$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/El2eRq71xkh1Q7ah4xnuBcr9las.roa File: El2eRq71xkh1Q7ah4xnuBcr9las.roa (raw, json) Hash identifier: crPXpd47JrEc0HI+vYbtQfvw3L/mocTpVAxkPyGT288= Subject key identifier: 12:5D:9E:46:AE:F5:C6:48:75:43:B6:A1:E3:19:EE:05:CA:FD:95:AB Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1649 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/El2eRq71xkh1Q7ah4xnuBcr9las.roa Signing time: Mon 26 Aug 2024 05:22:00 +0000 ROA not before: Mon 26 Aug 2024 05:22:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 220.228.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5705 (0x1649) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:00 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=125D9E46AEF5C6487543B6A1E319EE05CAFD95AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:af:b3:81:02:ee:b4:c7:12:73:46:d5:b8:29: 14:5a:44:02:2c:8c:d9:e8:4d:8e:d2:eb:0c:58:67: f8:3c:7a:65:19:ec:37:5c:60:86:4b:fe:2e:a5:9d: 25:f0:cf:32:88:23:ed:d1:cf:9f:33:00:2f:e2:63: de:b2:22:a6:90:c4:67:0b:e4:a3:d2:f6:03:4b:01: c1:05:99:ce:03:7f:e7:67:d7:ea:25:52:34:ac:80: bd:28:a4:48:6f:10:a4:8b:c0:08:3e:08:2a:e2:05: 84:a5:6c:2c:7a:eb:42:a4:a0:4d:60:31:07:12:25: 82:f7:fe:c1:4f:d2:9f:89:99:9d:cd:63:3a:70:bd: 14:93:ba:fa:58:1a:7b:86:a1:c9:00:ed:f0:bd:f3: 7f:4e:17:93:59:3e:ec:64:37:8b:e0:aa:eb:5e:4f: b3:6f:59:eb:e2:5b:52:60:42:19:4a:5b:6c:b3:dd: fb:a4:e8:53:e5:e3:c9:40:ab:6a:8d:84:d0:b2:03: b5:42:d9:f2:7a:0d:fc:f9:57:25:40:86:73:b6:2f: 83:ba:a3:cc:e7:a8:a5:2d:f1:4e:b8:01:f6:25:93: 6a:55:3f:61:da:91:16:df:59:6b:ae:8c:0b:75:d5: 49:e0:46:00:5e:6f:ed:47:45:43:56:0b:ab:c0:8f: 74:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5D:9E:46:AE:F5:C6:48:75:43:B6:A1:E3:19:EE:05:CA:FD:95:AB X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/El2eRq71xkh1Q7ah4xnuBcr9las.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.228.0.0/16 Signature Algorithm: sha256WithRSAEncryption 05:8d:e1:3f:8e:f3:95:f4:87:0e:6e:a5:aa:90:38:0c:32:37: d0:73:86:2f:e6:f2:40:93:6c:cc:1d:06:82:c6:9f:a9:da:fc: b1:37:7f:a6:0c:0b:15:64:bc:42:f5:1c:c3:79:8f:74:47:8a: e6:71:4f:94:22:41:bc:7e:76:fa:fc:26:06:bd:43:2b:aa:93: af:f1:a4:a0:c3:6f:5d:5d:c1:41:5e:7e:df:e5:94:12:6b:f9: 67:9c:c6:d7:7f:eb:50:26:11:37:ca:f5:6e:0e:5c:c7:02:ae: 20:3b:85:b8:63:9f:51:54:5c:65:04:d1:65:4a:3b:c1:af:c0: 9e:cd:6e:9a:68:d2:cc:28:aa:9a:78:ab:74:63:cc:b0:9b:cf: e4:cc:ab:f7:8c:5c:93:40:65:7b:a8:11:fa:d8:76:35:d7:15: 54:6b:7e:34:cb:47:4d:ab:26:48:fb:3d:74:31:2d:8a:cc:a1: 84:61:6c:eb:d2:93:10:f4:93:71:2f:88:19:0b:28:dd:3e:2e: 6b:df:27:e1:76:70:93:25:8b:9e:7d:86:cc:97:53:a6:d3:b0: 67:c8:0a:ba:b1:da:a3:2c:09:24:17:70:d0:c3:40:e3:b0:b0: 60:78:3e:a3:d6:c2:10:f4:61:af:39:ad:e8:d8:13:73:f6:da: d8:52:ac:2c -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICFkkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyMDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEyNUQ5RTQ2QUVGNUM2 NDg3NTQzQjZBMUUzMTlFRTA1Q0FGRDk1QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBr7OBAu60xxJzRtW4KRRaRAIsjNnoTY7S6wxYZ/g8emUZ7Ddc YIZL/i6lnSXwzzKII+3Rz58zAC/iY96yIqaQxGcL5KPS9gNLAcEFmc4Df+dn1+ol UjSsgL0opEhvEKSLwAg+CCriBYSlbCx660KkoE1gMQcSJYL3/sFP0p+JmZ3NYzpw vRSTuvpYGnuGockA7fC9839OF5NZPuxkN4vgquteT7NvWeviW1JgQhlKW2yz3fuk 6FPl48lAq2qNhNCyA7VC2fJ6Dfz5VyVAhnO2L4O6o8znqKUt8U64AfYlk2pVP2Ha kRbfWWuujAt11UngRgBeb+1HRUNWC6vAj3SVAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUEl2eRq71xkh1Q7ah4xnuBcr9laswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRWwyZVJxNzF4a2gxUTdhaDR4bnVC Y3I5bGFzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANzkMA0G CSqGSIb3DQEBCwUAA4IBAQAFjeE/jvOV9IcObqWqkDgMMjfQc4Yv5vJAk2zMHQaC xp+p2vyxN3+mDAsVZLxC9RzDeY90R4rmcU+UIkG8fnb6/CYGvUMrqpOv8aSgw29d XcFBXn7f5ZQSa/lnnMbXf+tQJhE3yvVuDlzHAq4gO4W4Y59RVFxlBNFlSjvBr8Ce zW6aaNLMKKqaeKt0Y8ywm8/kzKv3jFyTQGV7qBH62HY11xVUa340y0dNqyZI+z10 MS2KzKGEYWzr0pMQ9JNxL4gZCyjdPi5r3yfhdnCTJYuefYbMl1Om07BnyAq6sdqj LAkkF3DQw0DjsLBgeD6j1sIQ9GGvOa3o2BNz9trYUqws -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:33 2024 by rpki-client on console-ams.rpki-client.org