$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SGU/NpcJB5j5yD0obQR2NJ7j25-ydhA.roa File: NpcJB5j5yD0obQR2NJ7j25-ydhA.roa (raw, json) Hash identifier: ypWLG8pG/hUyDTX+jUbQqJBPe7+AfhBc1q5FZHcPbSw= Subject key identifier: 36:97:09:07:98:F9:C8:3D:28:6D:04:76:34:9E:E3:DB:9F:B2:76:10 Certificate issuer: /CN=3294E71902A4A5C31B987BD67D094AF5830A816D Certificate serial: 0140 Authority key identifier: 32:94:E7:19:02:A4:A5:C3:1B:98:7B:D6:7D:09:4A:F5:83:0A:81:6D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MpTnGQKkpcMbmHvWfQlK9YMKgW0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SGU/NpcJB5j5yD0obQR2NJ7j25-ydhA.roa Signing time: Fri 01 Sep 2023 09:41:46 +0000 ROA not before: Fri 01 Sep 2023 09:41:46 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 134823 IP address blocks: 103.186.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SGU/MpTnGQKkpcMbmHvWfQlK9YMKgW0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SGU/MpTnGQKkpcMbmHvWfQlK9YMKgW0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/MpTnGQKkpcMbmHvWfQlK9YMKgW0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3294E71902A4A5C31B987BD67D094AF5830A816D Validity Not Before: Sep 1 09:41:46 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3697090798F9C83D286D0476349EE3DB9FB27610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:75:57:55:23:b3:cd:9a:f3:8d:f4:2b:4d:7d: aa:92:1a:5c:cc:b0:0b:a5:7e:55:e4:f4:6b:e6:1b: 6b:7d:f5:e8:13:8c:18:a5:bb:2f:59:20:a4:4f:57: 05:e5:a9:9d:61:9e:cd:ff:de:1a:6f:1b:d0:9d:48: d6:d1:93:f1:1e:81:11:1f:30:05:a1:9e:68:b1:81: a9:d4:e4:dc:93:bc:3b:61:e8:28:41:a7:84:31:0d: c7:fc:7e:5e:72:af:d4:74:52:90:cd:2a:0c:af:bd: ff:54:11:f6:43:67:cb:eb:fe:a0:77:f9:59:d4:3d: 8e:34:e9:31:aa:f0:a5:f9:42:04:9c:40:b4:88:57: e3:f6:17:0c:4b:92:be:11:46:88:d8:2e:63:ea:ef: 1f:86:df:36:92:af:af:20:8c:25:38:02:37:2e:5e: 14:4e:f8:04:46:78:51:a7:9c:4f:ed:c6:8d:f3:a8: 53:58:96:9a:07:03:a4:82:87:36:70:5b:7e:49:f5: 43:e9:7c:82:46:8e:65:fc:fe:a8:a2:89:0e:f9:f9: a7:d5:0d:c0:01:66:43:70:6d:e3:52:72:74:69:fd: 2b:59:cc:d3:61:3a:09:ec:de:79:84:a8:05:fa:0f: 3e:68:6d:16:61:c3:1c:35:a5:69:45:5e:96:36:48: 38:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:97:09:07:98:F9:C8:3D:28:6D:04:76:34:9E:E3:DB:9F:B2:76:10 X509v3 Authority Key Identifier: keyid:32:94:E7:19:02:A4:A5:C3:1B:98:7B:D6:7D:09:4A:F5:83:0A:81:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SGU/MpTnGQKkpcMbmHvWfQlK9YMKgW0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MpTnGQKkpcMbmHvWfQlK9YMKgW0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SGU/NpcJB5j5yD0obQR2NJ7j25-ydhA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.186.186.0/23 