$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCREE/5EoEMmRS7_iJc7ox8Vi6Z3amrj0.roa File: 5EoEMmRS7_iJc7ox8Vi6Z3amrj0.roa (raw, json) Hash identifier: WWmJPhgBq4sp+sOOpX7jrHpsj7Np2c8l1JHXDVAks1w= Subject key identifier: E4:4A:04:32:64:52:EF:F8:89:73:BA:31:F1:58:BA:67:76:A6:AE:3D Certificate issuer: /CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90 Certificate serial: 0C56 Authority key identifier: 3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/5EoEMmRS7_iJc7ox8Vi6Z3amrj0.roa Signing time: Fri 15 Nov 2024 05:51:34 +0000 ROA not before: Fri 15 Nov 2024 05:51:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18183 IP address blocks: 103.189.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3158 (0xc56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90 Validity Not Before: Nov 15 05:51:34 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E44A04326452EFF88973BA31F158BA6776A6AE3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b1:e1:88:e9:2d:2a:db:0d:ae:70:29:9a:d2: 86:26:15:10:80:15:6f:cb:82:75:9a:d9:24:6f:95: af:90:ec:13:c5:26:bf:96:d8:23:3f:e9:64:b8:ee: dc:4a:59:7a:b6:be:87:7a:07:e1:14:ce:8d:fd:32: 11:f9:fd:ad:75:ac:db:5d:f1:dd:6a:71:d6:91:41: 0d:f6:39:47:94:d4:55:bb:98:54:19:b5:26:8e:fc: da:8b:24:40:55:02:86:8e:ab:8a:ad:79:4c:df:b5: ac:2e:72:07:e9:b2:73:64:f6:f5:3c:58:78:b5:8b: d6:f3:e5:6e:d7:2c:93:e7:72:4a:27:65:0c:85:b9: 52:86:80:17:d1:c9:21:ba:4f:c9:f6:6a:07:eb:ee: 88:c2:0d:4c:4d:4a:54:f2:42:04:6b:ae:03:dd:7f: 75:d3:28:e6:62:9f:bc:94:8d:3e:cf:45:61:4d:8b: 69:ac:27:3c:90:f5:22:9b:f3:b1:4b:ef:26:03:ed: 10:1e:33:4f:84:ca:c2:ef:e4:81:1b:d2:dd:e2:d7: e4:a8:02:d7:70:10:55:8c:f7:b7:fe:6d:74:5e:9b: c9:d0:ac:a4:16:09:af:07:a1:ba:1a:49:35:1c:48: ca:9f:c9:3a:71:87:a7:50:29:24:0d:ff:ae:97:79: 0d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4A:04:32:64:52:EF:F8:89:73:BA:31:F1:58:BA:67:76:A6:AE:3D X509v3 Authority Key Identifier: keyid:3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/5EoEMmRS7_iJc7ox8Vi6Z3amrj0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.189.132.0/23 Signature Algorithm: sha256WithRSAEncryption 54:e6:2a:a3:56:d1:da:bd:73:5f:1f:a3:17:f7:71:26:28:6b: 02:29:79:3d:db:a1:22:e0:70:e5:df:71:c5:15:06:2f:47:a9: be:e3:e6:33:3b:c4:40:d9:d6:4f:d2:73:2d:04:a8:a9:1d:27: 19:da:a0:54:97:fe:98:85:98:df:79:94:9d:d8:7d:c0:87:5b: fe:28:75:41:30:56:7c:ef:f3:69:8f:9b:2c:40:a3:b7:42:d2: e6:e3:89:4a:0b:ce:8e:0c:ce:6a:7a:1d:1b:82:a9:da:a8:c0: 4b:c6:11:ed:8d:2c:10:ee:aa:1d:35:b0:e2:9b:ba:62:51:fa: 5e:f0:aa:f7:b6:ad:b9:1e:ff:4d:ab:40:25:83:e3:69:f8:74: 0a:55:ac:d1:b7:05:c1:7f:49:e6:43:bf:f9:c5:c2:0d:a6:ae: 3d:08:fe:c5:e2:d5:b9:49:55:45:a4:90:63:91:cb:6d:b4:d2: 4d:75:51:a0:7d:45:d7:c3:27:23:35:8a:68:00:fe:c2:19:7f: db:87:82:91:a2:bc:63:68:41:fb:93:1b:0a:76:c4:96:db:0d: 66:a4:0e:0f:46:4d:91:8f:61:31:7e:f1:82:e3:33:6d:a1:89: 70:93:12:1c:64:b5:89:dc:28:67:9d:95:98:14:d3:6a:52:87: 6f:dd:80:cb -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDFYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0I0 OUI4N0EzRkYzODk2MzRDN0QwOTBENzZEQUVBQTk2RkVFRkQ5MDAeFw0yNDExMTUw NTUxMzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU0NEEwNDMyNjQ1MkVG Rjg4OTczQkEzMUYxNThCQTY3NzZBNkFFM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnseGI6S0q2w2ucCma0oYmFRCAFW/LgnWa2SRvla+Q7BPFJr+W 2CM/6WS47txKWXq2vod6B+EUzo39MhH5/a11rNtd8d1qcdaRQQ32OUeU1FW7mFQZ tSaO/NqLJEBVAoaOq4qteUzftawucgfpsnNk9vU8WHi1i9bz5W7XLJPnckonZQyF uVKGgBfRySG6T8n2agfr7ojCDUxNSlTyQgRrrgPdf3XTKOZin7yUjT7PRWFNi2ms JzyQ9SKb87FL7yYD7RAeM0+EysLv5IEb0t3i1+SoAtdwEFWM97f+bXRem8nQrKQW Ca8HoboaSTUcSMqfyTpxh6dQKSQN/66XeQ3rAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU5EoEMmRS7/iJc7ox8Vi6Z3amrj0wHwYDVR0jBBgwFoAUO0m4ej/ziWNMfQkN dtrqqW/u/ZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNSRUUv TzBtNGVqX3ppV05NZlFrTmR0cnFxV191X1pBLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PMG00ZWpfemlXTk1mUWtOZHRycXFXX3VfWkEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9OQ1JFRS81RW9FTW1SUzdfaUpjN294OFZp NlozYW1yajAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ72E MA0GCSqGSIb3DQEBCwUAA4IBAQBU5iqjVtHavXNfH6MX93EmKGsCKXk926Ei4HDl 33HFFQYvR6m+4+YzO8RA2dZP0nMtBKipHScZ2qBUl/6YhZjfeZSd2H3Ah1v+KHVB MFZ87/Npj5ssQKO3QtLm44lKC86ODM5qeh0bgqnaqMBLxhHtjSwQ7qodNbDim7pi Ufpe8Kr3tq25Hv9Nq0Alg+Np+HQKVazRtwXBf0nmQ7/5xcINpq49CP7F4tW5SVVF pJBjkctttNJNdVGgfUXXwycjNYpoAP7CGX/bh4KRorxjaEH7kxsKdsSW2w1mpA4P Rk2Rj2ExfvGC4zNtoYlwkxIcZLWJ3ChnnZWYFNNqUodv3YDL -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:32 2024 by rpki-client on console-fra.rpki-client.org