$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/jPHRhfgr_XzCHWHK9WZn2ip63uk.roa File: jPHRhfgr_XzCHWHK9WZn2ip63uk.roa (raw, json) Hash identifier: +SYtEZcdFXeYt20RIpyXoNpcbaHqHA9n2mbumodUvW0= Subject key identifier: 8C:F1:D1:85:F8:2B:FD:7C:C2:1D:61:CA:F5:66:67:DA:2A:7A:DE:E9 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 164A Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/jPHRhfgr_XzCHWHK9WZn2ip63uk.roa Signing time: Mon 26 Aug 2024 05:22:00 +0000 ROA not before: Mon 26 Aug 2024 05:22:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131602 IP address blocks: 106.105.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5706 (0x164a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:00 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8CF1D185F82BFD7CC21D61CAF56667DA2A7ADEE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:44:1f:f3:f9:4e:1a:9f:24:b4:8b:65:8f:04: 56:f9:8d:b2:db:ee:22:88:05:01:5a:e6:c1:a1:66: 1c:d1:15:ec:25:d4:98:25:92:89:5a:6d:3b:6a:63: 1c:a2:0f:0f:d7:f6:80:05:52:69:76:06:e2:60:af: d7:e2:31:45:a6:2d:52:82:60:6d:10:50:af:cc:27: a2:e6:64:cd:51:43:a5:30:0a:34:1f:8e:81:1a:f1: ae:2c:55:ab:9a:5c:01:fe:a2:60:f2:e9:ad:9e:13: ff:77:e5:6a:71:64:4c:f1:74:0e:f9:5f:17:0f:07: 88:b0:24:25:1e:9d:17:2a:8e:3f:c1:a7:73:43:7a: 1e:27:63:c6:60:96:a5:fa:1a:4b:2c:6e:e8:0f:e0: 46:d4:c7:10:fd:5a:c4:9f:c8:d1:8d:30:93:fa:76: 61:3f:0f:dc:ec:1c:37:e5:67:51:cf:3d:2a:d6:84: 13:18:74:11:36:f1:b0:3b:59:42:0f:8a:de:1b:57: 41:3f:de:35:a1:b7:04:14:c4:9e:c6:e8:64:c5:45: 83:62:5e:ce:4b:45:6d:55:31:e2:34:31:10:25:d7: 37:39:56:08:54:14:7e:7f:b2:06:28:e7:0f:32:af: 36:e5:2c:5d:1a:89:fb:14:65:d2:cb:7c:6b:32:21: e2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F1:D1:85:F8:2B:FD:7C:C2:1D:61:CA:F5:66:67:DA:2A:7A:DE:E9 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/jPHRhfgr_XzCHWHK9WZn2ip63uk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.111.0/24 Signature Algorithm: sha256WithRSAEncryption 90:36:bd:c5:df:d7:c3:fe:ff:45:1b:a0:70:24:7d:b9:fa:ca: dc:0b:0a:d8:7c:ad:36:eb:a5:7d:0a:37:18:a9:cd:d7:aa:94: 5c:b3:1f:cd:92:ec:d9:56:31:75:f2:48:94:7b:fa:62:31:09: 59:a0:62:d8:6a:ce:c7:e7:b6:4f:36:56:43:d3:bd:01:46:2b: b9:3a:dd:af:9e:72:49:97:4c:91:ea:57:dc:6c:ee:b4:d9:80: 65:a6:d8:41:49:3c:1d:5e:0f:3d:4a:21:71:50:c8:60:69:3a: 56:76:9c:38:b4:8b:69:4e:6d:ad:ce:14:53:b4:b7:4d:9c:6d: 70:bb:94:5f:08:d7:be:7b:7e:8a:8c:7b:fe:8c:96:1d:ac:1a: f7:d6:05:14:e5:8a:1a:65:7d:92:db:3f:01:ce:a1:63:a0:d8: c6:2c:a3:06:9d:ac:b4:33:f7:75:ce:68:a4:ac:8e:95:b7:0a: 04:fa:30:82:7b:ec:ce:df:dc:e4:97:52:2e:39:10:56:cc:75: 5a:bd:53:d7:fa:08:01:71:90:41:73:27:3a:07:32:73:5a:86: 6b:2c:12:c6:fc:ff:4e:d9:5a:ee:a5:91:d5:be:4d:b6:b6:5a: 14:4c:9a:28:24:4b:61:33:19:bc:2a:b7:18:9b:a6:7e:b9:a9: 0a:03:ed:5c -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFkowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyMDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhDRjFEMTg1RjgyQkZE N0NDMjFENjFDQUY1NjY2N0RBMkE3QURFRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQRB/z+U4anyS0i2WPBFb5jbLb7iKIBQFa5sGhZhzRFewl1Jgl kolabTtqYxyiDw/X9oAFUml2BuJgr9fiMUWmLVKCYG0QUK/MJ6LmZM1RQ6UwCjQf joEa8a4sVauaXAH+omDy6a2eE/935WpxZEzxdA75XxcPB4iwJCUenRcqjj/Bp3ND eh4nY8ZglqX6GkssbugP4EbUxxD9WsSfyNGNMJP6dmE/D9zsHDflZ1HPPSrWhBMY dBE28bA7WUIPit4bV0E/3jWhtwQUxJ7G6GTFRYNiXs5LRW1VMeI0MRAl1zc5VghU FH5/sgYo5w8yrzblLF0aifsUZdLLfGsyIeJPAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUjPHRhfgr/XzCHWHK9WZn2ip63ukwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvalBIUmhmZ3JfWHpDSFdISzlXWm4y aXA2M3VrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGppbzAN BgkqhkiG9w0BAQsFAAOCAQEAkDa9xd/Xw/7/RRugcCR9ufrK3AsK2HytNuulfQo3 GKnN16qUXLMfzZLs2VYxdfJIlHv6YjEJWaBi2GrOx+e2TzZWQ9O9AUYruTrdr55y SZdMkepX3GzutNmAZabYQUk8HV4PPUohcVDIYGk6VnacOLSLaU5trc4UU7S3TZxt cLuUXwjXvnt+iox7/oyWHawa99YFFOWKGmV9kts/Ac6hY6DYxiyjBp2stDP3dc5o pKyOlbcKBPowgnvszt/c5JdSLjkQVsx1Wr1T1/oIAXGQQXMnOgcyc1qGaywSxvz/ Ttla7qWR1b5NtrZaFEyaKCRLYTMZvCq3GJumfrmpCgPtXA== -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:31 2024 by rpki-client on console-fra.rpki-client.org