$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/GgZRjnn-9CPFXzw12Vozqf1iIwE.roa File: GgZRjnn-9CPFXzw12Vozqf1iIwE.roa (raw, json) Hash identifier: 2UkumlHfYY20DaxBo4MQ4qCzBQoTfrXKX0JpvNYuQRM= Subject key identifier: 1A:06:51:8E:79:FE:F4:23:C5:5F:3C:35:D9:5A:33:A9:FD:62:23:01 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 16CC Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GgZRjnn-9CPFXzw12Vozqf1iIwE.roa Signing time: Mon 26 Aug 2024 05:22:38 +0000 ROA not before: Mon 26 Aug 2024 05:22:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 60.245.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5836 (0x16cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:38 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1A06518E79FEF423C55F3C35D95A33A9FD622301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8e:2e:18:3b:df:f6:65:43:14:dc:c6:24:6e: 3f:eb:ce:2a:20:7f:db:b7:47:26:38:b0:6b:e6:85: 93:6f:e9:c4:b7:89:dd:37:c4:4c:14:91:e4:b7:01: cd:80:20:a0:a9:43:09:4a:39:54:d0:e7:76:46:eb: c6:58:b8:72:4b:b8:f9:61:90:d2:f9:24:44:b8:37: b9:e4:07:ea:2e:5b:1f:ca:aa:44:25:4f:2d:70:6e: 81:a4:b3:67:78:c2:06:62:f1:7f:3c:e6:b4:3e:95: 45:a9:85:2e:f3:fc:8b:d3:e1:2c:db:be:14:0e:d1: 50:70:d2:f3:24:38:ad:93:1c:c5:47:46:55:c9:ba: 86:44:61:f5:f9:9c:c9:65:0d:ec:e3:4a:90:5b:26: 4d:b6:0c:ea:74:80:23:33:04:6b:27:84:bb:c6:60: dc:0b:5c:60:57:4c:9c:2b:84:56:03:1d:dc:70:dd: ac:8d:f1:c9:27:f8:0a:20:e7:a7:03:af:80:f2:0d: 12:cf:bd:8d:12:99:c8:b7:96:ac:0b:66:17:e9:22: 57:e9:9f:1a:84:c4:2e:b3:f9:cf:c4:92:82:30:79: b8:3a:b2:4e:ed:1c:70:91:56:d1:8f:a9:67:56:b7: 24:b8:93:09:8c:01:8a:fe:8d:1d:3c:f4:c5:1d:7c: e2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:06:51:8E:79:FE:F4:23:C5:5F:3C:35:D9:5A:33:A9:FD:62:23:01 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GgZRjnn-9CPFXzw12Vozqf1iIwE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.245.96.0/19 Signature Algorithm: sha256WithRSAEncryption 95:03:24:4c:51:10:dd:72:95:c4:46:b2:80:dd:76:ea:93:1d: 37:7e:0b:a4:f6:a5:f5:62:78:de:c5:01:ed:b2:8e:5f:48:33: dd:5b:4c:9f:bb:35:17:47:ff:e8:a3:f8:94:2d:89:04:6e:e2: 75:2f:3d:e4:d7:15:21:07:a5:61:2a:3d:d5:21:c2:bb:35:6d: 31:5c:c4:4e:75:8a:9b:d1:f4:9c:48:3f:ea:6d:d4:ed:80:ac: 17:cd:f3:6a:3e:7c:5e:2a:dd:f7:c3:4c:80:a2:ff:8e:39:9d: 91:e3:ef:0b:71:13:4a:53:7f:c9:51:c4:31:92:7e:d5:c8:a9: ee:89:86:62:34:e6:48:63:80:d4:e6:11:37:d8:2e:0a:e5:12: b2:2b:03:70:2a:16:e8:10:c6:75:ab:d1:4f:7a:46:09:78:de: 52:0d:79:66:af:ac:de:b9:3a:90:1a:de:5f:79:a0:d1:fd:6a: 16:a2:32:3f:2e:05:8a:c5:2d:62:ff:e1:e3:0d:75:82:fd:9f: 59:98:72:cc:25:34:ae:cc:d5:f1:6d:fd:c8:4c:24:24:f9:12: cb:25:72:48:e5:8a:89:62:47:33:99:52:26:46:65:cb:5c:18: 51:6d:79:e4:9b:17:cc:82:31:15:25:fc:93:c2:00:d9:8c:7d: 30:7c:9a:0b -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFswwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFBMDY1MThFNzlGRUY0 MjNDNTVGM0MzNUQ5NUEzM0E5RkQ2MjIzMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEji4YO9/2ZUMU3MYkbj/rziogf9u3RyY4sGvmhZNv6cS3id03 xEwUkeS3Ac2AIKCpQwlKOVTQ53ZG68ZYuHJLuPlhkNL5JES4N7nkB+ouWx/KqkQl Ty1wboGks2d4wgZi8X885rQ+lUWphS7z/IvT4SzbvhQO0VBw0vMkOK2THMVHRlXJ uoZEYfX5nMllDezjSpBbJk22DOp0gCMzBGsnhLvGYNwLXGBXTJwrhFYDHdxw3ayN 8ckn+Aog56cDr4DyDRLPvY0Smci3lqwLZhfpIlfpnxqExC6z+c/EkoIwebg6sk7t HHCRVtGPqWdWtyS4kwmMAYr+jR089MUdfOIPAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUGgZRjnn+9CPFXzw12Vozqf1iIwEwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvR2daUmpubi05Q1BGWHp3MTJWb3px ZjFpSXdFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBTz1YDAN BgkqhkiG9w0BAQsFAAOCAQEAlQMkTFEQ3XKVxEaygN126pMdN34LpPal9WJ43sUB 7bKOX0gz3VtMn7s1F0f/6KP4lC2JBG7idS895NcVIQelYSo91SHCuzVtMVzETnWK m9H0nEg/6m3U7YCsF83zaj58Xird98NMgKL/jjmdkePvC3ETSlN/yVHEMZJ+1cip 7omGYjTmSGOA1OYRN9guCuUSsisDcCoW6BDGdavRT3pGCXjeUg15Zq+s3rk6kBre X3mg0f1qFqIyPy4FisUtYv/h4w11gv2fWZhyzCU0rszV8W39yEwkJPkSyyVySOWK iWJHM5lSJkZly1wYUW155JsXzIIxFSX8k8IA2Yx9MHyaCw== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:10 2024 by rpki-client on console-ams.rpki-client.org