$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/gSWYZU2UlH9RQ1hYnMaBgQYKVAM.roa File: gSWYZU2UlH9RQ1hYnMaBgQYKVAM.roa (raw, json) Hash identifier: nt4LX1atm2/VK+hmQxeq2/vYrnK2k8I+jgJeFtdRyPQ= Subject key identifier: 81:25:98:65:4D:94:94:7F:51:43:58:58:9C:C6:81:81:06:0A:54:03 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 167D Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/gSWYZU2UlH9RQ1hYnMaBgQYKVAM.roa Signing time: Mon 26 Aug 2024 05:22:15 +0000 ROA not before: Mon 26 Aug 2024 05:22:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 210.64.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5757 (0x167d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:15 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=812598654D94947F514358589CC68181060A5403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:bf:e7:20:74:be:e1:7b:a1:bd:84:1a:3f: 5d:3d:24:b4:a2:9d:fa:ca:50:f9:54:c4:4f:b9:b5: cf:f4:99:ef:b4:a0:45:3e:dc:f8:da:2d:5e:80:96: d7:4f:eb:35:fa:8a:cc:42:d2:39:c8:be:a3:21:40: 6b:79:c2:86:48:f7:96:ad:a6:7f:56:fd:70:dc:32: 9b:af:37:55:f0:56:41:ec:2c:a6:a1:fd:08:a2:da: 3d:39:cc:5f:7e:bf:85:c1:e7:6f:36:75:b6:af:88: 80:2f:01:72:e9:d0:34:6e:0a:37:b0:c0:64:4a:40: 84:9e:6f:e2:c3:4f:b6:62:8b:86:d4:d5:22:fd:ba: 0d:a9:32:fc:ae:f6:95:df:18:5d:90:2e:fd:5c:09: b2:41:ac:51:b4:b8:b4:87:f7:ce:96:e1:b5:49:f2: 94:69:7f:14:dc:17:5f:1d:3e:aa:ec:77:61:e7:dd: bb:09:97:e1:ee:1e:de:85:f2:96:95:24:c7:b0:aa: ac:34:94:07:9e:9d:67:0e:49:4d:62:3a:3a:6a:fd: f0:66:f9:8f:f5:ed:e9:8d:6c:35:2f:6e:af:08:2c: 10:7c:5d:6d:d4:d3:09:2c:6c:dd:79:09:da:91:cf: a1:85:65:d4:95:d7:63:64:18:fd:5f:56:45:a5:07: 66:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:25:98:65:4D:94:94:7F:51:43:58:58:9C:C6:81:81:06:0A:54:03 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/gSWYZU2UlH9RQ1hYnMaBgQYKVAM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.64.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6c:86:e0:4c:fc:2c:ae:2c:0a:e7:0c:b8:58:b2:87:58:d6:f0: b9:d7:8f:ca:03:e0:96:04:00:3e:81:03:2e:b2:29:92:08:62: a6:2c:40:c0:cf:a2:7f:bb:d3:b9:75:cc:62:1b:5f:cc:73:ca: 33:df:32:e8:59:3f:55:94:5b:ee:7a:7e:89:e4:df:19:de:8b: 46:bf:43:da:29:23:e4:47:50:0f:d9:99:26:ca:16:cd:44:1a: 69:ae:0c:19:4a:4a:45:86:ed:26:21:d3:46:76:d4:93:86:87: 5a:8a:e9:2c:85:29:7f:64:6d:71:81:4a:4f:cf:db:a6:e5:90: 24:44:ed:5a:c6:fd:ed:0f:09:58:eb:0b:9f:3a:52:a3:2c:9a: eb:02:3a:80:b4:9d:16:99:4f:f7:4c:4c:28:35:4f:e9:bd:13: 02:41:c6:3c:5c:1e:2b:60:f0:8d:73:4a:56:d2:87:a2:8b:56: 08:d7:1d:81:80:1c:e2:1c:e6:71:19:9c:80:34:c9:95:5d:45: a0:d8:01:41:5e:22:83:f5:f0:2b:ab:9e:fc:59:56:02:51:db: 0b:f3:0a:c1:d0:53:8e:22:6d:f1:ad:6d:b7:a7:94:06:dd:68: 30:cd:42:dd:8c:e2:2b:cb:4d:52:9e:27:75:fb:a7:ae:60:2d: 8f:94:33:56 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICFn0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyMTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgxMjU5ODY1NEQ5NDk0 N0Y1MTQzNTg1ODlDQzY4MTgxMDYwQTU0MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0Qb/nIHS+4XuhvYQaP109JLSinfrKUPlUxE+5tc/0me+0oEU+ 3PjaLV6AltdP6zX6isxC0jnIvqMhQGt5woZI95atpn9W/XDcMpuvN1XwVkHsLKah /Qii2j05zF9+v4XB5282dbaviIAvAXLp0DRuCjewwGRKQISeb+LDT7Zii4bU1SL9 ug2pMvyu9pXfGF2QLv1cCbJBrFG0uLSH986W4bVJ8pRpfxTcF18dPqrsd2Hn3bsJ l+HuHt6F8paVJMewqqw0lAeenWcOSU1iOjpq/fBm+Y/17emNbDUvbq8ILBB8XW3U 0wksbN15CdqRz6GFZdSV12NkGP1fVkWlB2bZAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUgSWYZU2UlH9RQ1hYnMaBgQYKVAMwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZ1NXWVpVMlVsSDlSUTFoWW5NYUJn UVlLVkFNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANJAMA0G CSqGSIb3DQEBCwUAA4IBAQBshuBM/CyuLArnDLhYsodY1vC514/KA+CWBAA+gQMu simSCGKmLEDAz6J/u9O5dcxiG1/Mc8oz3zLoWT9VlFvuen6J5N8Z3otGv0PaKSPk R1AP2ZkmyhbNRBpprgwZSkpFhu0mIdNGdtSThodaiukshSl/ZG1xgUpPz9um5ZAk RO1axv3tDwlY6wufOlKjLJrrAjqAtJ0WmU/3TEwoNU/pvRMCQcY8XB4rYPCNc0pW 0oeii1YI1x2BgBziHOZxGZyANMmVXUWg2AFBXiKD9fArq578WVYCUdsL8wrB0FOO Im3xrW23p5QG3WgwzULdjOIry01Snid1+6euYC2PlDNW -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:33 2024 by rpki-client on console-ams.rpki-client.org