$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/7WHpLkBMLZnFaZkiEQHhQrLefhk.roa File: 7WHpLkBMLZnFaZkiEQHhQrLefhk.roa (raw, json) Hash identifier: Oq7dK7EmHwID6D5pbDmgAExebcyM9dDi/lhEujRF0N4= Subject key identifier: ED:61:E9:2E:40:4C:2D:99:C5:69:99:22:11:01:E1:42:B2:DE:7E:19 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 132D Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7WHpLkBMLZnFaZkiEQHhQrLefhk.roa Signing time: Fri 01 Sep 2023 09:24:35 +0000 ROA not before: Fri 01 Sep 2023 09:24:35 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 60.245.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4909 (0x132d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:35 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=ED61E92E404C2D99C56999221101E142B2DE7E19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:23:41:af:0f:51:64:7e:6a:d4:1a:01:f9:52: 96:80:cf:be:f9:f9:77:96:ef:fe:82:97:e0:18:a2: b4:cb:57:86:b3:dc:3b:58:88:48:1b:70:01:e5:82: 60:f1:17:fe:e6:1c:91:12:8e:10:64:c5:c8:f7:46: ae:2a:6e:47:f7:09:15:63:54:44:84:7e:0b:27:e5: 2f:2d:40:86:45:a1:ab:03:fb:69:43:25:c4:d1:33: b5:05:fc:20:df:a8:4f:c7:d5:a4:c0:37:93:43:32: 24:23:21:7d:fe:ad:f2:56:31:21:58:81:b9:24:5f: dd:ce:d6:66:2f:1c:2f:23:17:ac:f2:8e:11:88:63: 7d:05:a5:bf:50:c6:b2:b2:47:e3:15:27:6d:00:f7: 14:b4:0e:5e:7c:4d:7f:25:55:e0:6e:8c:d2:0d:4a: 20:4f:e7:43:ef:0e:43:24:d8:c7:fc:34:97:85:85: c4:ea:74:19:35:84:8d:e5:56:b6:db:29:4f:6b:c7: f2:b3:33:5a:72:d0:cc:49:da:28:a6:43:80:f3:58: f2:ee:58:cc:21:67:86:25:5d:3b:6d:e0:18:57:38: 81:4a:09:e8:0e:ce:4c:1f:db:f0:a6:0f:41:29:11: 90:2c:63:b2:bf:2a:fb:14:c5:07:e0:16:5e:2b:5d: 77:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:61:E9:2E:40:4C:2D:99:C5:69:99:22:11:01:E1:42:B2:DE:7E:19 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7WHpLkBMLZnFaZkiEQHhQrLefhk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.245.64.0/19 Signature Algorithm: sha256WithRSAEncryption 23:70:c7:e6:fc:2c:a7:76:fa:d9:f9:69:9a:87:b2:c1:bc:9b: 0b:28:43:50:fb:b3:bd:83:be:7c:38:51:16:d6:69:15:82:74: 11:1e:57:2f:a6:c2:ca:8b:11:a5:cc:0e:8f:b7:90:8d:72:5a: 6a:b6:74:57:4c:78:92:dc:03:10:aa:8a:cf:f1:bf:12:9a:e4: b8:63:45:9c:1e:10:12:8e:ce:3e:e8:78:28:b7:57:97:10:1b: fd:bf:6a:af:83:3e:db:31:d4:b7:18:f8:42:cc:14:3b:1c:2c: cd:bf:66:5b:e2:61:e4:f6:60:d3:71:d2:24:a1:f7:6c:e5:5a: b9:2c:e3:71:14:6c:25:00:ad:81:da:c9:30:f7:2e:c0:f4:0a: 11:d9:29:6d:7d:86:43:ae:da:3d:58:d8:0a:68:dc:a6:ff:73: f5:1c:ca:c4:2b:28:e7:8b:24:7a:17:67:f4:aa:d3:9e:f3:11: f6:33:e1:03:a7:f0:91:8a:1e:ff:ab:c1:31:ec:6c:46:11:ea: 56:65:82:ed:12:95:cb:ac:4b:af:45:39:5c:35:b4:a8:98:68: 5b:6f:bc:f4:d3:39:dd:a3:a5:a3:e2:f9:51:37:34:61:00:70: ca:9f:72:69:b4:80:b0:dc:2d:83:6a:77:f6:8d:07:23:e9:46: d7:81:f6:fc -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEy0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MzVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVENjFFOTJFNDA0QzJE OTlDNTY5OTkyMjExMDFFMTQyQjJERTdFMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClI0GvD1FkfmrUGgH5UpaAz775+XeW7/6Cl+AYorTLV4az3DtY iEgbcAHlgmDxF/7mHJESjhBkxcj3Rq4qbkf3CRVjVESEfgsn5S8tQIZFoasD+2lD JcTRM7UF/CDfqE/H1aTAN5NDMiQjIX3+rfJWMSFYgbkkX93O1mYvHC8jF6zyjhGI Y30Fpb9QxrKyR+MVJ20A9xS0Dl58TX8lVeBujNINSiBP50PvDkMk2Mf8NJeFhcTq dBk1hI3lVrbbKU9rx/KzM1py0MxJ2iimQ4DzWPLuWMwhZ4YlXTtt4BhXOIFKCegO zkwf2/CmD0EpEZAsY7K/KvsUxQfgFl4rXXcxAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU7WHpLkBMLZnFaZkiEQHhQrLefhkwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvN1dIcExrQk1MWm5GYVpraUVRSGhR ckxlZmhrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBTz1QDAN BgkqhkiG9w0BAQsFAAOCAQEAI3DH5vwsp3b62flpmoeywbybCyhDUPuzvYO+fDhR FtZpFYJ0ER5XL6bCyosRpcwOj7eQjXJaarZ0V0x4ktwDEKqKz/G/EprkuGNFnB4Q Eo7OPuh4KLdXlxAb/b9qr4M+2zHUtxj4QswUOxwszb9mW+Jh5PZg03HSJKH3bOVa uSzjcRRsJQCtgdrJMPcuwPQKEdkpbX2GQ67aPVjYCmjcpv9z9RzKxCso54skehdn 9KrTnvMR9jPhA6fwkYoe/6vBMexsRhHqVmWC7RKVy6xLr0U5XDW0qJhoW2+89NM5 3aOlo+L5UTc0YQBwyp9yabSAsNwtg2p39o0HI+lG14H2/A== -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org