$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/EZ2KWcgzwQ6Me7Fui2TbitDJ3x8.roa File: EZ2KWcgzwQ6Me7Fui2TbitDJ3x8.roa (raw, json) Hash identifier: qE8MOEeTDNwLsBi8J1Ap9XrK9g4AEFXbLMf6L4k2p0g= Subject key identifier: 11:9D:8A:59:C8:33:C1:0E:8C:7B:B1:6E:8B:64:DB:8A:D0:C9:DF:1F Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1326 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/EZ2KWcgzwQ6Me7Fui2TbitDJ3x8.roa Signing time: Fri 01 Sep 2023 09:24:33 +0000 ROA not before: Fri 01 Sep 2023 09:24:33 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18049 IP address blocks: 112.105.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4902 (0x1326) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:33 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=119D8A59C833C10E8C7BB16E8B64DB8AD0C9DF1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dd:b4:ea:e3:f9:7f:2f:aa:4e:d6:a8:ac:92: 0c:41:da:6d:85:42:4f:ba:48:ae:ce:4f:d1:e1:51: 49:73:c5:f2:5b:96:aa:a4:24:d8:16:61:bf:05:fb: 16:a6:c8:2b:2a:68:78:e8:09:40:8a:2e:e6:01:d6: 14:f7:78:75:f6:91:25:08:d2:38:fa:0c:13:ba:13: 99:2e:94:58:a1:42:96:ec:be:aa:5d:d4:91:e4:b7: 9b:4c:e3:cd:18:1b:52:d2:65:c7:c5:ff:76:96:c5: 0b:d3:07:54:a6:a7:ee:1f:86:22:7f:21:69:ec:59: 62:38:88:f7:a9:8a:e1:77:9b:14:f5:44:2e:31:3c: 2e:96:94:59:48:3b:75:18:3a:f0:55:9c:33:b4:51: 51:79:b5:8f:20:4e:7b:e0:30:8a:6e:54:d6:cd:a3: c6:17:c4:f4:ce:cd:a9:fb:78:6b:be:59:f8:f3:e9: 11:f7:14:06:0e:da:b3:04:66:bd:9b:02:3c:a8:17: 85:56:b3:50:3d:7a:48:74:e3:8b:af:ac:a9:09:dc: 0e:7d:1f:8f:75:54:15:09:c1:63:3e:92:23:a8:ba: e9:8f:4a:ea:3b:71:69:e7:c0:17:99:71:b4:d4:18: c6:37:a9:f8:1a:33:0a:dd:9a:1f:ca:26:ad:39:7f: 07:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9D:8A:59:C8:33:C1:0E:8C:7B:B1:6E:8B:64:DB:8A:D0:C9:DF:1F X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/EZ2KWcgzwQ6Me7Fui2TbitDJ3x8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.105.56.0/22 Signature Algorithm: sha256WithRSAEncryption 02:d8:f1:86:8e:ee:5e:cc:0a:e3:b1:d6:da:3f:55:f6:d5:ca: d0:70:ff:e4:ea:a1:c2:49:b6:71:06:ee:00:48:9b:4b:d2:aa: 92:01:6b:a3:de:96:79:4e:71:5e:d3:c5:eb:28:2f:f5:a4:e3: 32:8d:d7:58:72:c1:50:ee:ed:1d:7e:ac:0b:c2:70:7e:f1:d7: 78:bb:d6:c9:41:aa:e7:fe:2c:8d:f8:7b:df:34:c5:b8:10:8c: 32:08:d4:25:69:9a:0e:1e:ed:b3:05:e8:cb:88:7f:2e:f0:b4: 01:02:77:86:66:f0:8c:86:76:4c:75:96:29:f0:42:c4:05:68: 45:7a:6d:ac:f5:fd:67:95:87:ed:70:79:16:d6:d2:5b:67:04: fe:24:40:09:40:7e:d8:30:91:0c:e6:07:4b:ea:c2:f4:a8:08: 7c:ba:c0:06:c2:a0:c6:35:30:bb:3f:0c:e3:da:51:c7:c0:62: e1:86:ea:93:28:0b:d9:ba:9a:00:f2:a3:af:df:5f:9e:17:88: 5e:12:11:4f:1f:f8:9f:e5:7c:e7:6d:f6:57:13:25:4e:cc:c7: e5:1c:65:73:67:84:fc:a7:64:97:c0:56:9a:e5:49:f3:ff:85: 34:20:4e:21:8f:21:c0:37:74:81:71:48:36:3b:ad:66:1d:a8: 56:4e:fe:21 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEyYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MzNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDExOUQ4QTU5QzgzM0Mx MEU4QzdCQjE2RThCNjREQjhBRDBDOURGMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCo3bTq4/l/L6pO1qiskgxB2m2FQk+6SK7OT9HhUUlzxfJblqqk JNgWYb8F+xamyCsqaHjoCUCKLuYB1hT3eHX2kSUI0jj6DBO6E5kulFihQpbsvqpd 1JHkt5tM480YG1LSZcfF/3aWxQvTB1Smp+4fhiJ/IWnsWWI4iPepiuF3mxT1RC4x PC6WlFlIO3UYOvBVnDO0UVF5tY8gTnvgMIpuVNbNo8YXxPTOzan7eGu+Wfjz6RH3 FAYO2rMEZr2bAjyoF4VWs1A9ekh044uvrKkJ3A59H491VBUJwWM+kiOouumPSuo7 cWnnwBeZcbTUGMY3qfgaMwrdmh/KJq05fweZAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUEZ2KWcgzwQ6Me7Fui2TbitDJ3x8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRVoyS1djZ3p3UTZNZTdGdWkyVGJp dERKM3g4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnBpODAN BgkqhkiG9w0BAQsFAAOCAQEAAtjxho7uXswK47HW2j9V9tXK0HD/5Oqhwkm2cQbu AEibS9KqkgFro96WeU5xXtPF6ygv9aTjMo3XWHLBUO7tHX6sC8JwfvHXeLvWyUGq 5/4sjfh73zTFuBCMMgjUJWmaDh7tswXoy4h/LvC0AQJ3hmbwjIZ2THWWKfBCxAVo RXptrPX9Z5WH7XB5FtbSW2cE/iRACUB+2DCRDOYHS+rC9KgIfLrABsKgxjUwuz8M 49pRx8Bi4YbqkygL2bqaAPKjr99fnheIXhIRTx/4n+V85232VxMlTszH5Rxlc2eE /Kdkl8BWmuVJ8/+FNCBOIY8hwDd0gXFINjutZh2oVk7+IQ== -----END CERTIFICATE-----Generated at Sat Jun 1 15:05:00 2024 by rpki-client on console-fra.rpki-client.org