$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/VN9HrL6AGisEuybJk91W0uqArx0.roa File: VN9HrL6AGisEuybJk91W0uqArx0.roa (raw, json) Hash identifier: HGFoBGLVUJD4TUhsZK3fXCFnw1jXXV4N/m+rfIr+vTk= Subject key identifier: 54:DF:47:AC:BE:80:1A:2B:04:BB:26:C9:93:DD:56:D2:EA:80:AF:1D Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 0ED0 Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VN9HrL6AGisEuybJk91W0uqArx0.roa Signing time: Mon 26 Aug 2024 05:21:42 +0000 ROA not before: Mon 26 Aug 2024 05:21:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 192.72.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3792 (0xed0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Aug 26 05:21:42 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=54DF47ACBE801A2B04BB26C993DD56D2EA80AF1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fe:22:4e:9c:d9:c0:90:f8:92:c7:45:a8:17: 66:61:93:69:56:35:c7:0f:b7:15:08:d1:52:0b:62: 33:f7:f0:22:16:a8:39:ce:4e:2a:da:a7:53:6f:7c: 65:56:3c:9a:29:cb:64:ca:74:9f:d0:f5:3e:19:e5: 40:25:e7:d0:a8:54:73:74:3d:b2:d2:65:54:27:9c: 02:49:ae:2e:34:31:03:f1:cd:8c:d3:30:d3:12:99: 19:72:9b:ff:9b:13:db:8f:12:c3:d2:9b:70:e0:e9: b0:e1:50:6b:0c:64:75:b1:9b:e8:ef:55:4c:d3:95: 64:f7:33:00:13:d2:5c:d3:ad:b7:1b:b5:98:c7:e0: 17:90:c0:91:16:00:c1:1e:1e:56:b0:63:9b:82:1f: 40:c4:b4:71:df:7b:ef:b4:b2:c7:a9:4b:a0:a2:9c: 69:cb:a4:f6:8c:13:22:ce:b2:b1:25:1b:70:53:01: 6a:68:6f:7f:b0:3f:ff:88:97:d8:e6:74:15:81:98: c5:bd:ad:54:73:90:67:0b:da:a6:c3:dc:6b:08:1a: 22:c4:ed:4a:42:3d:ab:b7:4f:bc:3a:9c:a3:13:2c: 2b:02:ca:26:3b:88:6f:cf:15:b6:f9:3b:6f:6b:8f: 59:00:dd:03:51:51:3a:68:e2:50:33:24:da:a1:38: 3e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DF:47:AC:BE:80:1A:2B:04:BB:26:C9:93:DD:56:D2:EA:80:AF:1D X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VN9HrL6AGisEuybJk91W0uqArx0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.4.0/22 Signature Algorithm: sha256WithRSAEncryption 73:b2:e0:8b:a1:4a:ee:a2:60:b3:29:1f:76:ca:ca:f4:16:3f: 85:d1:f6:06:25:d9:3f:af:5c:67:bb:1c:64:42:bd:22:b5:2f: a2:52:62:c3:ee:f8:95:4f:ee:00:1f:c2:1f:ab:66:9b:06:97: 9c:95:82:6c:87:60:45:fc:12:21:af:ab:e9:21:15:c4:58:d3: 46:67:b1:81:9b:df:32:39:c8:9e:32:55:7f:39:a7:cf:fb:93: c8:ec:b7:87:98:6a:99:6c:5f:62:62:04:14:7b:ef:77:49:6d: d9:7b:68:56:28:e1:a1:a5:3d:2c:e7:b6:0c:21:d1:41:df:87: 34:40:16:3f:c0:c6:c1:f4:ca:a3:62:9b:71:b8:3c:ed:28:9c: 0c:db:ae:a8:b4:0b:b0:bf:03:e6:5d:f1:35:a7:e9:a9:f3:8e: e1:7b:99:9f:0c:01:d5:9c:0c:e5:51:14:f6:80:50:7c:eb:45: 57:b3:85:1d:50:5b:1b:99:43:4e:9e:24:b1:89:aa:a0:25:b3: 7c:6f:14:cd:d0:d1:be:a6:f6:e1:78:78:ea:fd:ac:c5:26:2f: e9:d7:ca:4f:bc:b0:17:5f:3f:50:fc:96:5a:b2:7d:aa:7c:45: b7:18:54:39:68:6b:dc:90:e1:3a:9e:d4:3b:cd:62:a5:75:e5: 18:95:a7:6d -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDtAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNDA4MjYw NTIxNDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU0REY0N0FDQkU4MDFB MkIwNEJCMjZDOTkzREQ1NkQyRUE4MEFGMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCt/iJOnNnAkPiSx0WoF2Zhk2lWNccPtxUI0VILYjP38CIWqDnO Tirap1NvfGVWPJopy2TKdJ/Q9T4Z5UAl59CoVHN0PbLSZVQnnAJJri40MQPxzYzT MNMSmRlym/+bE9uPEsPSm3Dg6bDhUGsMZHWxm+jvVUzTlWT3MwAT0lzTrbcbtZjH 4BeQwJEWAMEeHlawY5uCH0DEtHHfe++0ssepS6CinGnLpPaMEyLOsrElG3BTAWpo b3+wP/+Il9jmdBWBmMW9rVRzkGcL2qbD3GsIGiLE7UpCPau3T7w6nKMTLCsCyiY7 iG/PFbb5O29rj1kA3QNRUTpo4lAzJNqhOD6JAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUVN9HrL6AGisEuybJk91W0uqArx0wHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvVk45SHJMNkFHaXNFdXliSms5MVcw dXFBcngwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsBIBDAN BgkqhkiG9w0BAQsFAAOCAQEAc7Lgi6FK7qJgsykfdsrK9BY/hdH2BiXZP69cZ7sc ZEK9IrUvolJiw+74lU/uAB/CH6tmmwaXnJWCbIdgRfwSIa+r6SEVxFjTRmexgZvf MjnInjJVfzmnz/uTyOy3h5hqmWxfYmIEFHvvd0lt2XtoVijhoaU9LOe2DCHRQd+H NEAWP8DGwfTKo2Kbcbg87SicDNuuqLQLsL8D5l3xNafpqfOO4XuZnwwB1ZwM5VEU 9oBQfOtFV7OFHVBbG5lDTp4ksYmqoCWzfG8UzdDRvqb24Xh46v2sxSYv6dfKT7yw F18/UPyWWrJ9qnxFtxhUOWhr3JDhOp7UO81ipXXlGJWnbQ== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:10 2024 by rpki-client on console-ams.rpki-client.org