$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/QlbQuU-LIg9js9cKmvkf_zylIFs.roa File: QlbQuU-LIg9js9cKmvkf_zylIFs.roa (raw, json) Hash identifier: 46a29QHHOYHL+DMYxHpdELsGjR4IrwLbwC4+Z8CUY1s= Subject key identifier: 42:56:D0:B9:4F:8B:22:0F:63:B3:D7:0A:9A:F9:1F:FF:3C:A5:20:5B Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 13E4 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QlbQuU-LIg9js9cKmvkf_zylIFs.roa Signing time: Fri 01 Sep 2023 09:25:33 +0000 ROA not before: Fri 01 Sep 2023 09:25:33 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131627 IP address blocks: 60.245.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5092 (0x13e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:33 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4256D0B94F8B220F63B3D70A9AF91FFF3CA5205B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:10:ec:9d:ee:d5:50:0d:d2:65:0e:af:c3:50: a5:62:bb:25:95:7a:6b:21:3c:7e:c0:b4:80:cd:ee: 1c:38:8c:80:3d:17:78:fa:4e:26:2e:65:a3:2c:5d: 9f:2a:fd:12:f9:80:8c:04:21:fc:29:4b:dc:5f:a7: 4a:cf:29:66:ff:e8:0c:86:38:c4:43:27:0c:5e:64: b6:ef:fd:f9:e6:33:d6:76:0b:58:01:a5:cc:11:90: a1:d3:7b:12:ea:be:d6:52:fc:9f:79:fb:dd:77:52: b0:80:90:88:3b:40:66:d7:74:a7:07:e1:77:e1:10: 7a:d5:4e:c9:27:27:99:e5:24:e0:83:0b:81:51:fa: 8c:26:80:b2:32:d2:a3:1b:13:15:4a:18:c3:e6:4c: 15:a5:64:3e:c0:88:1a:e8:8c:8f:fb:76:68:bf:77: 62:5e:c5:83:00:bb:4f:24:2b:ed:73:81:1d:04:24: 31:58:bc:05:1c:15:b3:61:d5:d3:7e:2d:7c:6f:99: 70:83:35:62:6d:91:69:1c:16:80:1f:f3:c1:96:16: 91:f5:02:08:a8:6b:e8:b9:f4:ce:99:f3:ff:18:58: e3:7e:61:9a:5a:6c:02:8f:79:cc:ad:88:0c:99:c4: 47:ee:66:70:d9:32:db:71:1b:81:1c:cb:fc:0d:c2: 1b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:56:D0:B9:4F:8B:22:0F:63:B3:D7:0A:9A:F9:1F:FF:3C:A5:20:5B X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QlbQuU-LIg9js9cKmvkf_zylIFs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.245.96.0/20 Signature Algorithm: sha256WithRSAEncryption 35:8b:6c:9f:55:9d:cb:7a:af:70:de:3d:35:55:25:97:47:c1: 59:6b:da:14:56:2c:df:91:fc:a6:98:8c:57:04:1c:ea:5c:8b: 1f:dd:18:17:04:67:86:95:bb:f4:65:af:9d:60:30:e8:4b:04: c9:b1:95:2e:b4:d4:35:a7:ab:bb:43:23:5c:a8:d0:36:43:6c: c7:eb:3e:92:0f:1a:f4:f5:7b:fe:d8:b5:32:c1:a0:3b:b1:1c: 58:84:92:56:49:af:3f:0c:2f:d5:96:61:10:f9:b0:c2:bf:1d: 1a:48:de:76:cf:90:eb:d4:7a:20:07:cd:91:d4:b4:e1:d3:22: 3e:cc:81:df:80:73:e7:43:8d:13:a7:2b:73:80:03:08:2b:5b: 27:d2:bf:cb:46:1e:db:ea:09:56:98:c6:23:ad:30:e6:1a:1c: bc:03:04:bd:07:4a:6e:a3:90:db:c6:4a:db:bf:60:e4:dc:8f: d5:a2:aa:88:59:41:dc:fe:b0:89:0c:25:6f:fe:6d:37:14:70: 20:2b:24:3a:8a:7c:33:8f:8d:b3:96:34:a0:3a:e0:f7:9a:4f: 8d:57:ac:9c:78:eb:d4:1e:63:71:67:cb:3e:59:da:6f:20:c9: 9d:9f:d9:c6:e3:5e:c8:65:4f:4c:89:4e:df:20:6f:ea:0e:85: 1d:4b:c5:43 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE+QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MzNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQyNTZEMEI5NEY4QjIy MEY2M0IzRDcwQTlBRjkxRkZGM0NBNTIwNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgEOyd7tVQDdJlDq/DUKViuyWVemshPH7AtIDN7hw4jIA9F3j6 TiYuZaMsXZ8q/RL5gIwEIfwpS9xfp0rPKWb/6AyGOMRDJwxeZLbv/fnmM9Z2C1gB pcwRkKHTexLqvtZS/J95+913UrCAkIg7QGbXdKcH4XfhEHrVTsknJ5nlJOCDC4FR +owmgLIy0qMbExVKGMPmTBWlZD7AiBrojI/7dmi/d2JexYMAu08kK+1zgR0EJDFY vAUcFbNh1dN+LXxvmXCDNWJtkWkcFoAf88GWFpH1Agioa+i59M6Z8/8YWON+YZpa bAKPecytiAyZxEfuZnDZMttxG4Ecy/wNwhuzAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUQlbQuU+LIg9js9cKmvkf/zylIFswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvUWxiUXVVLUxJZzlqczljS212a2Zf enlsSUZzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBDz1YDAN BgkqhkiG9w0BAQsFAAOCAQEANYtsn1Wdy3qvcN49NVUll0fBWWvaFFYs35H8ppiM VwQc6lyLH90YFwRnhpW79GWvnWAw6EsEybGVLrTUNaeru0MjXKjQNkNsx+s+kg8a 9PV7/ti1MsGgO7EcWISSVkmvPwwv1ZZhEPmwwr8dGkjeds+Q69R6IAfNkdS04dMi PsyB34Bz50ONE6crc4ADCCtbJ9K/y0Ye2+oJVpjGI60w5hocvAMEvQdKbqOQ28ZK 279g5NyP1aKqiFlB3P6wiQwlb/5tNxRwICskOop8M4+Ns5Y0oDrg95pPjVesnHjr 1B5jcWfLPlnabyDJnZ/ZxuNeyGVPTIlO3yBv6g6FHUvFQw== -----END CERTIFICATE-----Generated at Sun Jun 2 07:14:23 2024 by rpki-client on console-fra.rpki-client.org