:23:c9:fb:6b:d5:65:7a:cc:c4:31:72: df:ee:37:50:d3:c1:be:b4:5b:4a:61:ec:86:2f:6d: d3:d6:2e:0f:52:6a:0a:42:ff:13:98:40:10:b2:a8: c4:43:e7:0a:04:25:09:8e:12:db:0a:7e:7a:23:9e: 34:2d:e5:05:59:2c:83:a2:7d:0d:e3:11:d2:4f:09: b7:f3:6c:ba:f8:b0:d4:68:8c:24:c9:97:a4:36:75: 19:fb:67:b1:82:9d:fd:6c:10:c0:a2:79:37:0f:5f: 33:80:d1:3c:9f:e8:aa:09:9e:a6:4e:a1:45:f2:3b: 7d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:08:EF:EB:A5:9E:18:80:88:2B:7F:15:62:90:AF:53:D3:13:FB:A4 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/0Qjv66WeGICIK38VYpCvU9MT-6Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.30.65.0/24 Signature Algorithm: sha256WithRSAEncryption 65:9f:18:57:d8:53:8b:60:67:4f:36:03:fb:c3:0f:db:82:52: 3f:d0:79:65:f9:e6:99:e1:b6:11:b6:50:28:72:97:cd:45:a9: 52:12:da:41:05:bc:47:d9:46:7e:ea:0f:ec:1b:af:e2:99:22: 9d:8d:39:a2:60:91:8f:f3:72:66:d5:44:d4:4d:35:7b:58:cb: 9f:d1:4b:9a:3d:d9:f7:77:06:a4:23:f7:53:41:1f:a6:40:21: 73:8e:95:3d:2a:5c:a5:9a:08:75:e2:f1:ad:02:36:2f:0d:1c: 67:5b:e6:1c:be:cd:6a:4f:9e:10:71:7c:46:0c:e6:5a:12:d4: a7:e0:7c:c2:41:f5:26:e6:40:3c:09:24:d7:8d:b2:50:a4:e7: a6:e2:3c:11:14:21:b5:05:a2:50:35:4a:9b:4c:2d:3b:50:b2: 0c:3e:12:f1:e4:ca:65:30:5e:d6:6f:ee:48:35:a7:d6:60:e4: 50:52:aa:9d:67:20:c9:ec:09:80:80:1f:df:d1:81:7d:f7:2f: 53:92:05:cb:78:13:4e:20:69:c5:d6:df:15:62:73:ca:d4:ef: 0b:ab:34:d7:5b:a6:2f:dc:33:18:53:2d:14:be:e7:40:2d:bc: 11:9b:50:de:a6:8b:23:b7:b1:f5:66:4d:4a:90:4c:6a:ec:c5: 5f:21:5a:2d -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFpkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyMjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQxMDhFRkVCQTU5RTE4 ODA4ODJCN0YxNTYyOTBBRjUzRDMxM0ZCQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDM8chZUBw4GdHzeiLwvXFJpMnS+TIUVz3HR0IIJnGX43eiB8WQ 6GcsJJ/biAuaha2Y6jMfSbLncRfetBpLuhfsmF+3GDLUMasiD6TUmYMR0g2HwHbb +OQknmmHkiRjqRiRy7mfBpTGgdLJfpfhm+RMdorFvQ7QvEtMwq23CKPS0de6Tiwv 8cV20dcjyftr1WV6zMQxct/uN1DTwb60W0ph7IYvbdPWLg9SagpC/xOYQBCyqMRD 5woEJQmOEtsKfnojnjQt5QVZLIOifQ3jEdJPCbfzbLr4sNRojCTJl6Q2dRn7Z7GC nf1sEMCieTcPXzOA0Tyf6KoJnqZOoUXyO33fAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU0Qjv66WeGICIK38VYpCvU9MT+6QwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMFFqdjY2V2VHSUNJSzM4VllwQ3ZV OU1ULTZRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHMeQTAN BgkqhkiG9w0BAQsFAAOCAQEAZZ8YV9hTi2BnTzYD+8MP24JSP9B5ZfnmmeG2EbZQ KHKXzUWpUhLaQQW8R9lGfuoP7Buv4pkinY05omCRj/NyZtVE1E01e1jLn9FLmj3Z 93cGpCP3U0EfpkAhc46VPSpcpZoIdeLxrQI2Lw0cZ1vmHL7Nak+eEHF8RgzmWhLU p+B8wkH1JuZAPAkk142yUKTnpuI8ERQhtQWiUDVKm0wtO1CyDD4S8eTKZTBe1m/u SDWn1mDkUFKqnWcgyewJgIAf39GBffcvU5IFy3gTTiBpxdbfFWJzytTvC6s011um L9wzGFMtFL7nQC28EZtQ3qaLI7ex9WZNSpBMauzFXyFaLQ== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:10 2024 by rpki-client on console-ams.rpki-client.org