$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/WpAtzNSloRmpcQIvY9PJtk2xwm0.roa File: WpAtzNSloRmpcQIvY9PJtk2xwm0.roa (raw, json) Hash identifier: OL/3g4/dQcbSzbEjjEwrRndkuqn+rdI2T/r3GYGh6Do= Subject key identifier: 5A:90:2D:CC:D4:A5:A1:19:A9:71:02:2F:63:D3:C9:B6:4D:B1:C2:6D Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1679 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/WpAtzNSloRmpcQIvY9PJtk2xwm0.roa Signing time: Mon 26 Aug 2024 05:22:14 +0000 ROA not before: Mon 26 Aug 2024 05:22:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18049 IP address blocks: 112.105.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5753 (0x1679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:14 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5A902DCCD4A5A119A971022F63D3C9B64DB1C26D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:56:fa:39:13:5e:33:42:87:99:c1:4f:1a:f9: 56:85:21:b6:96:78:57:be:f9:cb:f2:a7:68:0b:d2: 17:1c:50:4b:ed:59:b3:97:37:6f:f7:98:bf:8e:4e: 0e:b8:a7:c4:76:c1:16:1c:c0:ec:73:f1:3e:7d:7d: 80:fe:5b:e6:ed:3b:58:4c:3f:dc:4c:7b:60:f2:dd: 3b:9b:b5:27:6b:de:23:9c:1d:bf:50:5f:3f:ef:ea: 57:c9:ba:06:e8:2c:6e:b9:2d:e4:54:82:6f:62:97: 26:22:9f:5d:e8:21:2f:22:da:cb:6a:d7:ee:d4:4a: ff:4c:86:8d:c6:3f:d0:f4:4a:33:20:8d:28:a9:d0: 71:53:57:93:02:40:3e:eb:0b:00:08:10:de:0d:94: 9b:e4:76:b9:f9:35:80:02:3e:3a:fa:f0:af:fa:c6: 77:95:96:6b:ad:d5:74:7e:9d:ce:0f:59:13:e0:cc: 8a:4e:a8:b4:ee:fd:05:8c:38:36:bb:74:e7:49:2f: 03:54:cf:21:9e:e4:f0:31:c6:15:8a:3e:69:35:42: 93:4e:19:0c:ba:a9:74:04:30:9a:c6:7a:10:bc:6f: 32:1e:0c:a4:23:ad:b1:9b:8a:7b:a3:e6:83:14:8d: 02:7e:28:6c:3b:b8:91:0b:86:34:af:ab:fc:6d:b2: 6d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:90:2D:CC:D4:A5:A1:19:A9:71:02:2F:63:D3:C9:B6:4D:B1:C2:6D X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/WpAtzNSloRmpcQIvY9PJtk2xwm0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.105.0.0/19 Signature Algorithm: sha256WithRSAEncryption 9a:3a:b4:d0:46:b7:86:de:02:d2:b2:6a:5e:95:68:ba:38:9f: 6f:c6:b1:6a:8d:19:2c:f6:d2:d9:7a:9f:58:b0:15:32:43:41: 21:8e:e9:95:e8:4e:cc:e2:a7:7f:b6:75:54:1e:3c:2b:15:60: 2a:ca:7b:d2:5e:b8:34:ca:69:08:ac:8f:bf:a6:ea:ea:64:db: 38:c4:46:59:84:c3:a7:bb:72:63:e9:15:55:73:27:0b:1e:64: 86:4b:79:b5:82:1c:4c:ee:0e:7f:25:a5:a3:3b:b6:80:c2:a2: ae:2e:d5:2c:1d:5b:d9:a8:bf:c5:a8:47:ca:bb:8d:af:06:e2: c1:f9:d2:d2:e2:4f:d8:e1:e7:da:fe:a0:1c:a9:c6:71:6d:5d: 3c:f6:6e:45:9c:4a:e7:fa:24:b6:7d:f3:fd:b6:bf:db:59:21: 3e:e1:d7:d0:bb:50:bf:04:d7:98:99:5c:a8:f2:30:b1:e0:9f: 0b:89:51:68:02:5c:05:a5:d5:d0:0c:c1:79:ce:8f:17:a5:19: 0b:5a:c0:9a:e7:6c:d2:55:81:13:49:27:62:6e:22:31:94:d1: fc:88:2a:39:3a:a4:5a:d2:cb:4d:e7:19:95:b8:68:42:6d:9b: 89:6f:48:e3:bb:f7:fd:1a:56:ae:d8:9a:e6:e3:cf:78:63:8f: 00:e3:70:0f -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFnkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyMTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVBOTAyRENDRDRBNUEx MTlBOTcxMDIyRjYzRDNDOUI2NERCMUMyNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHVvo5E14zQoeZwU8a+VaFIbaWeFe++cvyp2gL0hccUEvtWbOX N2/3mL+OTg64p8R2wRYcwOxz8T59fYD+W+btO1hMP9xMe2Dy3TubtSdr3iOcHb9Q Xz/v6lfJugboLG65LeRUgm9ilyYin13oIS8i2stq1+7USv9Mho3GP9D0SjMgjSip 0HFTV5MCQD7rCwAIEN4NlJvkdrn5NYACPjr68K/6xneVlmut1XR+nc4PWRPgzIpO qLTu/QWMODa7dOdJLwNUzyGe5PAxxhWKPmk1QpNOGQy6qXQEMJrGehC8bzIeDKQj rbGbinuj5oMUjQJ+KGw7uJELhjSvq/xtsm09AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUWpAtzNSloRmpcQIvY9PJtk2xwm0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvV3BBdHpOU2xvUm1wY1FJdlk5UEp0 azJ4d20wLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXBpADAN BgkqhkiG9w0BAQsFAAOCAQEAmjq00Ea3ht4C0rJqXpVoujifb8axao0ZLPbS2Xqf WLAVMkNBIY7plehOzOKnf7Z1VB48KxVgKsp70l64NMppCKyPv6bq6mTbOMRGWYTD p7tyY+kVVXMnCx5khkt5tYIcTO4OfyWlozu2gMKiri7VLB1b2ai/xahHyruNrwbi wfnS0uJP2OHn2v6gHKnGcW1dPPZuRZxK5/oktn3z/ba/21khPuHX0LtQvwTXmJlc qPIwseCfC4lRaAJcBaXV0AzBec6PF6UZC1rAmuds0lWBE0knYm4iMZTR/IgqOTqk WtLLTecZlbhoQm2biW9I47v3/RpWrtia5uPPeGOPAONwDw== -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:31 2024 by rpki-client on console-fra.rpki-client.org