$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/o-jtkVRpiNOjGZvm__7GG3MpPrI.roa File: o-jtkVRpiNOjGZvm__7GG3MpPrI.roa (raw, json) Hash identifier: 8SoVE34XEvC8bRRoufDgpwmEXgqek9x8Bt/wQ3jX/N0= Subject key identifier: A3:E8:ED:91:54:69:88:D3:A3:19:9B:E6:FF:FE:C6:1B:73:29:3E:B2 Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 0ECF Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/o-jtkVRpiNOjGZvm__7GG3MpPrI.roa Signing time: Mon 26 Aug 2024 05:21:36 +0000 ROA not before: Mon 26 Aug 2024 05:21:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 192.72.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 23:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3791 (0xecf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Aug 26 05:21:36 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A3E8ED91546988D3A3199BE6FFFEC61B73293EB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d1:d6:40:0a:e0:03:83:9a:1f:94:38:84:0b: dd:42:a2:9c:b4:19:ba:1d:65:3b:4c:05:8a:5e:09: a1:e3:5d:a4:9e:17:c9:f5:e9:2b:32:ad:b0:8a:d2: ff:51:1f:22:98:e4:f2:f4:b6:72:4f:3b:40:b7:c8: fb:73:94:93:f4:66:59:70:38:eb:61:72:5c:54:33: 92:3d:82:b1:d0:15:d8:e2:c1:52:de:d6:91:28:c1: 63:b4:e8:09:d6:c0:21:22:47:60:53:99:c0:76:21: 3e:06:6c:75:94:e0:5d:39:48:90:55:94:ed:9c:e9: b1:39:93:6b:d4:00:15:42:e3:56:75:89:02:c7:48: a8:0c:1a:91:09:50:b9:c9:09:d4:cd:85:95:8a:ab: 2f:0c:fc:a1:ed:6e:70:19:49:7c:0a:4c:c0:1c:e9: 1e:a4:6d:52:57:e7:d6:fb:d8:cf:da:2b:fc:00:20: bd:f0:8c:09:5a:db:47:b5:59:2b:2c:42:18:fb:ba: ce:a6:3f:88:0a:56:80:e4:3e:77:ef:8c:cf:1b:b4: 1d:27:11:4e:e5:21:da:65:7b:6b:9c:5a:75:87:d4: 03:57:f5:0b:48:ac:72:43:98:03:a0:a3:ea:fd:db: 69:c2:66:64:01:fe:df:3d:7f:f9:74:76:73:51:39: d4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E8:ED:91:54:69:88:D3:A3:19:9B:E6:FF:FE:C6:1B:73:29:3E:B2 X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/o-jtkVRpiNOjGZvm__7GG3MpPrI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.64.0/18 Signature Algorithm: sha256WithRSAEncryption 94:99:fb:70:14:62:b9:bb:b7:a6:81:e2:8f:f9:5d:de:20:7b: 27:38:13:4b:9d:34:a4:83:31:55:1b:ad:67:4f:16:03:69:3a: 23:1f:e7:e4:ec:64:c9:e0:0e:79:5e:16:54:20:4f:82:41:de: 45:ac:33:67:b5:48:2f:2c:45:7c:58:08:8f:f7:82:f9:f8:b8: 08:95:64:05:a9:29:90:5a:86:d4:2c:86:7f:7b:50:79:38:11: cf:e4:97:16:49:d1:b0:fd:87:2c:6b:b0:39:19:a9:40:4d:39: a2:0c:69:7b:94:f5:f8:b0:16:a1:4c:4c:5a:c6:c0:cf:d5:de: dc:f7:a1:cf:99:60:ed:89:a4:ac:70:33:23:0f:33:a3:4c:44: a9:46:53:9e:89:66:37:81:69:a3:92:a9:ba:fe:a6:23:2f:44: 2a:97:39:21:ee:70:68:d5:75:bf:f2:69:26:0a:af:07:53:66: 37:3d:d0:5a:87:81:f2:b5:1f:50:ad:57:3a:cc:b3:da:0b:e4: 20:84:4e:ad:78:f2:57:f2:ae:b2:80:a9:45:10:d3:b5:89:4b: 12:00:d5:6d:ed:2e:ce:58:be:6d:07:20:dd:52:ae:76:68:aa: f2:b5:fd:0d:8a:b3:94:bd:e1:38:35:38:41:2c:f5:cd:62:b7: 4a:bd:39:5a -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDs8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNDA4MjYw NTIxMzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEzRThFRDkxNTQ2OTg4 RDNBMzE5OUJFNkZGRkVDNjFCNzMyOTNFQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZ0dZACuADg5oflDiEC91Copy0GbodZTtMBYpeCaHjXaSeF8n1 6SsyrbCK0v9RHyKY5PL0tnJPO0C3yPtzlJP0ZllwOOthclxUM5I9grHQFdjiwVLe 1pEowWO06AnWwCEiR2BTmcB2IT4GbHWU4F05SJBVlO2c6bE5k2vUABVC41Z1iQLH SKgMGpEJULnJCdTNhZWKqy8M/KHtbnAZSXwKTMAc6R6kbVJX59b72M/aK/wAIL3w jAla20e1WSssQhj7us6mP4gKVoDkPnfvjM8btB0nEU7lIdple2ucWnWH1ANX9QtI rHJDmAOgo+r922nCZmQB/t89f/l0dnNROdSJAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUo+jtkVRpiNOjGZvm//7GG3MpPrIwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvby1qdGtWUnBpTk9qR1p2bV9fN0dH M01wUHJJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBsBIQDAN BgkqhkiG9w0BAQsFAAOCAQEAlJn7cBRiubu3poHij/ld3iB7JzgTS500pIMxVRut Z08WA2k6Ix/n5OxkyeAOeV4WVCBPgkHeRawzZ7VILyxFfFgIj/eC+fi4CJVkBakp kFqG1CyGf3tQeTgRz+SXFknRsP2HLGuwORmpQE05ogxpe5T1+LAWoUxMWsbAz9Xe 3Pehz5lg7YmkrHAzIw8zo0xEqUZTnolmN4Fpo5Kpuv6mIy9EKpc5Ie5waNV1v/Jp JgqvB1NmNz3QWoeB8rUfUK1XOsyz2gvkIIROrXjyV/KusoCpRRDTtYlLEgDVbe0u zli+bQcg3VKudmiq8rX9DYqzlL3hODU4QSz1zWK3Sr05Wg== -----END CERTIFICATE-----Generated at Fri Nov 22 20:34:43 2024 by rpki-client on console-ams.rpki-client.org