$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Cgh0b5-fgyhUWhQvUlMTLZGOqwA.roa File: Cgh0b5-fgyhUWhQvUlMTLZGOqwA.roa (raw, json) Hash identifier: pva+qPtrUHIgVEGm8/lFgCkDONgx4c+iQqpIY+0tvcM= Subject key identifier: 0A:08:74:6F:9F:9F:83:28:54:5A:14:2F:52:53:13:2D:91:8E:AB:00 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 164D Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Cgh0b5-fgyhUWhQvUlMTLZGOqwA.roa Signing time: Mon 26 Aug 2024 05:22:02 +0000 ROA not before: Mon 26 Aug 2024 05:22:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 122.147.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5709 (0x164d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0A08746F9F9F8328545A142F5253132D918EAB00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1c:43:76:3e:3c:22:7f:f9:95:bf:f0:2c:8d: 8b:99:5b:1f:ce:97:d6:b4:c9:89:5f:e5:e4:75:07: 2e:65:63:c0:ab:eb:d4:4b:88:84:10:48:a0:a2:06: 71:57:5c:01:f5:93:ad:c7:b9:19:c2:d8:64:71:42: e7:ab:f5:94:b9:bc:83:65:f8:bd:a7:61:b0:6a:93: 1c:9f:61:88:6d:f6:9c:4e:91:d9:4e:74:52:67:23: de:78:19:1c:11:af:0e:76:ee:cb:92:77:f6:92:3d: 4e:1d:f8:ea:a3:ee:93:52:c9:b3:08:ba:3d:a1:2d: e2:34:17:ac:17:64:c4:76:6c:a7:77:df:21:68:f8: ee:d9:50:36:67:ac:ea:65:c2:11:6b:63:86:4a:38: ed:99:f2:ec:c9:1d:ae:50:a5:b0:72:50:8b:5b:ae: 8e:04:76:95:b7:36:1b:cf:0c:e2:60:d4:bb:d7:85: a0:db:db:b5:c9:be:13:ef:10:83:92:be:84:02:89: 98:82:b2:aa:5c:92:d1:6f:d5:a1:28:a7:4a:22:4c: 01:64:14:bc:eb:64:08:c5:4e:62:e4:38:7e:02:19: 4f:66:47:cb:cb:67:43:45:9b:64:b5:6d:d2:20:3c: 18:d9:93:ad:5c:9a:7b:4c:68:a7:07:18:af:8f:ab: 9a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:08:74:6F:9F:9F:83:28:54:5A:14:2F:52:53:13:2D:91:8E:AB:00 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Cgh0b5-fgyhUWhQvUlMTLZGOqwA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.147.160.0/19 Signature Algorithm: sha256WithRSAEncryption 63:12:68:7b:c5:f9:e6:7a:73:a5:67:34:40:cb:43:8b:0c:39: 8b:fb:87:e6:7f:d1:82:5d:66:60:36:42:14:5a:44:c2:13:c0: da:1f:f5:b9:dd:be:92:a7:76:f0:b5:21:6c:2b:44:d7:e8:f2: 13:12:8a:e3:41:d1:78:8c:7c:ea:46:11:cb:72:62:11:2d:cf: 61:05:af:ef:00:1d:61:22:c9:73:07:31:aa:0c:ff:5c:0a:1c: e9:62:63:09:3b:5c:da:a2:64:53:c9:cd:b5:28:cc:33:f2:94: f6:1a:33:df:7e:5f:6d:4a:85:62:0a:44:cd:bb:8d:7f:8d:0e: a6:4a:7d:3f:93:58:b6:30:09:eb:85:6c:54:56:92:91:89:49: 03:39:48:0e:d4:99:e9:df:44:e7:6d:b9:39:9f:9d:23:fb:85: e0:32:75:b4:f9:94:e4:da:7a:08:6c:39:0d:92:3c:09:16:0d: 1b:2b:f9:3c:5d:7f:7b:72:cb:d7:81:4b:fa:4a:aa:24:c3:19: 93:54:3d:c6:e5:6c:4d:65:e9:97:a8:33:6c:48:ed:25:e8:76: cb:d4:05:cd:5f:e0:7c:7f:f3:62:ee:9b:2b:4f:9f:79:c8:70: a7:62:ad:11:b3:7c:29:f6:62:5e:14:b4:5a:0e:de:0d:7e:75: 18:5e:48:76 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFk0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyMDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBBMDg3NDZGOUY5Rjgz Mjg1NDVBMTQyRjUyNTMxMzJEOTE4RUFCMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYHEN2Pjwif/mVv/AsjYuZWx/Ol9a0yYlf5eR1By5lY8Cr69RL iIQQSKCiBnFXXAH1k63HuRnC2GRxQuer9ZS5vINl+L2nYbBqkxyfYYht9pxOkdlO dFJnI954GRwRrw527suSd/aSPU4d+Oqj7pNSybMIuj2hLeI0F6wXZMR2bKd33yFo +O7ZUDZnrOplwhFrY4ZKOO2Z8uzJHa5QpbByUItbro4EdpW3NhvPDOJg1LvXhaDb 27XJvhPvEIOSvoQCiZiCsqpcktFv1aEop0oiTAFkFLzrZAjFTmLkOH4CGU9mR8vL Z0NFm2S1bdIgPBjZk61cmntMaKcHGK+Pq5qnAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUCgh0b5+fgyhUWhQvUlMTLZGOqwAwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQ2doMGI1LWZneWhVV2hRdlVsTVRM WkdPcXdBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXqToDAN BgkqhkiG9w0BAQsFAAOCAQEAYxJoe8X55npzpWc0QMtDiww5i/uH5n/Rgl1mYDZC FFpEwhPA2h/1ud2+kqd28LUhbCtE1+jyExKK40HReIx86kYRy3JiES3PYQWv7wAd YSLJcwcxqgz/XAoc6WJjCTtc2qJkU8nNtSjMM/KU9hoz335fbUqFYgpEzbuNf40O pkp9P5NYtjAJ64VsVFaSkYlJAzlIDtSZ6d9E5225OZ+dI/uF4DJ1tPmU5Np6CGw5 DZI8CRYNGyv5PF1/e3LL14FL+kqqJMMZk1Q9xuVsTWXpl6gzbEjtJeh2y9QFzV/g fH/zYu6bK0+fechwp2KtEbN8KfZiXhS0Wg7eDX51GF5Idg== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:10 2024 by rpki-client on console-ams.rpki-client.org