$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/fGOsPuZD6WZ6itD68JucbmG5mAs.roa File: fGOsPuZD6WZ6itD68JucbmG5mAs.roa (raw, json) Hash identifier: CYp64EqTCHUPPy4pOuEbhFG10k1iL1+Af79JNET7/mI= Subject key identifier: 7C:63:AC:3E:E6:43:E9:66:7A:8A:D0:FA:F0:9B:9C:6E:61:B9:98:0B Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 16C7 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fGOsPuZD6WZ6itD68JucbmG5mAs.roa Signing time: Mon 26 Aug 2024 05:22:37 +0000 ROA not before: Mon 26 Aug 2024 05:22:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 220.229.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5831 (0x16c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:37 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7C63AC3EE643E9667A8AD0FAF09B9C6E61B9980B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7b:56:1f:9d:c3:0b:a1:66:76:27:dc:0c:6f: 6e:13:c8:ea:f2:d9:5b:72:09:7c:6c:3e:5d:20:04: e9:83:a2:bd:b5:42:15:4f:1e:0d:09:69:03:23:19: e7:d9:48:11:3e:23:64:a3:bd:27:a7:65:79:1d:1e: 75:57:3e:64:e2:40:ab:a0:4d:80:cc:0b:5a:07:88: 99:90:a7:a8:f2:3b:75:d9:f7:1e:6c:d2:87:56:b8: 7d:e2:33:3a:52:49:7f:d0:b6:61:3a:4e:b5:2c:22: 4c:ab:1f:9e:e3:ee:70:8a:41:a3:24:15:75:96:79: c2:46:1d:73:ad:ae:14:c5:f4:10:c8:7e:37:7e:40: cb:ca:bb:6a:c0:cd:10:1a:a0:4f:ee:ff:6c:d8:dc: 93:f9:e0:f2:1e:73:78:ed:9a:be:20:84:cc:58:2a: 8f:c9:f5:24:de:2b:a6:5c:a0:92:c8:36:b7:b6:3f: 0e:88:c7:c4:07:d8:90:0a:72:70:55:cb:d5:91:6b: f6:9b:f1:ab:d5:35:b6:4d:5e:04:3d:2a:a5:51:b6: 72:8d:a9:79:e2:a3:5e:74:77:6b:ac:02:f1:c3:ed: 93:27:3a:74:fd:68:93:5e:ef:d0:1b:ee:cd:d2:a6: 19:65:eb:d9:cf:ab:8d:ea:61:6e:6d:eb:80:bb:d1: 9f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:63:AC:3E:E6:43:E9:66:7A:8A:D0:FA:F0:9B:9C:6E:61:B9:98:0B X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fGOsPuZD6WZ6itD68JucbmG5mAs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.229.64.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:88:56:d0:6b:cb:f8:73:e0:e5:e9:7f:47:13:ed:36:03:4f: b1:9c:58:40:ba:01:bb:69:a9:d2:e8:fb:32:13:92:b0:af:37: 3c:c2:2d:24:c5:32:eb:80:b1:6f:ec:5e:2d:61:5e:29:6d:5d: 6b:87:10:6e:cd:de:32:b3:1f:bc:c5:8c:d3:f4:00:ca:a6:fc: 0f:26:d9:e8:0a:27:71:ed:f5:54:62:e4:b5:c2:b8:60:7a:4d: 8b:f3:ec:50:46:00:ba:5c:9f:28:e4:bf:46:a3:d8:c3:da:2f: 31:6b:81:19:f3:1f:87:cc:3a:60:3f:70:d1:d1:66:8d:d2:2c: 7d:6c:9f:d5:66:20:68:a2:2d:2a:aa:55:5f:f5:99:06:6b:f6: 39:8e:db:3f:d4:bb:80:5e:af:77:02:82:93:a2:f4:cc:fa:4e: b6:5f:33:8c:67:8d:08:e6:58:4d:ae:48:47:b4:d5:79:e2:d2: c7:a4:bc:78:ef:e5:85:6a:f6:e1:d2:9d:61:bd:1d:54:c2:e6: f4:8b:e6:ab:75:13:af:33:ea:c6:4d:26:1f:23:3e:3b:6f:74: a1:50:fb:a2:76:91:5d:a4:2d:89:35:03:c8:ed:f9:39:3c:02: 2c:b0:b6:e6:a2:f4:44:53:65:d9:b0:93:35:2f:05:0a:7a:b1: 51:62:75:41 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFscwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyMzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdDNjNBQzNFRTY0M0U5 NjY3QThBRDBGQUYwOUI5QzZFNjFCOTk4MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQe1YfncMLoWZ2J9wMb24TyOry2VtyCXxsPl0gBOmDor21QhVP Hg0JaQMjGefZSBE+I2SjvSenZXkdHnVXPmTiQKugTYDMC1oHiJmQp6jyO3XZ9x5s 0odWuH3iMzpSSX/QtmE6TrUsIkyrH57j7nCKQaMkFXWWecJGHXOtrhTF9BDIfjd+ QMvKu2rAzRAaoE/u/2zY3JP54PIec3jtmr4ghMxYKo/J9STeK6ZcoJLINre2Pw6I x8QH2JAKcnBVy9WRa/ab8avVNbZNXgQ9KqVRtnKNqXnio150d2usAvHD7ZMnOnT9 aJNe79Ab7s3Sphll69nPq43qYW5t64C70Z8nAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUfGOsPuZD6WZ6itD68JucbmG5mAswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZkdPc1B1WkQ2V1o2aXRENjhKdWNi bUc1bUFzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANzlQDAN BgkqhkiG9w0BAQsFAAOCAQEAjIhW0GvL+HPg5el/RxPtNgNPsZxYQLoBu2mp0uj7 MhOSsK83PMItJMUy64Cxb+xeLWFeKW1da4cQbs3eMrMfvMWM0/QAyqb8DybZ6Aon ce31VGLktcK4YHpNi/PsUEYAulyfKOS/RqPYw9ovMWuBGfMfh8w6YD9w0dFmjdIs fWyf1WYgaKItKqpVX/WZBmv2OY7bP9S7gF6vdwKCk6L0zPpOtl8zjGeNCOZYTa5I R7TVeeLSx6S8eO/lhWr24dKdYb0dVMLm9Ivmq3UTrzPqxk0mHyM+O290oVD7onaR XaQtiTUDyO35OTwCLLC25qL0RFNl2bCTNS8FCnqxUWJ1QQ== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:11 2024 by rpki-client on console-ams.rpki-client.org