$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/8h8LYAtmccXIuB42K5RbjIrf0KU.roa File: 8h8LYAtmccXIuB42K5RbjIrf0KU.roa (raw, json) Hash identifier: 5zEJxAd3dYrbb3qUKqexnoEUW5QnQ6w1veXHpWrJ7MM= Subject key identifier: F2:1F:0B:60:0B:66:71:C5:C8:B8:1E:36:2B:94:5B:8C:8A:DF:D0:A5 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 13AE Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8h8LYAtmccXIuB42K5RbjIrf0KU.roa Signing time: Fri 01 Sep 2023 09:25:17 +0000 ROA not before: Fri 01 Sep 2023 09:25:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 175.183.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5038 (0x13ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F21F0B600B6671C5C8B81E362B945B8C8ADFD0A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cd:ab:53:a6:0b:a5:ae:ed:ef:8a:37:92:50: 18:ce:d6:ed:bc:5d:b5:e0:61:c9:97:ff:bc:a3:57: fd:08:94:a1:53:b7:85:02:ae:5e:d3:28:6d:56:2c: 15:98:dc:d5:eb:b0:8c:ad:8b:1a:16:bc:d8:a3:ca: 16:a9:ea:12:5a:a1:0b:ce:2c:bf:e8:34:58:8c:75: 8e:08:b3:17:7c:41:01:a1:9c:23:7e:7b:35:9a:d1: 90:c2:86:dd:6e:9c:61:ae:fa:e9:c3:4a:a5:d4:85: e3:4f:95:28:02:52:02:ef:5d:ca:e7:8c:32:6f:e0: a4:bd:53:b2:29:e7:01:5b:d2:40:66:3a:8b:6b:d7: 68:3f:f1:1c:0c:37:67:5e:70:10:79:86:32:3b:f8: e7:57:5d:51:99:67:38:d9:33:55:ce:0b:59:84:b7: 4c:98:05:28:89:4d:f6:e8:8f:a4:f0:e6:31:85:b6: 71:40:2d:52:ef:2f:8d:38:5f:55:6d:ca:86:40:06: 67:d8:aa:52:56:04:00:aa:c9:95:a7:46:67:62:e9: 25:68:a0:40:5b:d3:52:0a:1e:e0:9d:13:fd:84:f2: a6:a4:62:ff:eb:cf:a2:3f:2b:97:03:f5:dd:3e:fa: 22:37:13:a2:6c:75:7e:e4:a0:64:f6:ae:de:4b:3c: 39:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1F:0B:60:0B:66:71:C5:C8:B8:1E:36:2B:94:5B:8C:8A:DF:D0:A5 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8h8LYAtmccXIuB42K5RbjIrf0KU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.183.0.0/17 Signature Algorithm: sha256WithRSAEncryption 4e:c6:24:de:ba:24:e7:eb:4d:53:51:6e:e7:43:0b:a7:8b:7e: dc:bd:e7:1d:26:04:15:42:37:79:6c:c5:cf:30:56:2e:89:f0: 5c:35:d6:79:eb:d5:cb:b7:9e:88:6e:0a:8c:0d:23:93:f6:10: b7:15:45:cf:8c:7c:94:9b:fc:d1:03:06:8f:08:09:ca:80:29: ff:ef:d2:7b:9d:94:58:0f:bf:0b:01:bb:a5:e2:0d:f0:fc:ac: 9b:33:b8:16:0d:2d:7d:c3:d8:83:5b:9c:fb:46:02:77:55:28: 46:76:6b:2f:49:fc:8a:57:36:04:ac:a1:c2:e3:66:f4:08:ae: e1:1b:c3:78:57:25:5c:3b:cc:af:ea:df:d9:af:53:ff:1d:dd: 3d:f5:1c:14:97:80:f4:2c:8d:b1:75:4a:69:ad:28:15:f5:20: 3b:c6:b8:b5:dd:7b:3f:08:9e:6c:f8:43:cd:ed:73:95:59:60: c4:56:4c:56:65:86:8a:7b:1a:c1:63:2f:0d:43:dd:36:b2:fb: 61:ff:74:d6:6f:7e:a9:9a:7e:99:0e:44:d0:41:fa:8c:b1:36: 12:77:21:71:37:67:30:8a:8a:fb:f5:b1:93:a7:0c:18:8d:b8: 9a:ac:35:a6:55:46:2e:ba:20:b8:64:2d:a2:aa:6d:04:53:e9: 37:ac:65:e5 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE64wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEYyMUYwQjYwMEI2Njcx QzVDOEI4MUUzNjJCOTQ1QjhDOEFERkQwQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlzatTpgulru3vijeSUBjO1u28XbXgYcmX/7yjV/0IlKFTt4UC rl7TKG1WLBWY3NXrsIytixoWvNijyhap6hJaoQvOLL/oNFiMdY4Isxd8QQGhnCN+ ezWa0ZDCht1unGGu+unDSqXUheNPlSgCUgLvXcrnjDJv4KS9U7Ip5wFb0kBmOotr 12g/8RwMN2decBB5hjI7+OdXXVGZZzjZM1XOC1mEt0yYBSiJTfboj6Tw5jGFtnFA LVLvL404X1VtyoZABmfYqlJWBACqyZWnRmdi6SVooEBb01IKHuCdE/2E8qakYv/r z6I/K5cD9d0++iI3E6JsdX7koGT2rt5LPDm9AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU8h8LYAtmccXIuB42K5RbjIrf0KUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvOGg4TFlBdG1jY1hJdUI0Mks1UmJq SXJmMEtVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB6+3ADAN BgkqhkiG9w0BAQsFAAOCAQEATsYk3rok5+tNU1Fu50MLp4t+3L3nHSYEFUI3eWzF zzBWLonwXDXWeevVy7eeiG4KjA0jk/YQtxVFz4x8lJv80QMGjwgJyoAp/+/Se52U WA+/CwG7peIN8PysmzO4Fg0tfcPYg1uc+0YCd1UoRnZrL0n8ilc2BKyhwuNm9Aiu 4RvDeFclXDvMr+rf2a9T/x3dPfUcFJeA9CyNsXVKaa0oFfUgO8a4td17PwiebPhD ze1zlVlgxFZMVmWGinsawWMvDUPdNrL7Yf901m9+qZp+mQ5E0EH6jLE2EnchcTdn MIqK+/Wxk6cMGI24mqw1plVGLroguGQtoqptBFPpN6xl5Q== -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org