$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/pPTU2ZuldxAEV098QFGht9_x16s.roa File: pPTU2ZuldxAEV098QFGht9_x16s.roa (raw, json) Hash identifier: uXpHfn60lXW2ky/1ZmjWZ0zEXDisJWc4xd0QWWMOTYc= Subject key identifier: A4:F4:D4:D9:9B:A5:77:10:04:57:4F:7C:40:51:A1:B7:DF:F1:D7:AB Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 13B6 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pPTU2ZuldxAEV098QFGht9_x16s.roa Signing time: Fri 01 Sep 2023 09:25:19 +0000 ROA not before: Fri 01 Sep 2023 09:25:19 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131627 IP address blocks: 218.210.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5046 (0x13b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:19 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A4F4D4D99BA5771004574F7C4051A1B7DFF1D7AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:83:ad:1a:64:7d:ba:cc:3e:d0:d5:bd:0f: 2e:f8:0a:fd:6f:34:1f:89:43:04:f6:6e:2d:c3:90: 99:1b:53:ed:15:63:e6:e1:c0:ed:85:87:27:2a:a2: 95:a1:ad:f8:d0:12:04:9b:bc:0d:f8:8e:b5:f5:07: 08:31:43:04:ec:65:0a:51:1c:b4:4f:fe:56:ad:69: 9d:a5:09:c0:51:ae:3f:e3:fb:45:90:72:34:06:4e: e8:e2:cd:75:bb:ce:03:6d:6b:26:94:3b:f7:dd:7c: 8f:7e:0e:8e:d3:c6:41:d8:92:0f:e2:9f:80:c3:d5: 37:84:b0:77:72:84:ce:0c:1d:90:38:43:33:b8:41: c6:bd:6d:68:0a:53:93:8d:19:82:ee:35:ff:1a:80: 9e:10:89:33:d8:71:f4:a1:ca:b6:20:2a:29:4b:6d: 29:43:cc:1c:a3:89:dc:9f:09:7f:31:ba:3b:39:d7: ff:eb:b4:a0:ce:5d:c8:db:88:c7:47:22:aa:ec:a1: 35:6f:96:d2:e4:c3:32:d1:58:49:e3:10:c0:15:66: 94:d0:da:83:be:f1:46:c6:00:e6:e7:0a:84:69:38: ca:95:55:fc:ac:b4:57:ec:3c:a7:85:84:e5:7a:cc: d9:0a:d0:38:53:31:57:be:c8:3a:2f:bf:35:d0:ea: 31:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F4:D4:D9:9B:A5:77:10:04:57:4F:7C:40:51:A1:B7:DF:F1:D7:AB X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pPTU2ZuldxAEV098QFGht9_x16s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.210.118.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:d1:d0:d2:b1:b4:2c:d2:6a:4b:2c:dd:f0:db:bf:e8:96:e5: 7a:b5:9e:7f:70:43:fe:a9:0c:91:22:53:3f:41:53:64:d7:de: 0b:50:c2:7c:ec:01:44:a1:46:d9:55:29:65:68:65:c8:27:88: eb:a9:d8:e4:31:a9:28:25:17:fc:cc:5c:8c:25:51:c3:f4:ab: c0:57:d6:23:55:e6:f0:9b:81:1b:8a:b9:72:0d:75:31:9b:bc: 86:52:48:7a:1f:e0:a8:f0:b0:6d:6b:a8:c1:c3:46:78:bf:42: 81:ac:13:cd:88:6e:01:5a:85:48:6e:bd:ab:bc:2c:93:e5:b2: 40:9b:2a:39:6c:38:05:83:97:c4:db:aa:ba:60:4a:0f:55:94: 4c:f2:ea:17:20:5f:76:eb:40:af:a8:cb:3d:05:e4:49:04:f0: 79:84:93:75:76:88:fe:38:dc:f8:1c:79:c7:0f:4a:0e:f3:0c: e1:c3:54:c0:71:a7:61:ca:00:98:de:19:f2:e2:44:be:2d:84: 63:f8:f8:f0:5e:97:a6:2b:a3:61:62:68:58:79:6c:00:d5:be: d2:7c:f7:5b:4f:60:54:5e:07:41:0d:00:39:ac:2c:b4:98:47: 91:e5:ae:fb:8c:a8:b3:c5:01:9e:fa:a3:f4:67:15:8e:b1:5f: 8a:91:dd:17 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE7YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE0RjRENEQ5OUJBNTc3 MTAwNDU3NEY3QzQwNTFBMUI3REZGMUQ3QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9NYOtGmR9usw+0NW9Dy74Cv1vNB+JQwT2bi3DkJkbU+0VY+bh wO2FhycqopWhrfjQEgSbvA34jrX1BwgxQwTsZQpRHLRP/lataZ2lCcBRrj/j+0WQ cjQGTujizXW7zgNtayaUO/fdfI9+Do7TxkHYkg/in4DD1TeEsHdyhM4MHZA4QzO4 Qca9bWgKU5ONGYLuNf8agJ4QiTPYcfShyrYgKilLbSlDzByjidyfCX8xujs51//r tKDOXcjbiMdHIqrsoTVvltLkwzLRWEnjEMAVZpTQ2oO+8UbGAObnCoRpOMqVVfys tFfsPKeFhOV6zNkK0DhTMVe+yDovvzXQ6jETAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUpPTU2ZuldxAEV098QFGht9/x16swHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvcFBUVTJadWxkeEFFVjA5OFFGR2h0 OV94MTZzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdrSdjAN BgkqhkiG9w0BAQsFAAOCAQEAWtHQ0rG0LNJqSyzd8Nu/6JblerWef3BD/qkMkSJT P0FTZNfeC1DCfOwBRKFG2VUpZWhlyCeI66nY5DGpKCUX/MxcjCVRw/SrwFfWI1Xm 8JuBG4q5cg11MZu8hlJIeh/gqPCwbWuowcNGeL9CgawTzYhuAVqFSG69q7wsk+Wy QJsqOWw4BYOXxNuqumBKD1WUTPLqFyBfdutAr6jLPQXkSQTweYSTdXaI/jjc+Bx5 xw9KDvMM4cNUwHGnYcoAmN4Z8uJEvi2EY/j48F6XpiujYWJoWHlsANW+0nz3W09g VF4HQQ0AOawstJhHkeWu+4yos8UBnvqj9GcVjrFfipHdFw== -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org