$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/7lSYSQi2QcdW-D-5Nmtc5bO7B5I.roa File: 7lSYSQi2QcdW-D-5Nmtc5bO7B5I.roa (raw, json) Hash identifier: 9d9+DsN2Wax3DllrBnwpgBsc2M109OtqATtatygg74U= Subject key identifier: EE:54:98:49:08:B6:41:C7:56:F8:3F:B9:36:6B:5C:E5:B3:BB:07:92 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 12FD Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7lSYSQi2QcdW-D-5Nmtc5bO7B5I.roa Signing time: Fri 01 Sep 2023 09:24:20 +0000 ROA not before: Fri 01 Sep 2023 09:24:20 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131602 IP address blocks: 60.245.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4861 (0x12fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:20 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=EE54984908B641C756F83FB9366B5CE5B3BB0792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:67:48:d2:e7:65:fc:ed:4e:ee:60:f5:c4: 70:bf:df:fb:eb:56:44:c7:47:65:86:29:e0:fb:a5: 80:f6:38:0d:cf:0d:3e:4f:16:44:1e:5d:6d:f0:fe: 7c:a6:5e:62:18:12:6c:b1:36:1a:8c:3e:a5:6e:ca: 4c:c8:e9:79:ee:aa:b7:e1:ab:54:d5:a0:49:1e:24: 56:bf:81:b8:df:d4:ec:54:f2:a8:9d:a8:ce:c6:b2: 15:f7:0e:39:1f:50:27:43:bc:38:9b:ea:06:82:bc: c2:e3:76:75:46:e9:1e:32:6a:59:54:45:e5:dd:8a: b2:69:1c:e5:61:e6:fc:d9:c6:cb:ed:64:a4:d4:3c: 97:e3:89:85:12:da:d3:35:63:4d:76:4e:7d:60:2a: 57:ea:19:cf:ed:ed:6a:84:75:37:e6:32:69:0f:b9: e7:e9:1e:ab:ae:aa:3f:a6:b8:aa:6a:8b:75:15:21: fb:04:89:34:34:b8:73:15:3d:75:13:12:9c:45:55: f1:ba:91:13:77:98:9d:9f:96:ca:b9:d7:21:b1:b3: 01:0f:93:76:7e:e0:cf:56:81:86:fe:a7:21:c5:46: 05:90:d3:f5:91:ef:4a:12:91:32:01:42:12:41:8f: 3e:a0:54:ce:aa:4f:10:7e:6b:24:d3:58:7b:0e:cf: bf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:54:98:49:08:B6:41:C7:56:F8:3F:B9:36:6B:5C:E5:B3:BB:07:92 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7lSYSQi2QcdW-D-5Nmtc5bO7B5I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.245.112.0/21 Signature Algorithm: sha256WithRSAEncryption 92:a0:f4:f2:af:79:1e:a3:73:27:f2:cf:b1:5f:13:a8:14:62: 2d:dc:8d:88:03:62:09:b6:e6:2c:05:6d:77:d9:26:5e:e0:75: a4:f5:9f:3d:79:55:49:f3:65:79:60:b6:f6:21:75:d8:6f:aa: d7:e7:63:10:5a:10:7b:41:65:ea:c2:bf:e6:b5:32:a2:f8:aa: 9e:ee:9f:23:68:7d:ee:86:bb:e9:47:5d:2a:dc:6a:1e:32:d0: 2f:bf:36:26:fb:eb:9a:a5:8d:8a:11:60:a4:5f:8e:13:ff:17: 73:15:4b:57:05:45:2a:99:b5:ed:60:7d:24:1c:6b:aa:88:cf: 32:73:34:2c:e0:f6:da:cb:b8:24:f2:f0:a3:9b:fa:fb:db:8c: 5e:d9:b0:ce:88:e0:fc:f1:4d:8d:b9:19:7b:95:90:78:5f:bc: 66:76:1d:00:5f:90:79:4f:38:41:96:bc:a4:d3:54:10:5c:e3: 03:d6:62:d9:90:c9:4a:39:bb:35:4e:a8:68:9e:0c:96:52:52: 51:14:b3:ad:a4:b5:59:64:d3:e2:3f:37:8b:ac:ab:db:98:32: 33:85:21:74:2a:64:71:3d:3a:d4:7c:53:8d:a6:d0:c1:79:45: c3:de:d1:75:d8:04:d7:5f:5c:b7:d3:99:38:50:b9:c6:dc:ca: f4:2d:30:b1 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEv0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVFNTQ5ODQ5MDhCNjQx Qzc1NkY4M0ZCOTM2NkI1Q0U1QjNCQjA3OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCl5mdI0udl/O1O7mD1xHC/3/vrVkTHR2WGKeD7pYD2OA3PDT5P FkQeXW3w/nymXmIYEmyxNhqMPqVuykzI6Xnuqrfhq1TVoEkeJFa/gbjf1OxU8qid qM7GshX3DjkfUCdDvDib6gaCvMLjdnVG6R4yallUReXdirJpHOVh5vzZxsvtZKTU PJfjiYUS2tM1Y012Tn1gKlfqGc/t7WqEdTfmMmkPuefpHquuqj+muKpqi3UVIfsE iTQ0uHMVPXUTEpxFVfG6kRN3mJ2flsq51yGxswEPk3Z+4M9WgYb+pyHFRgWQ0/WR 70oSkTIBQhJBjz6gVM6qTxB+ayTTWHsOz78nAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU7lSYSQi2QcdW+D+5Nmtc5bO7B5IwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvN2xTWVNRaTJRY2RXLUQtNU5tdGM1 Yk83QjVJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAzz1cDAN BgkqhkiG9w0BAQsFAAOCAQEAkqD08q95HqNzJ/LPsV8TqBRiLdyNiANiCbbmLAVt d9kmXuB1pPWfPXlVSfNleWC29iF12G+q1+djEFoQe0Fl6sK/5rUyoviqnu6fI2h9 7oa76UddKtxqHjLQL782JvvrmqWNihFgpF+OE/8XcxVLVwVFKpm17WB9JBxrqojP MnM0LOD22su4JPLwo5v6+9uMXtmwzojg/PFNjbkZe5WQeF+8ZnYdAF+QeU84QZa8 pNNUEFzjA9Zi2ZDJSjm7NU6oaJ4MllJSURSzraS1WWTT4j83i6yr25gyM4UhdCpk cT061HxTjabQwXlFw97RddgE119ct9OZOFC5xtzK9C0wsQ== -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org