$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-fuOokRMbTjux8LQM1H_EV3Nlus.roa File: -fuOokRMbTjux8LQM1H_EV3Nlus.roa (raw, json) Hash identifier: fNfNV0ryzEGnjUIC9gQMONvki/yJ2H9T5JPpfB1zpPY= Subject key identifier: F9:FB:8E:A2:44:4C:6D:38:EE:C7:C2:D0:33:51:FF:11:5D:CD:96:EB Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 13E8 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-fuOokRMbTjux8LQM1H_EV3Nlus.roa Signing time: Fri 01 Sep 2023 09:25:35 +0000 ROA not before: Fri 01 Sep 2023 09:25:35 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 221.169.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5096 (0x13e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:35 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F9FB8EA2444C6D38EEC7C2D03351FF115DCD96EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5d:1d:64:5e:6e:ae:12:74:bf:8c:01:ed:33: d4:38:29:3e:95:2c:56:2b:af:a8:0c:0d:47:c2:10: 5f:e4:c9:84:3c:a6:23:ac:19:ed:fc:88:0d:84:59: 8c:92:49:0e:48:01:68:8e:80:9b:a0:b3:5f:26:2c: 27:d0:5d:ec:40:17:0c:0d:f0:2c:c1:da:64:ab:dd: 8e:c1:c7:a1:bf:c6:be:7a:39:62:b2:65:3b:03:eb: 24:03:fd:c8:b7:af:b5:01:57:c1:29:af:cd:7a:f4: 84:cc:d4:69:13:b5:e0:2b:cb:e0:a6:50:77:9b:c2: ca:c4:6b:99:e1:4e:48:83:23:16:09:02:e0:bd:3c: 85:04:56:e6:ba:3f:4b:dc:8f:96:fe:f4:aa:f0:d5: e4:f9:22:14:cd:c8:67:46:dd:d3:b8:dc:24:a5:dd: 7e:04:fd:4d:5d:10:ec:e9:3f:53:81:75:59:50:93: 44:ed:ad:67:76:02:a1:f5:05:21:54:c8:56:4a:dc: 42:1c:03:f8:d1:24:41:31:e4:be:22:48:2d:80:45: a5:c8:20:05:23:8a:b0:80:af:4f:a3:2b:54:10:26: ed:28:e3:ec:a4:c5:d9:38:1a:7c:94:2b:68:be:ac: 1f:a8:36:c9:65:82:67:34:aa:49:e1:c1:cc:c2:2a: e6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FB:8E:A2:44:4C:6D:38:EE:C7:C2:D0:33:51:FF:11:5D:CD:96:EB X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-fuOokRMbTjux8LQM1H_EV3Nlus.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 221.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8a:04:5d:d2:79:42:7d:bc:ab:8d:d1:f4:ed:1e:46:b6:44:f5: 95:72:dc:5b:50:2c:d5:bf:b0:51:6f:49:16:23:b3:07:96:89: 59:3f:9f:9b:0a:31:ba:dd:45:d8:af:86:72:8b:b1:e8:fe:36: 45:da:b1:96:67:61:fe:e5:1f:32:78:17:01:d0:c1:1d:ae:fc: 2d:eb:50:04:3a:09:01:e8:01:23:f6:1d:c5:7e:f6:84:ce:00: cc:fc:64:05:32:09:f7:5b:d6:99:a2:c6:02:e5:cd:72:03:2b: 67:b7:ae:26:25:a4:08:24:87:6c:16:39:32:3b:79:c8:ab:f0: 9a:bf:8a:01:41:f1:67:b2:a8:38:ba:4b:4a:54:61:c0:f2:c7: e6:fb:b0:19:96:11:3e:0f:9b:68:4f:ec:5b:7d:ca:7a:53:12: 05:bd:95:25:ab:16:a7:c5:ca:4f:b7:4f:a6:56:90:b0:82:26: 0e:6c:4c:1d:df:82:46:60:8e:53:7c:ae:dd:9f:48:29:34:32: 66:1e:f6:77:54:d8:a1:7c:f6:49:1e:30:58:2a:0e:1a:2c:c2: 9b:36:53:87:4a:2b:f7:7d:f5:03:eb:b1:6a:64:28:cc:79:b3: 82:f7:d0:b7:fb:e4:93:73:66:a1:53:a6:e6:54:2a:01:62:b7: 92:99:a4:4c -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICE+gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MzVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY5RkI4RUEyNDQ0QzZE MzhFRUM3QzJEMDMzNTFGRjExNURDRDk2RUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDuXR1kXm6uEnS/jAHtM9Q4KT6VLFYrr6gMDUfCEF/kyYQ8piOs Ge38iA2EWYySSQ5IAWiOgJugs18mLCfQXexAFwwN8CzB2mSr3Y7Bx6G/xr56OWKy ZTsD6yQD/ci3r7UBV8Epr8169ITM1GkTteAry+CmUHebwsrEa5nhTkiDIxYJAuC9 PIUEVua6P0vcj5b+9Krw1eT5IhTNyGdG3dO43CSl3X4E/U1dEOzpP1OBdVlQk0Tt rWd2AqH1BSFUyFZK3EIcA/jRJEEx5L4iSC2ARaXIIAUjirCAr0+jK1QQJu0o4+yk xdk4GnyUK2i+rB+oNsllgmc0qknhwczCKuYlAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQU+fuOokRMbTjux8LQM1H/EV3NluswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvLWZ1T29rUk1iVGp1eDhMUU0xSF9F VjNObHVzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAN2pMA0G CSqGSIb3DQEBCwUAA4IBAQCKBF3SeUJ9vKuN0fTtHka2RPWVctxbUCzVv7BRb0kW I7MHlolZP5+bCjG63UXYr4Zyi7Ho/jZF2rGWZ2H+5R8yeBcB0MEdrvwt61AEOgkB 6AEj9h3FfvaEzgDM/GQFMgn3W9aZosYC5c1yAytnt64mJaQIJIdsFjkyO3nIq/Ca v4oBQfFnsqg4uktKVGHA8sfm+7AZlhE+D5toT+xbfcp6UxIFvZUlqxanxcpPt0+m VpCwgiYObEwd34JGYI5TfK7dn0gpNDJmHvZ3VNihfPZJHjBYKg4aLMKbNlOHSiv3 ffUD67FqZCjMebOC99C3++STc2ahU6bmVCoBYreSmaRM -----END CERTIFICATE-----Generated at Mon May 20 11:12:52 2024 by rpki-client on console-ams.rpki-client.org