$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/1a1kDaRKxONN79blCMVNnoGvj-k.roa File: 1a1kDaRKxONN79blCMVNnoGvj-k.roa (raw, json) Hash identifier: y/aDMT0C595KTZgU32Vy+ZoSyH7aWSN/E0/wLx8xnZo= Subject key identifier: D5:AD:64:0D:A4:4A:C4:E3:4D:EF:D6:E5:08:C5:4D:9E:81:AF:8F:E9 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1355 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1a1kDaRKxONN79blCMVNnoGvj-k.roa Signing time: Fri 01 Sep 2023 09:24:48 +0000 ROA not before: Fri 01 Sep 2023 09:24:48 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 112.104.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4949 (0x1355) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:48 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D5AD640DA44AC4E34DEFD6E508C54D9E81AF8FE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e9:65:71:c5:63:97:6c:65:7b:62:d9:dc:12: d4:fe:f7:26:2c:28:9e:28:b7:75:2f:bc:08:78:d4: b9:28:eb:c5:a4:78:b0:8b:1d:e6:27:50:e4:96:83: cb:cb:63:3a:1e:21:6e:8d:09:a5:01:27:50:49:ab: 05:08:dd:42:0c:c4:74:e7:1b:4f:d5:9d:2b:42:6c: 14:6f:b4:d8:98:c8:67:ac:a9:f0:8c:bb:2f:d4:ea: 36:ba:dd:f8:e4:e4:50:ab:16:35:e7:99:0d:70:d1: be:ba:26:dd:d5:4e:d6:1d:f7:58:8e:10:43:66:ac: 19:25:c0:4b:f2:5e:da:3f:d0:98:19:cf:0b:99:12: 7e:35:36:d0:03:7c:db:e1:26:54:e3:20:fd:69:00: 7a:78:f0:d1:22:8b:c1:2b:9e:76:56:1e:f3:16:25: d6:86:0c:4a:8e:83:5d:f0:f9:1e:65:68:1f:8d:2b: d9:da:10:6a:78:55:ac:44:2c:76:99:a2:62:ea:48: 2b:e5:9c:d7:75:01:8d:b2:10:92:fc:72:e8:bc:4e: af:87:42:24:3b:0f:af:fa:fc:3a:41:ed:63:e7:4f: e3:f2:05:e5:41:19:4c:7e:65:71:8e:39:e9:ae:9d: 08:ea:48:e3:6f:ac:1c:8d:a8:a9:3f:ab:42:4c:a1: 18:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AD:64:0D:A4:4A:C4:E3:4D:EF:D6:E5:08:C5:4D:9E:81:AF:8F:E9 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1a1kDaRKxONN79blCMVNnoGvj-k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.104.0.0/16 Signature Algorithm: sha256WithRSAEncryption 31:d8:c9:78:c8:9e:2f:9f:cd:32:5e:03:95:73:32:dc:c4:e3: 36:37:31:fc:78:47:4a:25:19:fd:f4:5f:4c:7a:44:27:dc:3c: 70:40:c8:31:31:eb:f8:e0:9b:a7:c0:b8:80:13:b4:80:d9:99: 70:0e:df:0e:52:48:8a:22:36:df:d3:77:b9:cf:1b:35:91:8c: 19:70:af:b4:5c:6b:3a:70:63:bf:80:b7:1f:a8:b5:74:6a:ef: df:d6:7c:02:83:f4:85:2f:16:4b:06:ea:53:8f:b5:47:6c:3e: 8b:d0:f4:8b:49:cb:51:3d:78:61:f5:fc:04:3f:e0:3a:3d:82: eb:36:85:8d:89:ba:56:4e:5d:ab:f4:77:d6:11:f1:7c:a0:a1: 4b:05:56:bd:32:b0:37:96:3c:8a:cd:71:03:9f:ab:3d:82:63: 8f:30:5f:18:d0:3a:c8:52:0c:85:0f:e1:2b:52:cc:3f:bf:d7: cf:b1:3c:65:30:d7:86:58:25:52:5e:6c:d9:b1:f8:c9:21:a4: 4a:27:e7:f2:14:5b:a3:89:bd:f6:51:c6:56:ea:d6:9c:fc:71: dc:62:bf:60:aa:d6:3b:11:67:ba:85:aa:b8:03:10:5b:2e:c7: ee:8d:0e:89:3a:39:50:5e:11:b1:b5:23:92:bd:70:df:66:10: 6c:36:b3:92 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICE1UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ1QUQ2NDBEQTQ0QUM0 RTM0REVGRDZFNTA4QzU0RDlFODFBRjhGRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDd6WVxxWOXbGV7YtncEtT+9yYsKJ4ot3UvvAh41Lko68WkeLCL HeYnUOSWg8vLYzoeIW6NCaUBJ1BJqwUI3UIMxHTnG0/VnStCbBRvtNiYyGesqfCM uy/U6ja63fjk5FCrFjXnmQ1w0b66Jt3VTtYd91iOEENmrBklwEvyXto/0JgZzwuZ En41NtADfNvhJlTjIP1pAHp48NEii8ErnnZWHvMWJdaGDEqOg13w+R5laB+NK9na EGp4VaxELHaZomLqSCvlnNd1AY2yEJL8cui8Tq+HQiQ7D6/6/DpB7WPnT+PyBeVB GUx+ZXGOOemunQjqSONvrByNqKk/q0JMoRgTAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQU1a1kDaRKxONN79blCMVNnoGvj+kwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMWExa0RhUkt4T05ONzlibENNVk5u b0d2ai1rLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAHBoMA0G CSqGSIb3DQEBCwUAA4IBAQAx2Ml4yJ4vn80yXgOVczLcxOM2NzH8eEdKJRn99F9M ekQn3DxwQMgxMev44JunwLiAE7SA2ZlwDt8OUkiKIjbf03e5zxs1kYwZcK+0XGs6 cGO/gLcfqLV0au/f1nwCg/SFLxZLBupTj7VHbD6L0PSLSctRPXhh9fwEP+A6PYLr NoWNibpWTl2r9HfWEfF8oKFLBVa9MrA3ljyKzXEDn6s9gmOPMF8Y0DrIUgyFD+Er Usw/v9fPsTxlMNeGWCVSXmzZsfjJIaRKJ+fyFFujib32UcZW6tac/HHcYr9gqtY7 EWe6haq4AxBbLsfujQ6JOjlQXhGxtSOSvXDfZhBsNrOS -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org