$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/oVUTZQV6lFBZ61JXwNil9MP6lFs.roa File: oVUTZQV6lFBZ61JXwNil9MP6lFs.roa (raw, json) Hash identifier: E6iCN1b83dAktyWmzmycb1i0+XrKm78TU9DOPNsvzpc= Subject key identifier: A1:55:13:65:05:7A:94:50:59:EB:52:57:C0:D8:A5:F4:C3:FA:94:5B Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1632 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/oVUTZQV6lFBZ61JXwNil9MP6lFs.roa Signing time: Mon 26 Aug 2024 05:21:53 +0000 ROA not before: Mon 26 Aug 2024 05:21:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 112.105.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5682 (0x1632) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:21:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A1551365057A945059EB5257C0D8A5F4C3FA945B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:24:79:f7:fb:98:8a:1d:68:4a:fe:a5:56:a2: 05:de:83:83:5a:15:77:0e:dd:8b:c0:76:3b:5a:e2: 14:b3:a1:99:53:4e:2e:d0:c3:21:a7:60:d7:ab:84: f4:ee:f7:ec:fa:f1:c9:12:e6:42:3f:14:b9:cd:f6: c3:94:29:f2:f2:ee:8f:10:4c:66:a9:c6:0f:e6:52: 95:3e:ca:fb:1a:92:d7:14:2d:f0:be:f1:00:0e:24: 42:02:06:2d:55:3c:d4:6a:79:69:3c:5e:c3:a5:14: 95:ce:ac:56:39:b2:54:c5:92:6d:bf:3d:a0:d5:c7: df:50:4b:49:ca:fa:af:c8:83:ae:ee:b0:94:ef:21: 10:3f:6a:fe:67:2f:a4:ab:6c:95:b7:ed:3c:76:81: 7e:75:7b:f7:aa:0b:0c:9c:52:7f:02:10:0f:a0:0f: cb:04:65:3c:9c:32:d7:f4:00:ba:ec:bd:9a:d2:79: 03:70:07:04:c4:bb:2e:8b:66:4f:15:96:b3:52:a8: 27:b4:7c:72:2d:2e:86:42:8c:1e:ed:5e:3b:eb:64: 8f:b3:e3:0b:6f:14:93:14:eb:3f:c0:22:85:93:cc: e3:0f:dc:2e:9a:aa:88:e6:f6:a6:f1:37:e9:a9:30: ee:eb:ee:a0:54:47:00:e4:d1:de:91:50:1c:ca:8d: f6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:55:13:65:05:7A:94:50:59:EB:52:57:C0:D8:A5:F4:C3:FA:94:5B X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/oVUTZQV6lFBZ61JXwNil9MP6lFs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.105.0.0/16 Signature Algorithm: sha256WithRSAEncryption 15:57:02:f2:8b:db:da:95:e6:7b:c8:85:3d:d1:fe:ab:cb:a6: 47:61:22:81:5b:b0:8b:c1:5c:bb:e7:b1:37:ea:37:09:ef:99: db:a5:81:be:79:50:8a:f5:2b:97:99:1e:97:43:3b:38:d6:fc: 2d:37:f4:8d:68:e1:d4:c7:a5:88:30:c1:59:c2:5c:80:6c:f4: e9:b3:8c:c3:a6:1f:76:fa:e5:86:7c:68:26:fb:dc:be:08:06: d2:d7:f0:d2:76:0b:14:57:6c:82:1a:26:15:fb:1d:34:65:62: 5b:0e:6c:3a:6d:1e:25:f9:7e:b1:ab:a2:64:3d:50:89:44:42: 9c:56:6d:a5:ca:29:7a:7e:5a:42:1f:68:d9:f4:6c:7b:2d:0e: 46:21:92:a2:31:0e:f3:59:18:04:f6:4f:ea:d6:b1:4d:34:75: 51:c5:e1:8e:6a:c5:bb:26:f7:7f:37:a9:91:0b:8c:29:16:2a: 25:25:0e:dd:56:5e:96:05:b8:6a:ea:f7:4d:a5:69:93:6d:ae: d8:cc:eb:07:9a:8b:5e:29:17:3c:2c:ff:f5:3e:1c:5f:21:f4: e3:46:68:52:d8:bf:53:be:1d:5f:71:8a:e8:9d:0a:b7:bd:df: c2:02:1c:19:ea:6f:af:9a:e9:86:44:bf:55:8b:ef:fa:ad:13: cd:40:8e:93 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICFjIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIxNTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEExNTUxMzY1MDU3QTk0 NTA1OUVCNTI1N0MwRDhBNUY0QzNGQTk0NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwJHn3+5iKHWhK/qVWogXeg4NaFXcO3YvAdjta4hSzoZlTTi7Q wyGnYNerhPTu9+z68ckS5kI/FLnN9sOUKfLy7o8QTGapxg/mUpU+yvsaktcULfC+ 8QAOJEICBi1VPNRqeWk8XsOlFJXOrFY5slTFkm2/PaDVx99QS0nK+q/Ig67usJTv IRA/av5nL6SrbJW37Tx2gX51e/eqCwycUn8CEA+gD8sEZTycMtf0ALrsvZrSeQNw BwTEuy6LZk8VlrNSqCe0fHItLoZCjB7tXjvrZI+z4wtvFJMU6z/AIoWTzOMP3C6a qojm9qbxN+mpMO7r7qBURwDk0d6RUBzKjfavAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUoVUTZQV6lFBZ61JXwNil9MP6lFswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvb1ZVVFpRVjZsRkJaNjFKWHdOaWw5 TVA2bEZzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAHBpMA0G CSqGSIb3DQEBCwUAA4IBAQAVVwLyi9valeZ7yIU90f6ry6ZHYSKBW7CLwVy757E3 6jcJ75nbpYG+eVCK9SuXmR6XQzs41vwtN/SNaOHUx6WIMMFZwlyAbPTps4zDph92 +uWGfGgm+9y+CAbS1/DSdgsUV2yCGiYV+x00ZWJbDmw6bR4l+X6xq6JkPVCJREKc Vm2lyil6flpCH2jZ9Gx7LQ5GIZKiMQ7zWRgE9k/q1rFNNHVRxeGOasW7Jvd/N6mR C4wpFiolJQ7dVl6WBbhq6vdNpWmTba7YzOsHmoteKRc8LP/1PhxfIfTjRmhS2L9T vh1fcYronQq3vd/CAhwZ6m+vmumGRL9Vi+/6rRPNQI6T -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:12 2024 by rpki-client on console-fra.rpki-client.org