$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/F0y0g_VBsLp9FqUaUz33vGDZpTE.roa File: F0y0g_VBsLp9FqUaUz33vGDZpTE.roa (raw, json) Hash identifier: 6saYgo1o0tfRoLbAW+3LaSSimTnW48KVqRkJe9DKRZ0= Subject key identifier: 17:4C:B4:83:F5:41:B0:BA:7D:16:A5:1A:53:3D:F7:BC:60:D9:A5:31 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1660 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/F0y0g_VBsLp9FqUaUz33vGDZpTE.roa Signing time: Mon 26 Aug 2024 05:22:07 +0000 ROA not before: Mon 26 Aug 2024 05:22:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131602 IP address blocks: 123.205.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5728 (0x1660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:07 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=174CB483F541B0BA7D16A51A533DF7BC60D9A531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:34:24:58:9f:91:23:c7:27:bf:5d:c6:c5:4b: 70:d1:0a:d2:8a:20:a4:ee:ab:df:8c:e8:9f:3c:11: cb:3c:e6:7b:f5:5e:75:6f:dd:7d:fa:7b:e4:ab:ea: 4a:a9:ef:77:4b:e7:e0:8d:d9:2c:27:cd:4f:c1:59: e6:ca:56:39:bf:69:1b:92:da:4b:37:1a:f0:6e:6e: 61:95:4e:26:6c:1b:8e:b3:4c:d6:b4:4c:93:d0:7e: 5a:d2:da:c2:42:78:bf:12:c4:09:cb:bf:f1:80:cc: ba:e4:a6:82:3d:50:cf:9d:18:2d:10:6c:fe:69:1b: 60:d9:3d:40:31:ac:a2:2f:5e:20:05:3a:58:b3:f9: 3a:45:25:3b:ba:47:ad:63:ba:f7:da:b3:24:41:81: 2e:07:92:6b:24:8e:33:fe:c3:62:a1:36:14:7e:36: 06:34:03:55:98:a8:e0:f7:11:80:75:56:2a:e7:17: 27:2a:43:66:f2:95:8d:9e:9b:67:7c:06:51:76:c2: 12:69:76:2c:09:8c:cf:f8:a0:c6:76:61:9c:54:41: c3:16:5d:02:f6:61:a1:9b:72:31:bb:fd:43:7c:91: 49:7e:09:e9:c6:70:ab:9c:1b:40:0f:b1:b1:9d:1c: 50:93:1b:8a:d4:c6:69:f3:ce:36:d7:64:f9:bc:b4: c3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4C:B4:83:F5:41:B0:BA:7D:16:A5:1A:53:3D:F7:BC:60:D9:A5:31 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/F0y0g_VBsLp9FqUaUz33vGDZpTE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.205.176.0/20 Signature Algorithm: sha256WithRSAEncryption 0e:b0:ab:50:e2:36:43:32:e1:7d:22:0e:c9:98:7d:7d:ec:1a: b0:18:28:c7:f6:56:92:cc:99:77:d3:21:63:1e:90:38:43:f4: 04:4c:6b:99:10:e7:b3:7f:75:d4:cc:34:d8:eb:b8:3f:00:86: cc:41:b7:f3:59:5f:e5:03:10:e7:47:02:08:c8:29:09:ca:f9: 55:a7:54:a2:c9:c4:91:f6:f8:66:5d:3e:3b:71:7c:0a:d3:b9: 79:53:68:9f:88:c8:b4:32:0b:3a:03:d7:8b:57:f0:1e:05:c0: 71:0e:5c:d4:dc:09:8f:30:c3:d9:11:a2:0c:23:3e:dc:9f:9c: db:7d:bb:13:cc:f6:c3:c9:e1:76:19:b4:5e:2a:40:ae:0b:9f: d4:ae:31:38:ea:b4:30:d2:2e:67:53:35:32:94:df:23:a3:1d: 74:d5:f1:30:6d:fe:78:6a:ba:0c:38:5f:ab:24:5f:93:c1:3d: a6:d0:4c:5a:ed:f1:b8:c8:f3:22:9e:b4:56:19:6c:9e:a4:9f: 82:d7:94:90:6b:da:a2:cd:25:4d:82:e9:65:6b:6d:5e:cb:31: 5d:71:d2:0a:ca:9b:92:f6:68:0d:87:7a:9e:52:e8:0e:5f:88: eb:1d:6e:7a:e8:25:04:62:25:a6:d4:83:c6:7e:b0:fe:5a:9b: 49:5f:7a:c9 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFmAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyMDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE3NENCNDgzRjU0MUIw QkE3RDE2QTUxQTUzM0RGN0JDNjBEOUE1MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDENCRYn5Ejxye/XcbFS3DRCtKKIKTuq9+M6J88Ecs85nv1XnVv 3X36e+Sr6kqp73dL5+CN2SwnzU/BWebKVjm/aRuS2ks3GvBubmGVTiZsG46zTNa0 TJPQflrS2sJCeL8SxAnLv/GAzLrkpoI9UM+dGC0QbP5pG2DZPUAxrKIvXiAFOliz +TpFJTu6R61juvfasyRBgS4HkmskjjP+w2KhNhR+NgY0A1WYqOD3EYB1VirnFycq Q2bylY2em2d8BlF2whJpdiwJjM/4oMZ2YZxUQcMWXQL2YaGbcjG7/UN8kUl+CenG cKucG0APsbGdHFCTG4rUxmnzzjbXZPm8tMPpAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUF0y0g/VBsLp9FqUaUz33vGDZpTEwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRjB5MGdfVkJzTHA5RnFVYVV6MzN2 R0RacFRFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHvNsDAN BgkqhkiG9w0BAQsFAAOCAQEADrCrUOI2QzLhfSIOyZh9fewasBgox/ZWksyZd9Mh Yx6QOEP0BExrmRDns3911Mw02Ou4PwCGzEG381lf5QMQ50cCCMgpCcr5VadUosnE kfb4Zl0+O3F8CtO5eVNon4jItDILOgPXi1fwHgXAcQ5c1NwJjzDD2RGiDCM+3J+c 2327E8z2w8nhdhm0XipArguf1K4xOOq0MNIuZ1M1MpTfI6MddNXxMG3+eGq6DDhf qyRfk8E9ptBMWu3xuMjzIp60VhlsnqSfgteUkGvaos0lTYLpZWttXssxXXHSCsqb kvZoDYd6nlLoDl+I6x1ueuglBGIlptSDxn6w/lqbSV96yQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:33 2024 by rpki-client on console-ams.rpki-client.org