$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/GsAk4BjsO1a8wInNgGFo0uwBMsA.roa File: GsAk4BjsO1a8wInNgGFo0uwBMsA.roa (raw, json) Hash identifier: OH68XdOtnwS13Z8vdOW1iIAsdM3lCTwW3IC8i9AJNDY= Subject key identifier: 1A:C0:24:E0:18:EC:3B:56:BC:C0:89:CD:80:61:68:D2:EC:01:32:C0 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 13D1 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GsAk4BjsO1a8wInNgGFo0uwBMsA.roa Signing time: Fri 01 Sep 2023 09:25:29 +0000 ROA not before: Fri 01 Sep 2023 09:25:29 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 175.180.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5073 (0x13d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:29 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1AC024E018EC3B56BCC089CD806168D2EC0132C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:55:3d:79:61:95:f6:b4:aa:4b:f7:90:29:1e: e2:0b:73:68:bb:f5:a9:72:22:1c:fd:91:dc:83:fe: 60:a3:19:83:34:73:ad:fa:0e:4a:67:cd:1e:8b:4e: cd:5e:88:a5:e7:bf:11:79:c9:ad:53:53:e7:3e:65: 6c:b0:cf:b4:18:0e:65:fd:be:e5:c6:78:41:3f:5b: fd:2b:ea:b6:c3:0d:93:22:dd:f2:f9:ca:91:41:93: 96:46:c6:5b:67:e7:69:9f:55:3c:1d:fc:9e:fe:b3: b1:80:bb:a8:5e:76:ce:f5:bf:73:ac:d6:28:f7:6f: 39:c7:10:3e:fb:8a:b6:bb:cd:82:8a:73:ab:bd:5a: a4:af:ce:5d:ed:68:fb:ad:3a:14:74:c1:78:2b:c8: ad:49:56:f5:87:3d:04:76:17:4e:61:a2:6e:64:be: 89:37:c6:f8:38:d7:ec:74:51:55:f1:b5:90:3b:da: 6d:13:7f:22:60:9c:38:a9:d7:64:70:8f:cf:23:ce: 36:4f:d7:92:26:b0:ae:3c:49:71:ac:ea:97:23:f0: d0:cc:11:22:b4:a6:02:f0:1c:f0:2a:27:6c:35:fd: b7:54:dd:06:d8:b2:e0:a6:43:dd:77:52:27:40:e3: 53:fb:e7:08:ab:b8:16:44:84:28:1f:a2:c8:cf:d8: c1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C0:24:E0:18:EC:3B:56:BC:C0:89:CD:80:61:68:D2:EC:01:32:C0 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GsAk4BjsO1a8wInNgGFo0uwBMsA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.180.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7c:66:8d:4a:b0:b6:b5:09:da:17:f1:a0:fb:25:a4:30:63:fc: b5:fa:3d:fe:c1:a1:53:28:b5:07:ec:4d:42:48:90:35:9b:f0: 4e:69:78:b2:82:f6:f3:c1:28:c2:4b:d9:dd:b0:01:0e:36:08: 50:7e:5b:14:bd:6a:4b:2f:4c:59:31:e5:d8:30:9d:0c:fa:20: 07:05:30:3b:2a:3c:c7:0e:f6:46:fd:1b:a3:4b:1c:ff:0b:38: 76:d5:66:8b:d6:ee:8d:f2:93:f5:5d:7c:bd:53:8a:3b:d0:34: ab:55:50:bf:2c:3f:7f:92:aa:cb:5e:2b:66:dd:57:e1:e3:fe: 09:70:5c:04:53:ae:f4:e8:e6:af:03:4a:7f:6f:f3:42:9e:3e: a5:0e:f4:0f:35:7c:b8:70:a9:3b:87:9a:cb:6e:21:8f:c3:35: 4e:0c:8f:5b:6a:02:e8:db:33:46:6f:a5:fc:99:0c:f5:65:e5: 32:3d:54:d4:39:05:44:58:ac:79:97:8e:4c:4e:ec:d7:7a:98: fb:91:5f:91:8f:72:72:89:65:ae:ac:49:17:a3:a9:88:2c:21: 99:95:fd:5d:f3:23:6a:f8:d3:8b:21:a9:0e:77:14:d8:86:8c: 50:2f:fa:3c:c6:22:93:42:1a:4e:ef:31:fe:b2:13:e5:1d:87: d7:1c:52:41 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICE9EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFBQzAyNEUwMThFQzNC NTZCQ0MwODlDRDgwNjE2OEQyRUMwMTMyQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfVT15YZX2tKpL95ApHuILc2i79alyIhz9kdyD/mCjGYM0c636 DkpnzR6LTs1eiKXnvxF5ya1TU+c+ZWywz7QYDmX9vuXGeEE/W/0r6rbDDZMi3fL5 ypFBk5ZGxltn52mfVTwd/J7+s7GAu6heds71v3Os1ij3bznHED77ira7zYKKc6u9 WqSvzl3taPutOhR0wXgryK1JVvWHPQR2F05hom5kvok3xvg41+x0UVXxtZA72m0T fyJgnDip12Rwj88jzjZP15ImsK48SXGs6pcj8NDMESK0pgLwHPAqJ2w1/bdU3QbY suCmQ913UidA41P75wiruBZEhCgfosjP2MEnAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUGsAk4BjsO1a8wInNgGFo0uwBMsAwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvR3NBazRCanNPMWE4d0luTmdHRm8w dXdCTXNBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAK+0MA0G CSqGSIb3DQEBCwUAA4IBAQB8Zo1KsLa1CdoX8aD7JaQwY/y1+j3+waFTKLUH7E1C SJA1m/BOaXiygvbzwSjCS9ndsAEONghQflsUvWpLL0xZMeXYMJ0M+iAHBTA7KjzH DvZG/RujSxz/Czh21WaL1u6N8pP1XXy9U4o70DSrVVC/LD9/kqrLXitm3Vfh4/4J cFwEU6706OavA0p/b/NCnj6lDvQPNXy4cKk7h5rLbiGPwzVODI9bagLo2zNGb6X8 mQz1ZeUyPVTUOQVEWKx5l45MTuzXepj7kV+Rj3JyiWWurEkXo6mILCGZlf1d8yNq +NOLIakOdxTYhoxQL/o8xiKTQhpO7zH+shPlHYfXHFJB -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org