$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/goTg-EIumrHgBtwlV4SnvoqMQoU.roa File: goTg-EIumrHgBtwlV4SnvoqMQoU.roa (raw, json) Hash identifier: MSU3twb2kiPtEqngPNjDw+A5SzpABC0suokOiQdYITE= Subject key identifier: 82:84:E0:F8:42:2E:9A:B1:E0:06:DC:25:57:84:A7:BE:8A:8C:42:85 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1370 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/goTg-EIumrHgBtwlV4SnvoqMQoU.roa Signing time: Fri 01 Sep 2023 09:24:56 +0000 ROA not before: Fri 01 Sep 2023 09:24:56 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 218.210.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4976 (0x1370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:56 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8284E0F8422E9AB1E006DC255784A7BE8A8C4285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f4:da:e8:65:59:fd:91:b0:47:b3:82:4f:f7: e3:15:94:c0:c1:72:22:bb:78:d4:f3:c7:f4:b8:9f: 76:88:ab:a2:6c:e0:0d:ac:e4:43:a5:36:e9:dc:cc: d2:b3:50:e6:0d:8d:aa:86:4b:15:f9:3c:f4:05:18: 5a:93:fb:87:ce:e8:b6:92:75:db:a1:cd:b5:4c:dc: f1:8d:2c:33:ba:dd:f7:49:4c:5b:23:aa:44:ef:f2: c3:62:3b:6b:1d:2e:c1:07:9d:ee:98:63:2f:e3:a9: e8:ed:ab:50:ad:4b:ef:3a:8e:6c:5d:e5:4a:ea:86: 78:45:f7:0f:f0:18:75:53:de:71:c6:bf:3d:ef:2c: 88:57:27:31:fd:dd:02:b8:a5:44:1f:6c:4c:e1:9e: 5c:3a:5a:4e:f2:3c:f0:e2:b8:d7:53:c7:9d:d6:10: c2:bd:dd:ab:3e:de:8b:96:29:3c:6f:f1:a6:45:9b: 87:6f:03:bc:df:23:d5:69:7b:9a:9c:29:c9:e8:b6: 6e:21:28:7d:51:54:dc:77:ba:e1:fa:f5:5d:bd:d4: d2:5f:d9:b5:55:2d:a1:77:5a:1c:11:6f:46:21:ba: e0:a1:90:91:f8:3e:87:ca:6d:bd:44:33:7c:3c:c4: 14:45:95:8d:aa:aa:f2:a8:c3:0f:47:e9:02:65:ed: 80:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:84:E0:F8:42:2E:9A:B1:E0:06:DC:25:57:84:A7:BE:8A:8C:42:85 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/goTg-EIumrHgBtwlV4SnvoqMQoU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.210.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5a:bb:0a:53:72:6b:dc:e8:cf:1c:dc:94:71:ba:52:19:21:c7: 77:f8:f2:ec:a8:48:46:f9:16:51:2b:bc:2c:76:d8:88:8c:6f: a6:36:9e:1b:e6:fd:49:5a:dc:1b:9a:e5:99:9b:2b:bb:a3:ee: 01:02:62:24:85:6f:a0:b6:17:8f:26:9e:ff:23:48:4d:c2:03: 10:32:9a:14:6f:52:1a:a4:60:01:16:e1:69:08:03:97:36:96: b7:a7:83:52:36:f4:86:67:08:af:00:78:9a:d3:f4:33:1c:27: f9:29:e0:f0:c0:17:b9:b7:65:e4:9a:49:19:fe:d9:99:70:bc: 5e:a3:66:b1:5b:20:34:13:dd:df:8a:36:b4:2f:0f:06:fc:35: df:02:65:21:b8:e4:2d:f5:34:bc:a2:f9:e4:d6:6d:df:28:b0: e9:7b:ae:bd:d4:c0:7d:ca:12:69:19:04:8a:45:68:f0:02:cd: d9:26:f8:36:47:7a:08:e8:99:d3:10:1d:37:e7:f1:a3:ca:6b: a7:24:bb:e0:4a:fd:35:3d:ed:c3:ef:d7:1b:f6:c7:05:0e:b1: 10:43:67:44:6f:24:41:f6:6b:83:fb:3b:56:05:77:da:3c:83: 0b:9b:2d:cd:c7:61:2f:c1:1f:67:1a:31:2d:30:3b:d4:56:69: 38:44:c5:10 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICE3AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDgyODRFMEY4NDIyRTlB QjFFMDA2REMyNTU3ODRBN0JFOEE4QzQyODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDx9NroZVn9kbBHs4JP9+MVlMDBciK7eNTzx/S4n3aIq6Js4A2s 5EOlNunczNKzUOYNjaqGSxX5PPQFGFqT+4fO6LaSdduhzbVM3PGNLDO63fdJTFsj qkTv8sNiO2sdLsEHne6YYy/jqejtq1CtS+86jmxd5UrqhnhF9w/wGHVT3nHGvz3v LIhXJzH93QK4pUQfbEzhnlw6Wk7yPPDiuNdTx53WEMK93as+3ouWKTxv8aZFm4dv A7zfI9Vpe5qcKcnotm4hKH1RVNx3uuH69V291NJf2bVVLaF3WhwRb0YhuuChkJH4 PofKbb1EM3w8xBRFlY2qqvKoww9H6QJl7YAfAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUgoTg+EIumrHgBtwlV4SnvoqMQoUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZ29UZy1FSXVtckhnQnR3bFY0U252 b3FNUW9VLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANrSMA0G CSqGSIb3DQEBCwUAA4IBAQBauwpTcmvc6M8c3JRxulIZIcd3+PLsqEhG+RZRK7ws dtiIjG+mNp4b5v1JWtwbmuWZmyu7o+4BAmIkhW+gthePJp7/I0hNwgMQMpoUb1Ia pGABFuFpCAOXNpa3p4NSNvSGZwivAHia0/QzHCf5KeDwwBe5t2XkmkkZ/tmZcLxe o2axWyA0E93fija0Lw8G/DXfAmUhuOQt9TS8ovnk1m3fKLDpe6691MB9yhJpGQSK RWjwAs3ZJvg2R3oI6JnTEB035/GjymunJLvgSv01Pe3D79cb9scFDrEQQ2dEbyRB 9muD+ztWBXfaPIMLmy3Nx2EvwR9nGjEtMDvUVmk4RMUQ -----END CERTIFICATE-----Generated at Sun Jun 2 07:14:23 2024 by rpki-client on console-fra.rpki-client.org