$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/NgpjdxPuze4g8pc3XlwCr_kadJ8.roa File: NgpjdxPuze4g8pc3XlwCr_kadJ8.roa (raw, json) Hash identifier: MNvdlFNl9f3Yn4HJDfRLvWh7EC1CmOg0TpGm6HaSL/8= Subject key identifier: 36:0A:63:77:13:EE:CD:EE:20:F2:97:37:5E:5C:02:AF:F9:1A:74:9F Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 170F Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NgpjdxPuze4g8pc3XlwCr_kadJ8.roa Signing time: Mon 23 Sep 2024 09:52:32 +0000 ROA not before: Mon 23 Sep 2024 09:52:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131611 IP address blocks: 218.32.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5903 (0x170f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 23 09:52:32 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=360A637713EECDEE20F297375E5C02AFF91A749F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cd:13:78:21:b8:3f:25:66:35:bc:5f:98:aa: a4:b2:63:f5:6f:44:cb:a2:a7:4d:e8:29:89:55:c7: 6c:b9:25:f4:9b:0c:cc:f6:50:d5:43:3f:56:95:70: c1:3a:5a:03:59:d3:3a:a4:f5:fc:9c:0d:8b:4d:40: 86:bb:36:9a:f5:fd:ee:34:5b:cf:70:99:c8:7a:9b: 6f:13:4c:73:24:7e:40:71:18:de:ea:c2:1d:b6:ff: 8b:4f:17:e5:1c:38:d5:ea:d8:ea:13:f9:4c:a2:35: c5:82:7e:2d:d0:30:3c:36:4d:9f:e8:dd:61:2e:cc: 91:b8:bf:50:cb:b0:f8:5a:72:4d:19:ec:b4:3c:95: b8:27:03:63:48:ee:ab:86:1a:8a:a5:26:64:d5:bd: 0f:09:b1:90:5c:18:29:e1:f4:d2:b2:dc:4f:49:13: 1f:9a:ad:65:32:fd:76:7f:9b:2f:12:5b:00:6d:d5: 43:2c:e2:9b:a8:0c:7d:53:81:9b:12:ea:ef:37:f4: c8:b4:83:df:59:2b:5e:fc:a4:8c:03:48:a7:98:ba: 3a:35:2e:86:dc:c4:29:9b:f0:04:12:7d:26:6b:de: c4:6e:43:e4:8d:96:cd:0c:b2:a3:10:d0:3e:db:4f: b9:f9:9d:2d:57:76:91:33:98:11:dc:3d:f4:1f:ff: 01:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0A:63:77:13:EE:CD:EE:20:F2:97:37:5E:5C:02:AF:F9:1A:74:9F X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NgpjdxPuze4g8pc3XlwCr_kadJ8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.32.96.0/19 Signature Algorithm: sha256WithRSAEncryption 45:a2:65:25:d6:02:dd:b2:16:43:48:ef:fb:65:e3:e6:d4:12: c0:67:44:84:31:61:b5:66:77:82:56:ce:7d:43:62:0e:98:16: 4b:5e:44:15:cf:3d:76:8a:d0:06:75:64:29:4f:f2:a5:b9:5c: 70:a8:bc:4c:6f:33:29:41:92:d7:2c:13:d0:d0:f2:9c:e7:45: a7:b2:54:e1:8c:e2:9f:df:ef:f8:54:d8:1c:b3:8a:06:0f:2c: c8:d3:d3:f5:af:fc:b9:09:09:64:92:53:7b:86:29:15:a5:ac: 2a:88:5c:2e:62:4a:a7:b5:49:aa:99:2b:f1:ba:ca:8b:8f:6c: 84:90:36:86:82:7c:c6:37:e8:b3:23:3c:03:c7:0e:9a:0d:57: 77:dc:c2:cb:c3:cc:3b:f2:a0:a3:2c:40:9c:50:bc:43:08:81: 64:f3:9d:14:d1:ba:0a:40:3b:6a:9c:07:85:5e:c2:5a:af:bc: 3f:9d:3e:44:fe:57:3f:b2:01:ce:11:73:cc:1c:bc:e6:0a:9b: 7e:59:b4:10:2f:c3:97:a1:4d:c1:a6:86:23:d6:26:6b:80:94: bb:70:9c:92:f7:a2:07:40:e2:e7:0f:68:d3:7e:75:1c:c6:a0: 6b:fa:7a:bc:23:ed:99:f7:d6:61:12:00:2c:3e:b1:00:d0:6b: 34:fb:cc:93 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFw8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA5MjMw OTUyMzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM2MEE2Mzc3MTNFRUNE RUUyMEYyOTczNzVFNUMwMkFGRjkxQTc0OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzzRN4Ibg/JWY1vF+YqqSyY/VvRMuip03oKYlVx2y5JfSbDMz2 UNVDP1aVcME6WgNZ0zqk9fycDYtNQIa7Npr1/e40W89wmch6m28TTHMkfkBxGN7q wh22/4tPF+UcONXq2OoT+UyiNcWCfi3QMDw2TZ/o3WEuzJG4v1DLsPhack0Z7LQ8 lbgnA2NI7quGGoqlJmTVvQ8JsZBcGCnh9NKy3E9JEx+arWUy/XZ/my8SWwBt1UMs 4puoDH1TgZsS6u839Mi0g99ZK178pIwDSKeYujo1LobcxCmb8AQSfSZr3sRuQ+SN ls0MsqMQ0D7bT7n5nS1XdpEzmBHcPfQf/wG3AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUNgpjdxPuze4g8pc3XlwCr/kadJ8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvTmdwamR4UHV6ZTRnOHBjM1hsd0Ny X2thZEo4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdogYDAN BgkqhkiG9w0BAQsFAAOCAQEARaJlJdYC3bIWQ0jv+2Xj5tQSwGdEhDFhtWZ3glbO fUNiDpgWS15EFc89dorQBnVkKU/ypblccKi8TG8zKUGS1ywT0NDynOdFp7JU4Yzi n9/v+FTYHLOKBg8syNPT9a/8uQkJZJJTe4YpFaWsKohcLmJKp7VJqpkr8brKi49s hJA2hoJ8xjfosyM8A8cOmg1Xd9zCy8PMO/KgoyxAnFC8QwiBZPOdFNG6CkA7apwH hV7CWq+8P50+RP5XP7IBzhFzzBy85gqbflm0EC/Dl6FNwaaGI9Yma4CUu3Cckvei B0Di5w9o0351HMaga/p6vCPtmffWYRIALD6xANBrNPvMkw== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:52 2024 by rpki-client on console-fra.rpki-client.org