$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/e32Rj3ghCV2pjpcwnmf2XRPBnEc.roa File: e32Rj3ghCV2pjpcwnmf2XRPBnEc.roa (raw, json) Hash identifier: ww8n9hWsv25e1JYLk0EDIo0ulKshwh0n+8PdQlZUH5M= Subject key identifier: 7B:7D:91:8F:78:21:09:5D:A9:8E:97:30:9E:67:F6:5D:13:C1:9C:47 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 136A Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/e32Rj3ghCV2pjpcwnmf2XRPBnEc.roa Signing time: Fri 01 Sep 2023 09:24:54 +0000 ROA not before: Fri 01 Sep 2023 09:24:54 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 106.104.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4970 (0x136a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:54 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7B7D918F7821095DA98E97309E67F65D13C19C47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0d:b6:36:0b:d9:14:bf:e3:6a:75:12:76:9a: a0:35:66:df:f5:fc:6d:3a:b1:74:79:2c:d9:5d:66: 19:13:68:8c:f9:59:7e:d6:9a:62:8f:98:97:ef:32: 50:ae:fd:e8:4e:6b:9a:8e:7e:8e:c0:be:f1:94:39: 31:7e:8f:dd:1f:93:79:c7:de:b0:85:c0:6d:bb:ac: 73:6f:11:2e:29:4e:93:e0:ce:37:7e:91:88:62:25: d2:50:e6:32:b8:ab:59:c2:85:12:9b:99:a9:f4:91: 87:42:5e:c6:1d:dc:57:8d:1e:7c:6d:cd:93:97:5d: 2d:20:d5:7e:2c:7f:ec:d5:ca:a7:c4:ca:8b:0e:83: 8a:b6:e3:b3:55:6b:1f:d2:17:a7:0f:09:08:7c:9a: f0:02:e9:a7:18:d4:6d:78:c7:61:bb:02:d0:9b:9a: c9:25:ed:e6:cf:a5:4f:2c:75:17:f8:67:f5:35:ce: b6:d0:8b:9d:1c:01:a7:15:57:b9:bd:58:40:05:b3: 85:cd:fb:d2:30:70:09:14:33:1e:fe:da:3a:b9:5b: 70:ef:81:db:62:81:e2:ea:e6:a4:92:40:96:e9:15: 6a:da:e7:0d:83:75:b7:df:89:65:66:94:f7:75:14: fa:8e:b2:e6:70:30:28:f1:69:5a:72:61:12:75:3c: d5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7D:91:8F:78:21:09:5D:A9:8E:97:30:9E:67:F6:5D:13:C1:9C:47 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/e32Rj3ghCV2pjpcwnmf2XRPBnEc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.104.0.0/14 Signature Algorithm: sha256WithRSAEncryption 1e:91:b3:7f:76:d6:b4:40:70:01:15:88:aa:8e:2f:26:de:09: ac:a5:73:1a:d2:6c:93:ba:a9:f4:70:ea:45:82:9d:7d:96:8b: f4:b1:f8:c3:3d:93:92:b9:ad:12:d0:ef:36:f3:5c:a5:a6:83: 51:8b:b3:26:ef:80:1f:06:25:f0:6b:1d:e3:af:e6:6b:94:69: 3d:36:26:44:4c:2b:6d:4a:97:fe:55:3b:2c:72:a8:75:56:a8: a8:5a:7e:9d:72:72:97:e4:9e:88:ca:0f:eb:dc:cc:4d:54:23: 9a:94:fe:c4:ee:e9:92:f8:27:73:54:4a:8f:ce:f3:fa:dd:3f: c9:bd:e1:a6:1f:91:0a:be:4d:55:6e:22:27:d4:91:8b:d1:c1: 5e:73:04:3f:c0:70:c1:c2:5f:34:8a:46:39:58:28:59:e7:f0: b0:e5:00:78:5a:1f:51:31:eb:bd:3f:de:a9:8d:81:5a:22:25: 3e:b6:8d:c3:e6:99:4c:13:c6:ef:61:81:ad:3a:d3:b2:cb:77: 82:47:3f:4b:26:cc:ce:73:13:99:4d:10:0c:c9:77:31:28:3c: c1:5b:52:1f:17:0a:e3:ec:76:11:bc:1b:fa:85:fc:1e:d6:45: 89:2d:0d:40:e2:53:73:bb:6f:f9:d2:f4:ad:13:da:5b:89:8f: e1:a8:76:3d -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICE2owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdCN0Q5MThGNzgyMTA5 NURBOThFOTczMDlFNjdGNjVEMTNDMTlDNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDDbY2C9kUv+NqdRJ2mqA1Zt/1/G06sXR5LNldZhkTaIz5WX7W mmKPmJfvMlCu/ehOa5qOfo7AvvGUOTF+j90fk3nH3rCFwG27rHNvES4pTpPgzjd+ kYhiJdJQ5jK4q1nChRKbman0kYdCXsYd3FeNHnxtzZOXXS0g1X4sf+zVyqfEyosO g4q247NVax/SF6cPCQh8mvAC6acY1G14x2G7AtCbmskl7ebPpU8sdRf4Z/U1zrbQ i50cAacVV7m9WEAFs4XN+9IwcAkUMx7+2jq5W3DvgdtigeLq5qSSQJbpFWra5w2D dbffiWVmlPd1FPqOsuZwMCjxaVpyYRJ1PNUfAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUe32Rj3ghCV2pjpcwnmf2XRPBnEcwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZTMyUmozZ2hDVjJwanBjd25tZjJY UlBCbkVjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAmpoMA0G CSqGSIb3DQEBCwUAA4IBAQAekbN/dta0QHABFYiqji8m3gmspXMa0myTuqn0cOpF gp19lov0sfjDPZOSua0S0O8281ylpoNRi7Mm74AfBiXwax3jr+ZrlGk9NiZETCtt Spf+VTsscqh1VqioWn6dcnKX5J6Iyg/r3MxNVCOalP7E7umS+CdzVEqPzvP63T/J veGmH5EKvk1VbiIn1JGL0cFecwQ/wHDBwl80ikY5WChZ5/Cw5QB4Wh9RMeu9P96p jYFaIiU+to3D5plME8bvYYGtOtOyy3eCRz9LJszOcxOZTRAMyXcxKDzBW1IfFwrj 7HYRvBv6hfwe1kWJLQ1A4lNzu2/50vStE9pbiY/hqHY9 -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org