$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/JkpixLp9UAt1dLuW-DNunEoUvb8.roa File: JkpixLp9UAt1dLuW-DNunEoUvb8.roa (raw, json) Hash identifier: jxuCDF35p+2Drl5EO4qeP1LFtNc6FV85ST79CVIgTbU= Subject key identifier: 26:4A:62:C4:BA:7D:50:0B:75:74:BB:96:F8:33:6E:9C:4A:14:BD:BF Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1619 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/JkpixLp9UAt1dLuW-DNunEoUvb8.roa Signing time: Mon 26 Aug 2024 05:21:46 +0000 ROA not before: Mon 26 Aug 2024 05:21:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18049 IP address blocks: 106.105.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5657 (0x1619) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:21:46 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=264A62C4BA7D500B7574BB96F8336E9C4A14BDBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4a:bd:a2:78:8a:9b:f2:e1:85:27:17:20:a0: fd:36:1c:89:0b:90:e0:f6:f1:75:4d:12:04:f4:e4: 4f:9c:10:a4:48:6a:89:b8:20:89:3c:cf:4f:28:71: 64:df:eb:e9:7d:c5:4f:cb:52:5a:f5:a9:1e:75:ac: 72:04:da:01:ee:e8:cf:65:da:af:a1:19:4f:b3:9a: c9:6b:50:f4:8e:24:c9:97:82:22:de:e7:61:b2:d2: 27:d7:27:b7:24:b8:3a:ec:63:c7:49:de:84:77:a7: ac:46:9a:00:c9:83:55:b5:83:a3:fe:2c:41:d1:c9: 7b:b0:7d:57:50:64:9d:2d:05:b2:9f:8d:df:32:ab: e9:d8:eb:36:47:4c:1a:57:8d:4f:32:90:78:fb:ee: de:30:55:c4:43:89:fd:a1:b2:18:1c:ea:27:03:ef: a7:17:cc:2d:ff:b2:8f:11:bd:81:57:e3:45:5e:9c: 80:33:df:ce:f0:62:05:ce:7c:94:20:b9:b0:57:f3: 94:dc:45:1e:d6:f2:be:2c:3f:f7:e9:47:12:90:f8: f5:b0:4f:98:c5:da:71:8d:a6:d6:b9:4c:0e:6b:45: db:d9:af:c9:f6:03:7d:13:dd:33:a2:b7:ea:de:61: 5d:2a:01:55:e5:b4:63:3b:47:0d:c4:71:4a:52:90: 43:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4A:62:C4:BA:7D:50:0B:75:74:BB:96:F8:33:6E:9C:4A:14:BD:BF X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/JkpixLp9UAt1dLuW-DNunEoUvb8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.0.0/21 Signature Algorithm: sha256WithRSAEncryption 28:1a:95:10:74:dc:a8:a9:86:3f:bd:6b:c5:e3:ae:49:04:fc: 76:0e:89:6b:5d:ef:cd:0d:ec:c4:a2:21:2e:95:72:bf:14:53: c9:68:e1:5f:9b:51:44:43:ff:f3:b0:86:9a:cd:e2:02:d1:51: 73:b8:e0:5d:76:93:ec:39:e5:bf:1d:11:46:1c:95:6d:89:df: 96:62:11:c3:3c:eb:d5:b2:ae:dc:89:b2:e5:a1:74:5a:4a:76: a6:f6:3d:3c:a5:4b:f0:97:87:f3:e0:b5:39:be:e5:49:fe:60: 97:e8:7e:83:ac:c9:dc:8f:df:d7:60:7b:c6:e0:97:72:38:6b: e3:f9:91:04:e4:e2:00:fd:b8:29:1f:02:24:bd:56:3e:ae:e7: 96:ca:92:32:3b:43:c9:33:79:5d:b2:90:b0:55:14:c1:24:32: 61:da:ea:b7:48:71:66:f0:9c:62:27:76:29:04:f5:b3:3d:93: 3d:c6:da:3e:50:33:8a:ed:40:0e:5f:72:72:3f:81:c4:d6:dc: fc:36:d6:ce:28:e6:20:2e:75:ea:b9:3e:16:55:07:25:f7:a9: 13:ba:4f:8c:c3:7a:5b:10:d1:82:88:20:44:49:12:5d:32:3f: e2:6a:02:1f:00:3c:f8:da:6c:44:3b:b4:d0:7a:ba:cf:85:e1: d2:5a:f4:7b -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFhkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIxNDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI2NEE2MkM0QkE3RDUw MEI3NTc0QkI5NkY4MzM2RTlDNEExNEJEQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbSr2ieIqb8uGFJxcgoP02HIkLkOD28XVNEgT05E+cEKRIaom4 IIk8z08ocWTf6+l9xU/LUlr1qR51rHIE2gHu6M9l2q+hGU+zmslrUPSOJMmXgiLe 52Gy0ifXJ7ckuDrsY8dJ3oR3p6xGmgDJg1W1g6P+LEHRyXuwfVdQZJ0tBbKfjd8y q+nY6zZHTBpXjU8ykHj77t4wVcRDif2hshgc6icD76cXzC3/so8RvYFX40VenIAz 387wYgXOfJQgubBX85TcRR7W8r4sP/fpRxKQ+PWwT5jF2nGNpta5TA5rRdvZr8n2 A30T3TOit+reYV0qAVXltGM7Rw3EcUpSkEO5AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUJkpixLp9UAt1dLuW+DNunEoUvb8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSmtwaXhMcDlVQXQxZEx1Vy1ETnVu RW9VdmI4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2ppADAN BgkqhkiG9w0BAQsFAAOCAQEAKBqVEHTcqKmGP71rxeOuSQT8dg6Ja13vzQ3sxKIh LpVyvxRTyWjhX5tRREP/87CGms3iAtFRc7jgXXaT7Dnlvx0RRhyVbYnflmIRwzzr 1bKu3Imy5aF0Wkp2pvY9PKVL8JeH8+C1Ob7lSf5gl+h+g6zJ3I/f12B7xuCXcjhr 4/mRBOTiAP24KR8CJL1WPq7nlsqSMjtDyTN5XbKQsFUUwSQyYdrqt0hxZvCcYid2 KQT1sz2TPcbaPlAziu1ADl9ycj+BxNbc/DbWzijmIC516rk+FlUHJfepE7pPjMN6 WxDRgoggREkSXTI/4moCHwA8+NpsRDu00Hq6z4Xh0lr0ew== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:10 2024 by rpki-client on console-ams.rpki-client.org