$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/wAytPezGmkG6LgzGZZPV-iPmQtQ.roa File: wAytPezGmkG6LgzGZZPV-iPmQtQ.roa (raw, json) Hash identifier: RpJZrqItV7RD/vzxfDYC8uYFPzEBsRyYJyxIcW+HrW4= Subject key identifier: C0:0C:AD:3D:EC:C6:9A:41:BA:2E:0C:C6:65:93:D5:FA:23:E6:42:D4 Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 0DAD Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wAytPezGmkG6LgzGZZPV-iPmQtQ.roa Signing time: Fri 01 Sep 2023 09:24:34 +0000 ROA not before: Fri 01 Sep 2023 09:24:34 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 192.72.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3501 (0xdad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Sep 1 09:24:34 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C00CAD3DECC69A41BA2E0CC66593D5FA23E642D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3f:29:07:66:5b:60:ff:0a:68:fb:e3:aa:07: 6c:8a:af:a6:8c:ec:1a:38:10:1d:4a:26:27:d9:4c: 31:8b:b4:f6:c8:c1:a6:07:ac:3c:cb:9d:6a:4f:a5: 3f:a8:ab:38:84:12:59:7f:fc:3f:b0:1e:1d:b5:9d: 7e:0c:8e:3e:22:03:8a:78:d6:ad:c9:92:7d:3c:7f: 11:47:d6:e8:f5:1b:82:19:a3:c1:27:a1:63:6e:bf: 45:a0:a2:8b:33:af:80:e3:51:21:7d:fb:36:66:8b: 16:98:e6:aa:b0:10:f5:d5:9a:60:1b:66:39:53:e9: 49:f6:64:03:23:3f:98:66:91:e4:9c:88:97:36:df: f8:cd:b9:34:d1:44:fb:4d:ff:f4:0c:74:e2:a6:09: 07:2c:eb:92:03:f3:dc:f0:88:e0:92:cb:a1:a6:b0: 95:4e:e0:1a:c6:e5:83:16:ea:c8:27:d2:12:d4:ae: 61:38:d5:61:43:c7:4f:ba:eb:20:e7:3f:f3:4b:d3: 8b:64:90:61:10:53:20:fc:98:4d:5e:0d:ea:38:b2: 97:9d:b3:8a:55:c3:9d:c2:a3:26:d8:fb:88:1e:09: 1d:1b:ad:c5:ac:47:d3:f2:2c:06:97:ff:f1:5e:d4: 9d:02:62:02:3e:25:ea:65:1e:10:b1:ad:29:22:52: 8f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0C:AD:3D:EC:C6:9A:41:BA:2E:0C:C6:65:93:D5:FA:23:E6:42:D4 X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wAytPezGmkG6LgzGZZPV-iPmQtQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.240.0/21 Signature Algorithm: sha256WithRSAEncryption 4c:6e:93:cd:75:34:5c:bc:76:93:fa:0a:d0:f4:b0:97:0f:2a: 8b:98:6c:17:a9:0b:2c:72:03:01:6d:e4:63:49:72:63:c6:ed: 1b:7d:fd:36:5d:85:7e:dd:ed:76:d3:23:98:e4:0c:af:4f:2a: 73:34:b6:08:6b:56:8e:74:56:0c:29:64:a4:cc:d7:54:9c:3d: d2:3c:cb:4a:d0:b3:e6:9e:2e:51:83:a8:7e:30:d3:7a:c1:ad: c6:7f:c5:c0:94:4d:5d:ed:68:80:e3:48:65:e6:b0:3f:b1:b9: 01:36:88:9a:0e:a0:1d:c5:f3:9d:9a:51:e4:3f:e7:22:80:7b: c6:e9:f7:b6:ea:c9:10:8c:3c:c5:fe:c3:1b:46:1b:76:94:bc: 5f:96:ae:45:be:5f:dd:8b:78:55:68:85:9a:30:ae:5b:8e:f7: b5:e4:4c:ec:9e:7b:72:7c:83:b8:b8:0f:3a:9b:47:50:ea:27: 80:6e:d3:6f:90:1b:56:26:8a:28:5f:51:73:5f:dc:c1:85:e9: 21:a0:c8:d7:94:56:1a:aa:4e:11:15:66:46:97:f2:81:4e:88: ed:5c:93:b4:05:fa:cc:98:59:e0:c3:46:9a:0a:77:ec:b7:28: 58:3e:26:3c:97:72:93:24:8b:45:5b:12:54:cb:50:be:0a:5f: 0d:55:fc:68 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDa0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yMzA5MDEw OTI0MzRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEMwMENBRDNERUNDNjlB NDFCQTJFMENDNjY1OTNENUZBMjNFNjQyRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkPykHZltg/wpo++OqB2yKr6aM7Bo4EB1KJifZTDGLtPbIwaYH rDzLnWpPpT+oqziEEll//D+wHh21nX4Mjj4iA4p41q3Jkn08fxFH1uj1G4IZo8En oWNuv0Wgooszr4DjUSF9+zZmixaY5qqwEPXVmmAbZjlT6Un2ZAMjP5hmkeSciJc2 3/jNuTTRRPtN//QMdOKmCQcs65ID89zwiOCSy6GmsJVO4BrG5YMW6sgn0hLUrmE4 1WFDx0+66yDnP/NL04tkkGEQUyD8mE1eDeo4speds4pVw53CoybY+4geCR0brcWs R9PyLAaX//Fe1J0CYgI+JeplHhCxrSkiUo/DAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUwAytPezGmkG6LgzGZZPV+iPmQtQwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvd0F5dFBlekdta0c2TGd6R1paUFYt aVBtUXRRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8BI8DAN BgkqhkiG9w0BAQsFAAOCAQEATG6TzXU0XLx2k/oK0PSwlw8qi5hsF6kLLHIDAW3k Y0lyY8btG339Nl2Fft3tdtMjmOQMr08qczS2CGtWjnRWDClkpMzXVJw90jzLStCz 5p4uUYOofjDTesGtxn/FwJRNXe1ogONIZeawP7G5ATaImg6gHcXznZpR5D/nIoB7 xun3turJEIw8xf7DG0YbdpS8X5auRb5f3Yt4VWiFmjCuW473teRM7J57cnyDuLgP OptHUOongG7Tb5AbViaKKF9Rc1/cwYXpIaDI15RWGqpOERVmRpfygU6I7VyTtAX6 zJhZ4MNGmgp37LcoWD4mPJdykySLRVsSVMtQvgpfDVX8aA== -----END CERTIFICATE-----Generated at Sun Jun 2 09:37:18 2024 by rpki-client on console-ams.rpki-client.org