$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/4F5PY61MicTWh_MdwUcId-CdVHg.roa File: 4F5PY61MicTWh_MdwUcId-CdVHg.roa (raw, json) Hash identifier: 8sSVe5kB6yXpmsI7G7gqRCMepZ6Murr1mXM84zGU7k8= Subject key identifier: E0:5E:4F:63:AD:4C:89:C4:D6:87:F3:1D:C1:47:08:77:E0:9D:54:78 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 12FC Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4F5PY61MicTWh_MdwUcId-CdVHg.roa Signing time: Fri 01 Sep 2023 09:24:20 +0000 ROA not before: Fri 01 Sep 2023 09:24:20 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 123.205.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4860 (0x12fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:20 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E05E4F63AD4C89C4D687F31DC1470877E09D5478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c7:da:4e:3c:dc:f4:e4:82:a5:cf:65:87:c9: 79:4c:1a:b8:75:13:34:66:ba:55:d9:c0:b8:61:c5: ba:ac:e4:c7:3a:61:02:d2:43:a7:9b:37:85:93:f1: 96:af:ee:e6:75:8e:2b:47:39:c8:a6:3c:e0:81:30: b4:2e:30:96:af:9e:cd:d2:73:35:79:1d:1a:57:28: 7c:49:a8:7b:90:1a:57:87:93:81:06:25:89:de:08: 3d:63:94:26:eb:11:68:c0:0e:18:18:81:6b:85:5e: c3:3b:c4:0d:c9:4f:21:52:a5:a4:48:73:28:75:24: 67:ce:0d:4e:2c:8a:1d:40:7f:2f:31:55:96:ea:d4: 66:63:13:57:02:6d:5b:a7:b0:0b:37:90:47:d8:e9: 2f:f2:b8:02:29:7a:cb:10:2c:31:4a:0c:6c:90:8f: da:bf:9c:07:e9:b2:97:43:df:a0:c9:b5:6c:3e:43: a2:70:a3:91:57:36:5f:55:40:0f:9b:68:00:51:80: 4c:76:db:72:d6:97:0a:e3:c2:70:49:73:ab:eb:30: a7:54:a3:19:8d:9e:b5:d8:d0:c2:fd:31:1d:54:06: 73:59:6b:89:aa:e1:d4:56:12:d9:51:8b:6d:7f:66: 4f:1b:3d:0a:c7:a4:3f:09:cb:c2:9c:37:a2:bf:71: d4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5E:4F:63:AD:4C:89:C4:D6:87:F3:1D:C1:47:08:77:E0:9D:54:78 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4F5PY61MicTWh_MdwUcId-CdVHg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.205.32.0/19 Signature Algorithm: sha256WithRSAEncryption 87:1b:09:45:bb:bd:6d:ec:95:bd:cb:19:92:ad:11:cc:c5:fb: af:b3:27:5b:7e:e7:47:65:0a:b7:16:c7:fe:45:d5:ae:0d:25: f2:ff:dd:96:a2:3c:eb:37:49:46:52:ed:f4:06:a8:35:61:18: fd:79:2f:9d:2b:f9:77:d5:f2:2e:81:00:88:91:2a:1f:71:a4: 26:95:e8:30:f4:8e:de:bb:b1:b5:29:05:77:c4:aa:62:fd:18: 7e:47:f9:4d:6d:76:e2:ce:f8:ad:63:4b:60:99:c1:5e:34:a8: f3:a7:1e:3f:11:eb:22:47:e6:9e:a2:b2:f9:b7:77:fd:a6:e2: 7a:e9:76:52:1a:5f:84:90:f2:2b:34:48:51:88:a7:b8:79:ee: 59:5d:63:48:7b:e8:6b:0e:11:57:24:36:ef:59:d2:8a:f5:f1: a5:f0:6d:bf:c9:2e:3c:27:11:e2:b7:29:4f:26:0a:a5:e1:93: 38:f2:37:6b:6b:e3:0f:5d:ef:7f:53:e0:a5:b1:db:cd:ef:c6: 85:b5:78:db:9e:1b:d0:ac:e0:3b:7a:df:07:f9:72:71:ec:5b: 0d:5d:04:4a:0d:5c:60:97:57:a2:e6:14:1e:0d:03:0d:8e:05: 0b:d7:bd:f1:8f:11:e2:2d:6c:88:e2:7c:b6:74:7a:bb:e4:9c: 4c:26:33:7b -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEvwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEUwNUU0RjYzQUQ0Qzg5 QzRENjg3RjMxREMxNDcwODc3RTA5RDU0NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFx9pOPNz05IKlz2WHyXlMGrh1EzRmulXZwLhhxbqs5Mc6YQLS Q6ebN4WT8Zav7uZ1jitHOcimPOCBMLQuMJavns3SczV5HRpXKHxJqHuQGleHk4EG JYneCD1jlCbrEWjADhgYgWuFXsM7xA3JTyFSpaRIcyh1JGfODU4sih1Afy8xVZbq 1GZjE1cCbVunsAs3kEfY6S/yuAIpessQLDFKDGyQj9q/nAfpspdD36DJtWw+Q6Jw o5FXNl9VQA+baABRgEx223LWlwrjwnBJc6vrMKdUoxmNnrXY0ML9MR1UBnNZa4mq 4dRWEtlRi21/Zk8bPQrHpD8Jy8KcN6K/cdThAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU4F5PY61MicTWh/MdwUcId+CdVHgwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvNEY1UFk2MU1pY1RXaF9NZHdVY0lk LUNkVkhnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXvNIDAN BgkqhkiG9w0BAQsFAAOCAQEAhxsJRbu9beyVvcsZkq0RzMX7r7MnW37nR2UKtxbH /kXVrg0l8v/dlqI86zdJRlLt9AaoNWEY/XkvnSv5d9XyLoEAiJEqH3GkJpXoMPSO 3ruxtSkFd8SqYv0Yfkf5TW124s74rWNLYJnBXjSo86cePxHrIkfmnqKy+bd3/abi eul2UhpfhJDyKzRIUYinuHnuWV1jSHvoaw4RVyQ271nSivXxpfBtv8kuPCcR4rcp TyYKpeGTOPI3a2vjD13vf1PgpbHbze/GhbV4254b0KzgO3rfB/lycexbDV0ESg1c YJdXouYUHg0DDY4FC9e98Y8R4i1siOJ8tnR6u+ScTCYzew== -----END CERTIFICATE-----Generated at Sun Jun 2 09:37:17 2024 by rpki-client on console-ams.rpki-client.org