$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/xPkM08uwpaRbOL9jixmQWPtnr6o.roa File: xPkM08uwpaRbOL9jixmQWPtnr6o.roa (raw, json) Hash identifier: gKVF2NDhpdOScvDFvprr+982J2KOLnHPB0z98GRh7kA= Subject key identifier: C4:F9:0C:D3:CB:B0:A5:A4:5B:38:BF:63:8B:19:90:58:FB:67:AF:AA Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 164B Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/xPkM08uwpaRbOL9jixmQWPtnr6o.roa Signing time: Mon 26 Aug 2024 05:22:01 +0000 ROA not before: Mon 26 Aug 2024 05:22:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131602 IP address blocks: 123.205.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5707 (0x164b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:01 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C4F90CD3CBB0A5A45B38BF638B199058FB67AFAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:85:a4:4a:de:01:12:16:ef:99:98:e3:3c:6c: c7:45:c5:f8:a3:d8:3d:6b:91:7c:a5:ef:3c:8f:5e: 81:eb:72:85:95:7c:6d:e9:89:4a:99:44:10:01:16: 09:15:46:5d:88:82:1e:8a:c4:c1:f6:5b:a5:ec:b2: c1:86:85:07:aa:37:90:b4:3e:71:18:bd:85:e6:e5: b5:51:f0:97:6b:8d:e8:b5:c5:c2:89:68:27:e9:5a: 60:17:ff:0f:b6:4c:aa:f8:39:23:15:25:20:3b:c2: 76:eb:46:bb:56:37:e3:aa:72:a7:10:8c:ef:c8:b4: 6d:04:5e:bd:84:89:d0:76:58:3a:48:3a:fe:b7:dc: 42:27:b4:81:36:0b:fe:c8:37:c3:52:69:71:15:bd: 70:62:24:61:57:ac:cd:90:57:57:4f:ef:43:28:d9: 19:30:8c:32:ab:ce:df:d5:82:94:c0:21:0e:bf:eb: c8:13:0a:e4:3c:1d:59:bc:b1:c2:ce:6b:84:17:1a: 59:a5:98:1e:4f:20:7c:ec:44:18:65:fa:65:1c:45: af:74:6f:08:f2:59:19:e7:e8:80:83:23:c6:12:da: 23:7d:63:70:28:f2:b3:1d:91:4e:56:4e:8f:9a:3e: b5:32:0d:8b:f1:74:51:b3:b6:20:d4:b6:71:46:cf: c5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F9:0C:D3:CB:B0:A5:A4:5B:38:BF:63:8B:19:90:58:FB:67:AF:AA X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/xPkM08uwpaRbOL9jixmQWPtnr6o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.205.160.0/20 Signature Algorithm: sha256WithRSAEncryption c9:e0:fd:25:73:b4:8f:4e:da:4a:12:ef:44:ed:7b:e6:e5:a3: 51:13:66:71:b5:dd:13:a6:82:82:bd:04:3e:98:f4:ae:6f:d1: a9:53:af:b1:38:69:9b:d2:4f:15:78:81:38:7b:a7:ad:06:dd: e2:60:8b:28:95:10:83:07:9c:29:1d:9f:9d:b3:f8:35:c1:95: 61:f0:11:82:0b:2a:d5:75:9d:ac:bd:13:13:95:53:7e:59:5c: 32:25:b1:e8:5e:19:da:c9:d6:b6:ad:72:27:78:3e:26:26:ed: 71:c1:f9:6a:1e:b3:ec:5e:09:b1:a9:73:31:04:63:33:a0:a8: a5:d1:31:8c:ac:a9:06:35:dc:78:84:a8:57:25:a3:f4:16:1c: 83:1b:f1:2a:4e:98:51:dc:ad:d4:9a:5e:da:00:a6:5c:00:6e: 02:66:cc:b0:19:7a:4d:96:b9:c2:78:8f:14:f6:b5:2f:41:56: 96:19:54:6a:2a:05:4c:43:95:ef:3b:e3:8b:24:8d:cf:6d:11: 59:6b:fc:77:df:2a:75:63:14:ad:d8:c4:d8:e9:99:d7:c6:5a: 4b:74:de:64:0e:b8:d1:d9:bf:f5:21:3e:74:f3:b0:43:d2:92: ce:bb:16:80:5b:4b:58:b2:79:3a:7b:72:26:33:9f:8e:8c:b7: 3c:99:ed:31 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFkswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyMDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM0RjkwQ0QzQ0JCMEE1 QTQ1QjM4QkY2MzhCMTk5MDU4RkI2N0FGQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxhaRK3gESFu+ZmOM8bMdFxfij2D1rkXyl7zyPXoHrcoWVfG3p iUqZRBABFgkVRl2Igh6KxMH2W6XsssGGhQeqN5C0PnEYvYXm5bVR8Jdrjei1xcKJ aCfpWmAX/w+2TKr4OSMVJSA7wnbrRrtWN+OqcqcQjO/ItG0EXr2EidB2WDpIOv63 3EIntIE2C/7IN8NSaXEVvXBiJGFXrM2QV1dP70Mo2RkwjDKrzt/VgpTAIQ6/68gT CuQ8HVm8scLOa4QXGlmlmB5PIHzsRBhl+mUcRa90bwjyWRnn6ICDI8YS2iN9Y3Ao 8rMdkU5WTo+aPrUyDYvxdFGztiDUtnFGz8UZAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUxPkM08uwpaRbOL9jixmQWPtnr6owHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMveFBrTTA4dXdwYVJiT0w5aml4bVFX UHRucjZvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHvNoDAN BgkqhkiG9w0BAQsFAAOCAQEAyeD9JXO0j07aShLvRO175uWjURNmcbXdE6aCgr0E Ppj0rm/RqVOvsThpm9JPFXiBOHunrQbd4mCLKJUQgwecKR2fnbP4NcGVYfARggsq 1XWdrL0TE5VTfllcMiWx6F4Z2snWtq1yJ3g+JibtccH5ah6z7F4JsalzMQRjM6Co pdExjKypBjXceISoVyWj9BYcgxvxKk6YUdyt1Jpe2gCmXABuAmbMsBl6TZa5wniP FPa1L0FWlhlUaioFTEOV7zvjiySNz20RWWv8d98qdWMUrdjE2OmZ18ZaS3TeZA64 0dm/9SE+dPOwQ9KSzrsWgFtLWLJ5OntyJjOfjoy3PJntMQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:34 2024 by rpki-client on console-ams.rpki-client.org