$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/2EvinD6gKXRj6beMHqPpcf_G3Fk.roa File: 2EvinD6gKXRj6beMHqPpcf_G3Fk.roa (raw, json) Hash identifier: L96CUswqOUrMdgIAHDF47gvQqz6aEZ1b2gPrc7GRCJk= Subject key identifier: D8:4B:E2:9C:3E:A0:29:74:63:E9:B7:8C:1E:A3:E9:71:FF:C6:DC:59 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 134E Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2EvinD6gKXRj6beMHqPpcf_G3Fk.roa Signing time: Fri 01 Sep 2023 09:24:45 +0000 ROA not before: Fri 01 Sep 2023 09:24:45 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 198949 IP address blocks: 113.196.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 11:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4942 (0x134e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:45 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D84BE29C3EA0297463E9B78C1EA3E971FFC6DC59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:3b:e1:bc:db:30:4f:01:18:3d:fa:3d:4b: f7:5d:f3:56:44:d2:dd:72:db:8f:41:87:c3:e8:dc: 26:6a:ba:e2:9b:7e:00:9c:de:94:ae:a0:09:0d:0d: a8:7a:7f:47:14:51:05:dc:13:11:3c:b6:ab:d0:bd: e0:c9:ed:af:ee:46:32:cc:69:b2:3e:14:ed:70:b0: 49:65:6e:06:7a:1c:16:79:10:7c:2a:49:b5:c7:8c: e9:8e:ce:26:32:c0:81:7a:01:b4:98:5c:81:1b:0c: cd:c8:a4:0c:9e:2c:51:11:51:f2:a0:21:c2:9a:23: 62:98:e2:df:e1:ca:e6:45:f7:3e:23:f3:4c:4a:2a: 8d:01:6c:4d:b5:1f:cb:13:e6:e7:10:36:7e:8c:d9: f1:dd:96:05:4d:57:92:28:97:21:1a:89:87:d2:6a: cb:4a:66:de:bf:fb:e4:c6:fb:ac:5d:87:38:e8:7f: be:70:82:8f:2f:ea:f7:09:6d:44:2a:57:86:df:ad: 54:32:bb:f0:4b:a3:d2:71:37:5e:3a:da:18:b8:f7: 1f:b6:94:70:9a:79:0d:8e:91:99:8b:a2:74:b9:5e: d3:25:d4:d5:26:f8:34:a1:b5:b7:a1:45:29:20:2f: 79:08:f6:18:6e:78:4f:ce:97:31:50:44:0a:30:33: 72:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4B:E2:9C:3E:A0:29:74:63:E9:B7:8C:1E:A3:E9:71:FF:C6:DC:59 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2EvinD6gKXRj6beMHqPpcf_G3Fk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.196.79.0/24 Signature Algorithm: sha256WithRSAEncryption 90:98:c0:27:23:c9:4e:1b:e7:aa:2f:11:96:7e:80:e5:3a:2b: a4:5a:11:1e:97:c8:bb:cb:b4:b0:e3:ce:68:0e:17:9c:9e:bf: 7e:f2:83:66:80:7c:b8:17:74:5c:ea:48:00:d4:f8:2b:54:83: 0c:ae:38:fe:4a:49:3b:3f:d8:ac:ad:70:49:a3:89:15:a3:80: 99:fc:ab:4a:07:bb:49:27:78:47:45:28:99:a9:6e:b2:f0:61: 69:fc:48:03:8a:f1:1b:6e:d0:a5:f6:9b:06:0a:24:0f:21:b9: bc:5a:19:c2:f4:35:07:87:21:fb:08:c3:b0:5e:b9:c6:37:5e: b7:fc:19:1d:6b:2d:ca:b8:e6:0c:07:27:67:f1:7c:ae:ea:95: 9c:c4:38:fb:88:95:90:50:1c:2c:c8:af:fb:62:a2:b4:97:cc: 98:72:10:82:52:2c:df:69:e4:3d:4c:02:f2:d4:6e:fc:d9:33: e8:ee:14:b8:8e:be:67:7b:e8:ef:f1:2a:ce:87:ef:94:bb:a0: e7:de:2b:50:43:13:b8:14:54:4f:06:65:3f:d4:3d:fb:94:3c: eb:aa:3c:0d:ee:ba:a3:ce:50:5f:62:0a:b3:92:ba:31:99:ed: 1f:61:23:7e:65:82:11:d0:f7:eb:33:de:1e:53:77:ea:4f:73: 19:a1:4c:80 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE04wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ4NEJFMjlDM0VBMDI5 NzQ2M0U5Qjc4QzFFQTNFOTcxRkZDNkRDNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAmzvhvNswTwEYPfo9S/dd81ZE0t1y249Bh8Po3CZquuKbfgCc 3pSuoAkNDah6f0cUUQXcExE8tqvQveDJ7a/uRjLMabI+FO1wsEllbgZ6HBZ5EHwq SbXHjOmOziYywIF6AbSYXIEbDM3IpAyeLFERUfKgIcKaI2KY4t/hyuZF9z4j80xK Ko0BbE21H8sT5ucQNn6M2fHdlgVNV5IolyEaiYfSastKZt6/++TG+6xdhzjof75w go8v6vcJbUQqV4bfrVQyu/BLo9JxN1462hi49x+2lHCaeQ2OkZmLonS5XtMl1NUm +DShtbehRSkgL3kI9hhueE/OlzFQRAowM3InAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU2EvinD6gKXRj6beMHqPpcf/G3FkwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMkV2aW5ENmdLWFJqNmJlTUhxUHBj Zl9HM0ZrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHHETzAN BgkqhkiG9w0BAQsFAAOCAQEAkJjAJyPJThvnqi8Rln6A5TorpFoRHpfIu8u0sOPO aA4XnJ6/fvKDZoB8uBd0XOpIANT4K1SDDK44/kpJOz/YrK1wSaOJFaOAmfyrSge7 SSd4R0UomalusvBhafxIA4rxG27QpfabBgokDyG5vFoZwvQ1B4ch+wjDsF65xjde t/wZHWstyrjmDAcnZ/F8ruqVnMQ4+4iVkFAcLMiv+2KitJfMmHIQglIs32nkPUwC 8tRu/Nkz6O4UuI6+Z3vo7/EqzofvlLug594rUEMTuBRUTwZlP9Q9+5Q866o8De66 o85QX2IKs5K6MZntH2EjfmWCEdD36zPeHlN36k9zGaFMgA== -----END CERTIFICATE-----Generated at Sun May 5 22:47:54 2024 by rpki-client on console-ams.rpki-client.org