$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/nbzkfdtg-rL288Zw9i-Q0HAFWsY.roa File: nbzkfdtg-rL288Zw9i-Q0HAFWsY.roa (raw, json) Hash identifier: BwKF14tYfWY1BuDdBe7fGaA1HZwknuJ6D9GgSmqEC/8= Subject key identifier: 9D:BC:E4:7D:DB:60:FA:B2:F6:F3:C6:70:F6:2F:90:D0:70:05:5A:C6 Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2 Certificate serial: 590B Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/nbzkfdtg-rL288Zw9i-Q0HAFWsY.roa Signing time: Mon 26 Aug 2024 05:23:25 +0000 ROA not before: Mon 26 Aug 2024 05:23:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38851 IP address blocks: 103.46.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22795 (0x590b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2 Validity Not Before: Aug 26 05:23:25 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9DBCE47DDB60FAB2F6F3C670F62F90D070055AC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d8:f2:cf:0e:3d:73:2d:7c:7a:8c:21:84:40: c7:29:e6:17:4b:47:71:65:38:0f:e6:a1:54:27:e9: d2:0f:13:c5:ca:c2:3c:30:6a:8f:1d:25:15:e3:88: 50:70:07:1b:24:9f:d9:54:cc:ff:ca:f0:28:b9:fe: 5e:f4:15:47:25:fd:e4:43:e1:8b:52:41:53:44:76: 4f:4b:89:1f:2c:e3:34:eb:16:6c:bb:6b:18:3b:34: e1:b8:bc:37:2d:14:89:17:60:d5:f6:3d:a4:51:93: 2e:29:e1:38:3e:3c:3c:28:28:cf:20:d6:4d:ae:81: 87:88:3c:43:b0:20:7d:3c:93:f9:d5:f6:47:f8:9d: 8f:a7:cb:38:ee:b7:4f:d4:8d:90:c1:7c:e9:e8:9f: 4d:4f:e0:6a:da:ba:49:19:a9:86:6f:0b:f5:55:3f: bf:e7:a9:9c:9c:6f:5b:23:bf:d3:cd:ab:b1:9a:4d: 75:9f:1b:79:9b:ff:3c:aa:8c:b1:13:ab:e0:cb:84: e4:b1:e5:e6:70:a0:47:8c:a9:3e:11:46:08:96:dd: dc:56:21:24:a0:41:89:79:f0:31:6d:e9:5d:14:ae: f4:b7:fe:52:fa:0b:34:48:5c:4b:1d:07:38:6a:c3: d4:65:b2:81:c5:39:b8:16:f5:0d:a0:37:cd:96:bf: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BC:E4:7D:DB:60:FA:B2:F6:F3:C6:70:F6:2F:90:D0:70:05:5A:C6 X509v3 Authority Key Identifier: keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/nbzkfdtg-rL288Zw9i-Q0HAFWsY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.46.190.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:0f:e3:ee:62:84:7f:c3:74:29:dc:f3:2d:3e:9b:a6:f5:a6: 6c:89:69:d3:da:54:e8:9c:3e:c5:20:de:8c:5c:38:50:19:46: f0:93:5d:78:59:c7:b9:50:51:1f:1f:92:a6:8b:ec:d2:d0:c0: ec:21:2e:fe:80:92:22:51:67:3c:5c:94:3a:ea:e0:36:a0:71: 73:c5:f4:b5:f9:d8:55:ee:d1:fc:34:a3:7f:d9:21:ec:ed:fd: 93:3a:dc:97:4e:ae:3b:c2:17:ab:32:52:70:81:a3:53:37:e1: a1:4d:f0:41:d1:54:b2:ed:68:d5:6e:81:68:6d:b0:7e:a2:2f: be:b6:0d:7a:64:89:48:6d:ad:d4:95:b5:dc:93:b7:88:44:09: 96:fd:bf:5b:33:83:16:38:58:74:ec:97:bd:95:25:93:db:6d: 8b:36:15:b2:c1:94:17:b8:d2:aa:df:82:6e:23:8b:6d:d2:43: ef:50:4a:d8:e8:77:b1:58:7e:a7:d9:4f:62:c7:3b:3f:26:5c: 0a:5f:fc:a5:83:d9:7a:c4:aa:cf:5d:a6:61:db:14:ca:0d:53: fc:59:2d:2b:b6:1d:e8:fb:a9:a8:86:1d:b5:f3:cf:b6:20:59: 82:81:64:81:b3:a1:8f:e3:8c:60:cf:88:a9:33:c9:85:93:bd: d3:0c:72:ee -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICWQswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjQz MjBGRDc4REZCNkE0RDFDOTIzMjJGNzk0OTY2Qjg1MjVERkREMjAeFw0yNDA4MjYw NTIzMjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlEQkNFNDdEREI2MEZB QjJGNkYzQzY3MEY2MkY5MEQwNzAwNTVBQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG2PLPDj1zLXx6jCGEQMcp5hdLR3FlOA/moVQn6dIPE8XKwjww ao8dJRXjiFBwBxskn9lUzP/K8Ci5/l70FUcl/eRD4YtSQVNEdk9LiR8s4zTrFmy7 axg7NOG4vDctFIkXYNX2PaRRky4p4Tg+PDwoKM8g1k2ugYeIPEOwIH08k/nV9kf4 nY+nyzjut0/UjZDBfOnon01P4GraukkZqYZvC/VVP7/nqZycb1sjv9PNq7GaTXWf G3mb/zyqjLETq+DLhOSx5eZwoEeMqT4RRgiW3dxWISSgQYl58DFt6V0UrvS3/lL6 CzRIXEsdBzhqw9RlsoHFObgW9Q2gN82WvxS7AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUnbzkfdtg+rL288Zw9i+Q0HAFWsYwHwYDVR0jBBgwFoAUtDIP1437ak0ckjIv eUlmuFJd/dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlRDQ0FU Vi90RElQMTQzN2FrMGNrakl2ZVVsbXVGSmRfZEkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3RESVAxNDM3YWswY2tqSXZlVWxtdUZKZF9kSS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05UQ0NBVFYvbmJ6a2ZkdGctckwyODha dzlpLVEwSEFGV3NZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWcuvjANBgkqhkiG9w0BAQsFAAOCAQEAXA/j7mKEf8N0KdzzLT6bpvWmbIlp09pU 6Jw+xSDejFw4UBlG8JNdeFnHuVBRHx+Spovs0tDA7CEu/oCSIlFnPFyUOurgNqBx c8X0tfnYVe7R/DSjf9kh7O39kzrcl06uO8IXqzJScIGjUzfhoU3wQdFUsu1o1W6B aG2wfqIvvrYNemSJSG2t1JW13JO3iEQJlv2/WzODFjhYdOyXvZUlk9ttizYVssGU F7jSqt+CbiOLbdJD71BK2Oh3sVh+p9lPYsc7PyZcCl/8pYPZesSqz12mYdsUyg1T /FktK7Yd6PupqIYdtfPPtiBZgoFkgbOhj+OMYM+IqTPJhZO90wxy7g== -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:42 2024 by rpki-client on console-fra.rpki-client.org