$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/NKdJpDaByWm6dFsg22cZSOsdH20.roa File: NKdJpDaByWm6dFsg22cZSOsdH20.roa (raw, json) Hash identifier: 4a41TfFf3ewFoORHbgmaTooV8V7j/tf/molhZ4XxuQ4= Subject key identifier: 34:A7:49:A4:36:81:C9:69:BA:74:5B:20:DB:67:19:48:EB:1D:1F:6D Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1636 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NKdJpDaByWm6dFsg22cZSOsdH20.roa Signing time: Mon 26 Aug 2024 05:21:54 +0000 ROA not before: Mon 26 Aug 2024 05:21:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131584 IP address blocks: 106.105.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5686 (0x1636) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:21:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=34A749A43681C969BA745B20DB671948EB1D1F6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4e:6e:fd:12:95:22:5d:b5:d5:c2:d3:eb:8a: e9:e3:7c:27:51:90:31:36:14:34:f6:5b:a3:7c:33: ac:d0:a3:70:72:e3:f9:92:55:04:5e:c8:03:fc:eb: 92:b3:be:d6:38:61:e2:d5:7f:99:21:b2:24:73:5e: 73:aa:6b:c6:56:53:74:59:a6:9b:f9:fe:f0:fb:ef: 28:1f:48:c7:d0:cb:9f:90:62:74:3d:b1:d3:47:e9: bf:45:5c:3e:08:23:77:f6:07:09:0e:6c:51:18:ae: d9:a3:65:12:4b:2f:15:76:eb:78:b0:ad:70:66:d1: d4:a8:cd:e9:d5:1a:44:77:15:cc:b7:48:03:c2:98: 47:5f:5b:df:dd:c8:bd:83:00:30:eb:af:2c:db:3c: d4:22:7c:98:40:51:51:05:fc:cd:b4:c5:4d:ae:5e: 12:26:d4:98:47:b3:15:4e:c8:00:11:ab:e4:68:01: fa:d0:95:4d:34:f9:c1:73:18:72:2c:69:2d:a4:f1: e4:7e:cf:ae:1e:68:7c:21:54:b9:0e:cf:26:cd:8b: ef:51:80:43:9d:bb:bd:02:f0:76:9e:92:b6:87:77: 0e:8d:ca:61:cc:26:7a:4b:24:27:f6:0d:38:c7:14: d7:51:ed:b5:c8:66:99:df:06:86:40:54:a9:47:b6: 52:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A7:49:A4:36:81:C9:69:BA:74:5B:20:DB:67:19:48:EB:1D:1F:6D X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NKdJpDaByWm6dFsg22cZSOsdH20.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.179.0/24 Signature Algorithm: sha256WithRSAEncryption 19:88:46:5a:2f:8b:bf:9e:62:6c:dd:82:92:19:b3:d2:01:04: 7d:cc:cf:d2:18:6f:42:d6:36:45:9b:7a:1b:7f:65:7a:d1:e2: ba:e5:bb:f7:c6:1e:fc:a9:f9:04:70:ce:cf:6a:a3:cd:bb:9b: ed:1b:fc:9e:13:c9:c7:e2:2e:a1:a9:e5:fd:7f:6c:c8:80:20: ec:23:ee:ea:be:a5:77:b6:a2:93:95:09:9c:d6:9c:e2:63:64: 71:33:f7:bb:bf:71:56:e5:16:44:6e:9b:92:b0:00:84:71:83: a8:bc:dd:5e:3e:9f:21:63:a3:f9:c3:8c:7f:78:8e:52:a3:2c: f0:4d:4c:bd:c9:22:54:24:1c:26:3d:67:b4:86:de:e7:7d:25: e9:3e:14:38:92:0d:02:fe:21:3c:40:20:b7:9f:74:0a:4f:65: 27:69:ac:f4:d1:6c:41:09:e3:e6:e4:0d:14:84:93:2e:70:c6: 96:8f:d6:82:83:1a:c8:d9:49:44:4b:d6:d5:13:1d:08:d2:79: cc:bd:32:f4:4d:3f:70:7d:92:af:8e:fb:68:1b:b9:23:be:4d: 0a:e3:e9:5c:75:95:c8:a0:b3:c4:71:51:d7:09:ef:ef:97:e0: 96:63:ed:28:a0:a3:e3:9a:21:d0:e0:bb:2f:7e:ea:97:34:37: ff:db:ff:60 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFjYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIxNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM0QTc0OUE0MzY4MUM5 NjlCQTc0NUIyMERCNjcxOTQ4RUIxRDFGNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDITm79EpUiXbXVwtPriunjfCdRkDE2FDT2W6N8M6zQo3By4/mS VQReyAP865KzvtY4YeLVf5khsiRzXnOqa8ZWU3RZppv5/vD77ygfSMfQy5+QYnQ9 sdNH6b9FXD4II3f2BwkObFEYrtmjZRJLLxV263iwrXBm0dSozenVGkR3Fcy3SAPC mEdfW9/dyL2DADDrryzbPNQifJhAUVEF/M20xU2uXhIm1JhHsxVOyAARq+RoAfrQ lU00+cFzGHIsaS2k8eR+z64eaHwhVLkOzybNi+9RgEOdu70C8HaekraHdw6NymHM JnpLJCf2DTjHFNdR7bXIZpnfBoZAVKlHtlIVAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUNKdJpDaByWm6dFsg22cZSOsdH20wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvTktkSnBEYUJ5V202ZEZzZzIyY1pT T3NkSDIwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGppszAN BgkqhkiG9w0BAQsFAAOCAQEAGYhGWi+Lv55ibN2Ckhmz0gEEfczP0hhvQtY2RZt6 G39letHiuuW798Ye/Kn5BHDOz2qjzbub7Rv8nhPJx+Iuoanl/X9syIAg7CPu6r6l d7aik5UJnNac4mNkcTP3u79xVuUWRG6bkrAAhHGDqLzdXj6fIWOj+cOMf3iOUqMs 8E1MvckiVCQcJj1ntIbe530l6T4UOJINAv4hPEAgt590Ck9lJ2ms9NFsQQnj5uQN FISTLnDGlo/WgoMayNlJREvW1RMdCNJ5zL0y9E0/cH2Sr477aBu5I75NCuPpXHWV yKCzxHFR1wnv75fglmPtKKCj45oh0OC7L37qlzQ3/9v/YA== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:33 2024 by rpki-client on console-ams.rpki-client.org