$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/wd4yb85jSNV89oPcMB5haXW5fZE.roa File: wd4yb85jSNV89oPcMB5haXW5fZE.roa (raw, json) Hash identifier: iPGZXN4S/rLJLzDUL3J2EWhjNgu6Csg2ZMWTOMuaVUY= Subject key identifier: C1:DE:32:6F:CE:63:48:D5:7C:F6:83:DC:30:1E:61:69:75:B9:7D:91 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 15FF Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wd4yb85jSNV89oPcMB5haXW5fZE.roa Signing time: Mon 26 Aug 2024 05:21:40 +0000 ROA not before: Mon 26 Aug 2024 05:21:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 106.106.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5631 (0x15ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 26 05:21:40 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C1DE326FCE6348D57CF683DC301E616975B97D91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:8b:a4:92:d5:52:d4:0a:ff:d4:9e:82:46: d3:d2:ce:cb:d9:a4:fc:41:7a:73:b4:2d:d0:11:67: c8:91:74:0c:47:f6:e4:9a:75:fd:c1:82:80:bc:65: 95:43:68:ff:00:4c:f1:c1:4d:1e:ee:8e:42:dd:03: ca:da:82:f7:2a:c4:ce:e3:af:c3:a1:89:5a:e7:0a: fc:c2:67:eb:eb:0b:f4:c2:de:2c:88:ac:af:78:87: 90:3c:15:5b:a3:cd:3b:c8:00:e2:33:7c:08:6b:ff: c3:cd:56:34:0f:01:d7:e5:1f:ad:46:07:82:03:34: 1e:4e:8b:d9:85:ff:1f:7b:4e:d0:28:f0:4e:49:c2: c3:03:51:de:84:b9:5e:33:41:dd:2f:f7:39:29:d3: d2:19:6e:f0:ab:ff:e3:09:ca:d7:9c:d0:66:a6:d6: be:15:a2:e0:43:5f:48:34:6f:e4:22:4c:38:a6:54: 34:88:c2:91:1d:75:5c:41:a4:3c:e1:80:d8:98:e9: 22:50:15:7f:1b:0b:df:9f:9d:6b:49:42:c8:f0:cb: cf:24:41:c0:b1:33:de:d4:3f:00:e1:02:ad:c1:33: 0f:3e:97:81:12:41:75:6d:c1:e7:2b:f7:73:09:f7: ac:aa:f9:63:8b:ec:da:a8:bf:6e:af:88:fa:17:40: 91:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DE:32:6F:CE:63:48:D5:7C:F6:83:DC:30:1E:61:69:75:B9:7D:91 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wd4yb85jSNV89oPcMB5haXW5fZE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.106.197.0/24 Signature Algorithm: sha256WithRSAEncryption 69:fe:05:44:aa:7c:53:93:a6:f8:57:32:6f:4a:e6:29:a5:0f: 9d:9e:d0:cf:23:75:ce:15:24:4b:38:22:f6:a9:d4:4e:83:d3: b3:00:67:4f:69:7d:8e:e9:20:24:f1:05:05:39:fc:81:73:b0: cf:42:73:26:97:7a:46:04:ac:e7:3b:7e:77:cc:b7:df:f6:bc: 3f:aa:64:b4:d7:a2:e2:9e:5e:39:d7:94:6d:4d:b7:f2:c7:81: 4e:00:15:03:a7:fc:aa:0b:1d:14:01:64:f9:a3:ca:0c:26:35: c6:22:f7:cd:a1:eb:29:e4:f0:86:0e:ae:59:42:2a:b5:80:a3: 0c:c5:e9:62:8c:d5:63:b0:d0:76:43:a5:fc:97:4c:78:2c:15: 49:24:0b:fb:39:34:7a:3e:b1:cc:24:e3:8e:b0:d1:e3:a2:7c: e5:bf:a7:93:9a:0a:d7:7b:dc:5e:0a:60:c5:be:5d:ea:42:50: 66:6b:3c:d3:55:06:05:09:85:84:84:0b:60:3b:c6:e5:12:3c: ae:48:f9:9e:22:39:89:8b:61:05:19:10:d6:f9:68:ec:5a:ae: 4e:ba:01:54:35:d3:1c:84:7f:f7:49:18:7f:51:88:7b:81:63: 41:d6:70:57:fa:ab:70:f5:5c:14:53:b1:64:27:14:9d:f5:86: 12:80:8d:e5 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFf8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw NTIxNDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMxREUzMjZGQ0U2MzQ4 RDU3Q0Y2ODNEQzMwMUU2MTY5NzVCOTdEOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9x4ukktVS1Ar/1J6CRtPSzsvZpPxBenO0LdARZ8iRdAxH9uSa df3BgoC8ZZVDaP8ATPHBTR7ujkLdA8ragvcqxM7jr8OhiVrnCvzCZ+vrC/TC3iyI rK94h5A8FVujzTvIAOIzfAhr/8PNVjQPAdflH61GB4IDNB5Oi9mF/x97TtAo8E5J wsMDUd6EuV4zQd0v9zkp09IZbvCr/+MJytec0Gam1r4VouBDX0g0b+QiTDimVDSI wpEddVxBpDzhgNiY6SJQFX8bC9+fnWtJQsjwy88kQcCxM97UPwDhAq3BMw8+l4ES QXVtwecr93MJ96yq+WOL7Nqov26viPoXQJHDAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUwd4yb85jSNV89oPcMB5haXW5fZEwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvd2Q0eWI4NWpTTlY4OW9QY01CNWhh WFc1ZlpFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGpqxTAN BgkqhkiG9w0BAQsFAAOCAQEAaf4FRKp8U5Om+Fcyb0rmKaUPnZ7QzyN1zhUkSzgi 9qnUToPTswBnT2l9jukgJPEFBTn8gXOwz0JzJpd6RgSs5zt+d8y33/a8P6pktNei 4p5eOdeUbU238seBTgAVA6f8qgsdFAFk+aPKDCY1xiL3zaHrKeTwhg6uWUIqtYCj DMXpYozVY7DQdkOl/JdMeCwVSSQL+zk0ej6xzCTjjrDR46J85b+nk5oK13vcXgpg xb5d6kJQZms801UGBQmFhIQLYDvG5RI8rkj5niI5iYthBRkQ1vlo7FquTroBVDXT HIR/90kYf1GIe4FjQdZwV/qrcPVcFFOxZCcUnfWGEoCN5Q== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:11 2024 by rpki-client on console-ams.rpki-client.org