$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/b8bgKuypur8bkCd9MKOiDIbZHeY.roa File: b8bgKuypur8bkCd9MKOiDIbZHeY.roa (raw, json) Hash identifier: xGUKsBfyDEC61nCI44VBlDvM3PyS0z7U7Wv0zLIziv0= Subject key identifier: 6F:C6:E0:2A:EC:A9:BA:BF:1B:90:27:7D:30:A3:A2:0C:86:D9:1D:E6 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1392 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/b8bgKuypur8bkCd9MKOiDIbZHeY.roa Signing time: Fri 01 Sep 2023 09:25:10 +0000 ROA not before: Fri 01 Sep 2023 09:25:10 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 123.205.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5010 (0x1392) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:10 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6FC6E02AECA9BABF1B90277D30A3A20C86D91DE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4c:2c:4b:82:55:0c:49:ed:a6:45:7f:4c:ca: 3e:47:3b:b5:40:5e:d5:06:75:17:e2:6d:8e:85:ce: e2:8d:b6:37:c3:0d:d4:8c:94:c8:1f:96:ab:14:b4: ea:7d:91:09:66:0a:3a:86:bf:84:5c:4c:37:12:99: aa:af:d0:66:95:2d:b9:7d:b2:2b:cc:80:c7:22:a8: 78:b0:1c:60:35:2c:17:2b:27:a5:e9:1a:72:8f:2c: 22:64:b1:8b:e6:8a:15:d6:bf:d0:83:f1:e0:f3:a9: b0:44:2c:58:c6:bf:6b:5b:cc:3f:d1:ea:29:50:9e: c0:2d:9d:80:74:07:bc:af:c7:04:04:3a:d4:57:3e: 50:b3:1b:b4:f2:4f:65:c6:43:77:05:b3:98:c0:f4: 41:e1:1a:3c:db:f6:11:3c:af:ed:43:c7:91:3a:f2: a5:c2:f7:a3:74:e4:86:ca:cc:8d:8a:3a:7d:eb:cd: 8f:d0:39:d7:68:92:8d:87:66:4b:3b:54:5c:a3:ab: b1:12:10:18:93:6e:bc:bb:22:02:1c:88:74:ce:50: d9:d7:92:04:a1:42:4e:b5:f0:24:38:60:7f:3e:c9: 49:05:eb:04:12:69:09:ad:bd:29:c0:72:c6:a3:f3: 84:be:70:0c:b9:a3:40:90:ae:ea:5d:0c:87:1a:6c: 4e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C6:E0:2A:EC:A9:BA:BF:1B:90:27:7D:30:A3:A2:0C:86:D9:1D:E6 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/b8bgKuypur8bkCd9MKOiDIbZHeY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.205.58.0/24 Signature Algorithm: sha256WithRSAEncryption b0:b8:4d:f4:44:a9:b8:08:74:9a:54:20:29:37:2a:2c:3a:16: 50:04:77:51:93:29:87:0d:05:c2:da:dc:e0:e6:91:22:da:1e: b2:89:69:db:27:7f:74:63:55:be:89:c8:63:8b:dd:f6:0d:ff: d7:24:aa:c6:8c:f1:64:bc:26:68:65:94:52:fd:d5:ea:33:4a: 5f:ad:fa:6f:93:f7:95:0a:b1:6f:35:f7:d8:09:be:0b:1f:26: 26:48:8f:90:bb:b4:98:d0:06:66:1d:e9:b8:a1:28:68:1a:c9: ec:c7:63:ef:98:28:96:d2:d9:1d:74:fb:ec:c4:08:c2:ee:af: 12:25:4f:2f:77:11:bc:a8:a6:0f:3b:bf:f7:53:b5:0e:97:76: d6:23:3a:ab:57:9b:48:36:d7:2d:f1:24:08:ad:12:ab:17:33: 97:9e:20:b9:47:10:a2:70:c9:1e:9e:23:e3:4c:e9:a2:d5:65: 7e:34:fe:dc:82:20:51:37:a7:17:35:54:3f:91:52:0f:cd:e3: 1b:44:60:44:d2:ab:76:a5:8d:c9:a3:a7:9f:b8:ad:3e:03:a9: 23:17:c3:44:dc:f7:aa:05:01:5f:6e:de:8a:23:22:b2:e7:bc: b6:16:c6:90:d9:9f:33:21:ec:68:b0:e4:30:82:17:89:d3:95: ad:69:c1:4b -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE5IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZGQzZFMDJBRUNBOUJB QkYxQjkwMjc3RDMwQTNBMjBDODZEOTFERTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoTCxLglUMSe2mRX9Myj5HO7VAXtUGdRfibY6FzuKNtjfDDdSM lMgflqsUtOp9kQlmCjqGv4RcTDcSmaqv0GaVLbl9sivMgMciqHiwHGA1LBcrJ6Xp GnKPLCJksYvmihXWv9CD8eDzqbBELFjGv2tbzD/R6ilQnsAtnYB0B7yvxwQEOtRX PlCzG7TyT2XGQ3cFs5jA9EHhGjzb9hE8r+1Dx5E68qXC96N05IbKzI2KOn3rzY/Q Oddoko2HZks7VFyjq7ESEBiTbry7IgIciHTOUNnXkgShQk618CQ4YH8+yUkF6wQS aQmtvSnAcsaj84S+cAy5o0CQrupdDIcabE77AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUb8bgKuypur8bkCd9MKOiDIbZHeYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvYjhiZ0t1eXB1cjhia0NkOU1LT2lE SWJaSGVZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHvNOjAN BgkqhkiG9w0BAQsFAAOCAQEAsLhN9ESpuAh0mlQgKTcqLDoWUAR3UZMphw0Fwtrc 4OaRItoesolp2yd/dGNVvonIY4vd9g3/1ySqxozxZLwmaGWUUv3V6jNKX636b5P3 lQqxbzX32Am+Cx8mJkiPkLu0mNAGZh3puKEoaBrJ7Mdj75goltLZHXT77MQIwu6v EiVPL3cRvKimDzu/91O1Dpd21iM6q1ebSDbXLfEkCK0Sqxczl54guUcQonDJHp4j 40zpotVlfjT+3IIgUTenFzVUP5FSD83jG0RgRNKrdqWNyaOnn7itPgOpIxfDRNz3 qgUBX27eiiMisue8thbGkNmfMyHsaLDkMIIXidOVrWnBSw== -----END CERTIFICATE-----Generated at Sat Jun 1 23:25:38 2024 by rpki-client on console-ams.rpki-client.org