$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/AqvfMf2Ug0mfauEpEJxVf47XyjQ.roa File: AqvfMf2Ug0mfauEpEJxVf47XyjQ.roa (raw, json) Hash identifier: Sh0Opfk9qwAV4xSBQT/7dhajFsuup6+8TItx4sQ8uxM= Subject key identifier: 02:AB:DF:31:FD:94:83:49:9F:6A:E1:29:10:9C:55:7F:8E:D7:CA:34 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 13C8 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/AqvfMf2Ug0mfauEpEJxVf47XyjQ.roa Signing time: Fri 01 Sep 2023 09:25:26 +0000 ROA not before: Fri 01 Sep 2023 09:25:26 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131602 IP address blocks: 123.205.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5064 (0x13c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:26 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=02ABDF31FD9483499F6AE129109C557F8ED7CA34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:de:74:56:32:a8:93:82:5e:27:16:dd:f4:03: 61:36:a0:44:8a:2e:16:38:15:25:dd:49:6a:f5:72: ca:24:8a:22:1d:52:5a:bc:14:bf:ef:99:6c:f1:39: b1:4c:df:1d:57:5e:4e:25:e3:4f:00:34:f2:97:ec: f7:7e:cf:ff:52:90:fa:7c:aa:09:47:61:58:ff:be: 64:f4:5a:0d:23:0e:dd:76:ec:dd:78:79:fb:39:eb: a3:db:43:2f:ef:e6:52:22:42:80:10:71:29:9b:9c: c2:1f:7a:eb:c4:4c:20:71:05:8b:4e:a5:05:a9:fc: a7:22:ac:2d:af:6e:ae:a2:21:5b:89:08:4c:0b:c0: 43:7c:f4:54:da:6a:34:6b:42:ba:14:21:c6:f4:1c: bc:da:1d:7e:07:2e:f4:da:5d:2f:9a:d5:80:2b:3b: 93:1e:2b:47:38:ca:31:c1:f8:ce:67:ae:e8:ef:e6: 7c:a2:29:53:a1:bc:75:27:6f:56:ac:13:7c:5a:da: 23:22:2e:86:d5:3d:08:37:e7:bd:1c:df:67:93:36: b2:ea:b3:1c:7a:30:5d:88:58:db:f2:44:f9:49:7a: 74:1a:9b:b2:b2:d9:3d:4a:eb:78:8a:24:cd:ee:15: 62:87:2e:af:c1:5a:9a:dd:55:90:3c:ec:df:88:84: 2a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AB:DF:31:FD:94:83:49:9F:6A:E1:29:10:9C:55:7F:8E:D7:CA:34 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/AqvfMf2Ug0mfauEpEJxVf47XyjQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.205.128.0/18 Signature Algorithm: sha256WithRSAEncryption 88:fd:68:a6:6f:75:11:1e:fd:c8:38:20:c4:e2:a5:82:a8:d1: e2:55:1a:c3:80:5f:22:33:69:07:f0:ee:2e:36:f0:5a:aa:3b: 41:9c:59:6a:c1:7c:d2:12:6d:66:7b:77:9d:3c:28:87:4a:ba: 54:4c:4a:b5:86:94:38:3c:c9:17:46:02:b3:b5:fb:4d:c3:f4: 71:21:65:6d:c8:76:94:aa:2e:a9:f3:8b:7f:3a:6b:24:56:47: 36:1e:c5:91:81:42:9b:12:4c:c0:cb:2d:5b:a4:c5:88:64:9c: 02:16:2a:f2:3c:a6:d5:f5:68:fb:63:62:5e:02:02:3c:48:26: dd:a0:53:f8:98:a9:92:cd:a3:bb:09:c0:91:ec:b8:ca:8d:36: e9:4b:3f:d5:57:8f:d1:81:da:0a:20:0a:e8:72:5d:01:71:7d: 07:8a:31:7c:0a:16:82:1d:d4:c7:82:4a:0b:02:f0:eb:37:bb: a3:5c:97:3f:96:38:55:7e:4b:11:21:f5:62:5e:a0:60:0c:02: 24:6b:76:a1:89:7e:a6:ca:4a:b4:eb:f6:76:f0:f9:bf:ad:4a: 50:c2:fb:3c:89:af:3d:16:6d:7e:77:44:7f:d0:3b:ca:ea:35: 09:d4:5d:76:1e:56:1d:dd:fe:5e:2f:89:b5:90:32:68:37:d6: 5f:09:33:84 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE8gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MjZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAyQUJERjMxRkQ5NDgz NDk5RjZBRTEyOTEwOUM1NTdGOEVEN0NBMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQ3nRWMqiTgl4nFt30A2E2oESKLhY4FSXdSWr1csokiiIdUlq8 FL/vmWzxObFM3x1XXk4l408ANPKX7Pd+z/9SkPp8qglHYVj/vmT0Wg0jDt127N14 efs566PbQy/v5lIiQoAQcSmbnMIfeuvETCBxBYtOpQWp/KcirC2vbq6iIVuJCEwL wEN89FTaajRrQroUIcb0HLzaHX4HLvTaXS+a1YArO5MeK0c4yjHB+M5nrujv5nyi KVOhvHUnb1asE3xa2iMiLobVPQg3570c32eTNrLqsxx6MF2IWNvyRPlJenQam7Ky 2T1K63iKJM3uFWKHLq/BWprdVZA87N+IhCqPAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUAqvfMf2Ug0mfauEpEJxVf47XyjQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQXF2Zk1mMlVnMG1mYXVFcEVKeFZm NDdYeWpRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnvNgDAN BgkqhkiG9w0BAQsFAAOCAQEAiP1opm91ER79yDggxOKlgqjR4lUaw4BfIjNpB/Du LjbwWqo7QZxZasF80hJtZnt3nTwoh0q6VExKtYaUODzJF0YCs7X7TcP0cSFlbch2 lKouqfOLfzprJFZHNh7FkYFCmxJMwMstW6TFiGScAhYq8jym1fVo+2NiXgICPEgm 3aBT+Jipks2juwnAkey4yo026Us/1VeP0YHaCiAK6HJdAXF9B4oxfAoWgh3Ux4JK CwLw6ze7o1yXP5Y4VX5LESH1Yl6gYAwCJGt2oYl+pspKtOv2dvD5v61KUML7PImv PRZtfndEf9A7yuo1CdRddh5WHd3+Xi+JtZAyaDfWXwkzhA== -----END CERTIFICATE-----Generated at Sat Jun 1 22:20:17 2024 by rpki-client on console-fra.rpki-client.org