$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/6FvmTeZRZCXpU41Nll4Aa50fbJI.roa File: 6FvmTeZRZCXpU41Nll4Aa50fbJI.roa (raw, json) Hash identifier: RAHMgzpKNCpH2SshdQS+zK/RreJ4h3TPNvVLzXSZaOE= Subject key identifier: E8:5B:E6:4D:E6:51:64:25:E9:53:8D:4D:96:5E:00:6B:9D:1F:6C:92 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 13AD Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6FvmTeZRZCXpU41Nll4Aa50fbJI.roa Signing time: Fri 01 Sep 2023 09:25:17 +0000 ROA not before: Fri 01 Sep 2023 09:25:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 106.106.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5037 (0x13ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E85BE64DE6516425E9538D4D965E006B9D1F6C92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:13:2f:0f:64:8c:4f:d7:c1:fd:e9:50:a0:e2: 57:60:d8:3b:9b:18:4e:82:4d:66:b0:1a:5a:36:f1: d6:a8:97:5c:c1:51:37:db:62:9e:e5:88:fb:1d:f6: 86:10:e2:53:68:d6:40:86:76:f8:58:55:11:9f:35: 11:a8:f4:59:45:a0:de:7c:36:5c:03:58:43:5f:af: dd:60:a9:65:12:74:7a:69:a9:b4:97:af:88:46:a1: f4:97:60:bd:6c:b5:3f:77:f3:a0:82:a7:bb:2c:a0: 6c:4b:2b:c3:13:07:e0:d8:f6:30:ec:a0:c0:b0:8c: ad:4b:76:02:a4:af:f2:b8:d9:84:a2:40:43:09:b0: 6c:3e:c2:d2:67:75:2c:8e:f6:e5:c8:84:b8:ae:2f: 46:ae:af:d6:91:65:5b:54:94:ff:87:95:99:55:8a: 1b:09:23:cb:04:18:27:b0:27:a5:60:f9:ab:84:9c: 1b:df:38:b4:74:ec:1b:d2:27:25:ae:0c:b7:7b:24: 06:35:05:0e:09:bb:31:45:ef:70:11:81:0b:e1:ec: 33:34:77:af:bf:93:3d:7d:1c:54:e0:fd:bd:dd:d1: 64:b2:b1:4e:4d:1f:45:9c:1f:75:8a:02:85:21:7d: df:9d:4a:7d:0d:ac:66:ce:c3:10:e2:65:0d:cc:28: bb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5B:E6:4D:E6:51:64:25:E9:53:8D:4D:96:5E:00:6B:9D:1F:6C:92 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6FvmTeZRZCXpU41Nll4Aa50fbJI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.106.220.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:00:78:ea:d9:54:e9:cb:59:07:63:7d:14:42:9f:4f:79:c0: 02:10:83:c8:86:f6:b1:91:9d:33:b6:95:24:04:fe:0d:42:62: b1:77:4c:1a:23:7e:55:4a:27:ca:1d:8d:eb:b5:a0:f6:7c:0b: f7:83:49:19:47:ff:d4:04:37:85:8f:2e:73:a0:85:d5:4c:3f: e7:d3:ca:f4:ba:39:52:56:a7:f7:7d:25:45:36:a8:e0:54:dd: 02:9c:29:69:c7:bc:83:f4:91:5c:73:22:35:1a:9d:f9:e5:a1: 79:c4:47:e6:44:a8:bd:e6:46:dc:5f:fc:92:49:4e:e1:45:a7: d2:e6:36:95:19:d9:0f:33:68:16:59:e9:90:81:20:90:2a:f0: 64:01:60:5c:12:a6:39:03:80:fa:53:1d:08:e9:73:74:8d:ee: 23:7f:ae:8d:2e:ab:3d:a6:87:fb:5f:2d:22:a2:a0:7a:b5:77: 99:cf:1e:bd:63:a6:6d:bc:40:6f:ac:eb:60:1b:f7:13:6f:34: 7a:bb:03:7e:9c:23:2b:6f:96:6a:31:58:67:60:f5:e3:b6:0b: c1:04:93:55:ac:0e:d2:f4:72:74:5a:23:f7:d7:d2:a7:86:2a: 51:9c:1e:74:71:bd:ff:25:8f:da:b9:8d:b7:f4:fd:3d:17:6b: 31:f7:2f:a5 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE60wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU4NUJFNjRERTY1MTY0 MjVFOTUzOEQ0RDk2NUUwMDZCOUQxRjZDOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpEy8PZIxP18H96VCg4ldg2DubGE6CTWawGlo28daol1zBUTfb Yp7liPsd9oYQ4lNo1kCGdvhYVRGfNRGo9FlFoN58NlwDWENfr91gqWUSdHppqbSX r4hGofSXYL1stT9386CCp7ssoGxLK8MTB+DY9jDsoMCwjK1LdgKkr/K42YSiQEMJ sGw+wtJndSyO9uXIhLiuL0aur9aRZVtUlP+HlZlVihsJI8sEGCewJ6Vg+auEnBvf OLR07BvSJyWuDLd7JAY1BQ4JuzFF73ARgQvh7DM0d6+/kz19HFTg/b3d0WSysU5N H0WcH3WKAoUhfd+dSn0NrGbOwxDiZQ3MKLulAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU6FvmTeZRZCXpU41Nll4Aa50fbJIwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvNkZ2bVRlWlJaQ1hwVTQxTmxsNEFh NTBmYkpJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmpq3DAN BgkqhkiG9w0BAQsFAAOCAQEAPAB46tlU6ctZB2N9FEKfT3nAAhCDyIb2sZGdM7aV JAT+DUJisXdMGiN+VUonyh2N67Wg9nwL94NJGUf/1AQ3hY8uc6CF1Uw/59PK9Lo5 Ulan930lRTao4FTdApwpace8g/SRXHMiNRqd+eWhecRH5kSoveZG3F/8kklO4UWn 0uY2lRnZDzNoFlnpkIEgkCrwZAFgXBKmOQOA+lMdCOlzdI3uI3+ujS6rPaaH+18t IqKgerV3mc8evWOmbbxAb6zrYBv3E280ersDfpwjK2+WajFYZ2D147YLwQSTVawO 0vRydFoj99fSp4YqUZwedHG9/yWP2rmNt/T9PRdrMfcvpQ== -----END CERTIFICATE-----Generated at Sun Jun 2 07:14:22 2024 by rpki-client on console-fra.rpki-client.org