$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/CUQvwNRbcKDD5Xeq-BFalJBgmzY.roa File: CUQvwNRbcKDD5Xeq-BFalJBgmzY.roa (raw, json) Hash identifier: PjPWWhz8SzJ9jkDCYBHrgQJNNLOSPiHHx8hBySG3HRs= Subject key identifier: 09:44:2F:C0:D4:5B:70:A0:C3:E5:77:AA:F8:11:5A:94:90:60:9B:36 Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 0ED3 Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CUQvwNRbcKDD5Xeq-BFalJBgmzY.roa Signing time: Mon 26 Aug 2024 05:21:46 +0000 ROA not before: Mon 26 Aug 2024 05:21:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 192.72.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3795 (0xed3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Aug 26 05:21:46 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=09442FC0D45B70A0C3E577AAF8115A9490609B36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:42:4d:7b:49:99:2d:bd:40:99:d9:76:ba: 9e:c6:68:89:13:22:b8:58:40:1e:57:cd:cd:22:ba: a4:18:83:82:59:b1:1e:cc:2a:7d:93:6c:56:dc:23: 95:29:62:b1:90:b1:89:26:59:93:12:fa:01:05:52: d7:e4:a6:4c:82:2f:35:4f:6a:23:e2:8b:54:35:d0: 5c:d0:17:1e:44:83:44:32:09:a7:78:eb:bd:51:27: d0:01:13:ed:d0:1c:53:b9:81:a9:28:3e:b9:a2:8f: b8:53:02:d0:0b:14:66:62:81:e8:ab:df:c1:68:75: 16:4e:2e:e2:29:10:d0:4d:2f:79:91:55:39:65:02: 2a:15:ba:2a:af:42:5a:5a:4f:40:d9:f1:a6:0c:48: bc:51:bb:5f:61:7f:0d:2e:9a:17:67:72:c9:d9:f1: 47:12:5b:32:5a:dd:e1:cd:46:da:b7:b7:57:98:f0: 90:0d:4f:96:b3:1d:e1:78:2c:6e:ce:d4:93:c4:50: 11:ca:3d:7e:09:61:4b:51:f2:df:e3:38:96:fa:b9: d1:c3:fc:d3:31:65:64:1c:d0:d4:8c:6b:49:f9:e8: 8e:c8:2b:f1:f5:0f:ce:c5:c8:73:f1:90:d1:2c:6c: 61:61:33:ea:9d:4c:d2:24:8d:25:15:c4:a9:90:cb: 75:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:44:2F:C0:D4:5B:70:A0:C3:E5:77:AA:F8:11:5A:94:90:60:9B:36 X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CUQvwNRbcKDD5Xeq-BFalJBgmzY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.3.0/24 Signature Algorithm: sha256WithRSAEncryption 20:46:7b:6a:87:a0:22:60:81:eb:a4:2b:d3:2b:5d:52:5a:77: 6a:68:ee:2e:b4:8d:08:30:f7:68:49:6c:57:25:cf:04:50:49: 4c:c1:1a:d6:03:7f:41:5d:59:df:91:43:13:f7:21:0b:1a:40: a8:50:30:70:67:c7:0f:9a:6c:90:e3:c1:fb:84:92:72:8e:2b: 09:ce:a7:17:a7:12:a9:22:33:14:18:77:46:1d:0f:42:79:a8: ee:42:d5:64:25:89:06:66:c8:e0:32:c5:ab:20:d6:75:07:ba: de:5c:95:ec:ac:07:f1:f5:83:d1:37:42:16:88:33:23:7d:fb: 4e:09:2c:fc:3b:e4:26:e0:eb:05:db:c0:d3:5d:56:6d:b9:73: 19:ca:2c:d3:9b:23:78:bb:3b:33:fe:8c:d5:9e:fc:24:2c:b5: 91:ec:87:f2:65:92:0e:20:4b:46:28:69:ad:52:b8:39:c0:00: a2:2f:4b:55:e0:9e:8f:ec:ce:97:34:15:07:99:ba:9e:f0:d4: 1d:57:b7:13:41:0d:dd:6a:b8:33:74:b8:90:a4:ac:31:1c:f4: 10:78:8d:c5:e1:e9:d0:46:81:e0:32:39:02:86:79:ef:d5:1a: a0:a1:45:21:f3:4a:1a:90:c6:01:3c:6d:f2:12:e7:16:a8:77: fc:66:ee:31 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDtMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNDA4MjYw NTIxNDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA5NDQyRkMwRDQ1Qjcw QTBDM0U1NzdBQUY4MTE1QTk0OTA2MDlCMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6c0JNe0mZLb1Amdl2up7GaIkTIrhYQB5Xzc0iuqQYg4JZsR7M Kn2TbFbcI5UpYrGQsYkmWZMS+gEFUtfkpkyCLzVPaiPii1Q10FzQFx5Eg0QyCad4 671RJ9ABE+3QHFO5gakoPrmij7hTAtALFGZigeir38FodRZOLuIpENBNL3mRVTll AioVuiqvQlpaT0DZ8aYMSLxRu19hfw0umhdncsnZ8UcSWzJa3eHNRtq3t1eY8JAN T5azHeF4LG7O1JPEUBHKPX4JYUtR8t/jOJb6udHD/NMxZWQc0NSMa0n56I7IK/H1 D87FyHPxkNEsbGFhM+qdTNIkjSUVxKmQy3XlAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUCUQvwNRbcKDD5Xeq+BFalJBgmzYwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQ1VRdndOUmJjS0RENVhlcS1CRmFs SkJnbXpZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBIAzAN BgkqhkiG9w0BAQsFAAOCAQEAIEZ7aoegImCB66Qr0ytdUlp3amjuLrSNCDD3aEls VyXPBFBJTMEa1gN/QV1Z35FDE/chCxpAqFAwcGfHD5pskOPB+4SSco4rCc6nF6cS qSIzFBh3Rh0PQnmo7kLVZCWJBmbI4DLFqyDWdQe63lyV7KwH8fWD0TdCFogzI337 Tgks/DvkJuDrBdvA011WbblzGcos05sjeLs7M/6M1Z78JCy1keyH8mWSDiBLRihp rVK4OcAAoi9LVeCej+zOlzQVB5m6nvDUHVe3E0EN3Wq4M3S4kKSsMRz0EHiNxeHp 0EaB4DI5AoZ579UaoKFFIfNKGpDGATxt8hLnFqh3/GbuMQ== -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:11 2024 by rpki-client on console-fra.rpki-client.org