$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/1vuzg6bO0UGwzNBvFz99OvKutQI.roa File: 1vuzg6bO0UGwzNBvFz99OvKutQI.roa (raw, json) Hash identifier: havx3X0NlD6f9a2qbxa3dRrSUrRL5iwm0FfZvXZG8is= Subject key identifier: D6:FB:B3:83:A6:CE:D1:41:B0:CC:D0:6F:17:3F:7D:3A:F2:AE:B5:02 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1309 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1vuzg6bO0UGwzNBvFz99OvKutQI.roa Signing time: Fri 01 Sep 2023 09:24:24 +0000 ROA not before: Fri 01 Sep 2023 09:24:24 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 115.30.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4873 (0x1309) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:24 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D6FBB383A6CED141B0CCD06F173F7D3AF2AEB502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3c:ed:97:6b:d6:2c:60:5d:7b:e5:62:2f:30: e0:5c:7d:87:20:26:2e:46:86:b4:46:f2:4f:22:14: 0d:ef:12:b6:22:91:e2:ad:52:4b:6f:62:24:96:66: 4a:4a:7e:c1:b5:30:9d:90:fa:be:3b:c3:2d:1a:87: 8f:c2:68:95:dd:4d:ea:fd:83:ea:d9:2d:21:d2:1d: 4a:4f:0e:b9:8f:8a:13:2d:3a:b8:53:9b:65:70:a3: b9:e4:13:82:0e:54:80:8e:5f:12:31:28:89:f9:91: cb:46:84:d9:da:63:bc:aa:cf:d3:ec:3c:89:1b:3c: dc:d6:83:ab:a5:11:2f:bb:9c:aa:ec:92:b7:56:72: 60:aa:a3:5e:0a:90:a3:a4:3e:da:e4:cc:96:5f:22: e5:51:b0:37:27:5f:7e:4b:f2:5b:5c:75:4d:2c:37: 31:33:c1:8c:52:77:0f:81:d5:0c:13:f1:7d:9f:47: 7c:0f:3e:ca:c8:dc:c5:9e:18:80:40:78:b5:62:86: 81:79:37:9c:d8:55:a8:97:00:9c:39:80:59:b5:3c: 76:6f:d1:36:0f:c6:2b:cd:a6:f1:95:db:5d:b5:da: b8:0f:bc:6c:52:07:d3:02:31:7b:3c:6b:06:ee:77: 8b:60:4e:91:2b:ae:f8:e5:7c:90:6c:84:8e:3d:a2: e0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FB:B3:83:A6:CE:D1:41:B0:CC:D0:6F:17:3F:7D:3A:F2:AE:B5:02 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1vuzg6bO0UGwzNBvFz99OvKutQI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.30.64.0/18 Signature Algorithm: sha256WithRSAEncryption ac:53:ea:43:41:7f:85:8b:96:bd:3b:d6:27:02:38:91:73:5a: 3f:c9:c9:5b:f3:61:0d:48:26:c7:be:46:fc:77:bb:f9:c3:fe: 7e:c5:67:c1:fb:02:4e:61:5a:49:ea:16:b7:8b:56:50:06:f5: c6:c8:82:b5:25:09:eb:45:c3:d5:04:9e:31:8f:60:df:7f:79: d9:d1:62:58:5d:b3:ae:b9:04:cb:4d:32:f3:59:14:6b:39:0b: e6:33:97:88:ba:1c:65:b4:a4:f7:6e:ec:9d:0b:84:ba:11:af: 8f:f5:ac:5d:a3:66:c5:7a:9d:ea:6b:96:3b:75:4b:81:9c:ab: 37:7e:12:70:8d:af:0e:2a:ca:12:80:35:c1:7b:78:47:a5:5c: 58:73:e1:1d:fd:de:cc:94:38:f4:d9:1f:6e:25:5f:c9:37:14: bf:b5:69:db:f1:a8:3e:db:50:96:27:58:3f:f9:56:99:87:9a: 9e:b9:c8:01:64:91:57:2a:c5:af:e8:f6:ad:da:7b:53:50:09: 70:bf:75:6e:9f:38:be:1d:46:2c:ae:4f:54:5d:df:f8:c6:75: 71:1c:2e:66:7c:5f:b0:c9:62:21:05:ab:8e:26:a0:1b:23:dd: 18:dd:67:22:67:20:59:06:78:41:5c:a5:ec:a2:47:ae:cc:50: 8f:df:da:2a -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEwkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ2RkJCMzgzQTZDRUQx NDFCMENDRDA2RjE3M0Y3RDNBRjJBRUI1MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMPO2Xa9YsYF175WIvMOBcfYcgJi5GhrRG8k8iFA3vErYikeKt UktvYiSWZkpKfsG1MJ2Q+r47wy0ah4/CaJXdTer9g+rZLSHSHUpPDrmPihMtOrhT m2Vwo7nkE4IOVICOXxIxKIn5kctGhNnaY7yqz9PsPIkbPNzWg6ulES+7nKrskrdW cmCqo14KkKOkPtrkzJZfIuVRsDcnX35L8ltcdU0sNzEzwYxSdw+B1QwT8X2fR3wP PsrI3MWeGIBAeLVihoF5N5zYVaiXAJw5gFm1PHZv0TYPxivNpvGV21212rgPvGxS B9MCMXs8awbud4tgTpErrvjlfJBshI49ouBFAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU1vuzg6bO0UGwzNBvFz99OvKutQIwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMXZ1emc2Yk8wVUd3ek5CdkZ6OTlP dkt1dFFJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnMeQDAN BgkqhkiG9w0BAQsFAAOCAQEArFPqQ0F/hYuWvTvWJwI4kXNaP8nJW/NhDUgmx75G /He7+cP+fsVnwfsCTmFaSeoWt4tWUAb1xsiCtSUJ60XD1QSeMY9g33952dFiWF2z rrkEy00y81kUazkL5jOXiLocZbSk927snQuEuhGvj/WsXaNmxXqd6muWO3VLgZyr N34ScI2vDirKEoA1wXt4R6VcWHPhHf3ezJQ49NkfbiVfyTcUv7Vp2/GoPttQlidY P/lWmYeanrnIAWSRVyrFr+j2rdp7U1AJcL91bp84vh1GLK5PVF3f+MZ1cRwuZnxf sMliIQWrjiagGyPdGN1nImcgWQZ4QVyl7KJHrsxQj9/aKg== -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org