$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/c7kmcLX-wUrbxfzuuKO7KpsUoCo.roa File: c7kmcLX-wUrbxfzuuKO7KpsUoCo.roa (raw, json) Hash identifier: +pAFP84gxZjcvyXvi6pL/SVNO06yVsir1JLPnBOQoVQ= Subject key identifier: 73:B9:26:70:B5:FE:C1:4A:DB:C5:FC:EE:B8:A3:BB:2A:9B:14:A0:2A Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 12FA Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/c7kmcLX-wUrbxfzuuKO7KpsUoCo.roa Signing time: Fri 01 Sep 2023 09:24:19 +0000 ROA not before: Fri 01 Sep 2023 09:24:19 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 220.229.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4858 (0x12fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:19 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=73B92670B5FEC14ADBC5FCEEB8A3BB2A9B14A02A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:84:43:ca:0f:22:51:5c:f7:8f:27:84:24:6f: ed:21:4b:c6:f0:09:11:b3:b7:f6:8c:da:57:99:3f: 6d:2a:0b:6e:6c:f0:cd:3d:12:d3:c4:c4:55:9d:22: 14:39:95:1a:ac:08:71:75:d2:7e:94:f7:0b:d8:ef: 0f:1a:45:f7:88:61:1e:a8:3c:e1:2b:2e:be:50:78: ed:00:2d:48:18:c6:29:58:da:0c:b3:14:2a:a6:3d: dd:0f:56:18:27:8d:a8:43:ed:c3:2a:a1:b2:6f:0a: 0e:05:9b:c6:49:86:77:f4:f9:ab:ec:3e:4c:04:a0: 6c:85:af:22:aa:5d:31:85:34:f7:a7:ad:be:87:20: 9e:9a:26:4b:c4:1c:6f:fe:eb:25:cd:3c:23:66:a6: 4e:1c:1f:4c:31:48:45:2a:9a:9f:68:cf:a4:1b:79: c6:b2:a7:0d:99:1f:a9:15:3e:8c:05:b7:fe:ed:89: 64:7f:31:f9:3e:a4:ba:2c:c2:e7:2a:32:a8:8b:07: a1:fe:b5:46:c6:5c:3e:9f:cf:d7:cc:d5:a5:30:e3: dc:f5:3c:4e:a5:56:5e:5d:ec:8a:fb:39:ea:4e:fb: d0:58:e0:93:86:69:5e:7b:da:65:fb:24:bc:8e:51: 2c:3b:a4:ae:83:7c:c5:f4:15:79:5b:a6:0e:18:31: 3f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B9:26:70:B5:FE:C1:4A:DB:C5:FC:EE:B8:A3:BB:2A:9B:14:A0:2A X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/c7kmcLX-wUrbxfzuuKO7KpsUoCo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.229.0.0/18 Signature Algorithm: sha256WithRSAEncryption 7a:92:53:95:4b:57:c9:3f:ef:49:80:50:af:10:3b:54:f6:3f: a1:68:66:56:a0:bd:9d:bb:93:46:c5:e8:d5:34:91:a4:cb:df: 27:c7:9f:4f:21:e3:da:19:ea:61:52:7f:90:c6:90:0f:f9:e2: 9f:ae:38:7f:82:29:6b:58:92:d6:c3:ed:95:36:b8:94:12:f0: 76:ab:94:89:75:2c:dc:0b:de:96:05:35:56:1c:91:75:2c:2c: aa:37:0d:22:2c:de:3f:4d:71:c4:0f:eb:80:f0:c0:74:d6:5f: 80:80:4b:3a:13:4b:d1:13:5d:15:50:b6:8b:9b:0d:65:fb:b5: 7c:89:a6:f9:80:24:d5:2d:03:04:8b:3a:ec:a0:2d:05:bd:57: ba:35:1f:a5:1a:c4:2b:c3:08:db:43:57:36:49:f6:b5:69:1d: a2:55:ac:79:ff:79:8a:c9:2f:7e:fb:a5:d4:b8:37:76:c9:d5: c8:95:6f:7f:37:1b:c7:b0:3c:98:34:b0:be:cc:3e:eb:ac:09: 50:8b:f3:67:be:04:86:c6:ee:51:5e:b6:2a:cb:f6:13:d1:ce: 4e:6c:5b:1c:23:92:ae:8f:34:30:33:ee:1d:be:a1:28:49:9d: 32:c3:b9:79:39:0a:e2:d6:34:bf:29:e4:af:2f:4d:cf:89:b8: e8:f8:00:2c -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEvowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDczQjkyNjcwQjVGRUMx NEFEQkM1RkNFRUI4QTNCQjJBOUIxNEEwMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDShEPKDyJRXPePJ4Qkb+0hS8bwCRGzt/aM2leZP20qC25s8M09 EtPExFWdIhQ5lRqsCHF10n6U9wvY7w8aRfeIYR6oPOErLr5QeO0ALUgYxilY2gyz FCqmPd0PVhgnjahD7cMqobJvCg4Fm8ZJhnf0+avsPkwEoGyFryKqXTGFNPenrb6H IJ6aJkvEHG/+6yXNPCNmpk4cH0wxSEUqmp9oz6Qbecaypw2ZH6kVPowFt/7tiWR/ Mfk+pLoswucqMqiLB6H+tUbGXD6fz9fM1aUw49z1PE6lVl5d7Ir7OepO+9BY4JOG aV572mX7JLyOUSw7pK6DfMX0FXlbpg4YMT+hAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUc7kmcLX+wUrbxfzuuKO7KpsUoCowHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvYzdrbWNMWC13VXJieGZ6dXVLTzdL cHNVb0NvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtzlADAN BgkqhkiG9w0BAQsFAAOCAQEAepJTlUtXyT/vSYBQrxA7VPY/oWhmVqC9nbuTRsXo 1TSRpMvfJ8efTyHj2hnqYVJ/kMaQD/nin644f4Ipa1iS1sPtlTa4lBLwdquUiXUs 3AvelgU1VhyRdSwsqjcNIizeP01xxA/rgPDAdNZfgIBLOhNL0RNdFVC2i5sNZfu1 fImm+YAk1S0DBIs67KAtBb1XujUfpRrEK8MI20NXNkn2tWkdolWsef95iskvfvul 1Lg3dsnVyJVvfzcbx7A8mDSwvsw+66wJUIvzZ74EhsbuUV62Ksv2E9HOTmxbHCOS ro80MDPuHb6hKEmdMsO5eTkK4tY0vynkry9Nz4m46PgALA== -----END CERTIFICATE-----Generated at Sat Jun 1 23:25:38 2024 by rpki-client on console-ams.rpki-client.org