$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/XijCNfk6dO3QC8gJwZnJ20RMOKo.roa File: XijCNfk6dO3QC8gJwZnJ20RMOKo.roa (raw, json) Hash identifier: EvO1Hv+zCyOn2ZEJ/wr5UpepnjrFWRL3yBJ1k8NcSI8= Subject key identifier: 5E:28:C2:35:F9:3A:74:ED:D0:0B:C8:09:C1:99:C9:DB:44:4C:38:AA Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1306 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/XijCNfk6dO3QC8gJwZnJ20RMOKo.roa Signing time: Fri 01 Sep 2023 09:24:23 +0000 ROA not before: Fri 01 Sep 2023 09:24:23 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18049 IP address blocks: 175.183.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4870 (0x1306) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:23 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=5E28C235F93A74EDD00BC809C199C9DB444C38AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:5a:c5:12:20:b0:c7:56:eb:57:45:a5:4b: 1e:76:84:16:f3:af:d6:99:29:ec:0c:64:dd:d3:f3: 4e:15:ea:06:75:2c:b7:df:9b:53:f0:54:ef:07:71: f2:81:c7:c8:d0:cb:e6:bd:0e:a1:46:ce:01:88:37: 78:31:56:9f:6e:64:3a:87:80:f5:86:58:61:bb:bb: 3b:82:fe:86:99:b6:88:52:78:21:b4:9d:c4:c9:4a: bd:53:a1:97:ac:e9:93:71:e7:fa:67:fe:5c:3f:a6: 26:f6:3f:4d:8f:e0:6d:8c:ba:19:68:3c:fa:3f:6a: 0a:1d:17:0f:67:45:66:d5:b6:37:d4:f0:97:d0:06: 4e:b2:2e:fc:26:20:85:43:68:7a:d9:ba:81:20:d6: c6:eb:ce:93:a4:27:cd:19:28:81:c0:35:08:9a:25: 17:77:b7:b4:d9:bc:f5:93:58:02:04:87:91:d8:c8: 11:6b:36:69:46:ae:fb:6e:7d:13:86:61:18:a2:7e: 44:1d:4c:df:b7:79:45:f6:d7:24:7d:0f:1e:94:3b: 0e:08:a6:9d:e8:3a:bd:22:97:f7:14:62:cf:17:60: b8:e7:ec:23:2f:d8:63:28:2c:52:a7:a9:ec:bb:39: fb:0b:f5:38:63:4d:17:1f:7f:b3:80:5e:26:7e:33: 8b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:28:C2:35:F9:3A:74:ED:D0:0B:C8:09:C1:99:C9:DB:44:4C:38:AA X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/XijCNfk6dO3QC8gJwZnJ20RMOKo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.183.80.0/20 Signature Algorithm: sha256WithRSAEncryption 66:bb:d7:17:c5:fe:66:c5:92:f1:4a:0d:07:72:ce:8a:03:66: 73:29:82:7e:3f:4b:9a:fa:de:8d:c0:03:f4:4d:3b:f0:92:aa: be:bc:5b:a7:52:27:7c:a6:f9:38:f1:b5:e2:ef:83:e7:03:c6: c4:bf:55:2e:70:1e:72:14:c2:81:9c:e5:ff:0b:cd:54:88:78: 00:39:ec:f8:75:6f:d5:05:1c:ae:0c:a9:f2:52:9a:80:2e:28: f1:f5:ef:86:0e:89:2b:f2:7a:3f:31:be:43:5b:aa:89:54:4f: 8d:a9:87:99:5e:12:5d:c6:aa:30:8b:3d:85:f9:e2:97:19:ba: 05:c2:f6:87:c7:3b:df:9f:80:cd:d7:48:48:a7:96:4d:78:e3: 8f:32:9e:99:43:6a:61:52:86:6f:48:82:da:44:64:75:86:0b: d6:43:90:3d:f9:ff:dd:87:9c:24:5c:e1:fb:4e:05:e1:5a:fc: fd:a1:8a:fe:90:de:d0:b6:d0:22:49:ab:d1:44:8c:c3:bf:f6: 78:1d:c3:23:61:ff:a0:0d:2e:89:dd:50:40:4d:5b:f1:db:a2: 9f:82:6d:15:90:09:f4:1f:d4:1c:ef:24:7e:f4:15:1c:55:be: 82:33:19:38:39:d6:f7:0f:4c:c5:70:7c:cb:c1:1b:91:cc:5a: 90:2c:e3:1e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEwYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDVFMjhDMjM1RjkzQTc0 RUREMDBCQzgwOUMxOTlDOURCNDQ0QzM4QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+L1rFEiCwx1brV0WlSx52hBbzr9aZKewMZN3T804V6gZ1LLff m1PwVO8HcfKBx8jQy+a9DqFGzgGIN3gxVp9uZDqHgPWGWGG7uzuC/oaZtohSeCG0 ncTJSr1ToZes6ZNx5/pn/lw/pib2P02P4G2MuhloPPo/agodFw9nRWbVtjfU8JfQ Bk6yLvwmIIVDaHrZuoEg1sbrzpOkJ80ZKIHANQiaJRd3t7TZvPWTWAIEh5HYyBFr NmlGrvtufROGYRiifkQdTN+3eUX21yR9Dx6UOw4Ipp3oOr0il/cUYs8XYLjn7CMv 2GMoLFKnqey7OfsL9ThjTRcff7OAXiZ+M4vjAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUXijCNfk6dO3QC8gJwZnJ20RMOKowHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvWGlqQ05mazZkTzNRQzhnSndabkoy MFJNT0tvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBK+3UDAN BgkqhkiG9w0BAQsFAAOCAQEAZrvXF8X+ZsWS8UoNB3LOigNmcymCfj9LmvrejcAD 9E078JKqvrxbp1InfKb5OPG14u+D5wPGxL9VLnAechTCgZzl/wvNVIh4ADns+HVv 1QUcrgyp8lKagC4o8fXvhg6JK/J6PzG+Q1uqiVRPjamHmV4SXcaqMIs9hfnilxm6 BcL2h8c735+AzddISKeWTXjjjzKemUNqYVKGb0iC2kRkdYYL1kOQPfn/3YecJFzh +04F4Vr8/aGK/pDe0LbQIkmr0USMw7/2eB3DI2H/oA0uid1QQE1b8duin4JtFZAJ 9B/UHO8kfvQVHFW+gjMZODnW9w9MxXB8y8EbkcxakCzjHg== -----END CERTIFICATE-----Generated at Sat Jun 1 22:20:18 2024 by rpki-client on console-fra.rpki-client.org