$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/0ViVLwEi1YSTFZisfnWHJCbxCFQ.roa File: 0ViVLwEi1YSTFZisfnWHJCbxCFQ.roa (raw, json) Hash identifier: TgrZYIjvnaiYlFX9QlT8pz5bOl1jkM+NQ0ckfNSr7wM= Subject key identifier: D1:58:95:2F:01:22:D5:84:93:15:98:AC:7E:75:87:24:26:F1:08:54 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1344 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/0ViVLwEi1YSTFZisfnWHJCbxCFQ.roa Signing time: Fri 01 Sep 2023 09:24:43 +0000 ROA not before: Fri 01 Sep 2023 09:24:43 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 175.180.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4932 (0x1344) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:43 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D158952F0122D584931598AC7E75872426F10854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d5:48:15:29:7b:d1:9d:18:5c:f6:93:23:8b: f4:22:65:da:da:db:0e:a3:c6:06:7f:de:7c:93:c9: 2b:ec:f8:62:af:79:32:56:5d:90:4b:dd:c1:43:23: f8:8f:f3:f7:33:0d:9b:78:f2:bf:4b:ee:a3:00:06: 22:9c:51:dc:19:2f:dd:24:b3:b6:09:71:fb:89:a6: 41:4c:b6:34:a3:c3:05:3e:31:f0:91:55:1e:c5:66: 41:43:80:a2:1b:2a:8c:05:44:fb:cf:64:4e:71:ba: e6:07:89:1f:f4:09:a8:70:e5:36:91:13:6d:16:af: c6:2f:2f:97:26:d7:b4:7d:15:0c:65:16:6d:cb:4f: 5a:98:9f:cb:72:60:94:02:e6:a5:78:33:75:92:bd: 1f:3a:54:27:d8:c7:59:5e:2c:cd:8a:c2:6b:a0:3d: d5:a8:bb:56:17:a1:94:24:33:5b:6d:de:36:95:a8: d6:62:ea:83:5a:02:ef:96:aa:67:89:27:7a:49:2d: e8:da:dc:f2:91:e4:c8:95:6f:5d:78:8c:55:8e:df: b9:4a:49:85:b4:fa:e9:e6:be:fb:67:c7:11:09:86: b8:16:9e:7a:12:43:8a:42:6d:d0:27:af:70:72:0b: 80:df:f3:9b:ee:ed:40:c2:ba:f1:98:fb:73:7e:8a: fe:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:58:95:2F:01:22:D5:84:93:15:98:AC:7E:75:87:24:26:F1:08:54 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/0ViVLwEi1YSTFZisfnWHJCbxCFQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.180.0.0/14 Signature Algorithm: sha256WithRSAEncryption bb:36:41:f4:30:43:9d:f2:64:01:00:28:35:c8:8e:84:73:91: 96:16:0c:22:e0:f5:92:b4:7c:fa:ea:7a:a4:ac:90:a1:26:e3: 8d:13:89:89:b8:ba:bb:76:ff:eb:ac:3b:8a:fa:be:f5:50:de: fb:27:63:e0:ca:db:a7:bf:91:02:8f:af:ca:e1:f0:85:34:5a: 0f:6d:a3:03:82:7c:1d:9b:10:cb:9d:55:6e:27:a8:cd:96:1d: 28:0d:b2:5d:10:27:49:45:5c:e1:e7:02:b2:24:50:ea:9e:2f: dd:e3:40:88:f9:fc:7c:c7:fe:98:94:4e:02:82:fa:22:6a:a2: 70:ed:5a:d9:f5:39:bf:28:e5:88:7d:da:0f:f5:69:01:48:f3: 7b:63:f2:93:b8:f2:ff:32:86:72:2c:45:c3:f1:cb:55:63:65: 95:e3:43:9a:8b:1c:24:a1:f7:22:23:02:e3:c3:fc:4a:6f:45: af:05:9b:58:36:3b:a1:d1:84:98:8a:c2:a4:f2:39:5a:30:45: dc:85:32:ea:71:53:cc:b8:cc:86:7a:a6:4c:0b:21:af:eb:26: 90:44:0a:30:d3:74:fa:96:57:a2:76:5b:2a:63:a6:22:ae:63: a7:5f:96:d9:1b:99:3e:00:a0:16:59:ff:19:26:fb:e9:4a:ee: 53:0e:95:d4 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICE0QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQxNTg5NTJGMDEyMkQ1 ODQ5MzE1OThBQzdFNzU4NzI0MjZGMTA4NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR1UgVKXvRnRhc9pMji/QiZdra2w6jxgZ/3nyTySvs+GKveTJW XZBL3cFDI/iP8/czDZt48r9L7qMABiKcUdwZL90ks7YJcfuJpkFMtjSjwwU+MfCR VR7FZkFDgKIbKowFRPvPZE5xuuYHiR/0Cahw5TaRE20Wr8YvL5cm17R9FQxlFm3L T1qYn8tyYJQC5qV4M3WSvR86VCfYx1leLM2KwmugPdWou1YXoZQkM1tt3jaVqNZi 6oNaAu+WqmeJJ3pJLeja3PKR5MiVb114jFWO37lKSYW0+unmvvtnxxEJhrgWnnoS Q4pCbdAnr3ByC4Df85vu7UDCuvGY+3N+iv5JAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQU0ViVLwEi1YSTFZisfnWHJCbxCFQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMFZpVkx3RWkxWVNURlppc2ZuV0hK Q2J4Q0ZRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAq+0MA0G CSqGSIb3DQEBCwUAA4IBAQC7NkH0MEOd8mQBACg1yI6Ec5GWFgwi4PWStHz66nqk rJChJuONE4mJuLq7dv/rrDuK+r71UN77J2Pgytunv5ECj6/K4fCFNFoPbaMDgnwd mxDLnVVuJ6jNlh0oDbJdECdJRVzh5wKyJFDqni/d40CI+fx8x/6YlE4CgvoiaqJw 7VrZ9Tm/KOWIfdoP9WkBSPN7Y/KTuPL/MoZyLEXD8ctVY2WV40OaixwkofciIwLj w/xKb0WvBZtYNjuh0YSYisKk8jlaMEXchTLqcVPMuMyGeqZMCyGv6yaQRAow03T6 lleidlsqY6YirmOnX5bZG5k+AKAWWf8ZJvvpSu5TDpXU -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org