$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/C3Uv8B4wMFe3lIMoFFOKqmChA2Y.roa File: C3Uv8B4wMFe3lIMoFFOKqmChA2Y.roa (raw, json) Hash identifier: 4zKAAiOwE/ub12D87FqrqG9/QsXa6hcCWadVxKQy0Wo= Subject key identifier: 0B:75:2F:F0:1E:30:30:57:B7:94:83:28:14:53:8A:AA:60:A1:03:66 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 15FD Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/C3Uv8B4wMFe3lIMoFFOKqmChA2Y.roa Signing time: Mon 26 Aug 2024 05:21:39 +0000 ROA not before: Mon 26 Aug 2024 05:21:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 106.105.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5629 (0x15fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:21:39 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0B752FF01E303057B794832814538AAA60A10366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:25:95:29:90:07:da:28:87:00:6b:8d:fe:92: 64:63:cb:a9:b8:49:ef:33:d0:5b:d9:3a:6d:46:5f: ae:04:9c:70:b1:2d:d4:16:d0:43:57:b5:02:40:5f: 02:c0:a1:c8:fd:1a:c8:44:b6:28:33:93:f8:a5:45: fe:a6:c0:c6:a8:37:23:3d:44:d2:12:12:0c:23:c5: 32:01:ec:ff:52:e2:bc:e6:de:c0:df:0c:dc:e3:5c: 3a:5a:3e:fb:a2:49:04:1c:a4:c7:52:fe:97:e0:b9: d8:03:e8:1f:25:dc:84:04:6b:cb:b1:67:47:a8:a5: ee:8f:e0:27:a1:92:40:ee:a7:05:ca:e3:74:30:d9: f8:30:b5:17:66:b8:44:39:95:5f:6f:e9:82:70:1e: 56:3d:eb:a6:8f:9c:f8:e9:98:2f:59:1d:0f:62:a2: fe:59:89:27:09:49:7f:aa:bd:4d:8e:d3:b7:56:5f: 6b:7f:d5:22:5e:46:b7:e2:25:c0:0d:41:45:aa:02: 2a:fa:ce:4a:95:27:7a:46:81:39:62:6d:f1:f8:a1: 7e:15:a7:86:8c:09:90:5b:00:cf:fb:80:59:ee:3e: c2:8e:28:4d:b6:92:d4:d5:7a:94:57:4b:55:3a:d0: a0:70:3f:84:94:54:cb:eb:8c:d2:6c:e4:9d:ed:48: ee:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:75:2F:F0:1E:30:30:57:B7:94:83:28:14:53:8A:AA:60:A1:03:66 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/C3Uv8B4wMFe3lIMoFFOKqmChA2Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.48.0/20 Signature Algorithm: sha256WithRSAEncryption 21:46:0c:ca:9b:dc:5f:c1:c0:7a:26:bb:ac:19:9f:5b:d3:40: 4c:14:2f:86:6e:b2:f6:f0:b9:d2:2d:d2:e8:36:fc:b5:89:41: ec:c0:e2:90:b8:ef:10:ce:aa:fa:f7:09:58:0f:70:d1:c6:4e: 04:c0:08:6a:9e:9f:36:26:23:58:0b:51:26:f1:29:e6:92:8b: 47:63:91:8c:16:ec:72:71:ee:a1:1a:d7:53:36:a7:fc:f2:87: 80:85:a0:dc:b0:a4:4a:2f:65:03:22:57:45:4f:49:f2:8d:b6: b7:be:8a:2c:30:58:4d:14:75:25:4c:63:b2:33:fe:2f:6d:14: bb:6d:78:63:6e:b8:79:8b:b9:e9:68:e3:2c:0f:26:41:ed:16: a2:b9:a7:e3:e2:04:73:d4:32:39:22:ce:e9:e6:f4:13:72:bd: 2d:d9:bd:4e:ec:e9:8c:38:ca:f8:ed:e3:0b:61:21:c6:e0:6e: a2:9e:ec:fc:20:35:d0:3c:09:47:bd:87:a7:2e:fb:7b:52:76: 34:86:ae:8f:1d:b7:4d:44:85:be:d0:06:f8:e5:f2:10:18:27: b8:dc:d8:37:f8:49:17:86:68:64:41:89:2c:bc:9c:38:97:17: 1f:49:79:19:93:89:fa:6a:d8:87:fc:92:dd:c2:6c:ec:7d:fd: 0d:1b:a6:8c -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFf0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIxMzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBCNzUyRkYwMUUzMDMw NTdCNzk0ODMyODE0NTM4QUFBNjBBMTAzNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdJZUpkAfaKIcAa43+kmRjy6m4Se8z0FvZOm1GX64EnHCxLdQW 0ENXtQJAXwLAocj9GshEtigzk/ilRf6mwMaoNyM9RNISEgwjxTIB7P9S4rzm3sDf DNzjXDpaPvuiSQQcpMdS/pfgudgD6B8l3IQEa8uxZ0eope6P4CehkkDupwXK43Qw 2fgwtRdmuEQ5lV9v6YJwHlY966aPnPjpmC9ZHQ9iov5ZiScJSX+qvU2O07dWX2t/ 1SJeRrfiJcANQUWqAir6zkqVJ3pGgTlibfH4oX4Vp4aMCZBbAM/7gFnuPsKOKE22 ktTVepRXS1U60KBwP4SUVMvrjNJs5J3tSO5rAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUC3Uv8B4wMFe3lIMoFFOKqmChA2YwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQzNVdjhCNHdNRmUzbElNb0ZGT0tx bUNoQTJZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGppMDAN BgkqhkiG9w0BAQsFAAOCAQEAIUYMypvcX8HAeia7rBmfW9NATBQvhm6y9vC50i3S 6Db8tYlB7MDikLjvEM6q+vcJWA9w0cZOBMAIap6fNiYjWAtRJvEp5pKLR2ORjBbs cnHuoRrXUzan/PKHgIWg3LCkSi9lAyJXRU9J8o22t76KLDBYTRR1JUxjsjP+L20U u214Y264eYu56WjjLA8mQe0Wormn4+IEc9QyOSLO6eb0E3K9Ldm9TuzpjDjK+O3j C2EhxuBuop7s/CA10DwJR72Hpy77e1J2NIaujx23TUSFvtAG+OXyEBgnuNzYN/hJ F4ZoZEGJLLycOJcXH0l5GZOJ+mrYh/yS3cJs7H39DRumjA== -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:11 2024 by rpki-client on console-fra.rpki-client.org