$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/eNj9fPLGaxeSviLEEQxueOnKV7Y.roa File: eNj9fPLGaxeSviLEEQxueOnKV7Y.roa (raw, json) Hash identifier: 2XMigwT1OvDYRk3CAxObTdrjllBrGDKYUU6TuS2+TXc= Subject key identifier: 78:D8:FD:7C:F2:C6:6B:17:92:BE:22:C4:11:0C:6E:78:E9:CA:57:B6 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 15EE Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/eNj9fPLGaxeSviLEEQxueOnKV7Y.roa Signing time: Mon 26 Aug 2024 05:21:36 +0000 ROA not before: Mon 26 Aug 2024 05:21:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 175.182.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5614 (0x15ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:21:36 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=78D8FD7CF2C66B1792BE22C4110C6E78E9CA57B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1b:bf:44:cd:1e:b1:56:cc:2e:f4:52:c0:56: 05:9a:78:4b:98:8f:00:ca:0a:c1:5e:91:82:fc:4b: 75:05:8c:e5:67:12:8f:64:2f:a7:92:24:70:b4:eb: b6:92:1b:de:5d:8e:d7:38:a2:7f:65:99:73:bf:aa: a4:8a:7f:e8:7e:3b:da:56:19:08:cd:4d:5d:35:cd: 28:0b:0c:ed:a5:15:e4:1a:71:4b:cc:3f:40:aa:23: 8f:76:12:94:20:c0:cb:03:d6:3c:7a:52:ff:82:60: 40:2d:a1:60:1d:55:1f:dd:b6:fa:96:4b:95:37:41: b2:a3:15:4e:49:90:ef:9a:11:e0:2a:b8:0b:ca:d7: 4c:23:28:43:84:c1:5f:bc:30:04:60:38:a2:fe:46: c1:83:4f:73:24:b9:b5:df:5e:13:76:39:71:0c:e6: f0:e6:70:62:24:b3:4c:98:c6:81:20:b3:dd:43:7e: a5:10:e7:80:c1:a5:29:fe:51:b7:c2:b5:9b:68:e6: fb:6a:3c:50:e3:5e:ca:d7:9a:a0:ac:9c:76:ac:a7: ac:d2:b2:4c:e2:c2:b6:9a:c6:27:2d:14:4f:04:fa: 3c:43:9d:4e:71:9f:ad:59:ca:88:44:c5:17:8e:7f: 02:c3:3a:98:9e:6e:a8:43:d9:4e:a9:e3:53:67:85: 02:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D8:FD:7C:F2:C6:6B:17:92:BE:22:C4:11:0C:6E:78:E9:CA:57:B6 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/eNj9fPLGaxeSviLEEQxueOnKV7Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.182.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6e:36:a3:dd:be:c1:86:65:39:ba:96:3b:22:ea:a5:58:0b:01: e9:40:b3:6e:de:be:c0:b6:35:ed:b6:f4:29:4d:54:d3:16:1c: bc:bc:47:75:1d:45:4e:2f:39:d6:e8:87:8c:93:f3:49:ca:a0: b1:d0:d3:75:ee:59:c3:e3:9f:7c:6b:29:a9:0b:52:2d:cf:49: 9e:f1:81:d4:54:e7:2f:c5:10:23:35:bc:b9:27:14:cc:d1:f2: 02:cf:be:3b:8c:d4:a2:51:63:40:cb:b9:ef:3e:52:5e:08:6a: 20:a4:e3:9b:64:dc:9d:0d:4c:43:c4:17:fa:1e:f5:88:5a:19: 82:c8:e6:7f:31:8f:cb:e8:d5:6d:29:a6:01:ae:10:2b:07:8e: e3:a9:5e:88:fe:33:c2:1d:3d:37:4c:b8:2b:a7:82:0b:81:47: 26:bb:f8:c3:8a:3d:b7:07:01:57:ca:fc:7a:a8:93:6a:49:40: 46:d5:49:21:f6:04:b3:76:7a:44:80:29:9b:0f:b0:45:70:c5: 24:97:54:94:e9:86:58:b5:21:c6:b4:f5:93:f5:d7:e5:d3:d4: 33:87:70:79:3a:1d:fe:b1:f7:f1:0e:c4:31:b2:77:e1:e3:1a: 4c:bd:2b:12:f8:20:cb:84:e7:5b:79:af:54:31:0e:db:dd:f0: 53:03:40:6c -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICFe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIxMzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc4RDhGRDdDRjJDNjZC MTc5MkJFMjJDNDExMEM2RTc4RTlDQTU3QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiG79EzR6xVswu9FLAVgWaeEuYjwDKCsFekYL8S3UFjOVnEo9k L6eSJHC067aSG95djtc4on9lmXO/qqSKf+h+O9pWGQjNTV01zSgLDO2lFeQacUvM P0CqI492EpQgwMsD1jx6Uv+CYEAtoWAdVR/dtvqWS5U3QbKjFU5JkO+aEeAquAvK 10wjKEOEwV+8MARgOKL+RsGDT3MkubXfXhN2OXEM5vDmcGIks0yYxoEgs91DfqUQ 54DBpSn+UbfCtZto5vtqPFDjXsrXmqCsnHasp6zSskziwraaxictFE8E+jxDnU5x n61ZyohExReOfwLDOpiebqhD2U6p41NnhQLXAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUeNj9fPLGaxeSviLEEQxueOnKV7YwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZU5qOWZQTEdheGVTdmlMRUVReHVl T25LVjdZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAK+2MA0G CSqGSIb3DQEBCwUAA4IBAQBuNqPdvsGGZTm6ljsi6qVYCwHpQLNu3r7AtjXttvQp TVTTFhy8vEd1HUVOLznW6IeMk/NJyqCx0NN17lnD4598aympC1Itz0me8YHUVOcv xRAjNby5JxTM0fICz747jNSiUWNAy7nvPlJeCGogpOObZNydDUxDxBf6HvWIWhmC yOZ/MY/L6NVtKaYBrhArB47jqV6I/jPCHT03TLgrp4ILgUcmu/jDij23BwFXyvx6 qJNqSUBG1Ukh9gSzdnpEgCmbD7BFcMUkl1SU6YZYtSHGtPWT9dfl09Qzh3B5Oh3+ sffxDsQxsnfh4xpMvSsS+CDLhOdbea9UMQ7b3fBTA0Bs -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:11 2024 by rpki-client on console-ams.rpki-client.org