$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/0cp5Br_lx9JP8MAcKFPMDMDUqGU.roa File: 0cp5Br_lx9JP8MAcKFPMDMDUqGU.roa (raw, json) Hash identifier: 8WejpH2LMv/cJHSN820XnrO/Je/w+/s7kd4grRUnawA= Subject key identifier: D1:CA:79:06:BF:E5:C7:D2:4F:F0:C0:1C:28:53:CC:0C:C0:D4:A8:65 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 139F Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/0cp5Br_lx9JP8MAcKFPMDMDUqGU.roa Signing time: Fri 01 Sep 2023 09:25:13 +0000 ROA not before: Fri 01 Sep 2023 09:25:13 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18049 IP address blocks: 106.105.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5023 (0x139f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:13 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D1CA7906BFE5C7D24FF0C01C2853CC0CC0D4A865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e9:1b:06:93:ab:dd:38:a6:90:74:7e:66:48: 2b:86:7e:30:4b:18:ec:eb:dc:66:f7:9f:c7:58:da: ee:53:c3:20:89:6f:70:59:5d:f0:d6:1b:1c:c3:3e: bf:f9:b4:97:7d:7b:17:aa:16:a5:30:3f:18:90:a9: b5:5b:4c:48:9b:7c:a8:bf:f5:a2:c0:15:83:86:d0: 89:c2:6e:9d:5a:b6:ea:4b:52:47:0d:ce:01:42:b7: ce:7f:03:e8:d4:85:b3:d7:23:ad:3b:3c:72:00:d4: 19:5a:10:c4:ee:7d:07:59:b8:39:41:a1:ec:02:4e: 4a:64:87:c5:b4:98:14:cb:39:7a:05:b0:71:13:58: ae:5b:20:f4:a9:58:ff:8d:5e:d6:dc:1e:42:3b:ad: 0b:99:ec:2d:6a:56:af:c1:88:44:01:b5:b9:cb:a8: c0:e7:19:c3:d2:bf:2c:cc:73:c0:66:cc:5f:b6:b8: c1:63:59:b0:98:8d:d7:e4:b6:8e:f1:f4:2f:14:d5: a5:7a:23:70:e5:d1:bb:84:83:db:1f:1c:39:e9:79: 69:2d:8c:12:09:11:30:9c:5f:0b:5f:0c:59:75:dc: 37:e7:09:ef:38:a7:5e:5a:a7:ab:42:dc:bb:b7:9b: db:98:d2:4e:6a:6a:20:a7:02:22:1b:e1:a3:d5:8a: 99:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CA:79:06:BF:E5:C7:D2:4F:F0:C0:1C:28:53:CC:0C:C0:D4:A8:65 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/0cp5Br_lx9JP8MAcKFPMDMDUqGU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.224.0/19 Signature Algorithm: sha256WithRSAEncryption 9b:d6:54:df:2d:67:57:3c:f8:2a:20:71:6c:65:48:c1:55:bc: f0:eb:0f:dc:50:e2:99:17:ed:64:04:b8:c9:73:19:42:7e:f4: 74:ef:e0:ec:32:20:28:89:dc:9d:ce:d7:68:1e:95:30:0a:43: 2f:07:fa:fa:1e:c7:32:29:aa:bf:ac:b8:9b:95:66:0e:40:89: ef:ba:31:4a:77:1e:ba:2f:97:7b:35:c9:46:b7:c8:28:12:00: 36:d3:f8:c9:2a:76:38:81:c9:4e:85:4f:b2:ac:8a:19:1e:39: 08:2a:d0:ac:8d:53:1f:3b:4b:55:2c:4b:c1:1c:9b:e6:a3:3d: 62:fd:f5:b4:a9:ce:85:4b:be:95:70:18:a4:4d:fc:fd:4b:95: 6e:44:d8:bf:a7:0f:c5:96:0e:fe:18:7c:a3:25:f8:67:b2:77: 93:4d:32:3b:a1:fb:93:94:19:70:3e:93:38:f0:46:e0:b9:ae: 74:5b:3a:a4:f5:87:a6:4f:54:19:fd:ac:b6:77:8b:1f:dd:30: 37:10:cb:45:dd:df:fd:ce:3c:b0:03:f0:4e:08:9a:84:9b:d1: 6a:56:5b:9a:b5:4f:e4:6d:9c:eb:fa:53:44:b7:eb:dd:ff:70: dd:6b:6b:a7:94:87:10:d2:1a:74:2d:13:6c:50:d3:8c:cd:aa: ee:a2:c2:30 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE58wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQxQ0E3OTA2QkZFNUM3 RDI0RkYwQzAxQzI4NTNDQzBDQzBENEE4NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC16RsGk6vdOKaQdH5mSCuGfjBLGOzr3Gb3n8dY2u5TwyCJb3BZ XfDWGxzDPr/5tJd9exeqFqUwPxiQqbVbTEibfKi/9aLAFYOG0InCbp1atupLUkcN zgFCt85/A+jUhbPXI607PHIA1BlaEMTufQdZuDlBoewCTkpkh8W0mBTLOXoFsHET WK5bIPSpWP+NXtbcHkI7rQuZ7C1qVq/BiEQBtbnLqMDnGcPSvyzMc8BmzF+2uMFj WbCYjdfkto7x9C8U1aV6I3Dl0buEg9sfHDnpeWktjBIJETCcXwtfDFl13DfnCe84 p15ap6tC3Lu3m9uY0k5qaiCnAiIb4aPVipm/AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU0cp5Br/lx9JP8MAcKFPMDMDUqGUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMGNwNUJyX2x4OUpQOE1BY0tGUE1E TURVcUdVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBWpp4DAN BgkqhkiG9w0BAQsFAAOCAQEAm9ZU3y1nVzz4KiBxbGVIwVW88OsP3FDimRftZAS4 yXMZQn70dO/g7DIgKIncnc7XaB6VMApDLwf6+h7HMimqv6y4m5VmDkCJ77oxSnce ui+XezXJRrfIKBIANtP4ySp2OIHJToVPsqyKGR45CCrQrI1THztLVSxLwRyb5qM9 Yv31tKnOhUu+lXAYpE38/UuVbkTYv6cPxZYO/hh8oyX4Z7J3k00yO6H7k5QZcD6T OPBG4LmudFs6pPWHpk9UGf2stneLH90wNxDLRd3f/c48sAPwTgiahJvRalZbmrVP 5G2c6/pTRLfr3f9w3Wtrp5SHENIadC0TbFDTjM2q7qLCMA== -----END CERTIFICATE-----Generated at Sat Jun 1 22:20:17 2024 by rpki-client on console-fra.rpki-client.org