$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/eFeuBA9ftQtoXlADms4glUPPM44.roa File: eFeuBA9ftQtoXlADms4glUPPM44.roa (raw, json) Hash identifier: ohSM2pKYH2Q0h+LF33cB39VlllrRBSVVEzQkT9ij+Ec= Subject key identifier: 78:57:AE:04:0F:5F:B5:0B:68:5E:50:03:9A:CE:20:95:43:CF:33:8E Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1374 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/eFeuBA9ftQtoXlADms4glUPPM44.roa Signing time: Fri 01 Sep 2023 09:24:58 +0000 ROA not before: Fri 01 Sep 2023 09:24:58 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 60.245.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4980 (0x1374) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:58 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7857AE040F5FB50B685E50039ACE209543CF338E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:d4:31:eb:6c:72:53:6c:3e:fc:7c:96:99: 62:41:27:36:db:9a:63:f1:a6:d7:2e:87:8d:e1:86: 01:82:07:47:3c:47:2b:a2:94:00:9e:bb:b4:b8:d8: 1b:2a:b0:c2:7b:f0:ad:6d:1c:d4:ef:68:8d:8c:d3: 5b:14:04:ba:47:42:f4:74:41:4e:a9:c3:c4:0c:6b: c1:57:91:58:60:f0:5d:01:81:ac:bd:42:f8:9e:d1: 3f:b7:e6:02:b0:c8:76:0b:1c:51:a8:5a:e4:ac:c6: 32:2c:99:6d:eb:46:90:ef:a0:ca:c0:ca:70:ed:7c: a1:48:b9:b7:de:91:f4:8d:72:5d:18:8e:69:0c:50: 6a:e2:c2:42:09:46:16:d1:12:62:f1:66:b2:28:14: 03:67:47:9c:ac:78:99:19:9c:c2:43:bc:38:29:33: 29:b7:aa:93:28:41:b3:0e:96:53:9c:10:b0:00:1d: 09:67:f9:a8:05:94:80:07:3c:fd:ff:49:dc:8d:82: 0f:7c:aa:b9:bb:b9:12:52:5a:f4:6d:83:d7:f0:67: 90:ae:03:c4:1b:8a:ca:a0:10:30:e9:54:bd:5f:cb: 95:80:ad:6c:c7:b7:4b:d4:2a:0e:9b:05:70:13:2a: 44:c1:3f:d8:c9:a7:a5:eb:7e:38:f7:a4:8f:4e:00: 08:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:57:AE:04:0F:5F:B5:0B:68:5E:50:03:9A:CE:20:95:43:CF:33:8E X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/eFeuBA9ftQtoXlADms4glUPPM44.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.245.64.0/19 Signature Algorithm: sha256WithRSAEncryption aa:8b:b5:e8:16:07:d0:95:c4:b3:6b:f9:ce:63:8d:74:55:73: 5a:9c:47:b1:b5:d5:a6:e5:6a:23:14:aa:5d:12:e1:f7:b5:52: a9:33:29:1a:49:dc:dd:54:ca:77:a6:fb:ab:b6:63:a9:8f:33: c6:34:66:58:fc:bd:07:2a:e5:01:9a:72:41:ae:6e:c8:64:11: c5:b9:75:a3:14:52:85:d3:91:af:7e:fa:62:21:7e:d9:fa:ce: 05:85:a8:62:a9:6b:b1:5f:03:5d:75:4b:b8:19:6a:e2:c3:02: f6:2d:1b:13:13:fd:52:f1:08:97:3a:63:2e:1b:32:97:21:51: be:45:c1:f4:f3:df:cf:d3:65:3a:0f:b0:f0:63:68:74:e5:d8: 6b:35:19:d0:e9:03:94:3e:d3:9c:34:84:ce:fa:b9:ce:2c:db: a5:c2:0c:25:76:47:76:20:b0:2c:1a:c8:16:95:03:c3:10:36: f2:a2:c1:38:dd:f5:0e:cc:6f:b2:64:2a:f3:43:af:a9:7d:27: 30:77:d7:74:de:7a:31:9b:c4:7d:12:b5:2c:5d:52:12:a1:7f: 8d:b6:22:37:21:40:67:1f:62:a4:b2:3f:cf:ac:f3:4b:97:e0: 5d:13:2c:42:5a:15:9f:22:a4:e7:2a:13:78:c5:95:03:b9:32: 7a:5c:e0:c0 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE3QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc4NTdBRTA0MEY1RkI1 MEI2ODVFNTAwMzlBQ0UyMDk1NDNDRjMzOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLCNQx62xyU2w+/HyWmWJBJzbbmmPxptcuh43hhgGCB0c8Ryui lACeu7S42BsqsMJ78K1tHNTvaI2M01sUBLpHQvR0QU6pw8QMa8FXkVhg8F0Bgay9 Qvie0T+35gKwyHYLHFGoWuSsxjIsmW3rRpDvoMrAynDtfKFIubfekfSNcl0YjmkM UGriwkIJRhbREmLxZrIoFANnR5yseJkZnMJDvDgpMym3qpMoQbMOllOcELAAHQln +agFlIAHPP3/SdyNgg98qrm7uRJSWvRtg9fwZ5CuA8QbisqgEDDpVL1fy5WArWzH t0vUKg6bBXATKkTBP9jJp6Xrfjj3pI9OAAjjAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUeFeuBA9ftQtoXlADms4glUPPM44wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZUZldUJBOWZ0UXRvWGxBRG1zNGds VVBQTTQ0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBTz1QDAN BgkqhkiG9w0BAQsFAAOCAQEAqou16BYH0JXEs2v5zmONdFVzWpxHsbXVpuVqIxSq XRLh97VSqTMpGknc3VTKd6b7q7ZjqY8zxjRmWPy9ByrlAZpyQa5uyGQRxbl1oxRS hdORr376YiF+2frOBYWoYqlrsV8DXXVLuBlq4sMC9i0bExP9UvEIlzpjLhsylyFR vkXB9PPfz9NlOg+w8GNodOXYazUZ0OkDlD7TnDSEzvq5zizbpcIMJXZHdiCwLBrI FpUDwxA28qLBON31DsxvsmQq80OvqX0nMHfXdN56MZvEfRK1LF1SEqF/jbYiNyFA Zx9ipLI/z6zzS5fgXRMsQloVnyKk5yoTeMWVA7kyelzgwA== -----END CERTIFICATE-----Generated at Sat Jun 1 15:05:01 2024 by rpki-client on console-fra.rpki-client.org