$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/CF5weevynT5w92C4ppL8_qoZSfw.roa File: CF5weevynT5w92C4ppL8_qoZSfw.roa (raw, json) Hash identifier: +Qo+uitFhvOVN5vhQfMU4ZpGOLYN1cHtGHReJXRCN6M= Subject key identifier: 08:5E:70:79:EB:F2:9D:3E:70:F7:60:B8:A6:92:FC:FE:AA:19:49:FC Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1662 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CF5weevynT5w92C4ppL8_qoZSfw.roa Signing time: Mon 26 Aug 2024 05:22:08 +0000 ROA not before: Mon 26 Aug 2024 05:22:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 211.74.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5730 (0x1662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:08 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=085E7079EBF29D3E70F760B8A692FCFEAA1949FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:69:5a:75:5e:b3:17:3c:74:28:1e:ff:1c:f2: 98:38:a8:ef:37:2e:00:e8:a1:80:bd:03:d9:e4:e0: 11:84:b4:af:58:a7:2b:59:6e:0a:cc:f4:74:1e:64: dc:15:d8:4e:91:f5:65:6e:51:f1:08:14:05:62:8f: ed:da:30:7f:e4:41:25:0c:44:a0:ad:78:c1:99:47: d0:26:74:b2:b2:a9:67:3b:22:43:30:46:17:6e:95: 80:ec:7d:4b:c6:fe:be:a9:78:dc:e9:fe:d0:69:1d: 2b:8b:1f:4a:b2:ec:65:3f:e7:18:3e:57:6d:4e:d3: d8:d8:f5:d8:9b:41:a8:cb:52:b7:83:a8:33:32:3d: 24:5b:cf:ae:ca:66:b7:70:3d:7b:35:bc:41:6f:fa: d2:03:a7:a6:fe:3e:c2:50:2c:14:0a:3f:23:db:93: 11:33:d3:85:95:d5:d6:fc:ab:fd:ed:7d:02:7d:36: 68:9c:1c:6b:08:0c:e8:b2:43:22:fe:cd:33:ac:8f: 2f:12:75:54:59:52:9e:ec:2d:cb:3e:d8:ef:42:67: 2d:3e:57:83:04:d4:2a:8f:73:fa:56:e4:ca:22:16: c4:4b:9e:5d:db:ef:a3:0c:fb:5f:a2:ba:e3:38:15: eb:ba:78:f5:df:b7:5a:f7:56:8e:8f:35:da:e2:5c: 35:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5E:70:79:EB:F2:9D:3E:70:F7:60:B8:A6:92:FC:FE:AA:19:49:FC X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CF5weevynT5w92C4ppL8_qoZSfw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.74.0.0/17 Signature Algorithm: sha256WithRSAEncryption 4d:fa:9f:9f:af:6e:ad:4d:79:a3:d9:8f:1a:30:84:01:04:01: 78:02:5b:11:59:73:50:cf:ef:69:55:a4:3f:77:3b:9d:9b:66: b7:c4:7d:06:f5:10:de:f9:cc:b7:b6:06:89:77:a5:ac:3f:54: 66:7b:7c:23:0e:f9:9c:14:20:05:7f:74:6f:9b:f8:a8:e7:16: 1f:ee:20:8d:7b:1e:60:3e:f1:74:f3:d9:d5:0a:b1:2a:60:4a: 71:5c:2b:26:b3:ab:6b:2d:d3:8f:7d:d8:66:54:05:ee:95:06: 0f:fe:7f:24:8d:7a:a4:ba:c6:e9:70:c4:d8:44:d8:a5:c1:d9: be:90:8d:10:04:ec:01:bd:82:65:9e:6b:8e:04:2d:68:c3:20: 7c:a5:36:fa:2b:b8:72:2b:ed:a5:d4:17:51:15:18:7f:f1:e4: 89:22:63:85:70:2c:72:5f:eb:35:71:55:38:51:52:de:8a:ea: a0:22:98:f5:4e:ef:93:68:96:bf:64:b2:3b:b8:4f:63:2d:b1: 64:a8:9a:18:94:ca:6d:55:f8:a8:6d:a7:40:93:3c:f8:ce:c3: 2c:8a:33:e6:b4:9c:7a:a3:80:7b:c7:66:ad:db:71:ea:fb:50: 04:54:d3:bc:b5:7d:d1:f8:bb:27:98:47:23:b0:8b:96:a7:f9: 15:d0:f0:f1 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyMDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA4NUU3MDc5RUJGMjlE M0U3MEY3NjBCOEE2OTJGQ0ZFQUExOTQ5RkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5aVp1XrMXPHQoHv8c8pg4qO83LgDooYC9A9nk4BGEtK9YpytZ bgrM9HQeZNwV2E6R9WVuUfEIFAVij+3aMH/kQSUMRKCteMGZR9AmdLKyqWc7IkMw RhdulYDsfUvG/r6peNzp/tBpHSuLH0qy7GU/5xg+V21O09jY9dibQajLUreDqDMy PSRbz67KZrdwPXs1vEFv+tIDp6b+PsJQLBQKPyPbkxEz04WV1db8q/3tfQJ9Nmic HGsIDOiyQyL+zTOsjy8SdVRZUp7sLcs+2O9CZy0+V4ME1CqPc/pW5MoiFsRLnl3b 76MM+1+iuuM4Feu6ePXft1r3Vo6PNdriXDWtAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUCF5weevynT5w92C4ppL8/qoZSfwwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQ0Y1d2VldnluVDV3OTJDNHBwTDhf cW9aU2Z3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9NKADAN BgkqhkiG9w0BAQsFAAOCAQEATfqfn69urU15o9mPGjCEAQQBeAJbEVlzUM/vaVWk P3c7nZtmt8R9BvUQ3vnMt7YGiXelrD9UZnt8Iw75nBQgBX90b5v4qOcWH+4gjXse YD7xdPPZ1QqxKmBKcVwrJrOray3Tj33YZlQF7pUGD/5/JI16pLrG6XDE2ETYpcHZ vpCNEATsAb2CZZ5rjgQtaMMgfKU2+iu4civtpdQXURUYf/HkiSJjhXAscl/rNXFV OFFS3orqoCKY9U7vk2iWv2SyO7hPYy2xZKiaGJTKbVX4qG2nQJM8+M7DLIoz5rSc eqOAe8dmrdtx6vtQBFTTvLV90fi7J5hHI7CLlqf5FdDw8Q== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:10 2024 by rpki-client on console-ams.rpki-client.org