$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/NJuZtgB9FvdFXgS_8s0WugLHbx4.roa File: NJuZtgB9FvdFXgS_8s0WugLHbx4.roa (raw, json) Hash identifier: admmxz+2lsdcx2S9c4kSF48f8Fndj7LMKPJ/t0Qsb4E= Subject key identifier: 34:9B:99:B6:00:7D:16:F7:45:5E:04:BF:F2:CD:16:BA:02:C7:6F:1E Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1629 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NJuZtgB9FvdFXgS_8s0WugLHbx4.roa Signing time: Mon 26 Aug 2024 05:21:50 +0000 ROA not before: Mon 26 Aug 2024 05:21:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 211.74.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5673 (0x1629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:21:50 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=349B99B6007D16F7455E04BFF2CD16BA02C76F1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a4:29:9a:2e:6b:07:fa:7a:07:1f:ea:55:e4: 6e:77:77:03:56:4b:70:41:b5:6b:b1:1c:0d:e1:52: 87:9b:71:2e:02:22:c5:3d:c2:2a:38:b8:62:59:ca: 8a:a0:7f:f3:b6:58:5c:a9:ff:f3:f1:b2:32:20:d6: 77:78:37:e2:2f:92:e4:f3:d1:74:04:c2:75:b3:87: b9:df:f3:6a:c0:25:22:82:27:38:47:ec:94:6d:d2: 99:23:42:49:46:d5:2e:da:e7:fb:36:55:29:4e:f7: 68:c4:76:24:98:ca:df:bd:7d:d1:6c:d1:d3:59:17: 61:be:8b:41:ea:e5:14:3f:db:7f:ce:0c:3d:1c:a2: 43:e2:e8:c8:67:4d:75:ae:da:da:68:8b:0b:43:25: c3:a2:01:3f:19:c0:22:73:3b:f8:0e:3d:ea:db:5b: 8f:7d:ba:a6:c1:a6:12:b4:f0:8e:eb:04:f7:47:7e: cf:5b:a0:03:87:b1:32:b0:4f:e5:d6:65:e2:fa:bb: ba:b1:f8:03:57:34:af:6f:04:3f:fa:21:90:de:21: 90:ff:f2:cb:16:5d:8b:d0:cd:d2:59:35:7e:d0:c0: 1c:39:ac:b8:99:69:8c:ab:98:b1:00:87:18:3d:fa: 54:e1:83:5b:6e:5c:c8:b2:29:3f:5d:9a:83:5c:19: d4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9B:99:B6:00:7D:16:F7:45:5E:04:BF:F2:CD:16:BA:02:C7:6F:1E X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NJuZtgB9FvdFXgS_8s0WugLHbx4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.74.128.0/17 Signature Algorithm: sha256WithRSAEncryption 24:27:62:4a:09:3a:cb:db:60:00:89:17:43:04:3e:13:1d:82: 98:3f:fe:62:2f:0b:c7:b5:1e:96:10:ce:89:34:b7:9d:33:39: 2a:16:85:d2:d1:b0:40:85:b6:4e:06:9a:21:b4:67:be:36:45: 3d:ed:a9:88:ef:97:64:08:80:5c:eb:b9:93:fb:67:9f:6a:b0: 27:bb:50:38:24:83:92:35:f3:09:dd:ed:cc:8d:90:9a:b3:c5: d8:b3:bd:c4:89:a2:16:52:b1:05:81:da:e3:9a:63:1b:ad:87: 31:60:62:a0:89:73:0e:1b:c8:82:5f:86:fe:d0:65:23:ed:72: d2:d5:93:c3:92:ad:b1:1b:ba:dd:5e:5b:3c:69:60:fd:72:a3: 35:7b:73:44:9f:45:e9:f6:ef:1d:54:4e:2d:45:74:e6:94:19: 24:ef:95:4d:4b:cf:a5:8c:57:90:1b:15:88:4a:4e:14:96:30: b4:9f:6a:4d:c8:20:b0:73:52:1f:8b:1e:d3:5c:32:dd:e2:4d: b1:14:33:52:5b:47:a9:b5:7a:a8:f1:ef:d1:d2:a9:d9:20:6e: 79:8b:50:ad:4a:f0:f5:3a:4c:69:a7:16:94:7d:68:b7:0d:7f: bd:76:d4:e8:34:aa:61:81:b1:3f:62:8c:00:c1:59:28:c8:9f: 3d:07:d9:77 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFikwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIxNTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM0OUI5OUI2MDA3RDE2 Rjc0NTVFMDRCRkYyQ0QxNkJBMDJDNzZGMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1pCmaLmsH+noHH+pV5G53dwNWS3BBtWuxHA3hUoebcS4CIsU9 wio4uGJZyoqgf/O2WFyp//PxsjIg1nd4N+IvkuTz0XQEwnWzh7nf82rAJSKCJzhH 7JRt0pkjQklG1S7a5/s2VSlO92jEdiSYyt+9fdFs0dNZF2G+i0Hq5RQ/23/ODD0c okPi6MhnTXWu2tpoiwtDJcOiAT8ZwCJzO/gOPerbW499uqbBphK08I7rBPdHfs9b oAOHsTKwT+XWZeL6u7qx+ANXNK9vBD/6IZDeIZD/8ssWXYvQzdJZNX7QwBw5rLiZ aYyrmLEAhxg9+lThg1tuXMiyKT9dmoNcGdRzAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUNJuZtgB9FvdFXgS/8s0WugLHbx4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvTkp1WnRnQjlGdmRGWGdTXzhzMFd1 Z0xIYng0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9NKgDAN BgkqhkiG9w0BAQsFAAOCAQEAJCdiSgk6y9tgAIkXQwQ+Ex2CmD/+Yi8Lx7UelhDO iTS3nTM5KhaF0tGwQIW2TgaaIbRnvjZFPe2piO+XZAiAXOu5k/tnn2qwJ7tQOCSD kjXzCd3tzI2QmrPF2LO9xImiFlKxBYHa45pjG62HMWBioIlzDhvIgl+G/tBlI+1y 0tWTw5KtsRu63V5bPGlg/XKjNXtzRJ9F6fbvHVROLUV05pQZJO+VTUvPpYxXkBsV iEpOFJYwtJ9qTcggsHNSH4se01wy3eJNsRQzUltHqbV6qPHv0dKp2SBueYtQrUrw 9TpMaacWlH1otw1/vXbU6DSqYYGxP2KMAMFZKMifPQfZdw== -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:41 2024 by rpki-client on console-fra.rpki-client.org