$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/RX8_Es5cOakoA5wysRELKgN-zSI.roa File: RX8_Es5cOakoA5wysRELKgN-zSI.roa (raw, json) Hash identifier: j/U5ryTZ6GeGgF2LNMyWZ1HaRFTfvChkI1JKtFOE/Bo= Subject key identifier: 45:7F:3F:12:CE:5C:39:A9:28:03:9C:32:B1:11:0B:2A:03:7E:CD:22 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 139A Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/RX8_Es5cOakoA5wysRELKgN-zSI.roa Signing time: Fri 01 Sep 2023 09:25:12 +0000 ROA not before: Fri 01 Sep 2023 09:25:12 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 218.210.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5018 (0x139a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:12 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=457F3F12CE5C39A928039C32B1110B2A037ECD22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a2:f7:01:f9:43:6d:ec:fe:39:5c:1d:08:cd: ea:23:8e:8e:53:4b:15:50:00:d4:f3:7e:57:eb:1c: 88:19:29:15:b0:e9:7a:55:dd:1c:68:35:82:d7:e6: e4:78:87:20:ef:85:ce:33:96:51:a3:b1:90:aa:49: 1a:5e:42:5c:45:9d:aa:f3:4d:ab:34:9e:08:7b:07: fe:7a:c6:c5:d8:79:25:90:2a:97:b9:db:c7:47:52: 1d:cd:ae:23:2a:9b:f5:86:79:40:69:52:76:f9:b1: 53:14:52:8d:71:53:f1:e5:81:e6:96:86:42:77:77: c0:5f:77:1b:bd:cf:bf:af:d7:13:6d:d2:a5:4c:46: 10:5f:0c:b4:db:22:40:42:cb:20:6b:f1:99:d8:05: c8:4a:31:cb:cf:5e:2e:1c:e4:1b:f4:7e:fb:a0:03: ed:8c:e9:06:b8:eb:b6:c4:4c:ca:d2:1f:ce:e4:ba: cf:cc:57:2b:e2:75:62:e2:10:74:76:37:0f:aa:b0: 99:6c:93:64:3f:6f:51:27:e7:2a:70:4c:07:96:49: 36:e4:8b:c9:d2:23:e1:e9:7e:42:f9:ea:3d:70:40: e1:cf:1d:44:bf:3a:35:06:eb:44:08:4f:a4:7e:82: 9e:f7:db:ba:62:40:c3:24:bf:2d:a4:96:9d:c2:8a: 03:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7F:3F:12:CE:5C:39:A9:28:03:9C:32:B1:11:0B:2A:03:7E:CD:22 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/RX8_Es5cOakoA5wysRELKgN-zSI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.210.64.0/18 Signature Algorithm: sha256WithRSAEncryption 3a:e5:69:32:ff:b9:fa:68:4e:ec:1c:d5:57:09:66:3a:2e:d1: 09:fa:6d:d1:f0:cc:bb:d4:89:6f:b0:ff:4f:50:6a:e4:99:6f: 52:f4:e2:d6:71:4d:d4:fd:b6:01:5d:a3:e2:e5:c4:07:14:1a: e4:ce:61:e1:38:64:cd:3e:e9:cf:85:fb:f0:3e:e5:f3:a5:fa: 2c:b7:02:be:5e:85:d0:a3:e4:26:52:4f:69:c3:69:64:2f:ea: 88:df:c5:c3:25:f5:27:11:ec:29:3c:3e:c4:b2:56:7a:ac:cd: 5a:39:e6:4f:cc:9f:30:26:50:0f:58:97:d7:b2:92:f2:43:28: 93:ab:08:02:1f:b2:c1:78:ff:69:45:7f:12:f1:80:d7:15:ee: c2:af:85:2a:7a:55:fe:a0:43:91:d9:41:f5:e3:42:a7:f8:1c: be:e2:fe:2b:a3:0e:c6:d2:d7:df:ea:1b:40:12:73:35:3a:e7: dc:8a:57:0a:44:91:7c:ef:0e:28:18:ea:e2:87:1d:40:b1:e3: a4:c0:be:b4:21:13:e6:b8:aa:64:e5:23:85:ef:55:a2:8a:30: ea:f1:ca:cc:07:98:27:29:2a:45:b1:21:50:f1:c5:d0:8d:22: 9e:9e:56:39:7f:9d:d2:f7:57:f7:74:59:8d:c9:9e:21:c4:15: 4c:db:a6:09 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE5owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ1N0YzRjEyQ0U1QzM5 QTkyODAzOUMzMkIxMTEwQjJBMDM3RUNEMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClovcB+UNt7P45XB0Izeojjo5TSxVQANTzflfrHIgZKRWw6XpV 3RxoNYLX5uR4hyDvhc4zllGjsZCqSRpeQlxFnarzTas0ngh7B/56xsXYeSWQKpe5 28dHUh3NriMqm/WGeUBpUnb5sVMUUo1xU/HlgeaWhkJ3d8Bfdxu9z7+v1xNt0qVM RhBfDLTbIkBCyyBr8ZnYBchKMcvPXi4c5Bv0fvugA+2M6Qa467bETMrSH87kus/M VyvidWLiEHR2Nw+qsJlsk2Q/b1En5ypwTAeWSTbki8nSI+HpfkL56j1wQOHPHUS/ OjUG60QIT6R+gp7327piQMMkvy2klp3CigObAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQURX8/Es5cOakoA5wysRELKgN+zSIwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvUlg4X0VzNWNPYWtvQTV3eXNSRUxL Z04telNJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtrSQDAN BgkqhkiG9w0BAQsFAAOCAQEAOuVpMv+5+mhO7BzVVwlmOi7RCfpt0fDMu9SJb7D/ T1Bq5JlvUvTi1nFN1P22AV2j4uXEBxQa5M5h4ThkzT7pz4X78D7l86X6LLcCvl6F 0KPkJlJPacNpZC/qiN/FwyX1JxHsKTw+xLJWeqzNWjnmT8yfMCZQD1iX17KS8kMo k6sIAh+ywXj/aUV/EvGA1xXuwq+FKnpV/qBDkdlB9eNCp/gcvuL+K6MOxtLX3+ob QBJzNTrn3IpXCkSRfO8OKBjq4ocdQLHjpMC+tCET5riqZOUjhe9Vooow6vHKzAeY JykqRbEhUPHF0I0inp5WOX+d0vdX93RZjcmeIcQVTNumCQ== -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org