$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/8JXgqWltGTihBLsb_MsvP8I7LuU.roa File: 8JXgqWltGTihBLsb_MsvP8I7LuU.roa (raw, json) Hash identifier: TfFgzM1pR8hqRpK8GIv8I4gpOszImqRNnyIUFD3G7bM= Subject key identifier: F0:95:E0:A9:69:6D:19:38:A1:04:BB:1B:FC:CB:2F:3F:C2:3B:2E:E5 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1387 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8JXgqWltGTihBLsb_MsvP8I7LuU.roa Signing time: Fri 01 Sep 2023 09:25:06 +0000 ROA not before: Fri 01 Sep 2023 09:25:06 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131602 IP address blocks: 218.210.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4999 (0x1387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:06 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F095E0A9696D1938A104BB1BFCCB2F3FC23B2EE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f4:31:e1:f9:8b:57:81:5a:50:97:dc:27:bf: c8:53:0d:06:46:3f:bd:f8:36:24:6a:11:5e:e5:54: 71:f7:d0:52:c2:d8:7d:37:a1:c0:fa:16:b0:97:f3: e4:6c:7a:05:f0:72:fe:4c:d7:41:74:0d:24:c2:8d: 36:a5:92:22:72:48:c4:25:c7:a2:30:53:b4:13:84: 04:8b:14:94:c9:70:5c:79:84:63:00:95:9d:1e:e3: 8e:dc:60:93:20:4a:91:0e:97:06:96:bf:fc:8b:f6: f6:d2:04:20:a8:af:c2:7e:72:bb:0b:75:22:05:7e: 80:e0:95:91:7c:95:69:86:33:ff:42:d8:ef:e1:0e: 38:70:6a:5b:43:b2:01:91:c8:10:bf:73:0e:da:3c: 90:94:0e:bb:ed:ac:ce:e7:77:47:a0:0d:56:c7:b7: db:7e:35:6a:44:17:66:5e:b0:5e:20:b0:9a:30:4b: 5f:be:fb:05:a9:5c:42:23:a0:b0:ea:60:32:65:29: 6b:07:c8:f6:02:7d:53:3e:cf:2a:ff:64:13:ba:c9: 72:d9:e5:0b:cd:0b:25:52:79:71:0c:07:c0:c1:8c: 2f:f0:e8:0f:41:30:72:d0:4a:31:bc:33:16:00:61: 66:92:e5:e1:8a:4f:11:35:c5:25:1d:de:87:c0:33: 90:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:95:E0:A9:69:6D:19:38:A1:04:BB:1B:FC:CB:2F:3F:C2:3B:2E:E5 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8JXgqWltGTihBLsb_MsvP8I7LuU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.210.32.0/20 Signature Algorithm: sha256WithRSAEncryption a3:01:76:db:ea:a2:0f:6d:43:b3:30:f3:0f:94:7a:88:24:19: c5:a3:8c:1e:62:06:43:24:cc:1c:99:f6:9c:99:4e:12:ee:2f: 4c:93:89:bb:56:8c:38:9b:40:72:21:d4:60:b9:6e:80:4c:46: c0:b8:d3:f4:83:8d:a3:07:4f:f6:00:a1:17:55:15:25:70:80: d6:d3:1c:c7:ab:96:51:91:1d:df:2f:f8:ec:ab:7c:00:30:55: f9:1d:a4:90:0a:da:28:09:83:02:f8:69:a1:cf:c9:f2:a8:a0: 41:7c:7c:a2:01:a5:74:9b:1f:35:46:e7:70:58:b2:0c:02:c6: 97:54:b9:62:25:23:5f:e6:d0:4b:95:5f:07:ce:7a:4c:e9:f4: 27:d3:fb:c6:11:6f:1c:6f:64:ed:d0:50:56:21:5d:ab:6a:82: 80:b8:6a:83:10:f0:ae:04:17:36:e3:26:e9:1f:de:88:d8:d2: 74:f6:cf:86:bc:44:e6:e8:1f:0c:b9:b9:32:68:d9:7e:ed:39: df:68:16:06:a8:08:27:6f:dd:9b:de:ae:e1:74:a0:ab:56:a8: 27:0c:b2:ba:b2:2a:b0:54:bf:7f:d3:96:71:73:21:4a:0a:af: d7:fd:00:7a:4b:eb:0f:d6:81:19:88:74:e6:ad:7c:a9:9b:81: 32:e8:ce:ec -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE4cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEYwOTVFMEE5Njk2RDE5 MzhBMTA0QkIxQkZDQ0IyRjNGQzIzQjJFRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR9DHh+YtXgVpQl9wnv8hTDQZGP734NiRqEV7lVHH30FLC2H03 ocD6FrCX8+RsegXwcv5M10F0DSTCjTalkiJySMQlx6IwU7QThASLFJTJcFx5hGMA lZ0e447cYJMgSpEOlwaWv/yL9vbSBCCor8J+crsLdSIFfoDglZF8lWmGM/9C2O/h DjhwaltDsgGRyBC/cw7aPJCUDrvtrM7nd0egDVbHt9t+NWpEF2ZesF4gsJowS1++ +wWpXEIjoLDqYDJlKWsHyPYCfVM+zyr/ZBO6yXLZ5QvNCyVSeXEMB8DBjC/w6A9B MHLQSjG8MxYAYWaS5eGKTxE1xSUd3ofAM5BvAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU8JXgqWltGTihBLsb/MsvP8I7LuUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvOEpYZ3FXbHRHVGloQkxzYl9Nc3ZQ OEk3THVVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNrSIDAN BgkqhkiG9w0BAQsFAAOCAQEAowF22+qiD21DszDzD5R6iCQZxaOMHmIGQyTMHJn2 nJlOEu4vTJOJu1aMOJtAciHUYLlugExGwLjT9IONowdP9gChF1UVJXCA1tMcx6uW UZEd3y/47Kt8ADBV+R2kkAraKAmDAvhpoc/J8qigQXx8ogGldJsfNUbncFiyDALG l1S5YiUjX+bQS5VfB856TOn0J9P7xhFvHG9k7dBQViFdq2qCgLhqgxDwrgQXNuMm 6R/eiNjSdPbPhrxE5ugfDLm5MmjZfu0532gWBqgIJ2/dm96u4XSgq1aoJwyyurIq sFS/f9OWcXMhSgqv1/0AekvrD9aBGYh05q18qZuBMujO7A== -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org