$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZaoXgNWy5_hMfJ8swWwF0XzfOLs.roa File: ZaoXgNWy5_hMfJ8swWwF0XzfOLs.roa (raw, json) Hash identifier: 5bkyQaFOzJln+Rn0ZCQR2skpopCOoP2Wi+xhCTECA5c= Subject key identifier: 65:AA:17:80:D5:B2:E7:F8:4C:7C:9F:2C:C1:6C:05:D1:7C:DF:38:BB Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 0DBB Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZaoXgNWy5_hMfJ8swWwF0XzfOLs.roa Signing time: Fri 01 Sep 2023 09:25:22 +0000 ROA not before: Fri 01 Sep 2023 09:25:22 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 192.72.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 17:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3515 (0xdbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Sep 1 09:25:22 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=65AA1780D5B2E7F84C7C9F2CC16C05D17CDF38BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:64:fb:a1:81:4b:52:68:75:ff:7b:23:24:a4: d0:36:98:f0:e9:b9:20:07:ab:3c:8b:bb:37:c4:75: fb:61:dc:cb:af:e6:6e:21:d9:ab:96:36:7a:61:b4: ff:80:2a:56:60:c2:c7:be:c3:ae:45:73:9b:51:95: e9:ad:2d:15:ac:da:90:7e:5d:f1:87:fa:a5:4e:18: 41:df:a4:42:94:2a:70:5c:4a:f7:34:ca:a1:f0:cc: 7d:6f:4b:8d:cf:be:f1:21:2e:9a:a2:8b:0d:6d:c0: 2a:31:93:14:ef:17:1a:ed:b6:a3:d6:1c:39:a5:c6: e5:23:ba:44:03:3d:30:de:0d:25:3d:d2:22:d0:1b: 24:3a:21:ee:06:f1:b4:66:75:be:45:41:fa:da:a7: e0:4e:77:71:d1:e3:0b:93:2f:09:b5:7c:94:d8:0a: f2:48:ff:86:d9:3d:c6:b8:2a:b8:84:93:fc:e5:d7: e2:aa:16:b8:c2:9d:82:d0:e1:29:5b:f0:85:ec:18: bb:b4:02:48:7a:32:cf:e3:c8:bf:55:60:90:94:26: d3:b1:ce:10:4b:40:cd:f8:e9:a1:d1:86:f9:e4:12: c6:c9:47:19:b0:a9:e4:a6:b1:b6:16:2b:2c:c6:e8: 3b:64:3a:6f:ec:06:0d:b4:53:fa:ff:ce:2a:5b:2a: e4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AA:17:80:D5:B2:E7:F8:4C:7C:9F:2C:C1:6C:05:D1:7C:DF:38:BB X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZaoXgNWy5_hMfJ8swWwF0XzfOLs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.16.0/20 Signature Algorithm: sha256WithRSAEncryption 77:18:bc:5e:b7:e7:5e:88:36:4e:0b:e5:f8:f0:f5:be:75:ec: 5f:1a:a8:bf:ac:2b:8d:d4:bc:ac:4a:d0:b0:82:c7:33:a1:d3: 27:97:c8:f5:e7:6d:14:3a:8c:98:95:88:3e:e5:84:c3:90:e4: d8:d4:67:7d:02:ae:63:5b:08:e3:68:7b:b2:0f:29:dd:17:96: 08:37:44:a1:63:46:76:a8:b6:51:d9:25:d1:b6:b1:37:cc:8f: 93:84:77:42:34:7f:f1:f0:b2:da:36:9c:ec:d4:9c:0f:0d:df: b7:59:28:d1:a2:ef:d0:f8:7b:23:5b:44:89:a3:08:2e:25:9d: 01:10:de:01:27:a7:83:68:35:ec:14:0d:5a:45:f0:05:1a:21: 47:a4:14:12:28:49:16:39:c2:39:6b:63:95:be:9d:fc:60:74: 3e:aa:8f:b7:6d:b4:a0:39:f6:8b:c6:8f:36:c3:51:d3:7c:6f: 9c:f9:2d:e1:52:c2:9c:59:91:44:3a:d9:56:2b:5b:5c:73:bc: 38:66:b1:0b:1d:8c:85:ab:76:9a:b6:27:c0:91:2c:bc:49:bb: a0:95:9f:c9:39:10:7e:76:eb:28:a0:45:9f:09:57:02:99:68: 8d:02:6d:d9:fe:59:96:b2:03:df:56:08:3c:69:0d:b9:2a:bf: dc:c8:46:f5 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDbswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yMzA5MDEw OTI1MjJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY1QUExNzgwRDVCMkU3 Rjg0QzdDOUYyQ0MxNkMwNUQxN0NERjM4QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYZPuhgUtSaHX/eyMkpNA2mPDpuSAHqzyLuzfEdfth3Muv5m4h 2auWNnphtP+AKlZgwse+w65Fc5tRlemtLRWs2pB+XfGH+qVOGEHfpEKUKnBcSvc0 yqHwzH1vS43PvvEhLpqiiw1twCoxkxTvFxrttqPWHDmlxuUjukQDPTDeDSU90iLQ GyQ6Ie4G8bRmdb5FQfrap+BOd3HR4wuTLwm1fJTYCvJI/4bZPca4KriEk/zl1+Kq FrjCnYLQ4Slb8IXsGLu0Akh6Ms/jyL9VYJCUJtOxzhBLQM346aHRhvnkEsbJRxmw qeSmsbYWKyzG6DtkOm/sBg20U/r/zipbKuRJAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUZaoXgNWy5/hMfJ8swWwF0XzfOLswHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvWmFvWGdOV3k1X2hNZko4c3dXd0Yw WHpmT0xzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMBIEDAN BgkqhkiG9w0BAQsFAAOCAQEAdxi8XrfnXog2Tgvl+PD1vnXsXxqov6wrjdS8rErQ sILHM6HTJ5fI9edtFDqMmJWIPuWEw5Dk2NRnfQKuY1sI42h7sg8p3ReWCDdEoWNG dqi2Udkl0baxN8yPk4R3QjR/8fCy2jac7NScDw3ft1ko0aLv0Ph7I1tEiaMILiWd ARDeASeng2g17BQNWkXwBRohR6QUEihJFjnCOWtjlb6d/GB0PqqPt220oDn2i8aP NsNR03xvnPkt4VLCnFmRRDrZVitbXHO8OGaxCx2Mhat2mrYnwJEsvEm7oJWfyTkQ fnbrKKBFnwlXAplojQJt2f5ZlrID31YIPGkNuSq/3MhG9Q== -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org