$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/jIwQjNvBtBMZ22bibJLCKC7C43Q.roa File: jIwQjNvBtBMZ22bibJLCKC7C43Q.roa (raw, json) Hash identifier: QRsr77ieXrhWGQpgCTBTdBvIiTrl9MDsWdviKodITm4= Subject key identifier: 8C:8C:10:8C:DB:C1:B4:13:19:DB:66:E2:6C:92:C2:28:2E:C2:E3:74 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 16BA Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/jIwQjNvBtBMZ22bibJLCKC7C43Q.roa Signing time: Mon 26 Aug 2024 05:22:33 +0000 ROA not before: Mon 26 Aug 2024 05:22:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 218.211.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5818 (0x16ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:22:33 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8C8C108CDBC1B41319DB66E26C92C2282EC2E374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8d:02:4f:9f:29:17:81:8e:d1:66:03:8a:90: bc:70:97:db:80:9c:84:1a:77:f9:72:74:41:cd:78: ca:be:93:0b:17:3a:10:9a:46:01:f7:88:99:fb:b3: 01:df:09:32:99:53:09:f6:4a:4c:a4:98:73:bc:7a: 0a:44:b0:d5:88:4d:97:44:dd:09:35:a7:9c:92:f5: f8:5c:32:54:1c:aa:91:91:0e:cd:4d:4c:4e:d3:fe: e4:8f:30:ac:0d:99:fd:3b:02:e7:d4:12:75:f1:4d: 68:95:58:5d:3b:a0:86:12:c4:0d:7d:3c:1a:d1:e6: ae:ba:18:3b:30:f9:e4:70:44:57:99:a8:10:66:65: 4e:71:dd:dd:4c:9d:c2:2f:1c:ab:d4:3e:89:8d:0e: 2e:4b:78:2e:62:e3:cd:18:2e:32:60:17:11:6a:d2: 06:91:0e:f8:bd:58:44:21:79:96:2a:ae:98:39:d9: 19:af:30:70:8c:ca:4b:f4:f9:6c:50:2c:5a:22:a3: f9:b4:18:1c:0e:57:0c:6f:2c:52:b3:7d:3c:50:a0: a5:e9:e8:56:a5:bb:8a:dd:21:00:ed:ce:2b:45:c1: e9:85:c8:a4:f0:b1:20:1f:05:f0:07:47:b5:d1:3d: e4:35:93:27:8e:bc:59:05:93:7b:23:17:3c:60:73: 13:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8C:10:8C:DB:C1:B4:13:19:DB:66:E2:6C:92:C2:28:2E:C2:E3:74 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/jIwQjNvBtBMZ22bibJLCKC7C43Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.211.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6b:72:90:2a:c4:3b:e0:4b:c0:4b:8f:b9:c5:28:62:16:25:87: 1d:19:c2:a2:c5:ed:04:d1:2c:84:cb:57:98:18:00:1f:4c:23: 86:54:fd:aa:17:84:e3:b5:04:35:06:2a:6c:f2:aa:b2:95:79: f5:f1:ba:f0:85:4a:f2:49:1e:c0:82:4e:09:ad:68:89:74:9e: 33:aa:b2:e4:3f:3d:49:b5:ab:75:43:eb:11:25:70:21:b8:22: 18:60:76:ab:39:f0:54:26:d8:4e:8e:4f:17:48:13:dc:ba:b6: 2d:6b:ce:aa:d8:e1:46:58:e4:af:e4:d0:6e:f6:7d:c1:62:85: 64:eb:ee:cf:8b:04:73:d3:36:12:32:dc:3c:44:73:d7:07:9e: 06:67:c7:38:6a:19:54:fa:e7:ea:a7:23:c2:02:28:49:65:2d: 82:42:1c:58:c3:a4:b3:ad:97:48:2b:bf:66:6f:5e:81:1a:c4: e5:d1:30:f3:99:c3:79:2d:f6:46:b9:4d:d5:b6:e5:0c:f3:9d: bc:73:1f:fb:b4:40:04:c4:65:d6:99:21:4e:16:b6:a3:6d:01: 44:78:a9:ff:b8:9b:55:61:12:aa:c1:ae:c4:e2:21:53:40:07: 5b:06:cb:85:3c:48:59:99:fa:7b:65:2d:c4:92:4f:cc:27:88: 8f:ea:4b:f1 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICFrowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIyMzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhDOEMxMDhDREJDMUI0 MTMxOURCNjZFMjZDOTJDMjI4MkVDMkUzNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCijQJPnykXgY7RZgOKkLxwl9uAnIQad/lydEHNeMq+kwsXOhCa RgH3iJn7swHfCTKZUwn2SkykmHO8egpEsNWITZdE3Qk1p5yS9fhcMlQcqpGRDs1N TE7T/uSPMKwNmf07AufUEnXxTWiVWF07oIYSxA19PBrR5q66GDsw+eRwRFeZqBBm ZU5x3d1MncIvHKvUPomNDi5LeC5i480YLjJgFxFq0gaRDvi9WEQheZYqrpg52Rmv MHCMykv0+WxQLFoio/m0GBwOVwxvLFKzfTxQoKXp6Falu4rdIQDtzitFwemFyKTw sSAfBfAHR7XRPeQ1kyeOvFkFk3sjFzxgcxNlAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUjIwQjNvBtBMZ22bibJLCKC7C43QwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvakl3UWpOdkJ0Qk1aMjJiaWJKTENL QzdDNDNRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANrTMA0G CSqGSIb3DQEBCwUAA4IBAQBrcpAqxDvgS8BLj7nFKGIWJYcdGcKixe0E0SyEy1eY GAAfTCOGVP2qF4TjtQQ1Bips8qqylXn18brwhUrySR7Agk4JrWiJdJ4zqrLkPz1J tat1Q+sRJXAhuCIYYHarOfBUJthOjk8XSBPcurYta86q2OFGWOSv5NBu9n3BYoVk 6+7PiwRz0zYSMtw8RHPXB54GZ8c4ahlU+ufqpyPCAihJZS2CQhxYw6SzrZdIK79m b16BGsTl0TDzmcN5LfZGuU3VtuUM8528cx/7tEAExGXWmSFOFrajbQFEeKn/uJtV YRKqwa7E4iFTQAdbBsuFPEhZmfp7ZS3Ekk/MJ4iP6kvx -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:31 2024 by rpki-client on console-fra.rpki-client.org