$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/1813bx9_meOz5L7OyETh35yM9_8.roa File: 1813bx9_meOz5L7OyETh35yM9_8.roa (raw, json) Hash identifier: l4AbTpWM8+mVipgGOtqQUlE09FfA5gBh1+abrAoRqM8= Subject key identifier: D7:CD:77:6F:1F:7F:99:E3:B3:E4:BE:CE:C8:44:E1:DF:9C:8C:F7:FF Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 0DA8 Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1813bx9_meOz5L7OyETh35yM9_8.roa Signing time: Fri 01 Sep 2023 09:24:23 +0000 ROA not before: Fri 01 Sep 2023 09:24:23 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 192.72.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 17:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3496 (0xda8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Sep 1 09:24:23 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D7CD776F1F7F99E3B3E4BECEC844E1DF9C8CF7FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:89:6b:97:49:de:64:e4:bd:84:d1:8b:70:7e: 13:74:47:91:f7:36:a6:c4:79:9f:a9:e8:df:2c:85: 9f:76:84:89:ed:49:e2:cf:33:47:5a:94:96:84:b5: 87:6a:14:5e:4d:98:fe:74:c7:53:44:5c:54:d5:47: cd:3a:c8:55:63:34:f3:45:af:22:51:5b:93:13:da: 72:8c:3b:08:b0:92:b7:58:37:58:01:26:56:83:12: 68:de:ed:b5:8f:82:fd:dd:f8:e1:74:4a:70:57:3e: 06:cb:2a:40:a4:84:ea:b2:89:02:2d:ed:ef:d2:64: 90:c6:8d:ed:0d:df:db:b3:75:55:6e:5e:66:3c:a3: 3b:48:62:cd:b4:2c:c7:38:78:94:9b:f5:de:1a:a2: 6d:60:4a:81:5b:f6:7b:f7:a6:ee:ea:ac:f1:21:81: dd:bf:8d:0d:98:f7:d2:a5:b5:46:be:99:4f:80:ec: 90:fd:ea:c9:fd:47:6c:f9:03:e9:40:ab:4c:a3:3d: a3:4f:d2:2e:d4:84:a4:4e:13:af:08:07:e3:57:de: 2b:f6:7c:cc:98:1a:35:93:25:45:d8:1f:6d:25:45: 0c:6c:6c:f9:83:bf:8a:dd:b9:25:fe:fa:a1:4a:64: 7b:c2:36:c9:68:26:6e:5d:4b:57:22:65:6c:8b:70: ca:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CD:77:6F:1F:7F:99:E3:B3:E4:BE:CE:C8:44:E1:DF:9C:8C:F7:FF X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1813bx9_meOz5L7OyETh35yM9_8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.192.0/19 Signature Algorithm: sha256WithRSAEncryption 29:69:99:42:d2:a5:bf:75:f8:f9:2e:38:13:73:60:67:5f:12: 9d:be:db:a7:d1:ab:9f:ac:e3:4c:30:36:ed:a2:55:70:1c:75: f0:16:6c:63:55:df:b0:d2:62:1e:35:4f:da:77:11:ff:23:49: d2:30:17:73:04:a0:86:e3:a1:34:72:51:b5:44:aa:92:e1:72: 51:2c:d3:b2:a5:77:92:4e:77:fe:60:35:e6:75:65:68:86:da: 3f:7e:3d:3e:db:6e:0d:9e:ed:48:41:5e:e9:f0:97:fc:61:c0: 71:1f:ec:c7:21:e7:a3:17:f3:9c:41:d2:e0:3c:ea:05:75:f9: 97:78:41:f0:f7:16:cd:65:d3:c6:9b:83:a4:53:00:0b:8b:9c: 9c:ad:39:84:9a:b8:45:ab:37:33:ab:bf:8f:c3:47:72:c0:73: 52:74:67:32:49:c6:d1:d5:35:2e:38:0b:a6:c3:f1:c0:75:db: ca:e1:8c:9f:ff:73:f6:ee:f8:6d:b7:6a:88:d7:80:51:b3:42: c2:0b:c1:2e:42:75:37:7a:08:e5:a6:ed:bf:c6:c4:ab:05:30: e1:ab:b8:5a:e1:05:fb:22:15:41:2f:90:83:6a:7c:b9:3e:b6: 0b:83:b7:a1:62:5f:07:b3:ca:37:f5:d8:fa:75:eb:a5:a9:cb: 15:ae:c7:f3 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDagwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yMzA5MDEw OTI0MjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ3Q0Q3NzZGMUY3Rjk5 RTNCM0U0QkVDRUM4NDRFMURGOUM4Q0Y3RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjiWuXSd5k5L2E0YtwfhN0R5H3NqbEeZ+p6N8shZ92hIntSeLP M0dalJaEtYdqFF5NmP50x1NEXFTVR806yFVjNPNFryJRW5MT2nKMOwiwkrdYN1gB JlaDEmje7bWPgv3d+OF0SnBXPgbLKkCkhOqyiQIt7e/SZJDGje0N39uzdVVuXmY8 oztIYs20LMc4eJSb9d4aom1gSoFb9nv3pu7qrPEhgd2/jQ2Y99KltUa+mU+A7JD9 6sn9R2z5A+lAq0yjPaNP0i7UhKROE68IB+NX3iv2fMyYGjWTJUXYH20lRQxsbPmD v4rduSX++qFKZHvCNsloJm5dS1ciZWyLcMoXAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU1813bx9/meOz5L7OyETh35yM9/8wHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMTgxM2J4OV9tZU96NUw3T3lFVGgz NXlNOV84LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcBIwDAN BgkqhkiG9w0BAQsFAAOCAQEAKWmZQtKlv3X4+S44E3NgZ18Snb7bp9Grn6zjTDA2 7aJVcBx18BZsY1XfsNJiHjVP2ncR/yNJ0jAXcwSghuOhNHJRtUSqkuFyUSzTsqV3 kk53/mA15nVlaIbaP349PttuDZ7tSEFe6fCX/GHAcR/sxyHnoxfznEHS4DzqBXX5 l3hB8PcWzWXTxpuDpFMAC4ucnK05hJq4Ras3M6u/j8NHcsBzUnRnMknG0dU1LjgL psPxwHXbyuGMn/9z9u74bbdqiNeAUbNCwgvBLkJ1N3oI5abtv8bEqwUw4au4WuEF +yIVQS+Qg2p8uT62C4O3oWJfB7PKN/XY+nXrpanLFa7H8w== -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org