$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_PBUFXninJtWYG5fXOge3R9lhF8.roa File: _PBUFXninJtWYG5fXOge3R9lhF8.roa (raw, json) Hash identifier: z0UJTHnquj9TVjdqTQQCaMspuNGfdQ4XOsB1jHbMGRs= Subject key identifier: FC:F0:54:15:79:E2:9C:9B:56:60:6E:5F:5C:E8:1E:DD:1F:65:84:5F Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 13C9 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_PBUFXninJtWYG5fXOge3R9lhF8.roa Signing time: Fri 01 Sep 2023 09:25:26 +0000 ROA not before: Fri 01 Sep 2023 09:25:26 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 211.78.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5065 (0x13c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:26 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FCF0541579E29C9B56606E5F5CE81EDD1F65845F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1a:ec:46:1a:1e:a0:3e:e1:20:bd:ee:43:8b: bb:3c:7e:57:43:33:24:1a:99:b3:b3:62:bd:a8:a9: 63:4e:45:3b:8b:77:23:e0:a1:0b:b0:ce:f8:73:b2: 5d:29:6c:59:69:43:5d:a4:08:59:c7:ec:68:3d:ec: 7c:83:fb:86:b4:7a:42:50:12:fd:be:81:8e:d9:d8: d6:a6:46:46:cb:4d:46:f7:45:9e:ab:05:08:14:ba: 40:09:51:83:c3:48:1a:90:00:f4:8a:6d:d0:e5:53: 16:81:f6:1f:6e:98:93:a5:de:3f:8b:43:40:b7:22: e2:35:58:b0:bb:05:a8:3c:47:22:e7:ee:b7:89:72: ad:fa:f7:0f:17:ee:b0:19:c3:69:75:bf:57:d5:6a: 3b:27:2a:6c:c4:2d:53:ac:59:49:ee:df:6a:0d:69: 24:9b:81:e7:df:ab:ac:d1:b6:7f:78:4a:ae:bc:91: e5:21:e0:2b:c9:d1:03:1b:b6:94:36:9f:a9:0c:be: fe:f2:b9:a5:4e:76:9e:2a:dd:54:19:e9:4b:78:18: 94:c8:13:7d:fd:a0:f1:c3:12:e1:5c:0f:21:e8:68: 6d:ee:b8:59:4a:bd:20:b0:76:a8:59:bc:bb:ca:65: cc:d2:eb:b2:2c:a4:f2:c2:ad:1e:9d:db:af:1d:80: 1b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F0:54:15:79:E2:9C:9B:56:60:6E:5F:5C:E8:1E:DD:1F:65:84:5F X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_PBUFXninJtWYG5fXOge3R9lhF8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.128.0/19 Signature Algorithm: sha256WithRSAEncryption 4d:be:77:e6:60:d3:a0:97:9b:c0:cd:58:ff:0a:81:74:ce:aa: ed:7e:bb:04:97:a2:05:bf:05:03:c9:57:90:90:56:c9:ee:04: f7:05:1b:5c:28:48:f4:94:4d:46:6e:46:50:eb:54:28:ab:4c: 95:51:b3:e2:d2:3f:01:f8:da:72:60:12:8b:43:01:15:87:69: a8:aa:ff:9b:5e:95:9a:27:e5:e2:f1:1c:7f:54:17:4e:0a:66: 7c:0b:db:7c:16:2b:7e:32:e7:d7:1a:f3:54:f2:0c:76:21:9c: 94:96:e2:e4:de:aa:1b:8d:46:6f:b0:92:73:0a:b6:86:34:85: 4f:55:05:f8:74:d2:e4:65:1b:ed:e0:21:dd:3a:a5:fc:9f:9f: c4:68:a0:4a:17:a6:e7:49:23:28:6e:89:57:e6:dd:39:ee:b1: 54:a7:17:75:96:92:10:25:7d:2f:f0:0b:ac:c5:68:af:1e:b8: 07:23:d9:6a:43:4a:80:35:08:00:63:e2:82:36:eb:ec:52:5e: f1:4a:a9:9d:b6:df:00:b6:9d:7d:c6:b1:82:13:7d:39:c9:b6: cf:cc:0f:aa:c3:da:eb:2a:c2:97:6b:5a:33:69:4a:54:35:fc: d6:20:bd:5e:cb:4f:d2:b8:a2:12:ec:af:60:7a:55:89:a4:68: 3c:d2:5a:7e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE8kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MjZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZDRjA1NDE1NzlFMjlD OUI1NjYwNkU1RjVDRTgxRUREMUY2NTg0NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCGuxGGh6gPuEgve5Di7s8fldDMyQambOzYr2oqWNORTuLdyPg oQuwzvhzsl0pbFlpQ12kCFnH7Gg97HyD+4a0ekJQEv2+gY7Z2NamRkbLTUb3RZ6r BQgUukAJUYPDSBqQAPSKbdDlUxaB9h9umJOl3j+LQ0C3IuI1WLC7Bag8RyLn7reJ cq369w8X7rAZw2l1v1fVajsnKmzELVOsWUnu32oNaSSbgeffq6zRtn94Sq68keUh 4CvJ0QMbtpQ2n6kMvv7yuaVOdp4q3VQZ6Ut4GJTIE339oPHDEuFcDyHoaG3uuFlK vSCwdqhZvLvKZczS67IspPLCrR6d268dgBsLAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU/PBUFXninJtWYG5fXOge3R9lhF8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvX1BCVUZYbmluSnRXWUc1ZlhPZ2Uz UjlsaEY4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdNOgDAN BgkqhkiG9w0BAQsFAAOCAQEATb535mDToJebwM1Y/wqBdM6q7X67BJeiBb8FA8lX kJBWye4E9wUbXChI9JRNRm5GUOtUKKtMlVGz4tI/AfjacmASi0MBFYdpqKr/m16V mifl4vEcf1QXTgpmfAvbfBYrfjLn1xrzVPIMdiGclJbi5N6qG41Gb7CScwq2hjSF T1UF+HTS5GUb7eAh3Tql/J+fxGigShem50kjKG6JV+bdOe6xVKcXdZaSECV9L/AL rMVorx64ByPZakNKgDUIAGPigjbr7FJe8UqpnbbfALadfcaxghN9Ocm2z8wPqsPa 6yrCl2taM2lKVDX81iC9XstP0riiEuyvYHpViaRoPNJafg== -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org