$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/harjWIbEdn_-_oxe7N3PuEYqwUM.roa File: harjWIbEdn_-_oxe7N3PuEYqwUM.roa (raw, json) Hash identifier: h8+q9d81R9tD7YoOwMGwuPHXEXhBCzFwHaHrCyouRdM= Subject key identifier: 85:AA:E3:58:86:C4:76:7F:FE:FE:8C:5E:EC:DD:CF:B8:46:2A:C1:43 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 133B Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/harjWIbEdn_-_oxe7N3PuEYqwUM.roa Signing time: Fri 01 Sep 2023 09:24:40 +0000 ROA not before: Fri 01 Sep 2023 09:24:40 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 2001:4580::/26 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4923 (0x133b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:40 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=85AAE35886C4767FFEFE8C5EECDDCFB8462AC143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e7:2a:01:86:e7:9b:28:75:6c:c5:b4:47:37: e6:b1:e4:13:c7:d1:4c:f4:69:ad:16:58:6b:41:d1: 4a:3b:75:d2:b7:5f:8b:45:ea:8f:ba:12:aa:e6:39: 23:9b:55:22:12:8d:02:71:9b:11:26:82:4e:76:e3: b9:ce:9a:7b:c9:fd:ce:cf:44:ce:7f:e9:c7:eb:38: 6e:fa:dc:c9:02:a0:26:a1:90:e1:ea:85:b5:76:5e: 7e:39:d2:8f:97:de:cc:dd:52:ce:41:f4:ee:65:f5: 9a:c2:ae:52:3a:53:7c:69:7a:4c:2d:0c:8d:a7:e3: dc:86:40:ee:7a:db:df:9e:a3:53:d6:37:87:e7:7a: 77:f7:b6:e8:66:77:ed:b3:da:7d:3d:0e:23:61:50: 35:c3:c7:0e:d0:21:ee:aa:d1:ba:43:1d:7a:20:f3: 9b:12:a1:16:c6:6b:53:c5:5e:8e:2c:44:ab:3e:89: 55:9c:d5:e8:5f:6f:59:b8:ea:36:92:2c:10:52:11: 7c:a7:43:e8:f1:7d:04:b7:35:1a:34:09:68:3e:ab: c7:47:01:39:69:33:3e:7e:6b:b1:3a:eb:90:fd:6e: 17:22:ab:75:12:10:b9:59:54:6a:c8:26:be:4a:9e: c3:91:01:59:06:02:cf:2a:13:c6:b2:5a:22:36:15: 23:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AA:E3:58:86:C4:76:7F:FE:FE:8C:5E:EC:DD:CF:B8:46:2A:C1:43 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/harjWIbEdn_-_oxe7N3PuEYqwUM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:4580::/26 Signature Algorithm: sha256WithRSAEncryption 48:d2:58:8a:43:22:56:ae:e0:ce:0d:e4:58:d6:fe:ba:69:8b: ef:ce:d5:10:41:d3:01:54:a7:4f:38:09:1b:92:4c:8e:f6:dc: 7f:07:f7:24:37:4f:b3:49:fa:cf:f0:fe:a8:ba:d5:c7:b4:93: 5d:89:f6:b6:a8:2d:3a:c8:81:24:f7:7d:5c:43:65:e0:43:7b: 5a:01:49:ef:3a:51:51:31:55:0f:d3:2f:e4:8d:d1:80:8e:f9: 0c:60:d6:26:2d:e8:66:4f:b6:8c:25:9b:b1:a5:a9:4e:65:4f: 12:fb:d6:70:fd:56:55:cf:b7:74:fb:74:2a:63:68:9e:fe:75: b3:a9:1f:df:b7:fe:a6:c5:9c:5e:4f:60:75:8b:71:cd:70:bc: 57:00:77:b8:fc:ca:18:4e:ca:1d:83:57:f8:c9:05:b3:cd:95: 48:6c:12:c8:a1:cd:63:fe:13:91:fe:fa:f5:91:c9:f3:ec:ad: b0:90:93:e5:35:b6:29:fe:6f:45:34:40:06:57:16:bd:89:fb: 59:78:b0:0a:31:5f:96:87:77:ee:95:55:4d:fe:00:27:8d:9b: 64:a1:4c:fc:75:dd:e2:b4:68:f5:d9:e9:23:18:5a:d3:48:9e: 6e:84:40:5d:d0:10:48:54:69:10:f9:5a:ac:32:73:24:da:49: f0:d5:93:c2 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEzswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg1QUFFMzU4ODZDNDc2 N0ZGRUZFOEM1RUVDRERDRkI4NDYyQUMxNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDh5yoBhuebKHVsxbRHN+ax5BPH0Uz0aa0WWGtB0Uo7ddK3X4tF 6o+6EqrmOSObVSISjQJxmxEmgk5247nOmnvJ/c7PRM5/6cfrOG763MkCoCahkOHq hbV2Xn450o+X3szdUs5B9O5l9ZrCrlI6U3xpekwtDI2n49yGQO5629+eo1PWN4fn enf3tuhmd+2z2n09DiNhUDXDxw7QIe6q0bpDHXog85sSoRbGa1PFXo4sRKs+iVWc 1ehfb1m46jaSLBBSEXynQ+jxfQS3NRo0CWg+q8dHATlpMz5+a7E665D9bhciq3US ELlZVGrIJr5KnsORAVkGAs8qE8ayWiI2FSMnAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUharjWIbEdn/+/oxe7N3PuEYqwUMwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvaGFyaldJYkVkbl8tX294ZTdOM1B1 RVlxd1VNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFBiABRYAw DQYJKoZIhvcNAQELBQADggEBAEjSWIpDIlau4M4N5FjW/rppi+/O1RBB0wFUp084 CRuSTI723H8H9yQ3T7NJ+s/w/qi61ce0k12J9raoLTrIgST3fVxDZeBDe1oBSe86 UVExVQ/TL+SN0YCO+Qxg1iYt6GZPtowlm7GlqU5lTxL71nD9VlXPt3T7dCpjaJ7+ dbOpH9+3/qbFnF5PYHWLcc1wvFcAd7j8yhhOyh2DV/jJBbPNlUhsEsihzWP+E5H+ +vWRyfPsrbCQk+U1tin+b0U0QAZXFr2J+1l4sAoxX5aHd+6VVU3+ACeNm2ShTPx1 3eK0aPXZ6SMYWtNInm6EQF3QEEhUaRD5WqwycyTaSfDVk8I= -----END CERTIFICATE-----Generated at Sun Jun 2 09:37:18 2024 by rpki-client on console-ams.rpki-client.org