$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/2kuX__S_Hb2LR79AzgXgu10Sdac.roa File: 2kuX__S_Hb2LR79AzgXgu10Sdac.roa (raw, json) Hash identifier: 9c25t+QNp2DnQzkhbVFVO9s/Sgh9X8dAVcDTQGPQo9Q= Subject key identifier: DA:4B:97:FF:F4:BF:1D:BD:8B:47:BF:40:CE:05:E0:BB:5D:12:75:A7 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 16CE Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2kuX__S_Hb2LR79AzgXgu10Sdac.roa Signing time: Mon 26 Aug 2024 05:22:38 +0000 ROA not before: Mon 26 Aug 2024 05:22:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 60.245.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5838 (0x16ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:38 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DA4B97FFF4BF1DBD8B47BF40CE05E0BB5D1275A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9b:ed:12:45:4e:b2:22:25:eb:e0:02:e2:44: 36:1c:41:ca:b8:aa:0e:71:85:44:76:24:71:82:30: 9c:4e:d0:11:f9:ad:ea:5c:e9:c0:2e:04:09:a7:48: cb:b3:02:22:b4:8a:62:3e:39:34:ac:e8:4f:e2:d2: bb:be:2d:06:1d:42:57:d0:44:bc:9e:39:eb:73:b4: 6c:06:ab:ee:ef:ee:3f:f7:61:6a:61:1e:f9:f3:da: 39:6f:ba:39:28:02:14:fd:5f:21:90:58:23:ab:0b: 11:35:e7:e9:22:01:03:e1:52:b6:14:64:96:38:a1: ba:84:24:4b:de:56:5e:f9:c7:0c:2b:78:32:c6:8b: 3e:66:c2:0b:8c:24:0c:65:8e:8e:ef:09:8f:dd:8f: 3e:09:91:04:d5:75:67:bb:8b:a3:32:6f:7c:35:b2: 55:23:d0:01:8e:91:8b:14:28:e2:09:bf:cc:f4:9e: 52:07:1c:91:85:e3:55:67:b1:53:ce:3d:07:9c:a9: fc:0b:b6:51:7d:89:82:c2:96:db:2a:09:8f:00:71: 62:7b:89:d7:fb:7c:a9:ee:18:25:6c:9e:e7:cb:34: e1:7a:0a:d1:bc:35:e1:35:c2:e8:e3:9d:9c:3b:d4: 4a:d4:49:51:35:dc:1c:06:26:0e:88:bb:e8:c5:6d: 5f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4B:97:FF:F4:BF:1D:BD:8B:47:BF:40:CE:05:E0:BB:5D:12:75:A7 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2kuX__S_Hb2LR79AzgXgu10Sdac.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.245.112.0/21 Signature Algorithm: sha256WithRSAEncryption 97:69:f8:02:e4:53:0d:4b:c7:07:1a:b7:aa:80:0e:44:c9:b7: 88:c1:f5:2c:35:43:ec:36:22:00:e4:1f:5b:b6:7e:16:8d:88: 66:58:c0:ec:d5:02:52:16:43:0c:45:06:3f:7e:b3:2e:17:b7: 18:5c:8f:8e:7b:5e:b1:5b:de:61:0d:67:a6:52:83:52:75:ee: 20:aa:0d:2b:1e:58:07:1d:da:b4:95:90:b4:50:36:22:5d:97: 9e:a5:1a:63:f7:7c:ba:d1:e4:56:13:25:18:a0:2a:5e:b3:48: 73:91:d7:aa:a2:9c:4d:85:b4:ce:a0:f9:e9:29:4d:71:39:aa: be:51:8a:f7:62:30:88:0c:eb:e6:c8:c3:b3:e5:14:64:37:67: 52:8e:0c:73:30:df:1f:79:46:2f:f9:a3:7f:27:21:80:4d:db: 8e:92:12:14:ab:9b:dd:4e:5d:02:a2:9f:79:e5:bd:9b:60:da: 71:d8:13:90:8b:78:41:51:59:c6:d3:d3:83:8c:44:72:f4:f7: a4:80:ee:7f:66:1e:38:59:e1:eb:ef:1d:58:c2:96:0e:7b:d4: ef:20:90:fe:88:af:f1:4f:bc:e7:c5:ff:32:28:bb:79:82:3f: 9a:f5:14:79:f8:9f:05:52:93:6c:02:39:3f:fb:97:ed:15:ad: c3:e5:af:fd -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFs4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERBNEI5N0ZGRjRCRjFE QkQ4QjQ3QkY0MENFMDVFMEJCNUQxMjc1QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2m+0SRU6yIiXr4ALiRDYcQcq4qg5xhUR2JHGCMJxO0BH5repc 6cAuBAmnSMuzAiK0imI+OTSs6E/i0ru+LQYdQlfQRLyeOetztGwGq+7v7j/3YWph Hvnz2jlvujkoAhT9XyGQWCOrCxE15+kiAQPhUrYUZJY4obqEJEveVl75xwwreDLG iz5mwguMJAxljo7vCY/djz4JkQTVdWe7i6Myb3w1slUj0AGOkYsUKOIJv8z0nlIH HJGF41VnsVPOPQecqfwLtlF9iYLCltsqCY8AcWJ7idf7fKnuGCVsnufLNOF6CtG8 NeE1wujjnZw71ErUSVE13BwGJg6Iu+jFbV9FAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU2kuX//S/Hb2LR79AzgXgu10SdacwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMmt1WF9fU19IYjJMUjc5QXpnWGd1 MTBTZGFjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAzz1cDAN BgkqhkiG9w0BAQsFAAOCAQEAl2n4AuRTDUvHBxq3qoAORMm3iMH1LDVD7DYiAOQf W7Z+Fo2IZljA7NUCUhZDDEUGP36zLhe3GFyPjntesVveYQ1nplKDUnXuIKoNKx5Y Bx3atJWQtFA2Il2XnqUaY/d8utHkVhMlGKAqXrNIc5HXqqKcTYW0zqD56SlNcTmq vlGK92IwiAzr5sjDs+UUZDdnUo4MczDfH3lGL/mjfychgE3bjpISFKub3U5dAqKf eeW9m2DacdgTkIt4QVFZxtPTg4xEcvT3pIDuf2YeOFnh6+8dWMKWDnvU7yCQ/oiv 8U+858X/Mii7eYI/mvUUefifBVKTbAI5P/uX7RWtw+Wv/Q== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:33 2024 by rpki-client on console-ams.rpki-client.org