$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/NwRgCrWdGnlF_eHUby7ONx70NxE.roa File: NwRgCrWdGnlF_eHUby7ONx70NxE.roa (raw, json) Hash identifier: Jteyv5YgnIAr5unm0Q3PL8zDytYgeJxfDKcJI57kp60= Subject key identifier: 37:04:60:0A:B5:9D:1A:79:45:FD:E1:D4:6F:2E:CE:37:1E:F4:37:11 Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 0DBF Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NwRgCrWdGnlF_eHUby7ONx70NxE.roa Signing time: Fri 01 Sep 2023 09:25:29 +0000 ROA not before: Fri 01 Sep 2023 09:25:29 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 192.72.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 17:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3519 (0xdbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Sep 1 09:25:29 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3704600AB59D1A7945FDE1D46F2ECE371EF43711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c2:f7:05:23:1c:8d:f1:6b:ae:2e:37:7c:f8: f7:48:ae:f0:00:06:a1:62:cb:c3:3a:4d:01:b6:f9: 4e:c0:77:b6:0a:0e:5a:5c:93:bb:10:7f:8f:f7:17: d0:17:40:83:66:d1:13:4d:da:1a:37:63:9f:ce:d3: d2:ba:66:e1:d5:b9:e9:b8:38:15:fa:81:21:f8:b9: a7:f6:5c:08:5a:41:22:45:d1:9b:40:aa:3e:c6:01: 18:d8:3d:b2:76:5b:dd:53:79:9c:b7:9d:fb:74:1f: f1:55:ed:32:0c:3a:03:00:d2:27:aa:65:14:31:a6: 86:41:77:94:72:18:ae:47:da:4a:1f:d3:cb:4e:68: c2:eb:4d:6c:4c:26:46:ec:36:53:b3:6d:0e:17:b9: 7c:96:af:34:ee:74:ec:3e:66:5d:52:e9:8c:47:36: 47:7d:76:ae:35:8e:25:9f:f1:fd:17:9d:9a:f7:c2: ea:b4:f5:4f:28:b9:9d:b3:48:7e:cc:af:0d:d3:87: 13:8e:38:5e:29:d2:54:7f:95:83:6b:d1:65:b5:ac: 8b:55:35:b2:ae:49:50:6c:55:fb:11:47:aa:d6:5d: 85:8a:af:2d:66:f1:46:10:e9:c3:06:a5:87:c9:99: a9:de:4a:1d:82:bb:ca:05:80:0a:24:ef:9f:53:45: 0f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:04:60:0A:B5:9D:1A:79:45:FD:E1:D4:6F:2E:CE:37:1E:F4:37:11 X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NwRgCrWdGnlF_eHUby7ONx70NxE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.4.0/22 Signature Algorithm: sha256WithRSAEncryption 49:33:9a:05:92:ca:d8:68:1f:18:71:f3:49:8f:09:4b:1b:20: 7c:92:91:6d:d0:45:df:a0:1a:89:e3:77:ce:b6:92:76:b2:c5: a0:02:72:cf:a0:e8:1f:3c:6e:1f:77:48:33:35:e8:41:53:53: 8b:bc:0f:52:e8:18:ae:ba:d4:da:9c:d4:ea:53:05:26:23:dc: 70:8e:82:8b:87:41:02:f7:fb:c6:c8:fc:c1:c3:00:e4:6f:a2: db:56:72:54:5e:eb:84:79:89:21:11:f5:91:8b:a1:45:49:8d: b2:9f:1c:1a:e9:cb:d6:3a:eb:16:73:dc:89:f0:68:87:e1:ed: fd:27:7a:3e:8c:60:d8:94:47:5e:9d:21:b7:f6:d3:c1:f5:1b: 37:07:6a:76:71:14:04:84:5a:f9:28:ac:39:31:bd:2d:ad:be: b9:f0:88:1c:ed:4a:19:e9:02:da:60:1d:79:44:d1:ff:67:9c: 79:8f:61:ca:93:b7:da:5b:7c:5a:69:a1:08:96:3d:41:03:3e: ba:a3:28:72:6b:c7:d0:40:fe:80:5b:0b:15:2c:49:e8:12:ec: fc:33:03:54:e5:39:40:16:b4:28:68:d9:5b:eb:0f:f3:5d:47: 45:fc:a6:d4:06:57:f8:40:5b:88:1f:ff:49:e8:13:98:41:df: 96:d1:8b:c0 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDb8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yMzA5MDEw OTI1MjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM3MDQ2MDBBQjU5RDFB Nzk0NUZERTFENDZGMkVDRTM3MUVGNDM3MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLwvcFIxyN8WuuLjd8+PdIrvAABqFiy8M6TQG2+U7Ad7YKDlpc k7sQf4/3F9AXQINm0RNN2ho3Y5/O09K6ZuHVuem4OBX6gSH4uaf2XAhaQSJF0ZtA qj7GARjYPbJ2W91TeZy3nft0H/FV7TIMOgMA0ieqZRQxpoZBd5RyGK5H2kof08tO aMLrTWxMJkbsNlOzbQ4XuXyWrzTudOw+Zl1S6YxHNkd9dq41jiWf8f0XnZr3wuq0 9U8ouZ2zSH7Mrw3ThxOOOF4p0lR/lYNr0WW1rItVNbKuSVBsVfsRR6rWXYWKry1m 8UYQ6cMGpYfJmaneSh2Cu8oFgAok759TRQ/rAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUNwRgCrWdGnlF/eHUby7ONx70NxEwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvTndSZ0NyV2RHbmxGX2VIVWJ5N09O eDcwTnhFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsBIBDAN BgkqhkiG9w0BAQsFAAOCAQEASTOaBZLK2GgfGHHzSY8JSxsgfJKRbdBF36AaieN3 zraSdrLFoAJyz6DoHzxuH3dIMzXoQVNTi7wPUugYrrrU2pzU6lMFJiPccI6Ci4dB Avf7xsj8wcMA5G+i21ZyVF7rhHmJIRH1kYuhRUmNsp8cGunL1jrrFnPcifBoh+Ht /Sd6Poxg2JRHXp0ht/bTwfUbNwdqdnEUBIRa+SisOTG9La2+ufCIHO1KGekC2mAd eUTR/2eceY9hypO32lt8WmmhCJY9QQM+uqMocmvH0ED+gFsLFSxJ6BLs/DMDVOU5 QBa0KGjZW+sP811HRfym1AZX+EBbiB//SegTmEHfltGLwA== -----END CERTIFICATE-----Generated at Sat Jun 1 23:25:37 2024 by rpki-client on console-ams.rpki-client.org