$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/KhizEJXkIMS3m8Nf1KOpZopf9OI.roa File: KhizEJXkIMS3m8Nf1KOpZopf9OI.roa (raw, json) Hash identifier: iuR4nKPeR0UwRuHzdMjOmIqonFjy/C0V4ft8YB8dFRE= Subject key identifier: 2A:18:B3:10:95:E4:20:C4:B7:9B:C3:5F:D4:A3:A9:66:8A:5F:F4:E2 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1684 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/KhizEJXkIMS3m8Nf1KOpZopf9OI.roa Signing time: Mon 26 Aug 2024 05:22:17 +0000 ROA not before: Mon 26 Aug 2024 05:22:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 112.104.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5764 (0x1684) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:17 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2A18B31095E420C4B79BC35FD4A3A9668A5FF4E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:59:c8:1c:7a:6d:6b:44:b2:57:7b:a9:b0:dc: ac:b3:1d:e8:21:c8:12:6c:65:72:36:e7:8a:4d:42: c3:63:3a:71:19:10:f4:8c:bf:a3:5c:d2:b7:31:03: d4:b5:b2:1c:6d:07:9c:6f:c6:11:cb:22:55:3f:9f: 89:3f:a2:96:51:55:1c:31:fd:5e:7f:13:b4:57:58: 32:90:3b:d3:77:55:ea:7b:ff:d1:8b:c3:b3:61:82: 76:16:ed:f7:d6:b9:c7:c6:50:14:04:89:e8:a6:c3: 2d:d4:2c:6e:c9:8a:81:ee:fc:35:f3:8b:eb:de:30: 86:f4:b1:66:ef:13:34:b3:45:1d:c7:f2:9f:8c:16: ba:bb:04:85:8f:46:ba:5f:df:f6:84:c3:ed:08:f7: 41:66:b7:15:61:de:e3:0f:44:e8:89:ff:7b:8e:f5: 53:90:ab:19:18:3b:1b:9f:1e:4a:9e:d6:90:e7:73: b0:ac:2f:c3:c6:d2:d0:ea:c6:c1:be:23:66:76:4d: be:a5:7a:e5:f0:c5:b4:bc:b3:0b:52:93:ad:d3:78: 86:c3:0b:2c:d7:b4:02:10:5b:20:08:a6:bd:2f:f5: 3d:de:61:52:bd:ef:be:33:f4:11:15:d1:e3:e9:62: 03:ec:17:bb:81:24:80:f1:d0:ab:59:61:8d:9f:cd: e8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:18:B3:10:95:E4:20:C4:B7:9B:C3:5F:D4:A3:A9:66:8A:5F:F4:E2 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/KhizEJXkIMS3m8Nf1KOpZopf9OI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.104.0.0/16 Signature Algorithm: sha256WithRSAEncryption 37:0d:85:96:8d:99:dc:04:1f:e1:ad:7d:00:03:47:b5:b5:78: 64:c1:11:c5:5e:d2:6c:11:83:47:ac:b5:0f:16:f1:1a:d5:d0: c2:2a:b9:6a:7a:b2:87:4e:47:0a:16:66:ab:a3:d9:ff:8c:71: 2e:65:1e:e9:94:1a:d4:ed:fa:48:a0:c9:3c:fc:da:d0:a8:ce: 3b:1c:34:11:dc:9c:65:13:e3:db:e7:2c:d1:31:6c:9a:e2:d0: dd:71:a2:76:c7:00:d1:06:40:d5:f3:04:16:af:49:87:e2:84: c9:4f:72:6b:ad:4e:63:bb:34:33:06:37:ad:b7:4a:5d:26:c0: 7d:22:27:25:e2:45:bd:80:4f:aa:5a:54:ab:b1:a9:82:c1:7d: fb:20:3e:e6:b3:56:4a:b1:f0:63:d9:4c:80:91:7f:9b:0d:aa: af:dd:24:9a:4e:6d:dc:44:c6:68:73:a4:f5:93:bb:19:52:f9: 11:09:56:1c:b4:4f:ac:9e:ed:8c:93:af:87:09:d5:0c:fb:aa: e3:54:4d:8d:eb:c6:33:91:16:5a:b9:4a:38:f6:f1:a4:e2:96: fd:b2:04:c5:aa:8c:b3:f8:cb:3e:55:02:7a:6c:da:6c:59:ef: a5:61:75:a2:8f:cb:b7:dd:cb:23:0b:23:3c:cd:5e:4d:b7:f5: f1:6b:5d:9b -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICFoQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyMTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJBMThCMzEwOTVFNDIw QzRCNzlCQzM1RkQ0QTNBOTY2OEE1RkY0RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqWcgcem1rRLJXe6mw3KyzHeghyBJsZXI254pNQsNjOnEZEPSM v6Nc0rcxA9S1shxtB5xvxhHLIlU/n4k/opZRVRwx/V5/E7RXWDKQO9N3Vep7/9GL w7NhgnYW7ffWucfGUBQEieimwy3ULG7JioHu/DXzi+veMIb0sWbvEzSzRR3H8p+M Frq7BIWPRrpf3/aEw+0I90FmtxVh3uMPROiJ/3uO9VOQqxkYOxufHkqe1pDnc7Cs L8PG0tDqxsG+I2Z2Tb6leuXwxbS8swtSk63TeIbDCyzXtAIQWyAIpr0v9T3eYVK9 774z9BEV0ePpYgPsF7uBJIDx0KtZYY2fzejFAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUKhizEJXkIMS3m8Nf1KOpZopf9OIwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvS2hpekVKWGtJTVMzbThOZjFLT3Ba b3BmOU9JLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAHBoMA0G CSqGSIb3DQEBCwUAA4IBAQA3DYWWjZncBB/hrX0AA0e1tXhkwRHFXtJsEYNHrLUP FvEa1dDCKrlqerKHTkcKFmaro9n/jHEuZR7plBrU7fpIoMk8/NrQqM47HDQR3Jxl E+Pb5yzRMWya4tDdcaJ2xwDRBkDV8wQWr0mH4oTJT3JrrU5juzQzBjett0pdJsB9 Iicl4kW9gE+qWlSrsamCwX37ID7ms1ZKsfBj2UyAkX+bDaqv3SSaTm3cRMZoc6T1 k7sZUvkRCVYctE+snu2Mk6+HCdUM+6rjVE2N68YzkRZauUo49vGk4pb9sgTFqoyz +Ms+VQJ6bNpsWe+lYXWij8u33csjCyM8zV5Nt/Xxa12b -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:10 2024 by rpki-client on console-ams.rpki-client.org