$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/IHRzNh2KM1fo2yJfQpIA9U8sEE8.roa File: IHRzNh2KM1fo2yJfQpIA9U8sEE8.roa (raw, json) Hash identifier: 43K0mYyYKPzTJwFSyR0VimPQBe/SL7btoMf09VWZFms= Subject key identifier: 20:74:73:36:1D:8A:33:57:E8:DB:22:5F:42:92:00:F5:4F:2C:10:4F Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 13CC Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IHRzNh2KM1fo2yJfQpIA9U8sEE8.roa Signing time: Fri 01 Sep 2023 09:25:27 +0000 ROA not before: Fri 01 Sep 2023 09:25:27 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131586 IP address blocks: 106.106.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5068 (0x13cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:27 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=207473361D8A3357E8DB225F429200F54F2C104F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:59:93:d8:04:73:b4:ce:08:4c:6c:2e:d6:8f: fd:55:08:cf:2e:5a:ca:e6:a5:20:9e:8b:3d:4d:68: c0:4f:5d:c7:75:40:9b:c1:c9:9a:a9:38:cf:54:ad: 41:ea:04:e4:90:a0:d4:0b:b4:68:28:fb:72:b4:69: ad:a7:cc:fc:be:a5:1d:3e:a7:6e:16:d5:a4:20:54: 5e:ce:b7:3f:10:ee:a0:2f:3e:9b:ae:7a:d5:ce:f2: bb:39:15:8a:d3:ab:53:97:6f:6c:0e:aa:6a:fe:bb: 06:36:1c:2a:4b:16:4e:53:bc:c8:bd:db:35:cf:fe: 14:90:7f:c7:4a:64:eb:6f:9c:b8:ba:07:c7:07:d2: 30:92:31:f1:a2:75:f2:2c:48:9d:0c:65:88:7c:d1: eb:2e:97:f1:39:0b:82:a7:8a:61:63:4b:e7:a4:ce: 6d:bb:a2:d0:d4:c8:58:4a:ed:55:8b:dd:26:2b:b8: 45:6e:d6:a1:36:a7:cb:1d:49:07:d8:88:18:cf:97: a9:b4:fe:e8:f2:d3:2a:10:1c:26:0b:83:2f:a2:71: b2:ef:cb:5a:60:fc:a5:be:88:e8:6a:1f:ee:cb:6e: d7:39:e2:30:85:7c:d2:78:83:7a:57:49:4c:b0:1f: 68:28:74:61:ff:2d:b3:b3:a3:00:23:6d:eb:d4:db: 49:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:74:73:36:1D:8A:33:57:E8:DB:22:5F:42:92:00:F5:4F:2C:10:4F X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IHRzNh2KM1fo2yJfQpIA9U8sEE8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.106.0.0/17 Signature Algorithm: sha256WithRSAEncryption 9d:21:07:f3:4f:fb:fb:8a:09:05:d9:20:e8:18:11:af:9d:d0: ee:7c:e3:8b:60:23:b9:0b:d7:a3:7f:1c:a5:94:37:2a:5c:fe: c1:87:be:39:5d:c9:d1:52:40:c4:58:7e:f3:8e:1f:5e:26:06: e8:c9:ff:28:32:09:6e:86:4c:f3:30:69:38:01:7a:e6:4c:27: 1c:9f:65:f0:6e:a1:5b:a7:3a:e6:b6:42:c7:a7:51:4d:87:d9: ea:eb:5e:7d:ab:8c:3e:90:91:44:85:b6:1a:79:4e:b2:f7:5b: 85:c1:8d:e0:f5:6a:1d:80:28:11:75:d1:00:a6:4d:0b:f3:6d: 09:6a:70:fd:e0:61:36:49:89:4e:47:bb:83:a9:c4:d0:87:8f: 4d:6f:87:85:34:f4:d9:16:03:dd:e0:57:5a:1d:0d:3d:95:20: c5:69:71:e9:5d:f4:ab:01:ad:af:84:f4:ee:43:81:c0:16:24: 44:18:8d:9a:14:1d:96:da:a4:ea:55:b1:68:5e:1a:b0:9a:1a: 6e:73:22:22:dc:e3:95:36:66:17:ac:91:9f:64:4a:4b:05:b3: 10:57:a6:4a:85:9d:1d:26:d6:ab:cb:33:51:bb:0a:00:4b:52: 99:95:d4:e2:cf:26:4b:c9:56:d8:0b:f5:17:63:f7:30:5b:ac: 5b:69:a8:66 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE8wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MjdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDIwNzQ3MzM2MUQ4QTMz NTdFOERCMjI1RjQyOTIwMEY1NEYyQzEwNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqWZPYBHO0zghMbC7Wj/1VCM8uWsrmpSCeiz1NaMBPXcd1QJvB yZqpOM9UrUHqBOSQoNQLtGgo+3K0aa2nzPy+pR0+p24W1aQgVF7Otz8Q7qAvPpuu etXO8rs5FYrTq1OXb2wOqmr+uwY2HCpLFk5TvMi92zXP/hSQf8dKZOtvnLi6B8cH 0jCSMfGidfIsSJ0MZYh80esul/E5C4KnimFjS+ekzm27otDUyFhK7VWL3SYruEVu 1qE2p8sdSQfYiBjPl6m0/ujy0yoQHCYLgy+icbLvy1pg/KW+iOhqH+7Lbtc54jCF fNJ4g3pXSUywH2godGH/LbOzowAjbevU20npAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUIHRzNh2KM1fo2yJfQpIA9U8sEE8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSUhSek5oMktNMWZvMnlKZlFwSUE5 VThzRUU4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB2pqADAN BgkqhkiG9w0BAQsFAAOCAQEAnSEH80/7+4oJBdkg6BgRr53Q7nzji2AjuQvXo38c pZQ3Klz+wYe+OV3J0VJAxFh+844fXiYG6Mn/KDIJboZM8zBpOAF65kwnHJ9l8G6h W6c65rZCx6dRTYfZ6utefauMPpCRRIW2GnlOsvdbhcGN4PVqHYAoEXXRAKZNC/Nt CWpw/eBhNkmJTke7g6nE0IePTW+HhTT02RYD3eBXWh0NPZUgxWlx6V30qwGtr4T0 7kOBwBYkRBiNmhQdltqk6lWxaF4asJoabnMiItzjlTZmF6yRn2RKSwWzEFemSoWd HSbWq8szUbsKAEtSmZXU4s8mS8lW2Av1F2P3MFusW2moZg== -----END CERTIFICATE-----Generated at Sun Jun 2 09:37:17 2024 by rpki-client on console-ams.rpki-client.org