$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/pKaIwYmYmSr5XLiPqSzczvm9g7s.roa File: pKaIwYmYmSr5XLiPqSzczvm9g7s.roa (raw, json) Hash identifier: At6jLqq+X+Io/beaWxA9XV5Ruz801GxMJNlyPnLh1qg= Subject key identifier: A4:A6:88:C1:89:98:99:2A:F9:5C:B8:8F:A9:2C:DC:CE:F9:BD:83:BB Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 16BE Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pKaIwYmYmSr5XLiPqSzczvm9g7s.roa Signing time: Mon 26 Aug 2024 05:22:34 +0000 ROA not before: Mon 26 Aug 2024 05:22:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 59.104.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5822 (0x16be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:34 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A4A688C18998992AF95CB88FA92CDCCEF9BD83BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:73:3f:e2:36:b3:89:2c:af:aa:df:0d:e8:e0: 98:22:c0:92:b9:86:51:20:0f:d8:40:b4:30:23:79: 91:53:7d:cc:dd:d2:bd:db:de:15:58:53:64:fb:fc: 62:1e:ef:9d:ea:a3:5c:08:bc:8b:aa:fa:e7:40:40: a9:8d:33:9b:f6:64:91:d6:fa:74:da:41:b2:cd:b8: 6d:b0:c0:41:3f:f2:f6:b4:e3:47:db:f4:58:14:39: 37:12:f5:94:0f:1f:c5:7e:a7:98:4c:69:37:75:8c: 85:ad:56:9c:3c:a3:1c:2e:9a:10:89:39:97:3a:fb: 0e:f0:8e:ad:a7:86:e1:04:dd:e3:32:e2:d9:f4:aa: 5b:8f:98:fc:77:2f:73:f4:fb:b9:7c:3c:2a:55:b2: 9a:6e:a6:31:5f:93:38:7f:1b:60:5f:62:ec:90:ae: 89:98:ad:66:cc:60:90:0a:e8:63:35:f2:95:9e:ed: d1:60:0d:ac:54:ec:98:2f:d6:ec:72:7b:8d:54:c5: 0e:75:6a:4e:ba:3d:39:48:7c:45:16:9a:f1:34:1c: 20:ab:1f:c8:f1:b5:d6:7a:97:1a:6b:0b:86:1b:4e: 9a:3e:1f:db:66:41:15:f5:50:cd:4e:8f:b2:5e:71: 12:99:89:cd:31:35:fa:da:b8:07:df:ad:05:b1:77: 22:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A6:88:C1:89:98:99:2A:F9:5C:B8:8F:A9:2C:DC:CE:F9:BD:83:BB X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pKaIwYmYmSr5XLiPqSzczvm9g7s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 59.104.0.0/15 Signature Algorithm: sha256WithRSAEncryption 1e:43:5b:dd:55:91:1e:b8:f2:c9:ab:65:05:c7:77:8e:d0:a0: 8c:11:d0:14:05:c0:84:b4:0d:a3:e7:c0:59:53:5f:b0:f6:be: 29:d5:70:c2:23:fd:55:ef:df:7d:ee:db:91:55:a1:a2:02:15: 14:de:ed:8c:bb:3d:83:69:d3:d8:15:af:35:bc:a6:f5:5f:18: 94:be:bc:19:27:0d:9d:24:db:0c:db:46:39:4a:51:94:f9:73: 63:6b:4d:2e:c1:06:ad:0e:a0:cc:80:44:b3:a8:66:bd:9f:0c: d8:7e:b2:02:63:a7:c5:f7:e2:f7:21:bb:76:e0:e5:02:2a:a7: 70:31:d3:09:ba:54:78:7f:e6:04:27:68:75:50:a2:67:a7:17: 93:60:0e:17:ac:e9:7d:f8:3f:52:fa:8c:a4:93:32:2f:3c:90: cb:22:1c:70:e1:fc:e5:f6:65:0d:e9:b1:7f:9f:51:d6:01:4a: 0f:68:1c:06:1b:62:03:30:e4:d5:6f:17:55:d9:fe:8e:8e:e9: 83:63:91:ed:0e:ca:e4:9e:a2:fb:e5:50:bf:3b:ed:97:3b:6d: 0b:26:ce:71:f4:c7:5b:e2:2a:e0:78:63:ec:6b:ea:57:84:c0: e0:c4:eb:43:24:91:97:cd:89:8d:74:0d:75:4d:b0:84:9a:23: ba:dc:69:b9 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICFr4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyMzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE0QTY4OEMxODk5ODk5 MkFGOTVDQjg4RkE5MkNEQ0NFRjlCRDgzQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKcz/iNrOJLK+q3w3o4JgiwJK5hlEgD9hAtDAjeZFTfczd0r3b 3hVYU2T7/GIe753qo1wIvIuq+udAQKmNM5v2ZJHW+nTaQbLNuG2wwEE/8va040fb 9FgUOTcS9ZQPH8V+p5hMaTd1jIWtVpw8oxwumhCJOZc6+w7wjq2nhuEE3eMy4tn0 qluPmPx3L3P0+7l8PCpVsppupjFfkzh/G2BfYuyQromYrWbMYJAK6GM18pWe7dFg DaxU7Jgv1uxye41UxQ51ak66PTlIfEUWmvE0HCCrH8jxtdZ6lxprC4YbTpo+H9tm QRX1UM1Oj7JecRKZic0xNfrauAffrQWxdyKRAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUpKaIwYmYmSr5XLiPqSzczvm9g7swHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvcEthSXdZbVltU3I1WExpUHFTemN6 dm05ZzdzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATtoMA0G CSqGSIb3DQEBCwUAA4IBAQAeQ1vdVZEeuPLJq2UFx3eO0KCMEdAUBcCEtA2j58BZ U1+w9r4p1XDCI/1V79997tuRVaGiAhUU3u2Muz2DadPYFa81vKb1XxiUvrwZJw2d JNsM20Y5SlGU+XNja00uwQatDqDMgESzqGa9nwzYfrICY6fF9+L3Ibt24OUCKqdw MdMJulR4f+YEJ2h1UKJnpxeTYA4XrOl9+D9S+oykkzIvPJDLIhxw4fzl9mUN6bF/ n1HWAUoPaBwGG2IDMOTVbxdV2f6OjumDY5HtDsrknqL75VC/O+2XO20LJs5x9Mdb 4irgeGPsa+pXhMDgxOtDJJGXzYmNdA11TbCEmiO63Gm5 -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:12 2024 by rpki-client on console-fra.rpki-client.org