$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/fh9kA2ZivTMLiO302g3OVRWzmCs.roa File: fh9kA2ZivTMLiO302g3OVRWzmCs.roa (raw, json) Hash identifier: xvMt+RBGIgYpBXPQHlCwm7GWt0mhUKAAj72rQ+EKVgg= Subject key identifier: 7E:1F:64:03:66:62:BD:33:0B:88:ED:F4:DA:0D:CE:55:15:B3:98:2B Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 16E4 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fh9kA2ZivTMLiO302g3OVRWzmCs.roa Signing time: Mon 26 Aug 2024 05:22:44 +0000 ROA not before: Mon 26 Aug 2024 05:22:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 42.0.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5860 (0x16e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:44 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7E1F64036662BD330B88EDF4DA0DCE5515B3982B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:19:54:35:a0:39:0b:3d:6b:36:20:9f:2f: a1:7a:db:ce:94:79:b0:40:d3:20:fc:1a:77:cf:3a: 98:b2:9d:c6:d3:ea:05:34:fd:6e:f5:ac:d7:2d:3c: 1c:a0:06:69:a4:5e:18:51:d6:ab:4a:e3:3f:31:95: f7:f0:8c:41:5a:b3:e0:fc:3f:4a:86:55:fe:a3:ac: 04:a7:3f:ae:3c:05:5d:ab:7a:c1:2b:2b:37:af:85: ab:ba:32:57:ad:01:68:ad:41:fa:42:45:ef:61:d9: 95:94:4f:60:c6:60:3a:db:ef:17:e9:9b:d3:03:aa: ee:21:57:09:e1:2d:47:1f:fb:0d:a1:fc:b2:4f:aa: 1b:6d:83:9f:81:cb:e5:ba:36:1e:a5:3c:ea:47:f6: 04:4d:3b:f0:8f:cc:75:02:ab:0d:f4:a6:bc:64:10: 51:e0:d2:b9:70:79:11:8c:6c:a4:f7:cd:66:e3:2b: 1b:0f:fa:e8:74:ba:a7:8d:31:9b:c5:b6:7f:63:8e: c2:90:72:6b:6e:66:0a:06:ac:a8:fe:fe:61:05:78: eb:11:8f:40:7b:57:85:25:46:fe:96:5e:b3:c9:95: 4a:6e:ef:cb:d5:d2:dc:4e:a2:97:16:3e:86:7d:b8: b8:00:52:d0:9a:c2:40:10:22:85:81:9c:e2:fc:08: f9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1F:64:03:66:62:BD:33:0B:88:ED:F4:DA:0D:CE:55:15:B3:98:2B X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fh9kA2ZivTMLiO302g3OVRWzmCs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 42.0.64.0/18 Signature Algorithm: sha256WithRSAEncryption 68:e8:ca:c2:7c:b7:44:c8:e0:32:9e:41:fd:c2:89:51:b3:9d: ad:3b:44:cb:46:d8:b8:70:d2:37:ab:fd:4c:d9:03:e3:36:6d: cd:98:15:32:ac:ca:20:0e:be:58:f6:dd:34:92:f4:ff:21:77: bb:fa:e8:6a:9b:d8:24:46:07:11:95:45:1f:a6:b3:1b:ab:13: 27:41:3d:47:bb:8b:45:38:fa:ad:c5:66:58:fb:22:d5:f5:59: d6:05:0a:d1:66:aa:6c:d4:4c:37:84:38:ae:2b:00:c7:d3:82: 8e:9e:e1:76:76:e2:2a:93:9a:c1:0b:c8:2f:8e:fa:b1:08:e1: 64:e3:3c:60:d9:64:00:50:ec:e9:09:95:61:f7:8f:e6:e1:f0: 87:f8:b0:2e:9c:35:45:cb:d2:67:db:58:a8:db:27:a3:fb:b1: 20:9c:e7:ed:ab:90:0c:02:7b:ed:fe:17:15:a4:20:e8:93:d2: fe:9e:83:3a:96:7d:97:46:69:5b:79:a1:fd:d5:e5:88:84:68: 2a:51:68:fa:95:3c:c7:9b:bc:15:52:e8:da:b6:f7:c3:b4:67: 5d:23:ff:1d:cc:b5:db:50:b9:0e:db:5a:13:60:23:73:0b:ab: 87:3e:d0:53:f9:54:8e:12:65:2e:a2:19:09:13:95:77:f7:63: fa:12:b3:91 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFuQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyNDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdFMUY2NDAzNjY2MkJE MzMwQjg4RURGNERBMERDRTU1MTVCMzk4MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRARlUNaA5Cz1rNiCfL6F6286UebBA0yD8GnfPOpiyncbT6gU0 /W71rNctPBygBmmkXhhR1qtK4z8xlffwjEFas+D8P0qGVf6jrASnP648BV2resEr Kzevhau6MletAWitQfpCRe9h2ZWUT2DGYDrb7xfpm9MDqu4hVwnhLUcf+w2h/LJP qhttg5+By+W6Nh6lPOpH9gRNO/CPzHUCqw30prxkEFHg0rlweRGMbKT3zWbjKxsP +uh0uqeNMZvFtn9jjsKQcmtuZgoGrKj+/mEFeOsRj0B7V4UlRv6WXrPJlUpu78vV 0txOopcWPoZ9uLgAUtCawkAQIoWBnOL8CPnxAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUfh9kA2ZivTMLiO302g3OVRWzmCswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZmg5a0EyWml2VE1MaU8zMDJnM09W Uld6bUNzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBioAQDAN BgkqhkiG9w0BAQsFAAOCAQEAaOjKwny3RMjgMp5B/cKJUbOdrTtEy0bYuHDSN6v9 TNkD4zZtzZgVMqzKIA6+WPbdNJL0/yF3u/roapvYJEYHEZVFH6azG6sTJ0E9R7uL RTj6rcVmWPsi1fVZ1gUK0WaqbNRMN4Q4risAx9OCjp7hdnbiKpOawQvIL476sQjh ZOM8YNlkAFDs6QmVYfeP5uHwh/iwLpw1RcvSZ9tYqNsno/uxIJzn7auQDAJ77f4X FaQg6JPS/p6DOpZ9l0ZpW3mh/dXliIRoKlFo+pU8x5u8FVLo2rb3w7RnXSP/Hcy1 21C5DttaE2Ajcwurhz7QU/lUjhJlLqIZCROVd/dj+hKzkQ== -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:42 2024 by rpki-client on console-fra.rpki-client.org