$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/bhnbTSrPDvT8nFY-I-AJ3JmrYO8.roa File: bhnbTSrPDvT8nFY-I-AJ3JmrYO8.roa (raw, json) Hash identifier: W9Bf8sQ/PO7pOcF+tgI3tzvqKAStrcQq4mIbC7E/a1M= Subject key identifier: 6E:19:DB:4D:2A:CF:0E:F4:FC:9C:56:3E:23:E0:09:DC:99:AB:60:EF Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1345 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bhnbTSrPDvT8nFY-I-AJ3JmrYO8.roa Signing time: Fri 01 Sep 2023 09:24:43 +0000 ROA not before: Fri 01 Sep 2023 09:24:43 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 113.196.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4933 (0x1345) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:43 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6E19DB4D2ACF0EF4FC9C563E23E009DC99AB60EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1a:5f:68:74:2d:55:5d:40:09:84:28:34:cf: 17:b7:ba:d9:e5:15:73:e4:f8:83:9b:bc:d1:46:01: 1a:29:bc:2a:b2:ea:9b:de:1f:5b:51:ef:cb:87:84: f9:bc:c1:3a:34:0e:65:09:18:03:bc:6c:09:53:17: f8:40:1b:bb:7e:21:79:a9:b5:13:05:1d:8f:62:7e: 01:c4:40:91:13:0e:26:84:3f:3f:c2:b8:d4:5b:b2: 09:e8:48:fc:b4:b2:33:6f:04:ba:c9:33:64:92:4d: 4b:db:0a:4d:a4:64:e8:21:a1:e5:af:d9:03:13:3f: 8c:99:84:c2:4b:23:4c:83:33:03:d1:90:9c:9d:b7: ca:45:f8:16:cc:4c:a7:7e:0c:40:b4:60:dd:97:cd: 8b:6e:22:91:51:84:2b:57:e3:66:74:05:a5:a7:96: ad:5d:8a:b9:78:07:34:83:98:2d:19:b4:bc:a5:aa: 0c:8f:48:2c:ee:37:a2:b3:69:41:f1:b0:24:9b:3d: e9:48:08:0c:a5:09:fb:3f:76:25:e6:70:16:35:66: 8a:68:75:93:07:db:40:ca:89:97:bb:99:d8:c4:f5: b1:3c:4d:21:c8:07:3c:47:3d:67:71:4e:3a:ed:e8: b4:f9:c6:90:91:95:b2:ec:b2:31:a2:0d:91:5c:86: e1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:19:DB:4D:2A:CF:0E:F4:FC:9C:56:3E:23:E0:09:DC:99:AB:60:EF X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bhnbTSrPDvT8nFY-I-AJ3JmrYO8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.196.160.0/19 Signature Algorithm: sha256WithRSAEncryption 30:cf:31:c0:27:12:fc:be:62:0d:86:a9:0d:da:47:34:2b:74: fa:61:c6:6f:b5:2d:93:80:05:1a:60:2c:02:76:bd:e6:50:4a: 5e:df:2c:c9:f4:3c:8e:ab:77:dd:65:ce:8d:18:5b:b0:96:6d: c3:00:12:3c:24:bf:cd:5f:4b:4c:9f:cb:49:7e:24:d1:80:b2: 3d:21:09:86:e1:a0:7c:e3:c6:ad:f7:10:2e:47:48:fc:1b:fc: e2:f3:0d:a7:72:83:20:83:7b:71:7c:be:04:ed:43:00:45:f1: af:b1:e6:61:12:36:5c:13:cf:58:5f:d8:64:f4:0d:4a:b5:d5: 97:1c:4f:77:00:22:0e:57:75:a2:ee:71:ab:ed:ea:8e:c4:e9: 6d:12:1c:d0:7a:ca:c5:51:8d:58:f2:7f:2d:b1:02:7e:bb:b2: 65:48:11:6e:be:2d:22:e5:af:22:aa:75:03:77:45:b3:b9:05: a8:e7:58:4e:e7:75:a3:1f:a6:31:df:bb:ab:57:68:10:07:57: 50:e4:be:25:e0:e0:ce:46:3e:b9:3a:00:48:20:b1:ac:ee:f9: 7f:af:5c:bb:6b:ff:91:ca:3e:85:c4:7f:15:a9:f4:8e:f6:40: 4b:5e:67:8b:bc:9a:92:69:84:28:f8:c1:e0:2b:32:0c:a3:52: 02:53:ee:03 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE0UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZFMTlEQjREMkFDRjBF RjRGQzlDNTYzRTIzRTAwOURDOTlBQjYwRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyGl9odC1VXUAJhCg0zxe3utnlFXPk+IObvNFGARopvCqy6pve H1tR78uHhPm8wTo0DmUJGAO8bAlTF/hAG7t+IXmptRMFHY9ifgHEQJETDiaEPz/C uNRbsgnoSPy0sjNvBLrJM2SSTUvbCk2kZOghoeWv2QMTP4yZhMJLI0yDMwPRkJyd t8pF+BbMTKd+DEC0YN2XzYtuIpFRhCtX42Z0BaWnlq1dirl4BzSDmC0ZtLylqgyP SCzuN6KzaUHxsCSbPelICAylCfs/diXmcBY1ZopodZMH20DKiZe7mdjE9bE8TSHI BzxHPWdxTjrt6LT5xpCRlbLssjGiDZFchuE/AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUbhnbTSrPDvT8nFY+I+AJ3JmrYO8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvYmhuYlRTclBEdlQ4bkZZLUktQUoz Sm1yWU84LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXHEoDAN BgkqhkiG9w0BAQsFAAOCAQEAMM8xwCcS/L5iDYapDdpHNCt0+mHGb7Utk4AFGmAs Ana95lBKXt8syfQ8jqt33WXOjRhbsJZtwwASPCS/zV9LTJ/LSX4k0YCyPSEJhuGg fOPGrfcQLkdI/Bv84vMNp3KDIIN7cXy+BO1DAEXxr7HmYRI2XBPPWF/YZPQNSrXV lxxPdwAiDld1ou5xq+3qjsTpbRIc0HrKxVGNWPJ/LbECfruyZUgRbr4tIuWvIqp1 A3dFs7kFqOdYTud1ox+mMd+7q1doEAdXUOS+JeDgzkY+uToASCCxrO75f69cu2v/ kco+hcR/Fan0jvZAS15ni7yakmmEKPjB4CsyDKNSAlPuAw== -----END CERTIFICATE-----Generated at Sat Jun 1 22:20:18 2024 by rpki-client on console-fra.rpki-client.org