$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/TSLGI0LA5vu571Pa0oqe64AWnGs.roa File: TSLGI0LA5vu571Pa0oqe64AWnGs.roa (raw, json) Hash identifier: 3fRPxr2EClj6HifzLKsvtIv8gJmuWBLX0YDfat9DCX4= Subject key identifier: 4D:22:C6:23:42:C0:E6:FB:B9:EF:53:DA:D2:8A:9E:EB:80:16:9C:6B Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 135E Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TSLGI0LA5vu571Pa0oqe64AWnGs.roa Signing time: Fri 01 Sep 2023 09:24:50 +0000 ROA not before: Fri 01 Sep 2023 09:24:50 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 60.245.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4958 (0x135e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:50 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4D22C62342C0E6FBB9EF53DAD28A9EEB80169C6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:a5:76:df:39:91:57:ed:f7:7f:48:e5:19: 15:94:e6:80:4a:87:c0:a8:97:4c:58:ab:77:f5:cf: bb:f1:6f:14:19:6d:32:07:13:6b:e6:58:ae:8b:2f: 31:8f:bf:dc:b7:1d:21:3a:0c:9a:05:c1:a5:e2:46: 2a:6c:de:84:21:e3:85:83:43:61:09:5b:d8:63:11: 1c:aa:9b:79:bc:46:ce:ff:53:29:4f:73:7c:cd:af: c1:47:01:a9:c0:d6:5e:d8:3d:63:43:33:3b:8d:f3: d5:3e:3f:81:54:32:f5:6b:21:99:b5:ee:ce:68:dc: e6:26:8d:04:7e:e6:8b:a9:2f:25:aa:c4:b6:2b:ef: 26:52:44:ab:ab:43:3c:03:fa:26:e1:f1:3d:5e:76: 6b:8d:46:2b:3d:89:5c:c3:48:6a:f4:8a:a0:0d:71: 45:8f:1f:39:2e:66:a2:e7:d5:35:45:8a:2b:c5:21: 8d:ac:07:37:d3:4f:b3:05:ad:6a:77:b5:fc:38:bf: 29:a8:f2:c2:28:74:28:79:6a:9a:dd:9f:f3:00:32: 69:80:3c:cd:fd:a0:27:c5:62:f4:06:d9:07:fd:a0: 97:77:83:c3:e3:a2:94:7b:50:cd:42:7a:96:25:af: 03:e5:db:24:b1:ef:86:a7:0c:0d:90:29:70:76:7d: 07:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:22:C6:23:42:C0:E6:FB:B9:EF:53:DA:D2:8A:9E:EB:80:16:9C:6B X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TSLGI0LA5vu571Pa0oqe64AWnGs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.245.96.0/19 Signature Algorithm: sha256WithRSAEncryption 90:17:e7:52:97:bd:5f:35:ad:ff:7b:12:a2:3e:95:31:50:d6: 0a:bf:eb:24:20:b5:a4:3d:1e:fb:ac:1e:86:c0:f5:81:eb:79: f2:24:c7:5a:ff:8b:7a:d3:ba:a4:bb:e7:1c:c3:00:e7:4c:36: b6:2b:c9:89:88:28:01:c7:c6:a2:0d:1e:c8:92:4d:8e:ff:fb: 15:d4:c9:22:fd:ae:c8:5e:88:f8:52:e8:69:7b:a7:c5:18:db: eb:e8:36:40:c5:1c:15:a0:dd:2b:ef:73:21:ac:74:ea:97:82: f3:5c:c4:35:44:1a:bc:79:e0:75:77:35:01:2c:e5:26:56:fa: b2:1e:cd:69:05:d4:f5:36:8b:85:35:bf:bd:87:e1:8b:0a:e2: 2c:08:51:8a:91:2d:67:3b:7d:41:c0:73:d8:cf:48:ba:28:80: 01:0f:97:76:43:31:e5:ab:20:58:84:52:70:bd:c8:c1:7f:8b: 5e:11:f6:fb:7f:22:7c:f4:5b:f7:1d:08:fe:53:44:63:f2:ff: cb:8c:3b:84:03:e3:5c:be:3c:18:ca:a1:c1:c6:5a:ef:12:2a: 21:9b:85:4e:f9:88:cf:bb:ff:91:15:a9:c4:fc:9a:8c:1b:ef: 1c:5e:c1:69:3c:b5:b4:08:c5:3b:2c:d3:72:71:61:32:78:71: 1c:8d:4a:6f -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE14wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDREMjJDNjIzNDJDMEU2 RkJCOUVGNTNEQUQyOEE5RUVCODAxNjlDNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5R6V23zmRV+33f0jlGRWU5oBKh8Col0xYq3f1z7vxbxQZbTIH E2vmWK6LLzGPv9y3HSE6DJoFwaXiRips3oQh44WDQ2EJW9hjERyqm3m8Rs7/UylP c3zNr8FHAanA1l7YPWNDMzuN89U+P4FUMvVrIZm17s5o3OYmjQR+5oupLyWqxLYr 7yZSRKurQzwD+ibh8T1edmuNRis9iVzDSGr0iqANcUWPHzkuZqLn1TVFiivFIY2s BzfTT7MFrWp3tfw4vymo8sIodCh5aprdn/MAMmmAPM39oCfFYvQG2Qf9oJd3g8Pj opR7UM1CepYlrwPl2ySx74anDA2QKXB2fQcvAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUTSLGI0LA5vu571Pa0oqe64AWnGswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvVFNMR0kwTEE1dnU1NzFQYTBvcWU2 NEFXbkdzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBTz1YDAN BgkqhkiG9w0BAQsFAAOCAQEAkBfnUpe9XzWt/3sSoj6VMVDWCr/rJCC1pD0e+6we hsD1get58iTHWv+LetO6pLvnHMMA50w2tivJiYgoAcfGog0eyJJNjv/7FdTJIv2u yF6I+FLoaXunxRjb6+g2QMUcFaDdK+9zIax06peC81zENUQavHngdXc1ASzlJlb6 sh7NaQXU9TaLhTW/vYfhiwriLAhRipEtZzt9QcBz2M9IuiiAAQ+XdkMx5asgWIRS cL3IwX+LXhH2+38ifPRb9x0I/lNEY/L/y4w7hAPjXL48GMqhwcZa7xIqIZuFTvmI z7v/kRWpxPyajBvvHF7BaTy1tAjFOyzTcnFhMnhxHI1Kbw== -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org