$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/IDNgIJ07Z-qwPbLdswhoCFEDZQU.roa File: IDNgIJ07Z-qwPbLdswhoCFEDZQU.roa (raw, json) Hash identifier: XzhLHBmBw2yAoiYy4O1cQnQvI61gOTlbh73BBARPbnA= Subject key identifier: 20:33:60:20:9D:3B:67:EA:B0:3D:B2:DD:B3:08:68:08:51:03:65:05 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 16D5 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IDNgIJ07Z-qwPbLdswhoCFEDZQU.roa Signing time: Mon 26 Aug 2024 05:22:40 +0000 ROA not before: Mon 26 Aug 2024 05:22:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 106.105.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5845 (0x16d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:40 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=203360209D3B67EAB03DB2DDB308680851036505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:37:b8:47:39:c0:72:24:b4:df:85:34:c1:3d: 7d:58:83:58:b3:20:43:e7:c0:24:c6:a2:0e:8f:95: cf:ce:80:72:13:f3:d5:82:c7:20:c5:5d:bb:46:28: bd:38:ff:08:a9:80:f0:81:3a:32:6a:3d:96:33:06: 35:56:66:bb:25:c5:e7:8c:bf:cd:03:59:ed:e6:a3: dd:ca:10:ae:ba:57:76:c9:28:f8:2a:22:84:47:d1: ae:ae:d9:98:eb:8b:86:53:7a:1d:60:69:6d:5e:c9: 8b:1b:50:ff:40:0f:38:bf:bb:7f:2d:fc:ff:ff:17: 73:84:03:aa:b9:43:5b:79:ba:21:fe:5f:99:60:8a: 2a:96:15:24:8f:fb:c8:43:90:ea:8f:b1:88:d0:e4: f8:87:f1:42:a0:6c:17:7b:c8:40:dc:7b:cf:43:d4: 84:97:cb:c4:16:fb:3a:5c:2d:56:a5:76:e3:31:c3: 05:43:cf:f1:c1:30:34:0d:8f:bc:85:d9:d0:d9:5d: 06:93:5b:6d:ca:82:ca:11:c8:11:f5:59:ef:eb:08: 63:c8:20:e9:80:b4:2b:18:5e:03:d8:eb:79:6f:69: 56:d8:52:58:28:d1:9f:16:a2:ce:47:cb:b4:28:ed: 9b:3e:00:7e:b2:0e:38:9a:69:c4:f0:78:07:d5:7f: 33:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:33:60:20:9D:3B:67:EA:B0:3D:B2:DD:B3:08:68:08:51:03:65:05 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IDNgIJ07Z-qwPbLdswhoCFEDZQU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.96.0/19 Signature Algorithm: sha256WithRSAEncryption 36:2d:5b:65:97:38:54:c1:a3:4a:5a:09:3d:20:40:3d:d3:cd: a2:e3:a1:14:69:11:2a:31:49:31:dc:a5:9f:22:86:dc:ba:e8: ab:5b:51:56:f3:f2:a1:c0:8f:69:02:8d:c1:da:cd:c1:86:e2: d0:45:17:9a:c7:ce:e7:da:25:39:b8:3e:cd:9a:af:18:73:6b: d3:aa:be:f7:e3:69:7b:b3:35:e2:1a:da:41:6b:e8:3d:af:39: 2c:98:d2:63:67:39:5a:0a:71:a2:a6:19:5b:f5:05:2c:df:1c: 75:60:bc:f9:61:c8:72:18:aa:af:d5:68:d3:f9:ed:71:51:8b: de:ab:bd:09:f3:90:89:28:33:86:fb:e6:92:93:0e:c1:e0:17: ab:b8:5f:b3:07:5d:aa:c2:13:10:ad:81:5d:4b:8d:2e:4f:67: 96:74:ba:d7:ad:c4:3c:23:c6:28:05:60:bb:a1:c1:bf:fa:f5: 87:fc:4e:b2:36:24:55:34:71:1e:e3:1d:27:0d:7d:e9:21:29: c1:76:76:7c:8c:52:f8:3a:5b:eb:3d:ea:ae:b8:3d:e0:ab:17: 77:61:07:6a:3c:78:de:94:4f:50:23:2c:f4:13:c4:8a:b4:2b: 36:4f:1b:b0:28:ed:65:91:7d:71:e0:da:ca:85:57:14:32:9d: 53:82:f2:da -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFtUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyNDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIwMzM2MDIwOUQzQjY3 RUFCMDNEQjJEREIzMDg2ODA4NTEwMzY1MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClN7hHOcByJLTfhTTBPX1Yg1izIEPnwCTGog6Plc/OgHIT89WC xyDFXbtGKL04/wipgPCBOjJqPZYzBjVWZrslxeeMv80DWe3mo93KEK66V3bJKPgq IoRH0a6u2Zjri4ZTeh1gaW1eyYsbUP9ADzi/u38t/P//F3OEA6q5Q1t5uiH+X5lg iiqWFSSP+8hDkOqPsYjQ5PiH8UKgbBd7yEDce89D1ISXy8QW+zpcLValduMxwwVD z/HBMDQNj7yF2dDZXQaTW23KgsoRyBH1We/rCGPIIOmAtCsYXgPY63lvaVbYUlgo 0Z8Wos5Hy7Qo7Zs+AH6yDjiaacTweAfVfzOdAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUIDNgIJ07Z+qwPbLdswhoCFEDZQUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSUROZ0lKMDdaLXF3UGJMZHN3aG9D RkVEWlFVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBWppYDAN BgkqhkiG9w0BAQsFAAOCAQEANi1bZZc4VMGjSloJPSBAPdPNouOhFGkRKjFJMdyl nyKG3Lroq1tRVvPyocCPaQKNwdrNwYbi0EUXmsfO59olObg+zZqvGHNr06q+9+Np e7M14hraQWvoPa85LJjSY2c5WgpxoqYZW/UFLN8cdWC8+WHIchiqr9Vo0/ntcVGL 3qu9CfOQiSgzhvvmkpMOweAXq7hfswddqsITEK2BXUuNLk9nlnS6163EPCPGKAVg u6HBv/r1h/xOsjYkVTRxHuMdJw196SEpwXZ2fIxS+Dpb6z3qrrg94KsXd2EHajx4 3pRPUCMs9BPEirQrNk8bsCjtZZF9ceDayoVXFDKdU4Ly2g== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:33 2024 by rpki-client on console-ams.rpki-client.org