$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-evgGIoCK2vY4ZHNUs6SlG4sx2c.roa File: -evgGIoCK2vY4ZHNUs6SlG4sx2c.roa (raw, json) Hash identifier: s3awwjp5djIASoGxRNak1zIs80lCIGvXkqrPFefx7as= Subject key identifier: F9:EB:E0:18:8A:02:2B:6B:D8:E1:91:CD:52:CE:92:94:6E:2C:C7:67 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 12F6 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-evgGIoCK2vY4ZHNUs6SlG4sx2c.roa Signing time: Fri 01 Sep 2023 09:24:18 +0000 ROA not before: Fri 01 Sep 2023 09:24:18 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131602 IP address blocks: 220.229.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4854 (0x12f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:18 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F9EBE0188A022B6BD8E191CD52CE92946E2CC767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:89:e9:9a:91:c0:88:20:85:13:cd:60:27:49: c0:97:fa:0b:7d:c5:83:fd:76:41:cb:8c:4b:3c:90: a3:35:2e:db:ea:a3:94:95:82:aa:cd:af:40:50:ff: 75:7d:3b:ab:3f:64:1c:7a:ee:b8:ef:81:48:2c:d5: d8:e7:b8:92:dc:60:e0:d6:0b:8e:76:c0:32:f1:88: 1b:5d:8c:69:62:04:31:ad:00:c1:36:18:a7:ee:91: 68:6f:3c:a7:d8:06:ed:50:6d:e4:9c:89:01:a5:d0: 55:84:02:dc:c6:85:df:ab:34:a8:6b:d3:2e:af:d7: b1:46:38:a5:31:13:1c:4c:fc:53:9d:c9:dd:9e:96: ed:ea:92:05:06:6a:8b:43:da:72:99:70:7b:48:fd: c0:3c:a5:e5:46:fb:e6:4c:a8:06:7e:6c:ad:28:77: 58:b1:62:3a:f6:c7:84:42:bc:c8:7e:b6:76:2d:f2: 8d:dd:4f:e8:c3:36:64:13:2f:94:3e:b0:8e:4f:ee: 6c:f6:5f:9b:eb:9a:37:e1:07:3e:c7:d0:25:1d:c6: 82:6f:6c:de:76:a7:48:d5:c7:3f:2c:bb:c0:a1:69: 19:2b:28:58:a9:27:0e:99:69:72:af:b2:72:34:3d: 94:a3:7c:c8:be:db:f7:0e:18:36:28:91:5c:09:28: 9b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EB:E0:18:8A:02:2B:6B:D8:E1:91:CD:52:CE:92:94:6E:2C:C7:67 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-evgGIoCK2vY4ZHNUs6SlG4sx2c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.229.68.0/22 Signature Algorithm: sha256WithRSAEncryption 30:59:69:47:35:be:ee:03:23:b9:c1:d6:ca:e9:df:a6:5d:22: 59:a8:f1:d9:f9:c1:1d:74:d6:48:e0:04:5d:2e:0f:ef:ad:5d: 05:ac:2d:8c:fb:ee:43:6d:84:e5:9e:ee:b3:5a:8e:b0:ca:e1: 15:af:68:d6:79:89:95:c6:c5:b7:1a:a8:12:2c:8c:5e:74:d3: 35:45:e8:89:5e:06:7c:57:2a:ff:68:9e:81:ea:51:da:90:82: d8:79:3e:ab:8a:67:0c:24:54:c3:29:22:30:89:c3:07:3f:5d: 81:ba:10:d6:bb:ef:dd:71:8a:7d:7f:84:44:ae:8b:d7:d9:c3: 3b:4b:f8:c6:c3:96:4b:66:1f:1c:22:e0:1e:44:01:90:33:43: 26:74:b3:1e:4b:c6:6d:4a:f0:78:30:08:c6:5e:e3:01:d2:de: 89:0b:9b:f4:fa:13:29:51:a3:45:da:ce:ce:81:99:3d:52:4a: 1c:92:9b:50:0d:68:63:f3:03:e6:11:1d:1b:04:0f:44:7a:7e: 3f:34:e9:95:0b:ff:7f:d6:39:62:71:31:16:31:5f:fe:ed:70: 73:39:ff:2a:0d:66:55:b6:1c:0f:59:81:8f:75:85:5a:2b:d1: ca:56:bf:28:6a:70:c3:88:f1:33:2e:b6:d6:7a:3b:9e:aa:3b: a8:90:9c:f7 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEvYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY5RUJFMDE4OEEwMjJC NkJEOEUxOTFDRDUyQ0U5Mjk0NkUyQ0M3NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkiemakcCIIIUTzWAnScCX+gt9xYP9dkHLjEs8kKM1Ltvqo5SV gqrNr0BQ/3V9O6s/ZBx67rjvgUgs1djnuJLcYODWC452wDLxiBtdjGliBDGtAME2 GKfukWhvPKfYBu1QbeSciQGl0FWEAtzGhd+rNKhr0y6v17FGOKUxExxM/FOdyd2e lu3qkgUGaotD2nKZcHtI/cA8peVG++ZMqAZ+bK0od1ixYjr2x4RCvMh+tnYt8o3d T+jDNmQTL5Q+sI5P7mz2X5vrmjfhBz7H0CUdxoJvbN52p0jVxz8su8ChaRkrKFip Jw6ZaXKvsnI0PZSjfMi+2/cOGDYokVwJKJubAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU+evgGIoCK2vY4ZHNUs6SlG4sx2cwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvLWV2Z0dJb0NLMnZZNFpITlVzNlNs RzRzeDJjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtzlRDAN BgkqhkiG9w0BAQsFAAOCAQEAMFlpRzW+7gMjucHWyunfpl0iWajx2fnBHXTWSOAE XS4P761dBawtjPvuQ22E5Z7us1qOsMrhFa9o1nmJlcbFtxqoEiyMXnTTNUXoiV4G fFcq/2iegepR2pCC2Hk+q4pnDCRUwykiMInDBz9dgboQ1rvv3XGKfX+ERK6L19nD O0v4xsOWS2YfHCLgHkQBkDNDJnSzHkvGbUrweDAIxl7jAdLeiQub9PoTKVGjRdrO zoGZPVJKHJKbUA1oY/MD5hEdGwQPRHp+PzTplQv/f9Y5YnExFjFf/u1wczn/Kg1m VbYcD1mBj3WFWivRyla/KGpww4jxMy621no7nqo7qJCc9w== -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org