$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/t1DywcujBAu1qRErfWFV458ksDQ.roa File: t1DywcujBAu1qRErfWFV458ksDQ.roa (raw, json) Hash identifier: 0vQmzVDmUI2W/dfWijtnCehj/1mrReBtpDe/hN5UuvU= Subject key identifier: B7:50:F2:C1:CB:A3:04:0B:B5:A9:11:2B:7D:61:55:E3:9F:24:B0:34 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 16C6 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/t1DywcujBAu1qRErfWFV458ksDQ.roa Signing time: Mon 26 Aug 2024 05:22:36 +0000 ROA not before: Mon 26 Aug 2024 05:22:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131602 IP address blocks: 123.205.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5830 (0x16c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:36 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B750F2C1CBA3040BB5A9112B7D6155E39F24B034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:33:5f:3b:d7:19:36:3c:6e:5d:40:01:a3:80: d4:90:e2:b5:1a:a1:c3:c8:2c:aa:ba:10:78:39:03: e2:b0:a4:8b:a8:8e:59:4b:f1:10:1a:7a:0d:ea:89: 7d:db:0f:fc:1f:88:6a:bd:5f:11:59:ba:87:7a:9e: 18:49:3d:28:98:1d:81:dc:b5:b7:83:7b:e6:89:dc: 8f:61:3e:6f:5e:34:bc:94:26:ff:79:8b:94:35:c1: ba:31:ee:e2:13:18:94:27:de:bf:21:04:28:26:18: 8d:94:82:17:42:a7:74:36:f5:5a:89:6c:4d:48:96: ff:40:e1:40:60:18:36:fb:23:0e:45:97:60:77:6b: 8f:0f:92:0f:c8:5f:85:11:56:2a:a1:b6:c0:97:d0: 30:30:e1:4b:05:58:21:1e:aa:83:83:04:e2:ad:e4: 42:5f:72:6f:b6:54:6f:ee:45:58:22:f5:0e:92:1e: 56:3e:04:1a:23:5f:0a:a3:fc:86:cf:60:c1:8b:f9: 04:ed:1f:6e:01:20:ba:79:6f:1f:76:9f:fd:f8:a9: 3e:b8:6a:b4:92:94:75:f3:b4:03:ab:34:a3:09:49: 7e:4a:9c:5e:8e:ee:ca:34:bc:d6:56:09:8c:16:1d: d8:9f:18:99:12:58:1e:6e:2d:e0:77:40:7c:54:d3: 13:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:50:F2:C1:CB:A3:04:0B:B5:A9:11:2B:7D:61:55:E3:9F:24:B0:34 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/t1DywcujBAu1qRErfWFV458ksDQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.205.128.0/20 Signature Algorithm: sha256WithRSAEncryption 7f:7e:e7:47:8b:21:d8:a0:29:2d:e4:3a:14:92:2b:cc:67:9a: 2f:6d:bb:0e:20:ef:e1:5e:33:58:b6:c5:e0:da:68:95:43:1c: a6:b5:70:bd:4f:a4:e3:42:d0:99:cd:03:04:36:2b:3f:90:10: 39:12:7c:ab:94:16:08:c7:36:28:68:87:4d:b2:fb:91:cb:68: 58:53:64:34:15:10:7e:ea:c8:89:4f:98:10:21:5c:70:d4:c0: 33:b8:2c:c7:3b:c3:97:5b:c3:6d:24:c1:32:3e:75:f6:6a:58: 3b:94:23:d2:25:de:6c:45:28:aa:e6:23:a4:d0:66:85:15:a6: b9:d2:60:a6:f6:2e:eb:72:f7:54:17:55:37:3d:0a:03:dc:33: e4:fd:d7:f9:d6:9f:6d:9d:7a:af:4e:d4:70:d1:28:3a:7d:ca: f3:97:65:1e:04:9c:24:10:b3:05:02:27:0c:9b:2c:88:e4:9c: 20:74:ab:ac:51:9a:a2:ce:4f:6d:21:9e:0b:22:fd:1f:f7:3e: 08:58:39:a1:c5:71:09:3b:2f:db:cf:33:68:6d:1f:0a:eb:d3: b6:45:75:59:64:14:2e:30:67:c8:50:cd:12:45:ce:02:54:93: 18:a2:b9:b1:99:3d:a7:13:b5:13:6e:e8:90:ec:b5:0e:1d:98: 17:93:eb:25 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFsYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyMzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI3NTBGMkMxQ0JBMzA0 MEJCNUE5MTEyQjdENjE1NUUzOUYyNEIwMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2M1871xk2PG5dQAGjgNSQ4rUaocPILKq6EHg5A+KwpIuojllL 8RAaeg3qiX3bD/wfiGq9XxFZuod6nhhJPSiYHYHctbeDe+aJ3I9hPm9eNLyUJv95 i5Q1wbox7uITGJQn3r8hBCgmGI2UghdCp3Q29VqJbE1Ilv9A4UBgGDb7Iw5Fl2B3 a48Pkg/IX4URViqhtsCX0DAw4UsFWCEeqoODBOKt5EJfcm+2VG/uRVgi9Q6SHlY+ BBojXwqj/IbPYMGL+QTtH24BILp5bx92n/34qT64arSSlHXztAOrNKMJSX5KnF6O 7so0vNZWCYwWHdifGJkSWB5uLeB3QHxU0xMVAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUt1DywcujBAu1qRErfWFV458ksDQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvdDFEeXdjdWpCQXUxcVJFcmZXRlY0 NThrc0RRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHvNgDAN BgkqhkiG9w0BAQsFAAOCAQEAf37nR4sh2KApLeQ6FJIrzGeaL227DiDv4V4zWLbF 4NpolUMcprVwvU+k40LQmc0DBDYrP5AQORJ8q5QWCMc2KGiHTbL7kctoWFNkNBUQ furIiU+YECFccNTAM7gsxzvDl1vDbSTBMj519mpYO5Qj0iXebEUoquYjpNBmhRWm udJgpvYu63L3VBdVNz0KA9wz5P3X+dafbZ16r07UcNEoOn3K85dlHgScJBCzBQIn DJssiOScIHSrrFGaos5PbSGeCyL9H/c+CFg5ocVxCTsv288zaG0fCuvTtkV1WWQU LjBnyFDNEkXOAlSTGKK5sZk9pxO1E27okOy1Dh2YF5PrJQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:34 2024 by rpki-client on console-ams.rpki-client.org