$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCREE/CgNFs3GQLbzgTLJvEpAmSq8PVJk.roa File: CgNFs3GQLbzgTLJvEpAmSq8PVJk.roa (raw, json) Hash identifier: pQUV8DhbFBDxdDqJAs0FLUxfpZTi1wViDFOHBAr4aSw= Subject key identifier: 0A:03:45:B3:71:90:2D:BC:E0:4C:B2:6F:12:90:26:4A:AF:0F:54:99 Certificate issuer: /CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90 Certificate serial: 0C1D Authority key identifier: 3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/CgNFs3GQLbzgTLJvEpAmSq8PVJk.roa Signing time: Mon 26 Aug 2024 05:22:55 +0000 ROA not before: Mon 26 Aug 2024 05:22:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18183 IP address blocks: 202.5.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3101 (0xc1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90 Validity Not Before: Aug 26 05:22:55 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0A0345B371902DBCE04CB26F1290264AAF0F5499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f7:49:ed:06:aa:cc:dc:c1:c2:53:43:6b:96: 53:4e:17:26:31:e2:2c:d8:8e:c3:f4:a4:99:c3:09: 7c:05:a6:bf:db:f4:26:4b:21:1b:dd:1a:4d:99:23: 2f:f4:ab:25:80:55:9f:17:0b:88:ea:5d:f9:a2:da: 51:37:18:ae:e8:ba:e8:38:3a:20:eb:4a:74:38:ac: ef:cf:19:d5:90:0e:92:4c:d2:d6:72:1b:a3:11:11: cc:4b:d9:48:d9:ef:0c:6c:32:3c:91:3a:6d:48:07: fa:dd:c7:dd:0f:7f:91:98:f2:aa:33:c6:e7:52:fe: d6:30:50:44:62:53:95:72:31:79:ea:2d:56:e4:d2: 22:68:26:02:04:5c:2c:d6:b9:fe:78:a0:c0:cb:da: e1:aa:6f:b6:c9:1e:1e:51:54:ad:c3:81:e4:18:7b: 92:a7:f6:54:9e:f6:2a:2c:40:dd:29:d0:5f:19:cc: f1:db:71:94:43:b7:4e:f8:83:ca:28:fb:ed:da:75: 5d:54:a9:3d:ca:c4:d6:26:17:58:93:be:6b:21:d8: e5:28:13:c3:91:a2:ca:f8:76:73:af:c1:4e:1b:38: 02:02:ce:b6:76:30:c8:42:6d:5c:e1:e1:97:ac:4d: ae:e0:67:90:0b:d6:2f:77:2b:90:67:e8:77:9b:01: 6e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:03:45:B3:71:90:2D:BC:E0:4C:B2:6F:12:90:26:4A:AF:0F:54:99 X509v3 Authority Key Identifier: keyid:3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/CgNFs3GQLbzgTLJvEpAmSq8PVJk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.5.12.0/22 Signature Algorithm: sha256WithRSAEncryption 15:a6:70:e6:b3:74:80:8e:10:67:d1:db:48:84:3c:73:49:74: 6e:36:6b:0e:9c:15:a4:69:58:04:9e:5b:f6:43:5c:1e:90:cd: 3f:a2:66:c0:f0:6f:8c:b0:98:76:47:80:be:d6:18:c5:b3:86: 8a:b0:69:36:6d:1e:82:05:85:c5:3e:bc:4d:15:c1:28:eb:30: f9:74:2c:29:1f:ad:f5:b5:95:37:b1:fb:02:92:fb:10:22:67: cc:88:df:59:aa:98:6e:ee:0c:ce:e6:72:b0:22:6f:fc:f3:dc: 7e:98:e0:42:0a:72:5a:5e:23:3f:3b:c0:0c:ff:6f:4d:13:22: c7:c6:6a:1b:01:0d:1e:9f:f9:df:ac:a5:cc:2e:f3:59:19:a8: bc:7e:3d:a8:a0:14:9a:b2:99:0e:6d:36:81:a8:e3:71:ec:ac: d2:18:1b:71:06:ae:ff:28:76:4f:b1:11:b4:d6:52:50:11:43: 16:f0:37:5e:ac:ad:14:03:26:8e:11:ea:ce:d9:c5:80:b9:ff: 61:b4:93:96:c5:40:a8:b9:28:9a:3b:7d:51:eb:f6:98:3c:e0: 5a:36:13:cc:05:04:dd:69:18:2c:9d:ff:b7:48:a9:c1:20:2b: 36:bb:f0:f4:51:42:12:94:fc:57:d7:40:2e:d0:bd:2c:55:42: 13:0c:08:f4 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDB0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0I0 OUI4N0EzRkYzODk2MzRDN0QwOTBENzZEQUVBQTk2RkVFRkQ5MDAeFw0yNDA4MjYw NTIyNTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBBMDM0NUIzNzE5MDJE QkNFMDRDQjI2RjEyOTAyNjRBQUYwRjU0OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz90ntBqrM3MHCU0NrllNOFyYx4izYjsP0pJnDCXwFpr/b9CZL IRvdGk2ZIy/0qyWAVZ8XC4jqXfmi2lE3GK7ouug4OiDrSnQ4rO/PGdWQDpJM0tZy G6MREcxL2UjZ7wxsMjyROm1IB/rdx90Pf5GY8qozxudS/tYwUERiU5VyMXnqLVbk 0iJoJgIEXCzWuf54oMDL2uGqb7bJHh5RVK3DgeQYe5Kn9lSe9iosQN0p0F8ZzPHb cZRDt074g8oo++3adV1UqT3KxNYmF1iTvmsh2OUoE8ORosr4dnOvwU4bOAICzrZ2 MMhCbVzh4ZesTa7gZ5AL1i93K5Bn6HebAW6fAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUCgNFs3GQLbzgTLJvEpAmSq8PVJkwHwYDVR0jBBgwFoAUO0m4ej/ziWNMfQkN dtrqqW/u/ZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNSRUUv TzBtNGVqX3ppV05NZlFrTmR0cnFxV191X1pBLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PMG00ZWpfemlXTk1mUWtOZHRycXFXX3VfWkEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9OQ1JFRS9DZ05GczNHUUxiemdUTEp2RXBB bVNxOFBWSmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCygUM MA0GCSqGSIb3DQEBCwUAA4IBAQAVpnDms3SAjhBn0dtIhDxzSXRuNmsOnBWkaVgE nlv2Q1wekM0/ombA8G+MsJh2R4C+1hjFs4aKsGk2bR6CBYXFPrxNFcEo6zD5dCwp H631tZU3sfsCkvsQImfMiN9Zqphu7gzO5nKwIm/889x+mOBCCnJaXiM/O8AM/29N EyLHxmobAQ0en/nfrKXMLvNZGai8fj2ooBSaspkObTaBqONx7KzSGBtxBq7/KHZP sRG01lJQEUMW8DderK0UAyaOEerO2cWAuf9htJOWxUCouSiaO31R6/aYPOBaNhPM BQTdaRgsnf+3SKnBICs2u/D0UUISlPxX10Au0L0sVUITDAj0 -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:42 2024 by rpki-client on console-fra.rpki-client.org