$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_20lg_gv5DVB1nWWlUzt7UpkKWA.roa File: _20lg_gv5DVB1nWWlUzt7UpkKWA.roa (raw, json) Hash identifier: kynL141c9BGHA5JXnaLZ2cLZZCrvk1X/0JWC9eN0e8Q= Subject key identifier: FF:6D:25:83:F8:2F:E4:35:41:D6:75:96:95:4C:ED:ED:4A:64:29:60 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1359 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_20lg_gv5DVB1nWWlUzt7UpkKWA.roa Signing time: Fri 01 Sep 2023 09:24:50 +0000 ROA not before: Fri 01 Sep 2023 09:24:50 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 123.205.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4953 (0x1359) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:50 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FF6D2583F82FE43541D67596954CEDED4A642960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:9e:71:bc:d4:0f:7b:4c:c9:99:9c:26:98: a7:86:11:19:29:29:1c:b4:b8:1d:0f:7b:6c:e6:3e: a7:8a:d4:20:4e:31:5a:43:a9:ef:08:33:e4:8d:18: dd:8c:05:a3:2f:8a:ae:87:ec:25:97:78:e7:57:b1: 72:7a:0f:ee:0e:9d:b1:7d:18:1e:97:bf:13:3c:1b: 5d:e3:19:38:39:c2:b6:0a:db:5c:5c:43:8f:d4:89: aa:10:cf:eb:95:2f:e5:1f:3e:c5:4d:fb:f3:15:98: 4b:35:11:d0:71:e9:85:78:b1:5f:2e:89:20:cb:85: b8:f8:42:6c:42:83:52:81:d9:59:43:f4:2a:8a:0c: ac:8c:cc:40:89:44:c3:dc:5a:1e:35:e4:55:f4:43: 06:35:32:c5:58:5b:1a:78:c4:6c:d6:c6:13:f4:95: a7:77:b3:65:48:50:c2:c8:e3:81:cf:5d:29:09:7e: f8:60:a0:0d:a8:be:a2:85:64:a5:b7:ba:2b:f7:5a: 67:85:54:c2:ae:f1:9d:3c:31:6b:f1:c0:f0:0f:3a: e7:c2:84:34:f0:f4:d9:f8:e6:ff:d2:a7:bf:96:bc: e9:d9:a5:ee:7c:fd:d9:1a:2d:3d:94:a6:5a:6a:85: 5a:07:37:f1:50:91:d4:a1:cb:b9:f0:49:2e:46:ab: 01:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6D:25:83:F8:2F:E4:35:41:D6:75:96:95:4C:ED:ED:4A:64:29:60 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_20lg_gv5DVB1nWWlUzt7UpkKWA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.205.128.0/17 Signature Algorithm: sha256WithRSAEncryption a6:4c:61:22:76:20:01:8f:b6:1f:3b:d0:de:ab:2e:20:10:c3: 99:99:0f:ef:82:44:20:1a:2b:e5:33:34:88:52:0a:95:0d:be: ac:82:f7:a4:1f:13:98:5a:35:7a:90:73:b2:ff:8f:90:aa:07: 88:80:af:e1:e5:04:55:9f:29:a4:10:f2:9d:01:ea:10:56:4b: 27:70:42:ad:07:3a:b3:35:d9:82:0e:f5:93:0e:d6:96:3d:70: 04:02:d9:69:56:12:fd:5e:e1:d4:03:fb:e4:5d:d9:f3:50:97: af:85:f5:c9:b1:84:0f:ad:f2:8c:89:84:8f:73:fb:8c:a0:5a: a6:01:1b:ac:eb:12:ef:61:cf:b8:85:02:6d:80:07:d7:a7:2c: ff:ff:7b:f3:98:dc:44:04:c7:e1:17:b4:08:8b:86:8e:58:81: 74:08:ad:3f:65:60:b1:92:84:08:4e:30:eb:a1:45:73:9c:c7: f6:b0:a0:55:45:ae:67:24:11:a5:3d:c0:00:c9:2d:28:c2:e0: 97:c5:86:62:dc:63:ce:30:97:30:6b:9c:91:c9:f7:c5:d4:bc: 65:d8:3f:31:35:71:ca:8c:96:c5:b6:cc:6a:17:ea:a1:04:25: 08:21:ba:19:85:16:75:ff:e9:98:7f:d4:b8:4a:0f:2b:e5:bc: 00:a1:84:9a -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE1kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZGNkQyNTgzRjgyRkU0 MzU0MUQ2NzU5Njk1NENFREVENEE2NDI5NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDbZ5xvNQPe0zJmZwmmKeGERkpKRy0uB0Pe2zmPqeK1CBOMVpD qe8IM+SNGN2MBaMviq6H7CWXeOdXsXJ6D+4OnbF9GB6XvxM8G13jGTg5wrYK21xc Q4/UiaoQz+uVL+UfPsVN+/MVmEs1EdBx6YV4sV8uiSDLhbj4QmxCg1KB2VlD9CqK DKyMzECJRMPcWh415FX0QwY1MsVYWxp4xGzWxhP0lad3s2VIUMLI44HPXSkJfvhg oA2ovqKFZKW3uiv3WmeFVMKu8Z08MWvxwPAPOufChDTw9Nn45v/Sp7+WvOnZpe58 /dkaLT2UplpqhVoHN/FQkdShy7nwSS5GqwGFAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU/20lg/gv5DVB1nWWlUzt7UpkKWAwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvXzIwbGdfZ3Y1RFZCMW5XV2xVenQ3 VXBrS1dBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB3vNgDAN BgkqhkiG9w0BAQsFAAOCAQEApkxhInYgAY+2HzvQ3qsuIBDDmZkP74JEIBor5TM0 iFIKlQ2+rIL3pB8TmFo1epBzsv+PkKoHiICv4eUEVZ8ppBDynQHqEFZLJ3BCrQc6 szXZgg71kw7Wlj1wBALZaVYS/V7h1AP75F3Z81CXr4X1ybGED63yjImEj3P7jKBa pgEbrOsS72HPuIUCbYAH16cs//9785jcRATH4Re0CIuGjliBdAitP2VgsZKECE4w 66FFc5zH9rCgVUWuZyQRpT3AAMktKMLgl8WGYtxjzjCXMGuckcn3xdS8Zdg/MTVx yoyWxbbMahfqoQQlCCG6GYUWdf/pmH/UuEoPK+W8AKGEmg== -----END CERTIFICATE-----Generated at Sat Jun 1 23:25:37 2024 by rpki-client on console-ams.rpki-client.org