$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/XyUOeFgF2MM-LOPLb9z_jw_R-lk.roa File: XyUOeFgF2MM-LOPLb9z_jw_R-lk.roa (raw, json) Hash identifier: aT2fhX3KCHavCgcBLg6qPoUUwA/U+eQU3MKLUlMEs+M= Subject key identifier: 5F:25:0E:78:58:05:D8:C3:3E:2C:E3:CB:6F:DC:FF:8F:0F:D1:FA:59 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 15F9 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/XyUOeFgF2MM-LOPLb9z_jw_R-lk.roa Signing time: Mon 26 Aug 2024 05:21:38 +0000 ROA not before: Mon 26 Aug 2024 05:21:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 122.146.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5625 (0x15f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:21:38 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5F250E785805D8C33E2CE3CB6FDCFF8F0FD1FA59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:79:16:9a:6d:d1:12:29:de:16:20:ce:b9:60: 90:ef:5e:34:a2:7d:55:6c:a6:56:90:89:1a:5f:04: 64:ac:6c:bf:93:6b:44:75:57:1d:a2:f4:b4:f5:4f: 41:bb:be:70:bd:0e:0e:db:11:de:c2:02:6f:53:c1: d6:aa:fc:02:28:9c:45:e9:8d:59:c7:34:d2:dc:9e: bc:ba:24:95:fe:e2:89:c7:05:88:a6:0c:e6:7d:4a: 26:a7:36:23:15:5b:84:57:86:02:98:92:04:93:0e: 14:e8:9b:ab:9e:7d:fc:73:a4:9c:c2:88:da:8e:1a: 3c:01:80:9b:b4:78:22:00:ab:71:89:a3:0d:b8:40: 25:5a:0f:46:c7:19:24:01:d2:02:74:33:f1:79:95: 42:8e:c4:b6:e3:ea:8f:82:22:23:c5:4d:f7:6b:0e: ed:f7:8e:75:80:99:f7:d7:86:34:b3:26:70:13:04: ae:e3:0b:08:a5:58:d3:bd:c5:4a:64:3a:2a:95:84: 20:55:3e:92:33:26:75:f5:08:82:3a:a1:82:35:22: 50:19:26:01:09:e2:c2:b5:95:1a:e3:27:e7:7b:95: d3:b9:33:d3:ce:76:bc:fd:2a:3b:17:bb:de:a3:27: ee:e1:02:bb:0a:6a:7a:9e:39:ee:7f:2c:6e:c3:08: 25:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:25:0E:78:58:05:D8:C3:3E:2C:E3:CB:6F:DC:FF:8F:0F:D1:FA:59 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/XyUOeFgF2MM-LOPLb9z_jw_R-lk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.146.64.0/19 Signature Algorithm: sha256WithRSAEncryption 82:4a:4c:68:e0:6f:d2:6e:0f:db:6a:62:c6:b1:02:b6:60:2e: 43:18:c3:8e:57:77:7b:1b:46:52:ad:43:3a:be:1c:89:7d:2b: 70:95:a3:31:4a:62:3a:c7:a1:52:29:d0:e7:2e:73:d8:c6:d3: 39:bc:6e:4f:e1:2b:90:06:e2:f2:f0:5a:6b:fe:db:d3:e9:5a: 0d:51:ee:1b:8b:b2:d7:98:e0:d3:21:b3:b4:0c:a3:15:ed:08: 3f:71:b8:da:eb:64:d8:fe:d7:25:8c:df:9c:b8:95:ed:5a:2f: 37:9a:d5:04:4e:67:45:fe:f1:64:56:7c:b8:9a:18:e6:2c:e7: 4f:ef:4b:b5:2f:9b:40:dc:c9:c0:a0:73:74:f4:82:dd:5c:74: 99:7b:c2:f0:aa:61:97:37:45:2a:c9:eb:23:93:de:b3:48:8e: e4:25:cf:d4:3a:87:e6:4d:bf:57:5b:6b:b2:22:f2:51:ac:40: 89:7e:ef:4c:19:8e:85:71:8c:de:5e:d6:28:70:f1:4b:58:48: ba:4d:ce:1a:ac:76:4d:67:39:ee:19:00:0c:24:cb:ba:bd:54: ce:ad:a5:61:0d:59:fa:a5:f5:a0:44:68:c6:f9:f4:d7:a0:ee: 17:2e:08:71:57:f7:fc:f4:4b:e3:ab:36:bb:6a:d9:98:8a:fd: 13:e1:30:3c -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFfkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIxMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVGMjUwRTc4NTgwNUQ4 QzMzRTJDRTNDQjZGRENGRjhGMEZEMUZBNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCueRaabdESKd4WIM65YJDvXjSifVVsplaQiRpfBGSsbL+Ta0R1 Vx2i9LT1T0G7vnC9Dg7bEd7CAm9Twdaq/AIonEXpjVnHNNLcnry6JJX+4onHBYim DOZ9SianNiMVW4RXhgKYkgSTDhTom6ueffxzpJzCiNqOGjwBgJu0eCIAq3GJow24 QCVaD0bHGSQB0gJ0M/F5lUKOxLbj6o+CIiPFTfdrDu33jnWAmffXhjSzJnATBK7j CwilWNO9xUpkOiqVhCBVPpIzJnX1CII6oYI1IlAZJgEJ4sK1lRrjJ+d7ldO5M9PO drz9KjsXu96jJ+7hArsKanqeOe5/LG7DCCWHAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUXyUOeFgF2MM+LOPLb9z/jw/R+lkwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvWHlVT2VGZ0YyTU0tTE9QTGI5el9q d19SLWxrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXqSQDAN BgkqhkiG9w0BAQsFAAOCAQEAgkpMaOBv0m4P22pixrECtmAuQxjDjld3extGUq1D Or4ciX0rcJWjMUpiOsehUinQ5y5z2MbTObxuT+ErkAbi8vBaa/7b0+laDVHuG4uy 15jg0yGztAyjFe0IP3G42utk2P7XJYzfnLiV7VovN5rVBE5nRf7xZFZ8uJoY5izn T+9LtS+bQNzJwKBzdPSC3Vx0mXvC8KphlzdFKsnrI5Pes0iO5CXP1DqH5k2/V1tr siLyUaxAiX7vTBmOhXGM3l7WKHDxS1hIuk3OGqx2TWc57hkADCTLur1Uzq2lYQ1Z +qX1oERoxvn016DuFy4IcVf3/PRL46s2u2rZmIr9E+EwPA== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:10 2024 by rpki-client on console-ams.rpki-client.org