$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/NWt2mrUMWerj7lDeC0uI6LcpPA0.roa File: NWt2mrUMWerj7lDeC0uI6LcpPA0.roa (raw, json) Hash identifier: 0eIJ5Vq4e+6a46O93JwfXk2Y5KCQQkEedEvbJHOAKS8= Subject key identifier: 35:6B:76:9A:B5:0C:59:EA:E3:EE:50:DE:0B:4B:88:E8:B7:29:3C:0D Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Certificate serial: 0B9D Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/NWt2mrUMWerj7lDeC0uI6LcpPA0.roa Signing time: Fri 01 Sep 2023 10:01:06 +0000 ROA not before: Fri 01 Sep 2023 10:01:06 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18049 IP address blocks: 49.213.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2973 (0xb9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Validity Not Before: Sep 1 10:01:06 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=356B769AB50C59EAE3EE50DE0B4B88E8B7293C0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:96:62:7a:18:ee:0b:0c:a8:c7:61:db:fd:a0: c1:33:c0:77:36:4b:6f:6e:bc:f6:b6:e8:90:c1:50: bb:6d:a9:b7:77:3c:de:b3:4e:06:e4:ea:91:ec:67: fe:6c:e9:69:75:35:f8:cc:c8:ee:9b:93:28:bb:c7: 7b:dd:fe:58:64:21:18:7f:0d:a8:2b:5a:22:05:1d: 09:2c:75:4c:d4:30:91:96:f0:51:71:66:22:eb:c9: ed:7c:a0:7b:eb:84:ec:e8:ed:5c:ef:6a:f2:e0:9e: e6:ac:e0:90:5a:de:3b:9e:6d:39:4e:2f:02:32:7b: 82:23:76:13:ec:6f:21:57:30:0d:68:0b:dc:48:15: 6b:ac:ad:3e:42:19:92:a5:08:97:a2:b5:2d:d8:0b: a4:1b:5d:8e:90:9e:a6:3d:6a:f7:31:d0:b5:7e:2f: da:3b:bf:49:41:9c:83:7f:65:ab:74:eb:41:8c:a1: 92:e7:6e:be:2e:23:c7:95:d9:85:73:9d:45:77:48: 2e:40:e2:69:1e:52:43:da:01:8e:89:d2:f5:00:5c: 1e:2f:3f:22:bd:8d:9e:09:f2:2d:7a:12:78:aa:f2: a6:38:d5:0b:40:c3:4d:05:75:75:1c:24:3b:90:4c: 08:c3:62:fc:a6:87:2c:10:9c:40:e4:a3:52:c3:e2: b3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6B:76:9A:B5:0C:59:EA:E3:EE:50:DE:0B:4B:88:E8:B7:29:3C:0D X509v3 Authority Key Identifier: keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/NWt2mrUMWerj7lDeC0uI6LcpPA0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.213.128.0/17 Signature Algorithm: sha256WithRSAEncryption b2:91:76:f4:b4:b3:e0:21:40:c6:56:12:fb:b3:22:2a:33:86: d9:94:93:72:9a:a3:76:60:89:f1:09:d1:06:9a:31:b1:92:30: 41:61:94:f0:24:b3:6d:aa:39:84:25:8c:5b:23:26:a4:b8:b9: 7c:ff:70:52:30:3c:7d:12:7d:95:ea:54:a9:e2:c7:96:bb:c0: 3e:84:d5:76:6f:94:0c:92:b6:74:06:9a:e0:ba:c7:fa:96:54: d7:87:13:f3:57:e9:84:42:80:c8:4f:0c:4d:f4:b1:df:5f:e0: 75:8a:1c:cf:39:3d:f9:5b:e5:2f:80:45:db:13:cd:c7:0e:3a: 26:b2:0f:90:2a:3d:3c:32:5c:de:c1:d9:c2:48:7b:6c:72:55: 85:07:07:29:fc:20:f6:ce:23:f5:3e:b1:b6:90:53:4f:a2:c5: 6b:f7:8c:38:c4:1e:40:f7:1c:dc:4b:d8:0a:9c:14:c0:94:b5: 10:c3:15:0f:cc:6a:4b:aa:57:0d:79:54:96:06:87:e9:bc:8b: 3a:8e:4d:77:90:36:f9:c9:89:b1:fe:90:a2:22:c2:10:47:2e: 91:60:ba:7c:bf:1a:9f:d3:95:f5:84:5e:de:9b:55:0d:c5:1e: 8b:3f:57:e1:f6:12:ed:b6:31:7c:9c:d4:e0:81:80:35:5f:0d: 8e:18:c7:a9 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICC50wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yMzA5MDEx MDAxMDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM1NkI3NjlBQjUwQzU5 RUFFM0VFNTBERTBCNEI4OEU4QjcyOTNDMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWlmJ6GO4LDKjHYdv9oMEzwHc2S29uvPa26JDBULttqbd3PN6z Tgbk6pHsZ/5s6Wl1NfjMyO6bkyi7x3vd/lhkIRh/DagrWiIFHQksdUzUMJGW8FFx ZiLrye18oHvrhOzo7VzvavLgnuas4JBa3juebTlOLwIye4IjdhPsbyFXMA1oC9xI FWusrT5CGZKlCJeitS3YC6QbXY6QnqY9avcx0LV+L9o7v0lBnIN/Zat060GMoZLn br4uI8eV2YVznUV3SC5A4mkeUkPaAY6J0vUAXB4vPyK9jZ4J8i16Eniq8qY41QtA w00FdXUcJDuQTAjDYvymhywQnEDko1LD4rOzAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUNWt2mrUMWerj7lDeC0uI6LcpPA0wHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80 Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAvTld0Mm1yVU1XZXJqN2xEZUMwdUk2 TGNwUEEwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBzHVgDAN BgkqhkiG9w0BAQsFAAOCAQEAspF29LSz4CFAxlYS+7MiKjOG2ZSTcpqjdmCJ8QnR BpoxsZIwQWGU8CSzbao5hCWMWyMmpLi5fP9wUjA8fRJ9lepUqeLHlrvAPoTVdm+U DJK2dAaa4LrH+pZU14cT81fphEKAyE8MTfSx31/gdYoczzk9+VvlL4BF2xPNxw46 JrIPkCo9PDJc3sHZwkh7bHJVhQcHKfwg9s4j9T6xtpBTT6LFa/eMOMQeQPcc3EvY CpwUwJS1EMMVD8xqS6pXDXlUlgaH6byLOo5Nd5A2+cmJsf6QoiLCEEcukWC6fL8a n9OV9YRe3ptVDcUeiz9X4fYS7bYxfJzU4IGANV8NjhjHqQ== -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:43 2024 by rpki-client on console-fra.rpki-client.org