Signature Algorithm: sha256WithRSAEncryption 94:c3:a8:fc:ac:4e:7b:06:75:71:3c:46:1d:f9:03:2d:98:7e: a1:47:ec:48:d5:d3:c7:cc:61:f2:3e:2c:56:e8:23:ee:9b:2f: 26:6b:7d:da:20:6e:d9:71:f5:67:5a:9c:3b:b7:14:e0:bf:2a: af:c4:a3:f8:9c:3d:26:36:18:99:bc:35:94:c8:38:3b:90:75: 11:5c:b3:37:9e:bf:ac:cc:33:80:51:2c:59:66:9f:41:62:c5: f2:25:1b:ad:c6:a1:01:f4:7c:80:c5:34:6a:5d:f4:f6:15:2e: 3b:86:7a:1e:13:ed:13:76:bd:be:19:bb:e1:57:3e:35:9b:52: 96:7e:c1:42:28:ab:89:94:f2:ca:e5:08:da:ff:71:67:94:84: ac:75:b6:85:fc:c8:5c:86:29:f7:b1:5e:f3:45:fe:ea:fb:b8: 30:75:83:f9:bf:52:a5:b4:f2:46:c5:18:f0:4c:f7:ad:8c:c9: a8:8a:02:c2:50:99:3c:9e:4e:38:9f:fc:00:65:6d:7a:02:dc: f9:23:88:01:86:58:b5:b0:09:c2:b3:c9:d2:d7:8c:cc:97:39: aa:d1:09:49:f9:e2:78:28:1c:82:1a:df:6b:9a:5b:87:a2:47: c9:2b:c8:8a:2e:51:a0:87:61:c2:17:11:28:36:48:91:21:30: 5f:39:53:09 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzI5 NEU3MTkwMkE0QTVDMzFCOTg3QkQ2N0QwOTRBRjU4MzBBODE2RDAeFw0yMzA5MDEw OTQxNDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM2OTcwOTA3OThGOUM4 M0QyODZEMDQ3NjM0OUVFM0RCOUZCMjc2MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMdVdVI7PNmvON9CtNfaqSGlzMsAulflXk9GvmG2t99egTjBil uy9ZIKRPVwXlqZ1hns3/3hpvG9CdSNbRk/EegREfMAWhnmixganU5NyTvDth6ChB p4QxDcf8fl5yr9R0UpDNKgyvvf9UEfZDZ8vr/qB3+VnUPY406TGq8KX5QgScQLSI V+P2FwxLkr4RRojYLmPq7x+G3zaSr68gjCU4AjcuXhRO+ARGeFGnnE/txo3zqFNY lpoHA6SChzZwW35J9UPpfIJGjmX8/qiiiQ75+afVDcABZkNwbeNScnRp/StZzNNh Ogns3nmEqAX6Dz5obRZhwxw1pWlFXpY2SDgRAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUNpcJB5j5yD0obQR2NJ7j25+ydhAwHwYDVR0jBBgwFoAUMpTnGQKkpcMbmHvW fQlK9YMKgW0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0dVL01w VG5HUUtrcGNNYm1IdldmUWxLOVlNS2dXMC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TXBUbkdRS2twY01ibUh2V2ZRbEs5WU1LZ1cwLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvU0dVL05wY0pCNWo1eUQwb2JRUjJOSjdqMjUt eWRoQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnurowDQYJ KoZIhvcNAQELBQADggEBAJTDqPysTnsGdXE8Rh35Ay2YfqFH7EjV08fMYfI+LFbo I+6bLyZrfdogbtlx9WdanDu3FOC/Kq/Eo/icPSY2GJm8NZTIODuQdRFcszeev6zM M4BRLFlmn0FixfIlG63GoQH0fIDFNGpd9PYVLjuGeh4T7RN2vb4Zu+FXPjWbUpZ+ wUIoq4mU8srlCNr/cWeUhKx1toX8yFyGKfexXvNF/ur7uDB1g/m/UqW08kbFGPBM 962MyaiKAsJQmTyeTjif/ABlbXoC3PkjiAGGWLWwCcKzydLXjMyXOarRCUn54ngo HIIa32uaW4eiR8kryIouUaCHYcIXESg2SJEhMF85Uwk= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:03 2024 by rpki-client on console-fra.rpki-client.org