$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/EfxEvQ-P4LeBRJB_SYTq5i8bM30.roa File: EfxEvQ-P4LeBRJB_SYTq5i8bM30.roa (raw, json) Hash identifier: 7Ca+DNnz76sidK+hliZLZJv2yhmFXYeWusR8OD3VxPk= Subject key identifier: 11:FC:44:BD:0F:8F:E0:B7:81:44:90:7F:49:84:EA:E6:2F:1B:33:7D Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1365 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/EfxEvQ-P4LeBRJB_SYTq5i8bM30.roa Signing time: Fri 01 Sep 2023 09:24:52 +0000 ROA not before: Fri 01 Sep 2023 09:24:52 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 122.147.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4965 (0x1365) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:52 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=11FC44BD0F8FE0B78144907F4984EAE62F1B337D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9b:72:8c:9b:35:d6:01:12:b7:aa:01:a0:b4: f3:46:a7:9a:00:67:e3:8f:22:d7:d8:5a:53:fa:f3: 2f:07:38:48:1e:fa:af:40:41:7d:9b:c5:a3:57:7c: 50:09:29:04:06:e1:32:b8:f5:30:a4:46:a8:64:ca: 50:5d:0d:c8:b5:8f:c7:3d:be:8a:42:bb:cf:7e:63: d2:2a:32:17:40:1d:c9:8d:3c:56:f1:52:3e:f8:f3: 97:af:c9:67:91:7b:15:56:91:05:57:24:e2:bf:d5: a3:dd:a1:06:1c:f1:6f:0e:d1:8c:a5:d2:f3:0a:69: 7d:39:8c:3a:a4:f4:20:38:12:a1:9b:87:9d:9c:0c: 19:d7:79:d8:c3:7e:7f:b9:c2:e5:0d:c0:a4:83:f3: 24:d0:8c:8c:0e:c4:31:c8:51:8e:bc:3c:b3:eb:a6: 6c:59:ff:c8:a5:81:9a:54:c8:bb:53:8c:91:35:3b: 11:d3:0a:24:bd:1b:c4:9d:80:38:e6:31:f9:8b:f7: 85:08:d7:63:6a:b8:bb:8e:f4:9f:1c:14:e7:af:79: e2:bc:2d:9c:a9:99:71:c7:a8:47:cb:25:87:55:17: d8:51:7a:c7:74:e2:e4:17:9f:5f:05:39:e9:d6:13: 8d:01:d7:bb:2c:4b:39:cd:58:89:af:a6:50:d1:35: 92:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FC:44:BD:0F:8F:E0:B7:81:44:90:7F:49:84:EA:E6:2F:1B:33:7D X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/EfxEvQ-P4LeBRJB_SYTq5i8bM30.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.147.168.0/21 Signature Algorithm: sha256WithRSAEncryption 8f:c2:e6:ac:f1:97:c5:f3:ae:77:42:a2:d2:a5:2a:25:da:df: 60:fd:42:c8:06:4c:c9:5d:2b:43:dc:6f:73:8f:60:85:4a:e2: 12:cc:fb:48:20:1e:a6:14:8e:01:5c:fe:3b:56:dc:3a:21:39: 68:75:d6:ce:d5:c0:08:2c:99:5a:f6:2c:aa:5f:b6:a2:0f:7b: 64:58:70:ce:80:20:98:a3:3a:5c:19:fc:24:61:63:ee:d2:84: cf:2c:20:3a:c7:e0:01:ef:ff:da:bd:d7:3b:b6:61:ef:9a:11: 75:b2:84:d4:56:9b:bb:c0:aa:90:7e:8b:bf:68:78:aa:b1:5d: b1:56:77:3f:43:35:24:d1:6f:d8:6f:8a:8f:ff:59:81:a2:e5: ff:2e:be:61:7f:19:c3:1c:39:d2:37:86:30:80:68:e4:43:2b: 18:56:5c:b4:46:fe:29:6f:ed:1b:b9:ac:88:aa:8b:36:85:9a: 68:56:31:b6:9d:cb:57:f1:e8:1a:b2:1c:54:f8:35:5d:5b:c1: 7d:4c:eb:9d:4d:40:2b:50:1f:a1:86:c6:8b:87:11:63:e6:a4: 1b:be:dc:8e:12:73:7e:b9:59:79:e8:5a:1d:e8:de:14:bf:ef: cb:bd:4c:43:8d:81:55:af:cd:5b:0d:55:c9:d2:01:57:1f:da: 5e:28:5b:4b -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE2UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDExRkM0NEJEMEY4RkUw Qjc4MTQ0OTA3RjQ5ODRFQUU2MkYxQjMzN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdm3KMmzXWARK3qgGgtPNGp5oAZ+OPItfYWlP68y8HOEge+q9A QX2bxaNXfFAJKQQG4TK49TCkRqhkylBdDci1j8c9vopCu89+Y9IqMhdAHcmNPFbx Uj7485evyWeRexVWkQVXJOK/1aPdoQYc8W8O0Yyl0vMKaX05jDqk9CA4EqGbh52c DBnXedjDfn+5wuUNwKSD8yTQjIwOxDHIUY68PLPrpmxZ/8ilgZpUyLtTjJE1OxHT CiS9G8SdgDjmMfmL94UI12NquLuO9J8cFOeveeK8LZypmXHHqEfLJYdVF9hResd0 4uQXn18FOenWE40B17ssSznNWImvplDRNZLHAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUEfxEvQ+P4LeBRJB/SYTq5i8bM30wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRWZ4RXZRLVA0TGVCUkpCX1NZVHE1 aThiTTMwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3qTqDAN BgkqhkiG9w0BAQsFAAOCAQEAj8LmrPGXxfOud0Ki0qUqJdrfYP1CyAZMyV0rQ9xv c49ghUriEsz7SCAephSOAVz+O1bcOiE5aHXWztXACCyZWvYsql+2og97ZFhwzoAg mKM6XBn8JGFj7tKEzywgOsfgAe//2r3XO7Zh75oRdbKE1Fabu8CqkH6Lv2h4qrFd sVZ3P0M1JNFv2G+Kj/9ZgaLl/y6+YX8Zwxw50jeGMIBo5EMrGFZctEb+KW/tG7ms iKqLNoWaaFYxtp3LV/HoGrIcVPg1XVvBfUzrnU1AK1AfoYbGi4cRY+akG77cjhJz frlZeehaHejeFL/vy71MQ42BVa/NWw1VydIBVx/aXihbSw== -----END CERTIFICATE-----Generated at Sun Jun 2 09:37:17 2024 by rpki-client on console-ams.rpki-client.org