$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/P6O-wU-L8t2I9HvqzoQVaBj9RTY.roa File: P6O-wU-L8t2I9HvqzoQVaBj9RTY.roa (raw, json) Hash identifier: RqKS+q8IVUIWhUwzUPcWP3YKDhJuV3RLM9J3ZeaGUJ4= Subject key identifier: 3F:A3:BE:C1:4F:8B:F2:DD:88:F4:7B:EA:CE:84:15:68:18:FD:45:36 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1622 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/P6O-wU-L8t2I9HvqzoQVaBj9RTY.roa Signing time: Mon 26 Aug 2024 05:21:49 +0000 ROA not before: Mon 26 Aug 2024 05:21:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18049 IP address blocks: 106.105.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5666 (0x1622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:21:49 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3FA3BEC14F8BF2DD88F47BEACE84156818FD4536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fc:0b:cc:51:47:f4:cf:e6:5b:5c:0f:30:e2: f4:f0:26:ba:3d:96:e4:be:96:a7:ae:70:43:21:47: a5:96:6c:fe:8b:49:93:2f:aa:06:6a:fa:54:4b:56: 98:3c:87:be:5d:af:61:fb:8b:84:8e:12:1c:02:34: 2d:5e:5a:37:e4:04:14:c9:68:e2:50:b0:a8:43:33: 07:c2:14:b0:64:dc:90:b6:c9:d3:7f:e5:3e:7d:3e: f6:c3:9b:ff:2f:ba:ee:7c:af:e0:30:e7:e0:c8:68: 18:1a:f9:f0:98:ad:49:95:ca:e1:ee:71:fc:ea:73: bf:c5:30:34:a6:5e:a5:b5:a0:f6:9b:3e:85:9b:4b: 46:98:5e:58:eb:f9:80:e5:51:c4:9f:4e:4a:67:c4: cd:e2:8c:52:47:4c:54:97:d7:d2:fd:3e:33:50:17: a0:0d:73:fa:82:4b:73:36:ba:24:1e:b1:b7:32:8f: 03:bf:5a:52:96:80:cc:fc:bc:33:be:68:78:9e:ad: c2:2a:c0:4a:17:d4:2f:eb:b9:56:a8:28:b9:f2:b2: 90:a1:62:db:6f:ed:4e:71:e0:3f:c2:2c:dc:35:7f: e6:3d:17:e0:da:34:b0:56:4b:88:aa:ec:f1:0e:3a: 22:21:78:b6:8e:f5:7e:16:ec:ec:2e:58:27:07:64: d3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A3:BE:C1:4F:8B:F2:DD:88:F4:7B:EA:CE:84:15:68:18:FD:45:36 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/P6O-wU-L8t2I9HvqzoQVaBj9RTY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.88.0/21 Signature Algorithm: sha256WithRSAEncryption 71:c0:79:97:13:5b:60:34:aa:b0:36:e3:3b:f4:d3:b4:eb:c9: ac:12:df:be:e0:8d:6b:0d:ce:12:5b:24:84:2e:af:da:39:fc: 3f:7e:4b:26:b2:19:51:c0:1f:59:9c:42:ea:34:05:0c:67:6c: 69:2b:25:26:0e:09:cd:52:04:5b:67:89:ef:11:ea:36:77:b0: a1:8a:4e:42:39:80:ec:a3:03:11:a5:29:bb:66:11:70:07:09: 39:12:2e:1b:87:3b:f6:41:21:13:fd:e2:f3:25:68:4f:f7:b7: 78:38:ac:4f:38:4b:c5:cc:2d:61:ae:fc:38:08:62:d6:2f:46: 95:9d:48:e8:13:29:37:2f:42:f9:36:e4:cb:0c:fe:34:eb:32: 9c:60:23:93:0f:4c:bc:b1:e8:56:1d:76:0e:4d:69:0b:d6:4d: 4e:6e:0e:66:b8:5b:d7:52:44:59:b1:7d:42:5d:5e:7f:c3:96: 57:b2:13:ee:2b:ff:d9:69:16:27:38:99:f3:cc:b4:8e:e7:bd: 87:b9:71:ca:3f:19:06:c4:d3:6a:a8:ff:d1:26:5d:69:7b:7e: 5f:a5:02:f7:fb:bc:0b:b6:c4:27:a9:a5:57:01:ed:77:50:8a: 60:24:5c:e9:b2:ef:20:50:f5:13:61:b3:0c:2b:11:dd:99:b3: 73:a5:61:c3 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFiIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIxNDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNGQTNCRUMxNEY4QkYy REQ4OEY0N0JFQUNFODQxNTY4MThGRDQ1MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCw/AvMUUf0z+ZbXA8w4vTwJro9luS+lqeucEMhR6WWbP6LSZMv qgZq+lRLVpg8h75dr2H7i4SOEhwCNC1eWjfkBBTJaOJQsKhDMwfCFLBk3JC2ydN/ 5T59PvbDm/8vuu58r+Aw5+DIaBga+fCYrUmVyuHucfzqc7/FMDSmXqW1oPabPoWb S0aYXljr+YDlUcSfTkpnxM3ijFJHTFSX19L9PjNQF6ANc/qCS3M2uiQesbcyjwO/ WlKWgMz8vDO+aHiercIqwEoX1C/ruVaoKLnyspChYttv7U5x4D/CLNw1f+Y9F+Da NLBWS4iq7PEOOiIheLaO9X4W7OwuWCcHZNM5AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUP6O+wU+L8t2I9HvqzoQVaBj9RTYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvUDZPLXdVLUw4dDJJOUh2cXpvUVZh Qmo5UlRZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2ppWDAN BgkqhkiG9w0BAQsFAAOCAQEAccB5lxNbYDSqsDbjO/TTtOvJrBLfvuCNaw3OElsk hC6v2jn8P35LJrIZUcAfWZxC6jQFDGdsaSslJg4JzVIEW2eJ7xHqNnewoYpOQjmA 7KMDEaUpu2YRcAcJORIuG4c79kEhE/3i8yVoT/e3eDisTzhLxcwtYa78OAhi1i9G lZ1I6BMpNy9C+Tbkywz+NOsynGAjkw9MvLHoVh12Dk1pC9ZNTm4OZrhb11JEWbF9 Ql1ef8OWV7IT7iv/2WkWJziZ88y0jue9h7lxyj8ZBsTTaqj/0SZdaXt+X6UC9/u8 C7bEJ6mlVwHtd1CKYCRc6bLvIFD1E2GzDCsR3Zmzc6Vhww== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:33 2024 by rpki-client on console-ams.rpki-client.org