$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/UKWv7D5mfKkBqAIjf9mZY8uqPz0.roa File: UKWv7D5mfKkBqAIjf9mZY8uqPz0.roa (raw, json) Hash identifier: PVd1BkDjXwrhw6yY8ps4a9GzQMRHJPWeHa4E6CJk7ec= Subject key identifier: 50:A5:AF:EC:3E:66:7C:A9:01:A8:02:23:7F:D9:99:63:CB:AA:3F:3D Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 13B8 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UKWv7D5mfKkBqAIjf9mZY8uqPz0.roa Signing time: Fri 01 Sep 2023 09:25:20 +0000 ROA not before: Fri 01 Sep 2023 09:25:20 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 220.229.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5048 (0x13b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:20 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=50A5AFEC3E667CA901A802237FD99963CBAA3F3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4e:55:5f:30:d5:29:61:62:43:ac:5f:45:23: 2f:cc:7e:04:2f:a5:26:f4:a6:68:61:58:68:8e:ff: 5a:d0:46:bc:aa:e1:16:2f:d1:8c:80:5e:e9:73:d8: cf:fc:2a:ed:13:73:2f:0f:eb:85:a4:3a:50:46:f1: be:22:15:41:88:d4:99:cf:5f:78:3b:fd:de:bd:6e: fe:5f:1d:53:05:68:b8:93:3c:26:1d:cc:bc:6b:38: c3:95:44:67:55:9a:39:3b:6a:35:3d:ea:f5:87:a2: c2:a9:39:da:05:34:73:17:f9:69:1c:36:b4:7a:1b: 37:d1:cf:3c:cb:ab:55:66:10:cd:83:45:10:05:67: 93:ce:29:e8:d1:1c:ac:c0:ad:23:bd:2d:9b:00:a1: bd:de:f7:5a:d0:b6:f2:24:11:de:55:c9:71:89:fe: f5:56:0e:ab:dc:ab:e7:d7:88:bb:4e:46:bd:19:ab: 89:d3:16:e6:49:56:e8:c7:e7:c3:42:c4:d4:56:6f: 04:4d:88:24:5c:ed:8b:99:2e:f5:fb:29:19:9e:7d: 99:76:bd:ce:d1:19:a0:fe:a3:73:06:f3:65:dd:db: f8:67:1f:3c:ee:7f:f7:b1:ad:90:fb:52:be:33:5f: 48:97:c0:fd:cb:ba:34:eb:a3:8a:d5:7e:f0:59:3d: 8c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A5:AF:EC:3E:66:7C:A9:01:A8:02:23:7F:D9:99:63:CB:AA:3F:3D X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UKWv7D5mfKkBqAIjf9mZY8uqPz0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.229.68.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:30:f9:99:09:5f:4d:fc:14:98:5b:ce:14:df:ad:9b:11:d7: 19:7d:25:9c:2e:de:c1:7e:54:4a:58:2a:f6:64:40:1b:c3:44: 00:69:6d:7d:9d:84:93:a2:c6:b1:60:76:8c:8a:d4:79:10:d8: 76:e5:48:b2:13:ba:3f:22:34:5a:2e:c2:7e:e2:6d:3b:54:8b: f5:c7:ec:c6:bc:2f:e6:e8:16:f1:0a:6a:b8:29:13:97:03:59: 91:3a:0f:5c:00:ab:b0:c8:c0:54:e2:44:3b:48:a0:51:ad:bf: 1f:76:ec:e1:0f:55:00:ba:69:d7:f6:42:35:d5:d0:d3:76:e6: c0:e1:45:36:ad:2c:c5:37:11:79:d3:bc:6b:21:1d:b5:46:02: cc:d9:6d:d9:2f:ee:62:5b:ae:1c:74:4f:0c:bc:10:2a:9a:72: 97:bf:89:99:ac:d7:ba:37:d1:7c:b9:a8:ef:e5:81:9d:11:44: 13:67:65:3f:9e:cf:9b:7e:5b:e2:5c:3b:a3:ce:37:b4:3e:12: b9:fb:af:76:57:49:3e:42:8a:71:5d:12:66:26:fe:f7:61:c7: 30:60:90:2b:fe:f7:a4:7d:18:7f:a0:84:0c:ee:dd:c6:45:c9: 12:97:2d:92:d0:9c:13:89:0f:fe:c3:65:81:b6:fd:62:66:1e: 3c:a2:57:15 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE7gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDUwQTVBRkVDM0U2NjdD QTkwMUE4MDIyMzdGRDk5OTYzQ0JBQTNGM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBTlVfMNUpYWJDrF9FIy/MfgQvpSb0pmhhWGiO/1rQRryq4RYv 0YyAXulz2M/8Ku0Tcy8P64WkOlBG8b4iFUGI1JnPX3g7/d69bv5fHVMFaLiTPCYd zLxrOMOVRGdVmjk7ajU96vWHosKpOdoFNHMX+WkcNrR6GzfRzzzLq1VmEM2DRRAF Z5POKejRHKzArSO9LZsAob3e91rQtvIkEd5VyXGJ/vVWDqvcq+fXiLtORr0Zq4nT FuZJVujH58NCxNRWbwRNiCRc7YuZLvX7KRmefZl2vc7RGaD+o3MG82Xd2/hnHzzu f/exrZD7Ur4zX0iXwP3LujTro4rVfvBZPYwPAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUUKWv7D5mfKkBqAIjf9mZY8uqPz0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvVUtXdjdENW1mS2tCcUFJamY5bVpZ OHVxUHowLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtzlRDAN BgkqhkiG9w0BAQsFAAOCAQEASjD5mQlfTfwUmFvOFN+tmxHXGX0lnC7ewX5USlgq 9mRAG8NEAGltfZ2Ek6LGsWB2jIrUeRDYduVIshO6PyI0Wi7CfuJtO1SL9cfsxrwv 5ugW8QpquCkTlwNZkToPXACrsMjAVOJEO0igUa2/H3bs4Q9VALpp1/ZCNdXQ03bm wOFFNq0sxTcRedO8ayEdtUYCzNlt2S/uYluuHHRPDLwQKppyl7+JmazXujfRfLmo 7+WBnRFEE2dlP57Pm35b4lw7o843tD4SufuvdldJPkKKcV0SZib+92HHMGCQK/73 pH0Yf6CEDO7dxkXJEpctktCcE4kP/sNlgbb9YmYePKJXFQ== -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org