$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/9XCjJjxMdoGKtLQ-nyZc1gEsmnw.roa File: 9XCjJjxMdoGKtLQ-nyZc1gEsmnw.roa (raw, json) Hash identifier: hrVtTM44WXM79l5Ld3V5FvoIk4NTkYrjtlFVjwWumAo= Subject key identifier: F5:70:A3:26:3C:4C:76:81:8A:B4:B4:3E:9F:26:5C:D6:01:2C:9A:7C Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1614 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9XCjJjxMdoGKtLQ-nyZc1gEsmnw.roa Signing time: Mon 26 Aug 2024 05:21:45 +0000 ROA not before: Mon 26 Aug 2024 05:21:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 218.211.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5652 (0x1614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:21:45 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F570A3263C4C76818AB4B43E9F265CD6012C9A7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f1:dc:40:7f:70:3a:00:34:b0:cf:9e:18:13: da:de:59:54:83:1c:d9:b0:4b:c9:14:f9:57:4c:30: 5d:c7:39:2f:e9:d7:60:e4:b2:b3:8e:d3:d3:aa:7d: 87:f8:a8:c2:84:9b:d0:41:79:16:5b:19:ec:b6:9b: 26:32:0e:81:2e:58:f3:71:e2:ca:e4:ea:68:a6:59: dc:7c:6d:4c:37:6e:6c:21:15:33:40:78:a2:d4:0d: 3b:d2:e1:94:d4:e1:f5:36:05:9c:8c:e0:ad:49:8d: a0:a4:cf:8e:54:5f:21:5f:ca:57:76:c6:2e:0f:73: b9:2f:5f:ef:69:1c:c6:93:a7:5a:d7:ec:b8:6c:c2: 8f:02:05:42:cd:5a:21:4b:db:37:0d:80:ea:69:61: b5:4f:58:49:1b:1d:91:31:30:6e:10:b5:81:d7:0c: 74:b1:f2:1f:d3:93:84:92:4d:e5:36:1a:a8:09:8f: d6:be:93:14:39:d6:16:0b:84:f5:2b:e4:b2:5c:c2: 84:bf:43:1b:4e:7f:91:2f:33:f2:d9:31:26:7a:35: e4:3c:0b:75:88:45:52:78:cc:65:5c:b0:cb:4c:92: 38:ed:cb:a5:d2:58:69:5a:fb:4e:94:23:98:41:05: 0e:b5:7a:e4:34:57:a3:4d:cc:64:34:87:0b:79:01: 06:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:70:A3:26:3C:4C:76:81:8A:B4:B4:3E:9F:26:5C:D6:01:2C:9A:7C X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9XCjJjxMdoGKtLQ-nyZc1gEsmnw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.211.0.0/16 Signature Algorithm: sha256WithRSAEncryption 25:43:a4:d8:71:93:74:ca:61:cb:e7:87:3e:bd:7f:de:a8:35: ce:98:fc:2b:51:a9:6c:a0:06:eb:c5:02:c4:c2:fe:97:8a:9f: 46:a7:ac:62:16:aa:ed:af:5c:1d:b9:08:19:8d:f6:5a:a8:84: fb:79:29:90:82:f7:ab:5d:55:98:62:12:97:19:dc:20:cc:9d: d5:90:7d:03:08:ae:6f:75:83:e6:f3:3d:d4:63:ca:15:a8:66: b3:bf:27:85:98:18:5b:e2:16:2b:b8:b3:e7:35:a6:4b:5e:92: 91:ab:fa:72:51:58:38:23:95:f6:b4:2e:04:fe:41:e9:ee:99: 97:0a:16:b7:b9:8c:02:7a:d0:0f:9c:f8:cd:a7:03:2d:f3:30: 07:d6:f6:50:5c:10:2f:18:75:d9:0e:22:36:14:19:32:72:16: 9a:5e:07:b0:6d:60:ee:90:96:c7:14:e3:b9:f5:b2:6c:d6:b2: 5d:66:0e:1f:79:9c:d2:5e:f5:44:39:f8:75:d0:4c:fa:bd:bb: 12:6b:e9:7c:9f:05:aa:cd:94:eb:d4:f7:e0:3b:94:38:a4:9c: 55:66:bf:65:56:dd:08:28:da:71:1c:f8:51:ed:f8:bd:01:1d: fa:0b:2b:0c:bd:09:34:ac:c8:d7:93:b9:47:0a:29:0e:d6:7c: 9b:e6:d4:ec -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICFhQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIxNDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY1NzBBMzI2M0M0Qzc2 ODE4QUI0QjQzRTlGMjY1Q0Q2MDEyQzlBN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/8dxAf3A6ADSwz54YE9reWVSDHNmwS8kU+VdMMF3HOS/p12Dk srOO09OqfYf4qMKEm9BBeRZbGey2myYyDoEuWPNx4srk6mimWdx8bUw3bmwhFTNA eKLUDTvS4ZTU4fU2BZyM4K1JjaCkz45UXyFfyld2xi4Pc7kvX+9pHMaTp1rX7Lhs wo8CBULNWiFL2zcNgOppYbVPWEkbHZExMG4QtYHXDHSx8h/Tk4SSTeU2GqgJj9a+ kxQ51hYLhPUr5LJcwoS/QxtOf5EvM/LZMSZ6NeQ8C3WIRVJ4zGVcsMtMkjjty6XS WGla+06UI5hBBQ61euQ0V6NNzGQ0hwt5AQZxAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQU9XCjJjxMdoGKtLQ+nyZc1gEsmnwwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvOVhDakpqeE1kb0dLdExRLW55WmMx Z0VzbW53LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANrTMA0G CSqGSIb3DQEBCwUAA4IBAQAlQ6TYcZN0ymHL54c+vX/eqDXOmPwrUalsoAbrxQLE wv6Xip9Gp6xiFqrtr1wduQgZjfZaqIT7eSmQgverXVWYYhKXGdwgzJ3VkH0DCK5v dYPm8z3UY8oVqGazvyeFmBhb4hYruLPnNaZLXpKRq/pyUVg4I5X2tC4E/kHp7pmX Cha3uYwCetAPnPjNpwMt8zAH1vZQXBAvGHXZDiI2FBkychaaXgewbWDukJbHFOO5 9bJs1rJdZg4feZzSXvVEOfh10Ez6vbsSa+l8nwWqzZTr1PfgO5Q4pJxVZr9lVt0I KNpxHPhR7fi9AR36CysMvQk0rMjXk7lHCikO1nyb5tTs -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:10 2024 by rpki-client on console-ams.rpki-client.org