$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/GG1Lj5ywuAsuSI5jSJ_-94KEJrw.roa File: GG1Lj5ywuAsuSI5jSJ_-94KEJrw.roa (raw, json) Hash identifier: uAb+VvcXrZbDSBkToAj8VjeXmT9nQgO0cxcxH6vlq/M= Subject key identifier: 18:6D:4B:8F:9C:B0:B8:0B:2E:48:8E:63:48:9F:FE:F7:82:84:26:BC Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 16D3 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GG1Lj5ywuAsuSI5jSJ_-94KEJrw.roa Signing time: Mon 26 Aug 2024 05:22:40 +0000 ROA not before: Mon 26 Aug 2024 05:22:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18049 IP address blocks: 175.183.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5843 (0x16d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:40 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=186D4B8F9CB0B80B2E488E63489FFEF7828426BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:a7:d5:0b:69:d5:e5:ed:fa:95:cb:6b:d8: c9:b8:3b:2d:17:84:c3:48:c4:1c:8e:11:33:20:52: 07:51:9d:5b:8d:90:1a:75:bb:c3:36:01:51:b5:8d: cd:45:ea:39:2f:6c:26:bb:16:a2:39:fe:3a:1c:0c: d8:6f:70:38:4d:fc:61:25:5c:3e:a6:6b:94:0e:a1: 8b:63:84:27:bd:6d:d4:7f:d4:4e:28:46:79:b5:a0: 64:74:b6:1d:40:e7:86:c7:eb:69:17:3c:84:94:46: f9:0b:c1:6a:92:1d:83:13:e3:be:37:30:4a:ba:82: e9:e8:55:a4:99:27:c8:92:72:a0:6c:27:95:8a:69: 3e:25:08:35:e1:8f:0b:15:ea:e7:0f:2b:6f:75:63: f0:f0:50:7b:b2:08:20:95:15:e5:51:56:fc:0d:47: c4:ee:4a:d6:ed:1d:98:e0:1a:07:d1:48:99:fa:5d: 2a:cd:e4:ca:22:36:d0:8c:8d:61:c2:bd:70:21:86: 97:87:48:f5:28:c5:83:2b:36:81:62:85:9f:8c:df: da:25:40:69:c7:51:17:c4:61:92:b4:73:10:17:2a: f8:4e:68:fd:ac:ee:a1:20:f8:ea:d7:6b:a5:0a:4d: 09:7f:8f:1d:98:1f:17:4d:3d:d2:b1:70:11:6e:43: 23:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6D:4B:8F:9C:B0:B8:0B:2E:48:8E:63:48:9F:FE:F7:82:84:26:BC X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GG1Lj5ywuAsuSI5jSJ_-94KEJrw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.183.80.0/20 Signature Algorithm: sha256WithRSAEncryption 0b:db:2c:ea:10:08:fc:96:b9:31:19:7b:fe:ce:00:22:94:bd: d5:95:b2:2c:b1:16:46:ce:5b:04:23:30:f4:d9:54:d3:31:35: a1:e2:39:06:e6:9d:a2:3d:b4:74:e0:c5:96:8a:1e:f0:09:8c: 97:d2:7b:e5:ea:5e:7c:d9:74:85:07:bf:05:74:00:d1:b2:00: de:40:38:bb:65:29:f7:55:ec:24:de:f7:a1:2b:e7:f5:9c:5b: 7b:88:c2:d0:f9:0b:8a:ae:60:46:02:78:76:61:00:66:1f:a3: d3:ab:71:78:35:63:79:00:0c:21:e7:78:aa:6b:73:0d:df:b5: 1a:53:78:84:d0:1a:55:f6:9e:6a:f5:71:f4:eb:d5:9e:79:00: 3b:9b:80:fd:92:28:f7:b7:6a:a2:af:6e:4f:6b:8a:5c:5b:74: 66:73:40:4a:d1:d3:cd:a0:ca:1d:f6:2e:cf:c8:b2:ce:03:9c: 36:2d:2a:7c:e4:d9:2b:f4:33:1f:88:b6:5b:fc:84:76:4c:1d: 15:5e:4c:d5:c5:14:f1:7f:b4:9a:c9:31:85:9b:de:94:e5:a7: b4:04:bd:bf:ed:56:21:e3:47:93:7e:9e:be:f3:aa:85:67:af: 9e:dd:0a:a8:4b:53:d2:ba:15:63:f8:e1:92:da:ba:ba:36:1b: 47:15:38:0a -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFtMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyNDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE4NkQ0QjhGOUNCMEI4 MEIyRTQ4OEU2MzQ4OUZGRUY3ODI4NDI2QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB16fVC2nV5e36lctr2Mm4Oy0XhMNIxByOETMgUgdRnVuNkBp1 u8M2AVG1jc1F6jkvbCa7FqI5/jocDNhvcDhN/GElXD6ma5QOoYtjhCe9bdR/1E4o Rnm1oGR0th1A54bH62kXPISURvkLwWqSHYMT4743MEq6gunoVaSZJ8iScqBsJ5WK aT4lCDXhjwsV6ucPK291Y/DwUHuyCCCVFeVRVvwNR8TuStbtHZjgGgfRSJn6XSrN 5MoiNtCMjWHCvXAhhpeHSPUoxYMrNoFihZ+M39olQGnHURfEYZK0cxAXKvhOaP2s 7qEg+OrXa6UKTQl/jx2YHxdNPdKxcBFuQyO1AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUGG1Lj5ywuAsuSI5jSJ/+94KEJrwwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvR0cxTGo1eXd1QXN1U0k1alNKXy05 NEtFSnJ3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBK+3UDAN BgkqhkiG9w0BAQsFAAOCAQEAC9ss6hAI/Ja5MRl7/s4AIpS91ZWyLLEWRs5bBCMw 9NlU0zE1oeI5Buadoj20dODFlooe8AmMl9J75epefNl0hQe/BXQA0bIA3kA4u2Up 91XsJN73oSvn9Zxbe4jC0PkLiq5gRgJ4dmEAZh+j06txeDVjeQAMIed4qmtzDd+1 GlN4hNAaVfaeavVx9OvVnnkAO5uA/ZIo97dqoq9uT2uKXFt0ZnNAStHTzaDKHfYu z8iyzgOcNi0qfOTZK/QzH4i2W/yEdkwdFV5M1cUU8X+0mskxhZvelOWntAS9v+1W IeNHk36evvOqhWevnt0KqEtT0roVY/jhktq6ujYbRxU4Cg== -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:41 2024 by rpki-client on console-fra.rpki-client.org