$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Fy3cLfdyH1wiHGVa8Ikt28qpg8k.roa File: Fy3cLfdyH1wiHGVa8Ikt28qpg8k.roa (raw, json) Hash identifier: 2rc+rYEt64hTZaZIDPokAfIFIBzV/npFXF6Q2YHKIsY= Subject key identifier: 17:2D:DC:2D:F7:72:1F:5C:22:1C:65:5A:F0:89:2D:DB:CA:A9:83:C9 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 16DC Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Fy3cLfdyH1wiHGVa8Ikt28qpg8k.roa Signing time: Mon 26 Aug 2024 05:22:42 +0000 ROA not before: Mon 26 Aug 2024 05:22:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131602 IP address blocks: 60.245.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5852 (0x16dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:42 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=172DDC2DF7721F5C221C655AF0892DDBCAA983C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:e0:b6:34:4e:aa:92:d8:da:bd:5a:0c:b3: f6:ab:08:e5:2c:3e:dd:e2:35:64:d5:6f:d9:60:32: eb:56:2f:00:eb:e9:9a:be:85:12:c1:8b:76:c1:93: d8:ce:8c:bd:29:4a:4e:40:ad:7b:a2:4d:a7:1a:1d: c5:a8:38:84:8b:98:68:b5:35:53:dc:52:68:78:73: 08:03:ae:63:d6:aa:b3:cc:79:70:22:b9:22:4d:b8: c9:b7:7f:fa:fa:b2:20:6f:35:db:1e:6e:b6:66:44: 84:e0:ab:c7:ff:78:f3:19:d7:29:ab:fb:08:ca:18: c9:78:69:42:1e:a9:92:9e:4d:71:e9:97:20:78:bf: c2:0e:76:1b:28:85:89:d3:ca:28:60:e1:82:1b:1c: 0d:fd:f8:38:f7:fc:b1:59:0a:81:ab:ee:db:2f:5c: 48:48:e3:d5:41:66:c0:4f:c6:fd:61:a7:3c:ad:55: 76:36:15:49:d9:92:28:7c:de:1d:07:29:85:bc:1b: 94:81:81:7d:c9:58:9f:a2:70:a6:27:e4:41:49:b9: 24:40:44:fe:70:f0:4b:13:7f:8d:54:be:47:f7:1f: 20:11:54:a5:52:76:dc:57:27:70:0b:6f:c6:df:a8: 78:a5:bf:50:3c:73:ed:d4:46:ca:97:f9:39:12:83: b1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2D:DC:2D:F7:72:1F:5C:22:1C:65:5A:F0:89:2D:DB:CA:A9:83:C9 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Fy3cLfdyH1wiHGVa8Ikt28qpg8k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.245.112.0/21 Signature Algorithm: sha256WithRSAEncryption 59:3e:e0:e7:c0:be:0f:4e:1e:ac:9f:ae:03:99:23:d7:71:75: 55:98:7e:ab:39:be:46:3b:6b:68:8d:8f:13:0d:40:3b:8b:83: c9:4e:cf:6a:1c:d4:54:00:25:52:d8:91:bf:f3:e3:47:48:c4: 42:45:d9:76:9c:81:79:ca:dc:60:08:c1:3f:c7:6f:21:25:12: a5:af:9e:20:14:84:43:2c:f0:73:81:81:0e:f8:1c:ba:f3:f1: 71:65:a6:e3:4d:ee:53:f8:78:f3:80:b8:91:3a:e2:bd:db:4c: 8a:37:27:55:cd:d5:5a:4b:4c:a3:78:0d:93:64:8a:7e:f7:d1: a6:d8:1a:85:ef:c6:4d:d1:dd:79:98:f2:b0:57:4d:e8:9f:97: ba:ee:51:ab:74:94:04:b7:fa:32:b2:ab:d6:ec:0c:4a:5e:d2: 33:0a:e1:7f:7a:d3:10:e9:69:de:97:27:86:25:18:79:fa:4b: 02:86:30:5c:00:2c:37:76:bf:5f:3a:6e:8a:0c:77:76:c9:00: 82:98:76:58:ee:aa:6e:3e:11:6c:bf:9d:96:4c:e5:98:ff:92: 72:59:40:19:9f:46:92:6d:46:a6:50:c6:5c:ac:21:e7:05:8f: 20:d6:38:37:ad:fa:94:e7:c8:70:39:13:0d:53:ea:88:2c:e7: ec:0d:aa:e3 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFtwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyNDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE3MkREQzJERjc3MjFG NUMyMjFDNjU1QUYwODkyRERCQ0FBOTgzQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3LeC2NE6qktjavVoMs/arCOUsPt3iNWTVb9lgMutWLwDr6Zq+ hRLBi3bBk9jOjL0pSk5ArXuiTacaHcWoOISLmGi1NVPcUmh4cwgDrmPWqrPMeXAi uSJNuMm3f/r6siBvNdsebrZmRITgq8f/ePMZ1ymr+wjKGMl4aUIeqZKeTXHplyB4 v8IOdhsohYnTyihg4YIbHA39+Dj3/LFZCoGr7tsvXEhI49VBZsBPxv1hpzytVXY2 FUnZkih83h0HKYW8G5SBgX3JWJ+icKYn5EFJuSRARP5w8EsTf41Uvkf3HyARVKVS dtxXJ3ALb8bfqHilv1A8c+3URsqX+TkSg7HbAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUFy3cLfdyH1wiHGVa8Ikt28qpg8kwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRnkzY0xmZHlIMXdpSEdWYThJa3Qy OHFwZzhrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAzz1cDAN BgkqhkiG9w0BAQsFAAOCAQEAWT7g58C+D04erJ+uA5kj13F1VZh+qzm+RjtraI2P Ew1AO4uDyU7PahzUVAAlUtiRv/PjR0jEQkXZdpyBecrcYAjBP8dvISUSpa+eIBSE Qyzwc4GBDvgcuvPxcWWm403uU/h484C4kTrivdtMijcnVc3VWktMo3gNk2SKfvfR ptgahe/GTdHdeZjysFdN6J+Xuu5Rq3SUBLf6MrKr1uwMSl7SMwrhf3rTEOlp3pcn hiUYefpLAoYwXAAsN3a/Xzpuigx3dskAgph2WO6qbj4RbL+dlkzlmP+ScllAGZ9G km1GplDGXKwh5wWPINY4N636lOfIcDkTDVPqiCzn7A2q4w== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:52 2024 by rpki-client on console-fra.rpki-client.org