$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/DbGzQWcqO2m_VUUlrbV8ShtQLgY.roa File: DbGzQWcqO2m_VUUlrbV8ShtQLgY.roa (raw, json) Hash identifier: AhhQkXpREdcJIbXxTBuXD/FFWU6NDdxWRJDWLoXGm3U= Subject key identifier: 0D:B1:B3:41:67:2A:3B:69:BF:55:45:25:AD:B5:7C:4A:1B:50:2E:06 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1368 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/DbGzQWcqO2m_VUUlrbV8ShtQLgY.roa Signing time: Fri 01 Sep 2023 09:24:54 +0000 ROA not before: Fri 01 Sep 2023 09:24:54 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 198949 IP address blocks: 113.196.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 08:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4968 (0x1368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:54 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0DB1B341672A3B69BF554525ADB57C4A1B502E06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f4:81:96:a2:38:d3:a0:ae:61:6c:2e:85:ae: b3:28:71:c9:53:17:eb:de:09:30:9f:e3:53:d8:85: 99:30:8b:31:bd:bd:14:e0:ee:0b:a1:70:83:9b:0d: ef:6c:93:12:49:98:f0:19:8a:49:45:03:a4:57:e7: 0b:a1:b6:04:db:af:8b:3a:b1:eb:8d:20:59:c8:d7: 35:8b:42:16:a4:06:27:29:92:01:a0:04:2e:25:77: 8e:7c:10:5a:cc:33:bf:60:e5:13:95:90:f4:2e:e3: 8f:49:34:c4:23:78:31:d0:f7:f8:db:a1:bf:30:19: cf:a5:62:5b:8e:08:24:3b:57:18:39:e8:2f:33:15: 90:8b:54:1f:f7:f1:3c:d4:71:f0:3f:b2:d3:5e:e4: da:58:6c:20:0a:15:b4:e9:f3:e0:4f:b1:c8:7a:d8: 24:e4:46:8e:d4:84:76:21:9a:ed:da:0f:07:35:92: a9:f9:33:92:a3:e6:ae:f1:c0:f9:0b:08:70:c4:49: a4:ff:e8:9d:d6:4b:b5:e2:77:ff:64:e7:3a:6e:5d: 7f:7e:a5:3b:95:dd:42:b0:70:ce:f6:58:32:d4:b9: 55:f5:a0:b2:6c:9c:36:3b:12:27:ef:7e:9d:1f:d2: ed:64:c5:8d:3f:2d:b4:4e:57:3d:27:a6:c7:10:d8: 99:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B1:B3:41:67:2A:3B:69:BF:55:45:25:AD:B5:7C:4A:1B:50:2E:06 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/DbGzQWcqO2m_VUUlrbV8ShtQLgY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.196.245.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:6d:7c:19:f3:94:48:4f:99:72:cb:7c:c4:52:1b:72:3a:1b: e1:dc:33:b4:b6:2c:21:97:34:b6:2b:2c:ab:2a:d5:0e:18:34: 8a:3a:94:e6:20:f5:dc:d1:57:49:60:09:f1:45:95:99:48:a1: f6:00:0a:c7:6d:f4:70:bd:28:d0:a1:fd:0c:32:e0:1c:3f:f7: f6:f6:e0:5c:64:b6:74:04:1f:3f:c3:39:3f:1f:8e:70:65:9c: ec:03:8e:09:4c:57:77:18:c6:99:f7:cb:09:01:e4:7d:79:f3: fd:25:65:33:3d:b7:ec:49:8f:80:ab:8d:3d:ff:4a:f5:8d:91: 1a:97:d1:6f:6d:f6:88:96:34:57:f0:f5:bb:2b:c0:d7:1d:2a: ef:9e:b8:ce:ff:7f:e1:b0:86:d8:84:5f:3d:1d:fc:1d:0c:5a: c9:96:eb:60:83:75:c4:e3:56:0b:97:1d:4d:3b:5a:c8:d7:ba: bc:9b:6e:dc:eb:05:a5:2f:f9:ca:fd:1b:87:49:9f:e3:be:a0: 27:d5:d1:10:d3:90:36:d0:18:5e:81:c7:29:dc:61:b5:46:1d: b3:6e:dc:21:ab:fa:c0:0a:cc:ad:6c:91:8e:29:b9:e8:d6:b0: 8b:b4:0a:29:2d:7f:e0:ab:97:cd:3d:80:49:91:7e:94:7b:ba: 03:0a:f1:19 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE2gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBEQjFCMzQxNjcyQTNC NjlCRjU1NDUyNUFEQjU3QzRBMUI1MDJFMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDK9IGWojjToK5hbC6FrrMocclTF+veCTCf41PYhZkwizG9vRTg 7guhcIObDe9skxJJmPAZiklFA6RX5wuhtgTbr4s6seuNIFnI1zWLQhakBicpkgGg BC4ld458EFrMM79g5ROVkPQu449JNMQjeDHQ9/jbob8wGc+lYluOCCQ7Vxg56C8z FZCLVB/38TzUcfA/stNe5NpYbCAKFbTp8+BPsch62CTkRo7UhHYhmu3aDwc1kqn5 M5Kj5q7xwPkLCHDESaT/6J3WS7Xid/9k5zpuXX9+pTuV3UKwcM72WDLUuVX1oLJs nDY7Eifvfp0f0u1kxY0/LbROVz0npscQ2JmbAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUDbGzQWcqO2m/VUUlrbV8ShtQLgYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRGJHelFXY3FPMm1fVlVVbHJiVjhT aHRRTGdZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHHE9TAN BgkqhkiG9w0BAQsFAAOCAQEAHm18GfOUSE+Zcst8xFIbcjob4dwztLYsIZc0tiss qyrVDhg0ijqU5iD13NFXSWAJ8UWVmUih9gAKx230cL0o0KH9DDLgHD/39vbgXGS2 dAQfP8M5Px+OcGWc7AOOCUxXdxjGmffLCQHkfXnz/SVlMz237EmPgKuNPf9K9Y2R GpfRb232iJY0V/D1uyvA1x0q7564zv9/4bCG2IRfPR38HQxayZbrYIN1xONWC5cd TTtayNe6vJtu3OsFpS/5yv0bh0mf476gJ9XRENOQNtAYXoHHKdxhtUYds27cIav6 wArMrWyRjim56Nawi7QKKS1/4KuXzT2ASZF+lHu6AwrxGQ== -----END CERTIFICATE-----Generated at Mon May 6 01:02:48 2024 by rpki-client on console-ams.rpki-client.org