$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/9BTLCUzW_cSeDRmr-xkKKBVNFFA.roa File: 9BTLCUzW_cSeDRmr-xkKKBVNFFA.roa (raw, json) Hash identifier: egOWplg1oXc3PaQOdQXvJKGvZ08etiR34ytcpn9Y+Pg= Subject key identifier: F4:14:CB:09:4C:D6:FD:C4:9E:0D:19:AB:FB:19:0A:28:15:4D:14:50 Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 0EDA Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9BTLCUzW_cSeDRmr-xkKKBVNFFA.roa Signing time: Mon 26 Aug 2024 05:22:04 +0000 ROA not before: Mon 26 Aug 2024 05:22:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 192.72.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3802 (0xeda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Aug 26 05:22:04 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F414CB094CD6FDC49E0D19ABFB190A28154D1450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d8:7a:9b:a1:6f:f3:d0:92:34:ef:d7:bd:a9: 0e:cb:04:5d:fd:de:da:99:71:5e:2c:ac:19:a3:ec: 06:35:8d:f8:b1:8e:b3:52:1c:a9:6a:da:fa:0c:85: 09:dc:21:07:48:08:c9:9b:dc:bc:3a:99:ce:8b:82: 1a:bd:08:e5:9d:ac:d9:24:71:55:81:ba:ac:2e:09: 91:62:7f:62:b9:f1:3c:74:63:a0:a3:49:28:23:9b: 2f:af:ac:7c:6d:58:f5:d7:18:8f:c0:1a:93:79:b0: a1:4b:9b:2f:83:00:e0:38:1a:da:8f:a6:e4:d7:40: 13:e2:d4:7b:2f:fd:ef:a4:f2:29:23:29:b9:12:91: b5:25:94:10:2a:8b:1e:7a:74:db:34:51:6b:69:8d: c5:f1:91:42:b2:8f:88:e1:86:6e:8f:0e:48:0d:19: 88:4c:28:77:36:07:d6:69:2f:be:a1:a3:37:f3:27: f8:51:cb:af:ff:f1:8a:96:40:15:44:4b:6d:97:0d: 70:e8:d4:0d:33:b1:e9:fa:50:b7:99:f0:ed:d8:2d: 4c:32:0b:36:a4:b2:6b:df:e7:bf:2d:c1:c1:0b:c0: 88:2d:b4:b7:3b:e4:82:83:aa:1e:6d:b4:a8:29:7f: f5:33:c7:6e:28:4e:64:5a:54:f7:e0:52:61:e3:c3: 14:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:14:CB:09:4C:D6:FD:C4:9E:0D:19:AB:FB:19:0A:28:15:4D:14:50 X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9BTLCUzW_cSeDRmr-xkKKBVNFFA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.32.0/19 Signature Algorithm: sha256WithRSAEncryption 38:a1:1f:3d:e3:7d:44:75:00:45:22:fe:47:db:46:64:bc:16: ef:0c:41:5a:8a:d7:09:34:99:e6:2b:ae:24:18:e5:b9:5b:f9: 05:02:28:32:53:c8:c2:af:89:6e:83:77:ca:ee:4a:5b:0c:82: 05:f1:5f:df:a5:5a:f9:19:6c:52:68:98:ba:47:e7:6f:bc:ab: 97:d0:b9:93:f9:c6:1d:f7:fd:ff:0d:09:69:d6:4c:45:e5:f0: 3f:8f:fd:b2:12:13:f0:cb:c6:1f:ad:26:a1:aa:cb:47:ef:0d: b5:23:f5:39:c8:4d:ce:d0:4b:ef:a2:7b:cc:d7:81:5e:73:4d: 48:0a:ff:69:b9:5f:45:90:a1:b1:72:54:44:36:f5:5e:fc:03: cc:46:a0:32:67:96:e2:0c:57:08:ab:2f:2f:de:3d:90:af:2f: 87:55:69:45:d6:8f:0c:ab:d1:ff:85:ac:d6:b6:92:78:f3:ae: 2c:53:6a:40:ec:e8:18:00:ed:43:d0:85:d2:f2:77:60:29:4f: 97:3e:6d:3c:ad:3c:02:5c:d1:86:69:41:83:44:17:09:cd:16: 2a:7e:88:a2:5e:f3:ed:e9:42:92:2f:5c:40:05:73:ff:88:0f: cc:45:67:be:56:ea:67:d1:24:77:66:47:ee:b4:c2:1b:c2:75: e8:88:de:53 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDtowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNDA4MjYw NTIyMDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY0MTRDQjA5NENENkZE QzQ5RTBEMTlBQkZCMTkwQTI4MTU0RDE0NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDy2HqboW/z0JI079e9qQ7LBF393tqZcV4srBmj7AY1jfixjrNS HKlq2voMhQncIQdICMmb3Lw6mc6Lghq9COWdrNkkcVWBuqwuCZFif2K58Tx0Y6Cj SSgjmy+vrHxtWPXXGI/AGpN5sKFLmy+DAOA4GtqPpuTXQBPi1Hsv/e+k8ikjKbkS kbUllBAqix56dNs0UWtpjcXxkUKyj4jhhm6PDkgNGYhMKHc2B9ZpL76hozfzJ/hR y6//8YqWQBVES22XDXDo1A0zsen6ULeZ8O3YLUwyCzaksmvf578twcELwIgttLc7 5IKDqh5ttKgpf/Uzx24oTmRaVPfgUmHjwxTpAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU9BTLCUzW/cSeDRmr+xkKKBVNFFAwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvOUJUTENVeldfY1NlRFJtci14a0tL QlZORkZBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcBIIDAN BgkqhkiG9w0BAQsFAAOCAQEAOKEfPeN9RHUARSL+R9tGZLwW7wxBWorXCTSZ5iuu JBjluVv5BQIoMlPIwq+JboN3yu5KWwyCBfFf36Va+RlsUmiYukfnb7yrl9C5k/nG Hff9/w0JadZMReXwP4/9shIT8MvGH60moarLR+8NtSP1OchNztBL76J7zNeBXnNN SAr/ablfRZChsXJURDb1XvwDzEagMmeW4gxXCKsvL949kK8vh1VpRdaPDKvR/4Ws 1raSePOuLFNqQOzoGADtQ9CF0vJ3YClPlz5tPK08AlzRhmlBg0QXCc0WKn6Iol7z 7elCki9cQAVz/4gPzEVnvlbqZ9Ekd2ZH7rTCG8J16IjeUw== -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:11 2024 by rpki-client on console-fra.rpki-client.org