$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/IWRtUViTJaVVIHL1u4VqQBDrllY.roa File: IWRtUViTJaVVIHL1u4VqQBDrllY.roa (raw, json) Hash identifier: O6al1QCOHpb+50KeiZ+o65UnAEqmI9L3MfmJCYI6jzY= Subject key identifier: 21:64:6D:51:58:93:25:A5:55:20:72:F5:BB:85:6A:40:10:EB:96:56 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1327 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IWRtUViTJaVVIHL1u4VqQBDrllY.roa Signing time: Fri 01 Sep 2023 09:24:33 +0000 ROA not before: Fri 01 Sep 2023 09:24:33 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 2001:cd8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4903 (0x1327) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:33 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=21646D51589325A5552072F5BB856A4010EB9656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c6:24:c4:74:36:0c:4e:9e:9c:1b:1e:63:ad: 89:7f:c9:9c:e2:dd:84:74:8c:2a:f8:84:2f:f2:c2: da:d3:c1:e8:24:1e:0e:9c:6f:09:76:3c:c4:45:f9: 6c:1a:90:4b:30:13:3d:49:89:6b:68:8c:df:df:e7: 5f:ae:ce:e5:f8:52:95:d2:d1:fa:8f:e4:18:a8:80: 36:6d:61:c9:0e:8a:14:e6:f4:47:fc:bf:38:1a:06: 00:5d:e9:45:03:0a:cf:3c:5e:23:0d:d4:15:65:0d: 2f:c3:3a:87:d3:05:5e:51:6b:4b:56:1e:8e:d3:5a: 9b:22:e9:ec:d2:84:8c:e1:7a:a6:1d:b3:4d:c1:b2: 60:49:4a:88:a3:c1:b9:90:ce:64:31:0a:eb:d2:3f: 0b:0b:45:43:bb:05:a3:01:62:da:5d:04:65:30:a7: cb:0e:7e:75:4a:2a:75:68:c1:12:15:30:b9:3e:4f: 74:a3:59:a4:05:4b:50:cd:27:bd:c7:33:7b:24:f2: 60:ab:ab:9b:14:10:3c:1c:66:de:96:2d:61:f5:17: bd:32:8c:4d:1c:d5:ad:ce:11:1d:0a:e8:d8:f9:f7: 15:c8:89:0a:39:1e:94:26:ed:c4:30:c2:3d:89:e1: 2b:8e:f6:f7:ad:03:27:ca:25:10:df:26:70:ea:8e: 81:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:64:6D:51:58:93:25:A5:55:20:72:F5:BB:85:6A:40:10:EB:96:56 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IWRtUViTJaVVIHL1u4VqQBDrllY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:cd8::/32 Signature Algorithm: sha256WithRSAEncryption c9:cf:97:36:d7:fa:1c:60:42:7e:e7:34:aa:f2:8c:0d:6c:da: a2:c3:a4:07:8d:33:8c:f4:11:bf:db:51:cc:da:be:26:b7:f2: aa:9c:ba:98:76:ff:2d:03:cb:68:21:5b:94:d3:5a:52:a5:9a: ac:b6:0e:cd:c8:0f:3e:f6:2f:69:36:2d:94:a9:60:d5:85:21: 36:86:7c:f8:fc:78:10:91:77:92:76:8f:05:7e:5f:49:15:08: c8:42:e8:d0:a8:fb:5e:d1:8b:aa:1f:39:96:33:3c:60:f5:ac: 5a:a9:d6:fb:3f:cb:1d:78:94:53:e0:68:1c:6a:20:7e:f8:f7: 0a:bd:3f:4b:f6:15:4c:7f:6b:99:61:db:c7:29:c3:bc:27:eb: 6b:df:1e:48:a6:f9:2c:35:f8:71:9e:ff:26:52:18:d3:87:4a: ab:7f:37:ab:c1:a0:d4:2f:d1:9b:ab:a4:66:c2:b8:04:c1:3c: 23:2e:fc:6e:21:b7:13:b5:b6:17:a2:5d:c9:ed:27:bc:21:65: 50:57:ef:3c:a3:d4:d3:5b:c2:1a:3c:e7:31:1b:f1:a9:62:21: 9b:0a:ea:44:51:a7:46:98:b1:85:17:7b:66:fe:53:43:c1:b8: c3:37:96:54:04:40:30:9f:de:d1:bb:7e:77:88:3c:a2:f2:39: 2a:ea:bc:c4 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEycwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MzNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDIxNjQ2RDUxNTg5MzI1 QTU1NTIwNzJGNUJCODU2QTQwMTBFQjk2NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0xiTEdDYMTp6cGx5jrYl/yZzi3YR0jCr4hC/ywtrTwegkHg6c bwl2PMRF+WwakEswEz1JiWtojN/f51+uzuX4UpXS0fqP5BiogDZtYckOihTm9Ef8 vzgaBgBd6UUDCs88XiMN1BVlDS/DOofTBV5Ra0tWHo7TWpsi6ezShIzheqYds03B smBJSoijwbmQzmQxCuvSPwsLRUO7BaMBYtpdBGUwp8sOfnVKKnVowRIVMLk+T3Sj WaQFS1DNJ73HM3sk8mCrq5sUEDwcZt6WLWH1F70yjE0c1a3OER0K6Nj59xXIiQo5 HpQm7cQwwj2J4SuO9vetAyfKJRDfJnDqjoExAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUIWRtUViTJaVVIHL1u4VqQBDrllYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSVdSdFVWaVRKYVZWSUhMMXU0VnFR QkRybGxZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACABDNgw DQYJKoZIhvcNAQELBQADggEBAMnPlzbX+hxgQn7nNKryjA1s2qLDpAeNM4z0Eb/b Uczavia38qqcuph2/y0Dy2ghW5TTWlKlmqy2Ds3IDz72L2k2LZSpYNWFITaGfPj8 eBCRd5J2jwV+X0kVCMhC6NCo+17Ri6ofOZYzPGD1rFqp1vs/yx14lFPgaBxqIH74 9wq9P0v2FUx/a5lh28cpw7wn62vfHkim+Sw1+HGe/yZSGNOHSqt/N6vBoNQv0Zur pGbCuATBPCMu/G4htxO1theiXcntJ7whZVBX7zyj1NNbwho85zEb8aliIZsK6kRR p0aYsYUXe2b+U0PBuMM3llQEQDCf3tG7fneIPKLyOSrqvMQ= -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org