$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/NW7DcgUCwrNH0Ux94akE_DMU-Es.roa File: NW7DcgUCwrNH0Ux94akE_DMU-Es.roa (raw, json) Hash identifier: OLZDNxDQ3WmBLA/8ydSbp+NO8wDH5SyNhC3u39M04+w= Subject key identifier: 35:6E:C3:72:05:02:C2:B3:47:D1:4C:7D:E1:A9:04:FC:33:14:F8:4B Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 12F7 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NW7DcgUCwrNH0Ux94akE_DMU-Es.roa Signing time: Fri 01 Sep 2023 09:24:18 +0000 ROA not before: Fri 01 Sep 2023 09:24:18 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 122.146.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4855 (0x12f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:18 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=356EC3720502C2B347D14C7DE1A904FC3314F84B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:03:c0:ea:3a:46:46:c2:ce:50:96:10:6d:6b: 23:48:2e:c3:00:e9:72:84:7f:5b:1d:70:c0:18:05: 5f:89:1d:11:1a:b8:58:64:55:6b:29:48:c4:67:0d: e4:6d:70:3d:f8:c7:89:eb:b6:dc:c9:fe:5a:19:ef: 87:41:7e:92:f3:88:77:a0:0c:7f:97:c3:4a:ae:cf: a2:e0:bc:8b:6c:41:c7:43:19:b3:81:e6:3a:1c:22: ba:6d:03:68:fc:7c:10:9f:4b:58:1f:90:2e:f4:a9: 7f:ac:3a:04:f2:b8:c7:2c:84:0c:d3:98:9b:c3:55: 53:44:74:ab:c0:e2:b9:c1:42:52:3c:9e:23:ff:b5: 53:d6:ac:9e:bc:89:38:14:1e:24:1a:e6:e2:8e:c4: 1d:45:6c:85:5e:a8:28:08:ee:8d:61:22:c3:2d:f0: a5:e6:4f:74:98:16:e8:b7:8f:da:5f:ce:14:d6:aa: 59:13:3c:19:33:7a:77:06:04:92:53:30:69:a3:b1: 3b:32:9c:f4:23:e9:98:30:7d:63:6e:00:9c:a2:e3: db:c9:d3:66:b9:6a:1d:4e:33:cc:4d:74:28:be:33: 9e:34:d7:2e:0e:53:ba:14:99:c2:1a:f9:b5:f9:33: 5e:1b:25:0f:ec:43:ca:93:6d:b5:5f:8f:b9:e4:6c: a2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6E:C3:72:05:02:C2:B3:47:D1:4C:7D:E1:A9:04:FC:33:14:F8:4B X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NW7DcgUCwrNH0Ux94akE_DMU-Es.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.146.112.0/20 Signature Algorithm: sha256WithRSAEncryption 97:69:c1:20:91:fe:89:83:c9:bd:41:51:79:e6:ae:70:ff:3d: b5:ef:56:9e:05:35:ef:aa:7c:f8:1e:07:81:86:7f:31:54:e6: 78:3f:cb:8b:45:7a:e9:25:bf:7d:4a:83:f7:75:bb:16:0e:3f: 55:1c:98:2d:72:10:19:a1:d0:65:8a:b0:44:ac:9c:71:62:05: 1b:12:b9:6a:72:ac:85:d4:69:39:a9:27:76:c4:b9:54:02:23: 69:03:45:88:03:7f:15:33:08:bb:91:d4:1d:da:3c:dc:d0:cd: 17:ef:a8:fa:3c:73:aa:af:6e:a5:26:db:d1:28:0c:7c:43:30: 3d:8f:b6:77:88:e6:06:2c:32:25:71:b5:b1:41:4f:1a:ec:12: 70:4c:d1:df:41:75:41:d3:2e:52:2c:89:08:9b:19:d9:96:89: b8:b5:bb:5a:be:75:33:95:a7:90:c2:ff:21:05:d0:0c:44:75: e9:ea:28:b0:12:ea:dc:c0:ac:d5:bd:80:9b:6a:6f:f2:c5:0d: 09:17:30:6b:42:76:7a:f0:e5:62:b1:04:80:06:5e:ee:10:c7: 5a:c8:1e:5b:02:bb:19:95:ce:83:c4:13:23:30:21:fb:fd:77: 5e:35:ec:b7:d2:8f:1e:43:b8:83:05:1a:55:9e:a2:82:28:e3: c9:97:d6:6e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEvcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM1NkVDMzcyMDUwMkMy QjM0N0QxNEM3REUxQTkwNEZDMzMxNEY4NEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZA8DqOkZGws5QlhBtayNILsMA6XKEf1sdcMAYBV+JHREauFhk VWspSMRnDeRtcD34x4nrttzJ/loZ74dBfpLziHegDH+Xw0quz6LgvItsQcdDGbOB 5jocIrptA2j8fBCfS1gfkC70qX+sOgTyuMcshAzTmJvDVVNEdKvA4rnBQlI8niP/ tVPWrJ68iTgUHiQa5uKOxB1FbIVeqCgI7o1hIsMt8KXmT3SYFui3j9pfzhTWqlkT PBkzencGBJJTMGmjsTsynPQj6ZgwfWNuAJyi49vJ02a5ah1OM8xNdCi+M5401y4O U7oUmcIa+bX5M14bJQ/sQ8qTbbVfj7nkbKLnAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUNW7DcgUCwrNH0Ux94akE/DMU+EswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvTlc3RGNnVUN3ck5IMFV4OTRha0Vf RE1VLUVzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHqScDAN BgkqhkiG9w0BAQsFAAOCAQEAl2nBIJH+iYPJvUFReeaucP89te9WngU176p8+B4H gYZ/MVTmeD/Li0V66SW/fUqD93W7Fg4/VRyYLXIQGaHQZYqwRKyccWIFGxK5anKs hdRpOakndsS5VAIjaQNFiAN/FTMIu5HUHdo83NDNF++o+jxzqq9upSbb0SgMfEMw PY+2d4jmBiwyJXG1sUFPGuwScEzR30F1QdMuUiyJCJsZ2ZaJuLW7Wr51M5WnkML/ IQXQDER16eoosBLq3MCs1b2Am2pv8sUNCRcwa0J2evDlYrEEgAZe7hDHWsgeWwK7 GZXOg8QTIzAh+/13XjXst9KPHkO4gwUaVZ6igijjyZfWbg== -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org