$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/CbArG25f6Ah7HymrAFoVpe5jwvI.roa File: CbArG25f6Ah7HymrAFoVpe5jwvI.roa (raw, json) Hash identifier: uAKegQ8T6DQn96TKK0rEriMdEitezsc5XBVUffVVk44= Subject key identifier: 09:B0:2B:1B:6E:5F:E8:08:7B:1F:29:AB:00:5A:15:A5:EE:63:C2:F2 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 131F Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CbArG25f6Ah7HymrAFoVpe5jwvI.roa Signing time: Fri 01 Sep 2023 09:24:30 +0000 ROA not before: Fri 01 Sep 2023 09:24:30 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 218.211.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4895 (0x131f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:30 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=09B02B1B6E5FE8087B1F29AB005A15A5EE63C2F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ee:89:c7:03:1c:72:6f:72:79:be:7f:40:11: ec:0c:5c:bf:b6:88:01:e2:97:b7:2f:16:3d:da:02: f9:d0:76:39:82:d0:8a:a3:13:05:96:8a:a8:07:f5: b8:e3:be:2f:7a:ac:40:ee:4b:b9:af:73:f5:95:8d: 5f:78:b2:84:2e:ea:94:b2:e4:59:b5:26:f0:53:b2: 7e:43:fd:9c:01:ce:83:ed:aa:e2:ea:b2:dc:91:13: 61:66:75:5a:96:94:38:6b:f8:ff:de:96:6c:c4:48: 80:ff:4d:7c:32:a4:e0:0b:51:89:87:9e:60:ce:32: 52:f9:d2:d6:e3:3d:a2:cd:c8:62:24:ea:bd:c4:e4: 38:05:c3:e0:a4:38:19:53:05:35:c9:52:9e:52:2e: 34:bd:18:0e:d6:4b:60:31:78:b4:21:ee:ee:19:1f: 8d:53:e1:43:96:48:01:ce:06:57:c9:e3:cd:96:03: e8:2f:5f:31:d5:fe:5e:67:56:ae:8b:4c:44:3b:01: f3:f1:1a:99:42:f1:d4:82:bf:b6:b6:40:c7:15:30: 54:96:16:2a:df:e9:05:2f:f3:ff:34:a7:ee:a1:cd: 71:91:3c:8f:7b:8b:d5:b8:d9:f4:b5:a3:3b:0d:52: dd:72:61:6d:0f:82:03:a1:4e:ed:f1:2a:a0:1e:27: fa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B0:2B:1B:6E:5F:E8:08:7B:1F:29:AB:00:5A:15:A5:EE:63:C2:F2 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CbArG25f6Ah7HymrAFoVpe5jwvI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.211.0.0/16 Signature Algorithm: sha256WithRSAEncryption 41:fe:f6:ce:78:31:38:7a:fd:d1:2d:85:43:8b:e6:42:a0:95: c9:93:75:29:41:6c:26:92:ed:72:29:22:ad:dc:e4:05:c4:b5: f2:30:c1:62:2a:ce:d6:a0:70:64:31:88:98:0c:f0:b9:d5:63: 27:57:4e:75:20:a9:cb:87:d9:9a:c3:b0:bb:f6:cd:5c:52:6d: ab:88:0a:fd:bc:b6:6d:76:2e:be:d8:9a:a3:f5:fe:f9:a3:42: 80:5f:1e:74:75:f7:9d:17:5f:25:03:e6:66:bc:73:f1:5d:57: f0:bb:44:42:99:a1:9d:d5:f9:7d:02:d5:39:26:62:1b:d7:be: 74:67:b7:ca:26:f9:45:b4:a6:54:7a:3a:ee:3a:7e:56:53:9f: 97:06:04:b6:ae:e9:93:b7:31:1d:54:9a:e8:2d:61:74:93:21: 9f:95:c6:50:c3:14:68:f2:05:c0:e0:4b:6b:4d:83:0c:03:4e: f0:db:f2:91:36:e1:26:ad:65:eb:65:94:61:72:44:1d:5b:6f: dc:26:a0:93:47:2f:0b:08:a2:76:aa:bb:1a:5a:ba:ad:5b:8b: ef:a9:4f:8a:26:e9:07:da:49:f9:ec:00:f7:9e:6f:a5:ec:a7: 7b:84:6e:c0:d9:ff:80:5d:24:6b:a4:d0:3d:11:eb:1c:6c:c1: 14:43:dc:f2 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICEx8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA5QjAyQjFCNkU1RkU4 MDg3QjFGMjlBQjAwNUExNUE1RUU2M0MyRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCw7onHAxxyb3J5vn9AEewMXL+2iAHil7cvFj3aAvnQdjmC0Iqj EwWWiqgH9bjjvi96rEDuS7mvc/WVjV94soQu6pSy5Fm1JvBTsn5D/ZwBzoPtquLq styRE2FmdVqWlDhr+P/elmzESID/TXwypOALUYmHnmDOMlL50tbjPaLNyGIk6r3E 5DgFw+CkOBlTBTXJUp5SLjS9GA7WS2AxeLQh7u4ZH41T4UOWSAHOBlfJ482WA+gv XzHV/l5nVq6LTEQ7AfPxGplC8dSCv7a2QMcVMFSWFirf6QUv8/80p+6hzXGRPI97 i9W42fS1ozsNUt1yYW0PggOhTu3xKqAeJ/pPAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUCbArG25f6Ah7HymrAFoVpe5jwvIwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQ2JBckcyNWY2QWg3SHltckFGb1Zw ZTVqd3ZJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANrTMA0G CSqGSIb3DQEBCwUAA4IBAQBB/vbOeDE4ev3RLYVDi+ZCoJXJk3UpQWwmku1yKSKt 3OQFxLXyMMFiKs7WoHBkMYiYDPC51WMnV051IKnLh9maw7C79s1cUm2riAr9vLZt di6+2Jqj9f75o0KAXx50dfedF18lA+ZmvHPxXVfwu0RCmaGd1fl9AtU5JmIb1750 Z7fKJvlFtKZUejruOn5WU5+XBgS2rumTtzEdVJroLWF0kyGflcZQwxRo8gXA4Etr TYMMA07w2/KRNuEmrWXrZZRhckQdW2/cJqCTRy8LCKJ2qrsaWrqtW4vvqU+KJukH 2kn57AD3nm+l7Kd7hG7A2f+AXSRrpNA9EescbMEUQ9zy -----END CERTIFICATE-----Generated at Sat Jun 1 22:20:17 2024 by rpki-client on console-fra.rpki-client.org