$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/JSyzJcl4lDwyuc1SgBCvJD3yRQY.roa File: JSyzJcl4lDwyuc1SgBCvJD3yRQY.roa (raw, json) Hash identifier: 4tLQEjCLPnpq6Nq1QTQynp5MUufI8ueiIAAPqhxNAWg= Subject key identifier: 25:2C:B3:25:C9:78:94:3C:32:B9:CD:52:80:10:AF:24:3D:F2:45:06 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 168B Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/JSyzJcl4lDwyuc1SgBCvJD3yRQY.roa Signing time: Mon 26 Aug 2024 05:22:19 +0000 ROA not before: Mon 26 Aug 2024 05:22:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 198949 IP address blocks: 113.196.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 02:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5771 (0x168b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:19 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=252CB325C978943C32B9CD528010AF243DF24506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3d:ab:59:e7:40:03:f2:43:73:0a:0c:52:2c: bd:64:82:14:27:25:75:4f:8d:92:04:97:7e:a7:ae: fb:5a:2c:ee:18:49:fd:58:b8:34:31:2f:59:ba:29: 6e:d2:dc:68:46:7a:7d:d5:f8:9d:75:84:5f:f2:73: 27:6d:08:9d:32:97:6c:83:72:a8:0e:3c:82:e5:be: fd:a4:6e:73:a0:d5:2e:0d:3e:dc:8a:e8:db:84:9f: de:1d:77:9a:fb:f6:e4:f9:57:80:d6:4b:6b:09:ea: fe:23:64:bc:fe:16:15:d6:99:48:92:f0:07:7a:07: 70:1d:bb:98:3a:a3:d0:88:9d:86:05:cd:2d:81:7d: 8c:77:43:83:a2:3b:43:90:c9:c2:78:7d:30:06:09: 6d:37:b9:21:df:2a:ed:b4:ba:44:99:29:00:07:8e: 1d:06:56:8a:bd:67:57:26:c5:57:3b:58:0f:93:6d: 87:bc:9c:0f:c7:1a:eb:9c:32:94:c3:9c:4f:0b:a7: 96:6d:0e:e2:b3:2d:dd:1f:69:11:f4:9c:0b:f1:ab: f4:b9:0f:47:66:6e:18:b4:c8:de:65:4b:83:91:f1: f4:60:29:de:79:ba:9a:9b:3b:8a:9c:4b:f2:4f:b4: 45:8d:4f:fe:00:46:3e:57:dc:fd:e1:6a:4c:e6:e8: 00:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2C:B3:25:C9:78:94:3C:32:B9:CD:52:80:10:AF:24:3D:F2:45:06 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/JSyzJcl4lDwyuc1SgBCvJD3yRQY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.196.79.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:c7:94:c1:e8:7f:2d:5e:06:30:a1:b4:20:c4:cd:63:ba:32: 8f:1d:27:a6:5a:fc:df:ab:95:30:e3:68:31:d0:47:f8:ce:17: e8:cd:f9:b0:23:88:56:d9:d8:1c:2e:d3:95:db:ca:f6:12:15: f4:de:6a:f0:15:76:6d:9c:10:74:d9:d0:57:a3:21:36:2c:3e: 02:83:55:b1:8a:a9:3b:6b:1b:5f:6f:06:48:63:f1:ea:88:87: 1f:66:9a:75:36:e8:f3:d9:ed:63:03:7c:99:35:e6:52:68:8a: 39:61:dc:6f:8f:ce:a0:73:c2:34:d3:12:f1:84:b3:61:4c:19: 39:fd:9e:72:b9:c5:c3:1a:68:10:f0:cb:e0:25:07:49:c9:96: e4:9e:0b:4d:f8:eb:eb:d9:55:a3:5c:f6:e9:d9:88:2e:99:5d: 7b:ce:01:bd:09:1e:80:ee:92:f5:b1:3f:f8:63:f3:f5:8f:8b: d5:a7:76:fe:fd:2d:11:87:82:9d:60:de:90:9c:e6:c2:fd:7b: 84:c3:19:91:64:5e:5b:5e:0d:51:f1:e3:86:1b:6b:5a:c6:52: b0:3e:66:5c:b3:8f:35:33:18:26:97:f6:29:9a:51:ff:11:e2: 1c:cc:7c:4a:54:9c:f7:f9:d3:38:39:7d:0d:4c:b4:94:c0:7d: 32:02:3d:8f -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFoswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI1MkNCMzI1Qzk3ODk0 M0MzMkI5Q0Q1MjgwMTBBRjI0M0RGMjQ1MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4PatZ50AD8kNzCgxSLL1kghQnJXVPjZIEl36nrvtaLO4YSf1Y uDQxL1m6KW7S3GhGen3V+J11hF/ycydtCJ0yl2yDcqgOPILlvv2kbnOg1S4NPtyK 6NuEn94dd5r79uT5V4DWS2sJ6v4jZLz+FhXWmUiS8Ad6B3Adu5g6o9CInYYFzS2B fYx3Q4OiO0OQycJ4fTAGCW03uSHfKu20ukSZKQAHjh0GVoq9Z1cmxVc7WA+TbYe8 nA/HGuucMpTDnE8Lp5ZtDuKzLd0faRH0nAvxq/S5D0dmbhi0yN5lS4OR8fRgKd55 upqbO4qcS/JPtEWNT/4ARj5X3P3hakzm6AAJAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUJSyzJcl4lDwyuc1SgBCvJD3yRQYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSlN5ekpjbDRsRHd5dWMxU2dCQ3ZK RDN5UlFZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHHETzAN BgkqhkiG9w0BAQsFAAOCAQEAb8eUweh/LV4GMKG0IMTNY7oyjx0nplr836uVMONo MdBH+M4X6M35sCOIVtnYHC7TldvK9hIV9N5q8BV2bZwQdNnQV6MhNiw+AoNVsYqp O2sbX28GSGPx6oiHH2aadTbo89ntYwN8mTXmUmiKOWHcb4/OoHPCNNMS8YSzYUwZ Of2ecrnFwxpoEPDL4CUHScmW5J4LTfjr69lVo1z26dmILplde84BvQkegO6S9bE/ +GPz9Y+L1ad2/v0tEYeCnWDekJzmwv17hMMZkWReW14NUfHjhhtrWsZSsD5mXLOP NTMYJpf2KZpR/xHiHMx8SlSc9/nTODl9DUy0lMB9MgI9jw== -----END CERTIFICATE-----Generated at Sun Nov 24 21:50:20 2024 by rpki-client on console-ams.rpki-client.org