$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/T5C1_VDEeq3BeFUGRYSDCOk8Keg.roa File: T5C1_VDEeq3BeFUGRYSDCOk8Keg.roa (raw, json) Hash identifier: V6IcciS6DQid62qkm18pKkMRU/Xdrt3gP2GTnW0fgKw= Subject key identifier: 4F:90:B5:FD:50:C4:7A:AD:C1:78:55:06:45:84:83:08:E9:3C:29:E8 Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 0EE0 Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/T5C1_VDEeq3BeFUGRYSDCOk8Keg.roa Signing time: Mon 26 Aug 2024 05:22:15 +0000 ROA not before: Mon 26 Aug 2024 05:22:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 192.72.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3808 (0xee0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Aug 26 05:22:15 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4F90B5FD50C47AADC178550645848308E93C29E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:32:e1:fc:c9:a4:28:d6:c4:97:2e:19:fb:04: 92:a9:ef:0b:0c:eb:04:a0:25:c0:d9:3e:5b:b4:57: ed:f7:99:86:08:66:cf:1d:8d:5a:bc:7f:63:f6:1e: 42:45:88:95:70:09:a1:75:18:4e:fa:1e:4e:d6:4d: 0d:dc:68:30:17:55:ce:c7:a3:dd:bd:5d:46:25:58: a7:69:c6:fe:57:3f:ce:31:42:40:6d:bb:ae:25:76: f0:44:01:7b:4d:50:06:90:3d:66:f2:3d:9b:a9:3a: 7f:76:4e:17:91:02:31:4d:b0:3a:e1:84:0e:a0:35: 92:58:4a:73:e6:40:b1:8e:bc:21:bb:23:a5:12:9b: 13:05:d8:7a:c2:10:13:45:3d:3f:e0:2b:bf:55:17: 9d:f0:b5:54:c7:38:d2:8e:a6:cf:23:3c:41:8c:20: 29:01:6f:bf:67:f2:a7:53:16:06:cc:2d:81:84:50: 08:0b:88:1a:5b:70:44:dc:6e:66:a0:ae:ab:2b:e1: e2:c7:4d:7a:92:83:40:6f:63:87:44:c4:6d:9a:ea: 1a:fd:63:fa:37:2e:7d:8f:a8:3a:53:ce:68:54:63: 10:87:ae:15:83:05:74:91:af:fd:3b:e9:60:02:67: 61:f3:03:92:1f:ff:47:8f:0f:78:07:6a:36:e1:80: 45:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:90:B5:FD:50:C4:7A:AD:C1:78:55:06:45:84:83:08:E9:3C:29:E8 X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/T5C1_VDEeq3BeFUGRYSDCOk8Keg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.8.0/21 Signature Algorithm: sha256WithRSAEncryption 9a:dd:a0:2f:93:78:5f:ff:6e:76:ef:6d:4d:b3:6d:8d:52:4d: cd:34:4e:76:67:cc:ad:70:49:54:c3:67:ae:fe:c5:32:60:16: a0:8a:57:82:96:ba:c9:60:c9:19:7d:ad:f1:e6:08:04:2b:8b: bc:00:60:5e:42:c1:26:45:1f:22:0a:9c:da:91:9f:ee:b2:67: 64:da:c6:12:03:f0:a7:a3:1d:1f:d5:c9:68:f6:f1:c3:ec:1b: 41:36:c3:f8:d4:1b:48:3d:5f:65:08:bd:a3:d1:19:7a:85:af: 55:ca:1e:db:47:40:cb:50:3c:ff:6c:44:6a:4c:96:72:3b:02: 5d:37:14:b1:01:8f:22:a2:17:10:5b:85:25:ef:46:cc:b8:3b: ee:6d:00:3d:e1:1c:47:0e:ce:d5:72:73:2c:8d:b4:e5:fd:e5: a9:91:47:c8:ba:27:2c:6b:59:d7:51:e3:53:d2:32:63:62:bb: 3d:75:83:0d:9d:b2:a7:07:76:51:84:18:98:45:aa:97:29:a8: ff:b9:da:be:31:a1:82:7a:18:7c:c1:e4:c1:de:a5:65:a5:e6: d0:23:0b:cb:b3:54:42:f3:2e:73:5e:e2:9b:5f:8d:f3:b3:ad: 29:e9:71:30:88:6a:5c:04:c0:d3:a1:cb:3f:3f:cf:2c:c8:5e: ed:cd:34:da -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDuAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNDA4MjYw NTIyMTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRGOTBCNUZENTBDNDdB QURDMTc4NTUwNjQ1ODQ4MzA4RTkzQzI5RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBMuH8yaQo1sSXLhn7BJKp7wsM6wSgJcDZPlu0V+33mYYIZs8d jVq8f2P2HkJFiJVwCaF1GE76Hk7WTQ3caDAXVc7Ho929XUYlWKdpxv5XP84xQkBt u64ldvBEAXtNUAaQPWbyPZupOn92TheRAjFNsDrhhA6gNZJYSnPmQLGOvCG7I6US mxMF2HrCEBNFPT/gK79VF53wtVTHONKOps8jPEGMICkBb79n8qdTFgbMLYGEUAgL iBpbcETcbmagrqsr4eLHTXqSg0BvY4dExG2a6hr9Y/o3Ln2PqDpTzmhUYxCHrhWD BXSRr/076WACZ2HzA5If/0ePD3gHajbhgEWNAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUT5C1/VDEeq3BeFUGRYSDCOk8KegwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvVDVDMV9WREVlcTNCZUZVR1JZU0RD T2s4S2VnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8BICDAN BgkqhkiG9w0BAQsFAAOCAQEAmt2gL5N4X/9udu9tTbNtjVJNzTROdmfMrXBJVMNn rv7FMmAWoIpXgpa6yWDJGX2t8eYIBCuLvABgXkLBJkUfIgqc2pGf7rJnZNrGEgPw p6MdH9XJaPbxw+wbQTbD+NQbSD1fZQi9o9EZeoWvVcoe20dAy1A8/2xEakyWcjsC XTcUsQGPIqIXEFuFJe9GzLg77m0APeEcRw7O1XJzLI205f3lqZFHyLonLGtZ11Hj U9IyY2K7PXWDDZ2ypwd2UYQYmEWqlymo/7navjGhgnoYfMHkwd6lZaXm0CMLy7NU QvMuc17im1+N87OtKelxMIhqXATA06HLPz/PLMhe7c002g== -----END CERTIFICATE-----Generated at Fri Nov 22 22:31:46 2024 by rpki-client on console-fra.rpki-client.org