$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/yF6djjnK91-t_3_ON6p_aQ132bc.roa File: yF6djjnK91-t_3_ON6p_aQ132bc.roa (raw, json) Hash identifier: B5DU6VhGOv9kc1GsoziLuSdPj/8d9bn6dXqOLdZW2ZU= Subject key identifier: C8:5E:9D:8E:39:CA:F7:5F:AD:FF:7F:CE:37:AA:7F:69:0D:77:D9:B7 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 13DD Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/yF6djjnK91-t_3_ON6p_aQ132bc.roa Signing time: Fri 01 Sep 2023 09:25:32 +0000 ROA not before: Fri 01 Sep 2023 09:25:32 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 203.70.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5085 (0x13dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:32 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C85E9D8E39CAF75FADFF7FCE37AA7F690D77D9B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:95:91:c4:4f:93:b5:09:4e:8f:1c:57:33:c5: c9:91:f1:9a:d1:14:c4:cf:88:7a:c9:4f:a2:99:2a: 06:62:96:8a:63:2c:ff:53:b6:ba:0c:fc:44:cc:97: 80:d9:0f:a1:b0:cc:cd:ba:86:d7:09:2a:63:f4:dd: 1f:ea:81:f8:1e:d1:d3:7f:2b:0c:0a:01:c1:31:4f: d9:08:2d:b0:db:58:36:95:9d:b8:1b:ba:7a:20:97: 70:3b:5c:32:c3:4d:37:58:ec:c6:5f:29:eb:8e:72: 45:8d:3c:53:a9:ae:1b:76:e4:07:cc:0d:60:d2:94: 68:ad:c0:d1:40:e2:da:e6:90:6f:ef:04:30:21:1c: ff:58:fb:89:32:dc:6d:da:ad:a4:33:3b:dd:2e:56: b8:6d:cf:4a:4c:9b:46:e7:64:63:98:7f:e6:d4:3d: 2c:e1:c4:5b:00:a9:4f:02:97:70:00:72:08:74:58: dd:b4:db:c1:47:1f:dd:2c:c8:b6:76:43:1b:bf:b4: be:4b:c0:81:bd:81:c9:9c:e8:6f:9e:54:d2:2b:2d: 92:59:06:ba:93:9b:4f:21:ac:f4:98:3d:65:05:09: 73:e6:12:bc:3f:9e:60:67:34:3e:50:b6:65:60:fc: 0e:07:cd:c5:9b:14:27:06:cc:07:e4:0f:2d:a7:c5: 0f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5E:9D:8E:39:CA:F7:5F:AD:FF:7F:CE:37:AA:7F:69:0D:77:D9:B7 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/yF6djjnK91-t_3_ON6p_aQ132bc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.70.0.0/16 Signature Algorithm: sha256WithRSAEncryption 27:c5:68:f1:02:02:2b:cd:76:22:f3:53:76:39:96:6f:1e:51: 3b:c2:d3:bc:1d:74:b2:fc:a8:a6:4e:9e:d2:90:e9:82:24:a0: 2a:ab:b4:90:aa:dd:a3:72:b4:88:f1:26:91:11:d1:e5:9b:6d: 85:e1:9b:40:66:f6:cf:00:fc:6e:5d:bf:57:24:25:ee:7b:a7: cd:17:df:1f:a9:fb:2b:83:60:7a:67:6d:4c:ca:82:6e:d0:7e: 45:b8:93:4b:3a:9d:92:d3:de:1b:a3:af:ec:85:d7:33:05:cc: e5:8b:0f:46:0c:fe:99:56:b8:6a:b8:61:04:cc:1a:8d:6f:c8: 1a:e8:0a:e4:67:4a:5f:56:0e:44:6a:45:5c:ef:cd:1f:7a:ca: 8f:37:a2:c0:f3:42:71:28:f3:dd:95:35:79:5b:b6:62:fb:7d: 80:1f:17:61:93:fa:9f:9f:eb:17:04:c8:d4:72:93:a8:a4:d0: 63:6f:e6:cb:2f:13:1a:be:3f:39:fd:ec:0a:ef:8e:b1:dc:0d: dc:1d:ce:f6:45:52:aa:00:87:92:cb:1d:82:21:66:d2:d1:e7: 33:81:08:ce:ee:0b:58:97:0f:2e:45:44:2c:3c:58:82:d7:b0: d3:0c:18:6c:aa:30:15:26:78:fd:83:e3:bc:eb:ea:4c:9f:76: 8f:db:b3:59 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICE90wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MzJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEM4NUU5RDhFMzlDQUY3 NUZBREZGN0ZDRTM3QUE3RjY5MEQ3N0Q5QjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGlZHET5O1CU6PHFczxcmR8ZrRFMTPiHrJT6KZKgZilopjLP9T troM/ETMl4DZD6GwzM26htcJKmP03R/qgfge0dN/KwwKAcExT9kILbDbWDaVnbgb unogl3A7XDLDTTdY7MZfKeuOckWNPFOprht25AfMDWDSlGitwNFA4trmkG/vBDAh HP9Y+4ky3G3araQzO90uVrhtz0pMm0bnZGOYf+bUPSzhxFsAqU8Cl3AAcgh0WN20 28FHH90syLZ2Qxu/tL5LwIG9gcmc6G+eVNIrLZJZBrqTm08hrPSYPWUFCXPmErw/ nmBnND5QtmVg/A4HzcWbFCcGzAfkDy2nxQ9LAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUyF6djjnK91+t/3/ON6p/aQ132bcwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMveUY2ZGpqbks5MS10XzNfT042cF9h UTEzMmJjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMtGMA0G CSqGSIb3DQEBCwUAA4IBAQAnxWjxAgIrzXYi81N2OZZvHlE7wtO8HXSy/KimTp7S kOmCJKAqq7SQqt2jcrSI8SaREdHlm22F4ZtAZvbPAPxuXb9XJCXue6fNF98fqfsr g2B6Z21MyoJu0H5FuJNLOp2S094bo6/shdczBczliw9GDP6ZVrhquGEEzBqNb8ga 6ArkZ0pfVg5EakVc780fesqPN6LA80JxKPPdlTV5W7Zi+32AHxdhk/qfn+sXBMjU cpOopNBjb+bLLxMavj85/ewK746x3A3cHc72RVKqAIeSyx2CIWbS0eczgQjO7gtY lw8uRUQsPFiC17DTDBhsqjAVJnj9g+O86+pMn3aP27NZ -----END CERTIFICATE-----Generated at Sat Jun 1 23:25:38 2024 by rpki-client on console-ams.rpki-client.org