$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/p9MnaKFthnllc5SaZ0ntXNjLTIQ.roa File: p9MnaKFthnllc5SaZ0ntXNjLTIQ.roa (raw, json) Hash identifier: owkCgt0KFEPvE/Hnz+GtwFdxTaq0jw9/9neLs1IpGzI= Subject key identifier: A7:D3:27:68:A1:6D:86:79:65:73:94:9A:67:49:ED:5C:D8:CB:4C:84 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 13CA Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/p9MnaKFthnllc5SaZ0ntXNjLTIQ.roa Signing time: Fri 01 Sep 2023 09:25:27 +0000 ROA not before: Fri 01 Sep 2023 09:25:27 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18419 IP address blocks: 210.244.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5066 (0x13ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:27 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A7D32768A16D86796573949A6749ED5CD8CB4C84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:99:b6:b7:30:d4:79:5e:41:b2:0a:c1:e3:bd: 57:7e:08:18:2d:17:ef:1a:31:5c:cb:aa:64:a5:05: cd:33:b8:e7:9e:c7:64:d8:f9:0f:a0:18:77:30:dc: 32:ab:d3:30:c2:b5:51:b3:e4:70:61:6e:bc:dd:91: 6a:8b:e3:a2:c9:24:99:62:b4:3c:d5:65:6b:13:f5: 89:60:8f:63:c5:69:2d:33:f1:86:92:64:ea:ac:84: b8:c1:16:fe:cf:e1:9b:75:93:d1:e5:c5:47:b3:3f: 52:50:b0:e1:17:84:45:64:32:13:72:50:e9:e6:60: 38:1d:0d:d0:ae:7e:4d:3b:d0:d3:86:02:9e:4e:87: 68:57:d3:0d:f4:50:81:be:b9:2e:8a:3a:b3:75:1b: 53:e7:d6:a3:1a:9a:79:d4:42:1d:56:9b:d7:44:53: dc:04:2b:bd:d2:78:c9:e6:39:59:9d:21:65:3e:b1: ea:24:6f:fc:be:03:08:d8:5f:2c:50:cd:db:22:b6: 56:81:e1:7c:ae:15:8e:8f:df:f1:20:be:28:90:f3: cc:40:e0:eb:3b:7f:2b:3b:88:fc:d6:39:fe:72:1f: 61:76:38:f7:76:1c:32:fb:7a:e4:d4:7a:7e:f2:c4: c8:45:b0:11:3b:d5:e3:33:d2:cb:12:47:a4:ad:61: 6a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D3:27:68:A1:6D:86:79:65:73:94:9A:67:49:ED:5C:D8:CB:4C:84 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/p9MnaKFthnllc5SaZ0ntXNjLTIQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.244.97.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:9e:04:93:f5:fc:d7:f7:f8:78:cc:f1:4a:67:c5:f2:e6:e3: 08:d6:3c:c6:e2:88:3b:50:c5:18:27:59:05:b0:00:5a:0a:37: ab:78:75:61:03:74:47:06:63:60:89:87:06:fe:82:96:4a:5f: 5e:bb:6c:35:79:0f:08:14:f8:3c:2b:06:4c:35:00:f3:7e:20: 4d:af:c9:4c:61:f5:53:40:e8:58:96:0d:6f:2d:a3:09:cb:c1: fb:6b:dd:8a:d0:7c:b2:3c:03:e4:bb:61:2f:80:a2:ff:0b:c1: e5:da:5d:49:18:e8:51:e8:14:e6:44:6d:0a:84:16:92:39:03: 92:c0:09:18:0e:45:ab:0b:c7:33:59:98:3d:c4:a8:ce:f7:13: ed:81:6f:db:5e:05:41:34:1c:c7:86:6f:da:f8:6f:57:b6:03: 1c:f5:dc:19:a7:73:50:fa:05:55:3a:81:45:55:2a:6b:99:9d: f2:2a:ad:e7:41:5d:7f:f0:8a:1c:f9:e9:06:c2:28:4c:c0:bf: 53:a4:59:fb:a7:ba:d9:c7:bd:9f:24:e3:c9:47:d2:07:39:7f: df:7d:0c:2a:26:1e:20:0d:94:aa:92:86:16:a0:d0:da:39:9e: 6d:d8:45:69:25:7a:4d:57:91:9a:44:54:b2:3c:c8:aa:4c:e6: 7c:31:bb:9e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MjdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE3RDMyNzY4QTE2RDg2 Nzk2NTczOTQ5QTY3NDlFRDVDRDhDQjRDODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCumba3MNR5XkGyCsHjvVd+CBgtF+8aMVzLqmSlBc0zuOeex2TY +Q+gGHcw3DKr0zDCtVGz5HBhbrzdkWqL46LJJJlitDzVZWsT9Ylgj2PFaS0z8YaS ZOqshLjBFv7P4Zt1k9HlxUezP1JQsOEXhEVkMhNyUOnmYDgdDdCufk070NOGAp5O h2hX0w30UIG+uS6KOrN1G1Pn1qMamnnUQh1Wm9dEU9wEK73SeMnmOVmdIWU+seok b/y+AwjYXyxQzdsitlaB4XyuFY6P3/EgviiQ88xA4Os7fys7iPzWOf5yH2F2OPd2 HDL7euTUen7yxMhFsBE71eMz0ssSR6StYWrdAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUp9MnaKFthnllc5SaZ0ntXNjLTIQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvcDlNbmFLRnRobmxsYzVTYVowbnRY TmpMVElRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANL0YTAN BgkqhkiG9w0BAQsFAAOCAQEAj54Ek/X81/f4eMzxSmfF8ubjCNY8xuKIO1DFGCdZ BbAAWgo3q3h1YQN0RwZjYImHBv6ClkpfXrtsNXkPCBT4PCsGTDUA834gTa/JTGH1 U0DoWJYNby2jCcvB+2vditB8sjwD5LthL4Ci/wvB5dpdSRjoUegU5kRtCoQWkjkD ksAJGA5FqwvHM1mYPcSozvcT7YFv214FQTQcx4Zv2vhvV7YDHPXcGadzUPoFVTqB RVUqa5md8iqt50Fdf/CKHPnpBsIoTMC/U6RZ+6e62ce9nyTjyUfSBzl/330MKiYe IA2UqpKGFqDQ2jmebdhFaSV6TVeRmkRUsjzIqkzmfDG7ng== -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org