$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/fqzxGZlbxmcdpTUNFBRm56eRVxM.roa File: fqzxGZlbxmcdpTUNFBRm56eRVxM.roa (raw, json) Hash identifier: QmoqXqtVhsOEya6N68mODG9UQ7tL95pyB3uAojc1YQQ= Subject key identifier: 7E:AC:F1:19:99:5B:C6:67:1D:A5:35:0D:14:14:66:E7:A7:91:57:13 Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 0DBE Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fqzxGZlbxmcdpTUNFBRm56eRVxM.roa Signing time: Fri 01 Sep 2023 09:25:28 +0000 ROA not before: Fri 01 Sep 2023 09:25:28 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 192.72.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3518 (0xdbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Sep 1 09:25:28 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7EACF119995BC6671DA5350D141466E7A7915713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f8:ed:1d:e1:dc:66:d5:34:b2:24:db:0f:47: ca:0b:db:cd:af:76:5d:65:20:34:59:4c:6d:fb:0f: 99:90:a6:51:ba:bf:e2:c0:0e:94:3a:ac:d2:0c:78: 7a:42:da:31:e9:22:9a:80:2b:13:d5:13:e5:68:ae: c0:65:38:ba:70:29:44:34:6f:58:49:9e:35:c1:f3: 39:28:1c:bf:c6:75:6a:e8:35:31:47:20:c5:26:f7: 24:5a:c1:f5:e5:db:bf:c8:e0:76:8e:51:7f:00:8d: 2b:5d:04:cc:af:f8:c5:06:4b:01:01:f0:ab:50:95: d2:61:00:ee:61:af:1c:98:6c:10:17:1d:7a:4a:44: 2b:05:b7:9b:25:2b:c2:a5:55:5e:91:d2:f1:5b:20: ce:ad:d3:cc:7e:1b:f6:30:7a:3c:4b:14:fd:94:de: d5:fb:a0:e5:9e:8f:70:85:c3:df:32:2c:02:5d:19: 0e:5a:4e:8c:a7:60:a9:02:84:f7:f2:58:a6:d1:8a: 59:b4:01:35:c4:d8:96:23:41:da:10:07:29:00:a6: 59:65:56:c0:03:68:77:96:1b:fd:33:3e:40:2e:55: 1e:e2:e3:28:3d:ff:d3:bc:ec:f5:47:62:a0:b0:0e: a0:ba:51:b6:a4:3a:f2:da:d4:35:ac:59:f0:04:28: 2b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AC:F1:19:99:5B:C6:67:1D:A5:35:0D:14:14:66:E7:A7:91:57:13 X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fqzxGZlbxmcdpTUNFBRm56eRVxM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.128.0/18 Signature Algorithm: sha256WithRSAEncryption a4:d5:ef:e2:8d:56:14:cd:d6:d0:f1:d7:f7:fb:77:9e:0c:65: f0:52:3c:b7:1e:b2:3d:ac:5b:3a:e6:b6:9b:85:7b:03:c1:e4: 77:6f:48:9d:c5:17:4a:df:96:9e:9a:17:87:f5:c8:e9:14:86: 30:0b:f4:a0:e1:9e:f2:18:8b:47:24:4b:16:f8:e7:92:fa:33: be:f9:bf:c4:b9:82:c5:52:c9:98:ab:4b:56:ab:af:f6:8a:65: 0f:82:13:12:90:fe:76:4c:a7:99:ca:26:00:08:f0:4d:d1:c1: 17:f9:db:24:60:b3:a1:77:79:b1:ab:d5:77:0b:be:86:a8:b1: 02:70:68:ac:c1:40:7f:31:43:04:72:2a:5f:85:0d:9e:46:b5: cc:2a:21:f0:5c:71:e3:38:a3:b0:ba:a4:de:9d:13:16:7a:a0: fa:89:34:9a:40:78:9b:36:70:a4:43:62:61:4b:43:a1:eb:74: e0:2d:35:11:78:0f:c0:84:56:18:68:7e:4b:9e:1a:57:5f:56: aa:95:6b:dd:70:bd:3f:0c:37:7a:50:44:cf:b3:06:3e:7a:c6: 57:94:cc:7d:02:e0:8b:56:c1:c9:84:d4:78:b1:25:35:8e:70: a6:ef:ff:64:8f:f0:a3:6b:ad:1c:e5:72:9b:9a:b8:de:22:44: 83:1b:21:46 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDb4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yMzA5MDEw OTI1MjhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdFQUNGMTE5OTk1QkM2 NjcxREE1MzUwRDE0MTQ2NkU3QTc5MTU3MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDb+O0d4dxm1TSyJNsPR8oL282vdl1lIDRZTG37D5mQplG6v+LA DpQ6rNIMeHpC2jHpIpqAKxPVE+VorsBlOLpwKUQ0b1hJnjXB8zkoHL/GdWroNTFH IMUm9yRawfXl27/I4HaOUX8AjStdBMyv+MUGSwEB8KtQldJhAO5hrxyYbBAXHXpK RCsFt5slK8KlVV6R0vFbIM6t08x+G/YwejxLFP2U3tX7oOWej3CFw98yLAJdGQ5a ToynYKkChPfyWKbRilm0ATXE2JYjQdoQBykAplllVsADaHeWG/0zPkAuVR7i4yg9 /9O87PVHYqCwDqC6UbakOvLa1DWsWfAEKCtTAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUfqzxGZlbxmcdpTUNFBRm56eRVxMwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZnF6eEdabGJ4bWNkcFRVTkZCUm01 NmVSVnhNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBsBIgDAN BgkqhkiG9w0BAQsFAAOCAQEApNXv4o1WFM3W0PHX9/t3ngxl8FI8tx6yPaxbOua2 m4V7A8Hkd29IncUXSt+WnpoXh/XI6RSGMAv0oOGe8hiLRyRLFvjnkvozvvm/xLmC xVLJmKtLVquv9oplD4ITEpD+dkynmcomAAjwTdHBF/nbJGCzoXd5savVdwu+hqix AnBorMFAfzFDBHIqX4UNnka1zCoh8Fxx4zijsLqk3p0TFnqg+ok0mkB4mzZwpENi YUtDoet04C01EXgPwIRWGGh+S54aV19WqpVr3XC9Pww3elBEz7MGPnrGV5TMfQLg i1bByYTUeLElNY5wpu//ZI/wo2utHOVym5q43iJEgxshRg== -----END CERTIFICATE-----Generated at Sun Jun 2 07:14:23 2024 by rpki-client on console-fra.rpki-client.org