$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/TS3XSwfWqhGJhTLIfjnXwd0e6Bs.roa File: TS3XSwfWqhGJhTLIfjnXwd0e6Bs.roa (raw, json) Hash identifier: j1zVLJ7uxPxn2oNsJ7AN0b2sn/1Z++pudRcMlt/2Ou0= Subject key identifier: 4D:2D:D7:4B:07:D6:AA:11:89:85:32:C8:7E:39:D7:C1:DD:1E:E8:1B Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 134A Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TS3XSwfWqhGJhTLIfjnXwd0e6Bs.roa Signing time: Fri 01 Sep 2023 09:24:44 +0000 ROA not before: Fri 01 Sep 2023 09:24:44 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 113.196.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4938 (0x134a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:44 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4D2DD74B07D6AA11898532C87E39D7C1DD1EE81B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:90:e4:1f:eb:f2:82:96:69:0b:ad:7f:dd:0e: 87:6e:c8:ea:db:7f:a8:38:4c:d4:a0:f2:f8:ca:24: 35:20:4c:12:dd:74:19:f3:15:a7:6f:94:53:dd:09: f0:6e:9c:ab:ac:8a:e5:f3:e8:c9:ac:25:05:e4:66: 71:60:ae:bc:1f:81:5c:75:27:5a:64:58:4f:fe:fb: d2:af:ce:5a:91:85:8f:1e:1e:20:0d:d0:62:0d:be: 94:ab:e7:b7:2e:f9:47:76:12:de:e7:b0:e0:a4:e5: 5e:63:42:85:ca:0e:3c:0b:85:74:20:6b:5d:7c:e8: ee:82:56:7a:64:55:48:aa:73:c1:c1:a7:1c:6a:49: 51:87:82:45:9f:3e:71:e1:55:02:0d:4e:ea:b5:9a: ce:e2:7c:58:47:5b:fc:6b:5b:7d:c5:d1:a1:eb:d0: f2:0e:32:59:3b:1e:c0:42:7d:b2:b2:38:09:77:f9: 9d:d4:62:82:40:ca:c1:19:d0:62:6b:89:79:fc:31: f8:f7:46:49:c6:8d:b9:df:de:78:c6:e3:cd:77:33: 44:1d:d1:d8:82:a4:84:98:46:5d:11:6f:b8:06:c5: ac:4a:72:51:1e:7b:1c:99:b4:1b:68:a6:8b:76:f9: fb:47:68:f3:bc:53:ba:59:0b:16:e7:43:12:5f:e8: e4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2D:D7:4B:07:D6:AA:11:89:85:32:C8:7E:39:D7:C1:DD:1E:E8:1B X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TS3XSwfWqhGJhTLIfjnXwd0e6Bs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.196.192.0/18 Signature Algorithm: sha256WithRSAEncryption 49:f1:0d:d8:ce:87:f1:10:b2:fc:e7:52:f7:e4:b9:5a:92:b9: ea:04:bb:a9:2e:cc:9f:be:7f:f9:bb:1a:05:2e:c9:fb:cd:82: 27:6e:c7:9b:69:3b:b0:bd:e3:79:cb:aa:03:a6:95:62:34:c4: e1:4d:41:48:44:c7:78:c8:61:b5:d0:3b:49:d3:b8:ca:70:de: 8a:68:01:9e:21:a9:6b:04:2d:e4:59:95:06:a3:66:a9:6d:c3: 70:4a:06:03:2f:13:58:b0:a8:52:5f:06:a9:c8:42:eb:df:13: e8:7e:f1:23:04:02:5e:5e:e5:11:08:39:e6:ff:24:7e:bc:00: 2b:6d:95:25:ab:4a:dc:33:6d:9f:cf:6b:e1:7f:6d:52:b5:c4: 5a:5d:48:bd:b3:e5:d2:4e:76:b1:86:ff:d0:42:b2:f5:43:e9: 49:7c:4f:84:e8:43:72:4e:53:46:0f:c9:dc:83:f4:5c:c8:fc: 98:25:59:97:25:3a:bf:f1:52:a5:fe:29:07:6f:ae:39:68:02: 4e:bd:cd:41:98:e9:bb:2a:e1:59:5a:86:65:85:a0:84:14:14: c2:c0:45:34:f6:b5:f2:e9:98:7e:0f:93:00:3c:81:60:df:8f: 07:44:f8:a0:c7:b2:4f:06:11:ad:78:1b:da:c6:ee:c0:3c:2a: 42:6b:14:48 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE0owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDREMkRENzRCMDdENkFB MTE4OTg1MzJDODdFMzlEN0MxREQxRUU4MUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvkOQf6/KClmkLrX/dDoduyOrbf6g4TNSg8vjKJDUgTBLddBnz FadvlFPdCfBunKusiuXz6MmsJQXkZnFgrrwfgVx1J1pkWE/++9KvzlqRhY8eHiAN 0GINvpSr57cu+Ud2Et7nsOCk5V5jQoXKDjwLhXQga1186O6CVnpkVUiqc8HBpxxq SVGHgkWfPnHhVQINTuq1ms7ifFhHW/xrW33F0aHr0PIOMlk7HsBCfbKyOAl3+Z3U YoJAysEZ0GJriXn8Mfj3RknGjbnf3njG4813M0Qd0diCpISYRl0Rb7gGxaxKclEe exyZtBtopot2+ftHaPO8U7pZCxbnQxJf6OTzAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUTS3XSwfWqhGJhTLIfjnXwd0e6BswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvVFMzWFN3ZldxaEdKaFRMSWZqblh3 ZDBlNkJzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnHEwDAN BgkqhkiG9w0BAQsFAAOCAQEASfEN2M6H8RCy/OdS9+S5WpK56gS7qS7Mn75/+bsa BS7J+82CJ27Hm2k7sL3jecuqA6aVYjTE4U1BSETHeMhhtdA7SdO4ynDeimgBniGp awQt5FmVBqNmqW3DcEoGAy8TWLCoUl8GqchC698T6H7xIwQCXl7lEQg55v8kfrwA K22VJatK3DNtn89r4X9tUrXEWl1IvbPl0k52sYb/0EKy9UPpSXxPhOhDck5TRg/J 3IP0XMj8mCVZlyU6v/FSpf4pB2+uOWgCTr3NQZjpuyrhWVqGZYWghBQUwsBFNPa1 8umYfg+TADyBYN+PB0T4oMeyTwYRrXgb2sbuwDwqQmsUSA== -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org