$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ymh6kIJQlG3KQEPWbMLd2yufKfk.roa File: Ymh6kIJQlG3KQEPWbMLd2yufKfk.roa (raw, json) Hash identifier: /RybmNe3AhxHfVVTJBufqagFPxVuOl7guJHXCJ8jaFU= Subject key identifier: 62:68:7A:90:82:50:94:6D:CA:40:43:D6:6C:C2:DD:DB:2B:9F:29:F9 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1329 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ymh6kIJQlG3KQEPWbMLd2yufKfk.roa Signing time: Fri 01 Sep 2023 09:24:34 +0000 ROA not before: Fri 01 Sep 2023 09:24:34 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 122.146.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4905 (0x1329) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:34 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=62687A908250946DCA4043D66CC2DDDB2B9F29F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b6:94:2b:d8:1e:29:78:c4:9b:4e:bf:70:d1: f6:86:d3:b8:f8:d2:78:a8:00:80:13:44:4e:d4:d6: ec:15:e9:c9:de:70:b0:b8:2d:3f:e7:13:a8:42:f3: 2a:4b:82:63:3e:59:af:44:26:3d:77:f5:e8:88:ff: 8a:ab:42:cc:a7:20:f5:77:7e:c6:91:56:59:14:32: 89:a7:ac:1a:d4:42:45:9d:bc:7e:9e:21:2c:88:82: 39:78:5e:77:9b:6f:f8:31:72:4d:e3:fa:d9:3b:1b: 0a:f0:66:e5:d8:92:66:db:81:36:4f:25:aa:20:5e: 61:bf:ab:e5:09:71:71:4f:ca:06:9f:38:ea:ca:c3: 40:77:53:02:5e:7f:02:92:bc:4c:d3:54:94:53:76: bb:0a:e6:a9:78:d0:54:aa:dc:6b:5d:5d:1e:13:6a: 18:db:75:8b:28:18:db:4f:09:7b:2a:73:a7:3a:a2: 33:9a:65:f5:19:ad:8d:b2:0b:a3:58:54:e3:1b:12: ba:6a:06:99:39:b9:3d:e3:29:b5:37:b1:83:f9:86: d1:42:5a:23:70:4e:f7:1d:ed:43:0f:81:58:6e:82: 59:0a:f1:84:75:75:3c:77:ac:68:a5:71:f5:b7:f6: 83:3f:e7:bf:f6:6b:7d:cb:35:15:bd:82:77:fe:0d: 98:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:68:7A:90:82:50:94:6D:CA:40:43:D6:6C:C2:DD:DB:2B:9F:29:F9 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ymh6kIJQlG3KQEPWbMLd2yufKfk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.146.96.0/21 Signature Algorithm: sha256WithRSAEncryption b8:f6:92:65:75:86:f1:6a:f4:f0:44:d3:8e:67:b0:ce:ac:ae: 5a:fd:76:6c:f6:af:2f:2a:f5:2d:90:79:88:55:33:a9:d4:ec: fe:a3:d0:cb:d1:09:90:19:b6:e7:ed:d6:0d:83:29:95:2c:3e: 1d:3e:2e:a3:14:ad:e2:ff:83:00:a3:a6:33:72:a0:63:20:60: e3:85:7e:5a:8e:89:fb:bb:61:1f:4e:75:d4:4b:a2:e2:f5:3e: bd:79:c4:f4:5a:6d:61:46:fc:fa:73:de:09:8d:bd:9a:16:fc: ba:8b:5c:27:36:3e:a6:0d:d5:9d:7e:48:05:87:df:83:76:0c: de:35:b5:56:77:ae:5e:1e:54:68:f2:b3:e1:e7:0a:6e:a0:46: e6:f9:fe:c1:6a:7d:c7:3b:16:fe:ec:c3:f9:a2:54:45:fc:90: 72:0a:84:dc:b2:cf:1f:b6:d4:af:d2:11:02:3c:53:98:42:17: 24:ec:ac:f3:d2:83:43:b9:59:60:a7:bd:b8:f4:34:5b:c9:d5: f1:e7:de:4d:f8:9c:28:73:f4:62:59:3e:96:80:80:a9:29:3e: 20:99:f6:16:3c:0c:a5:71:37:91:70:4b:93:87:c1:df:f2:ac: f1:6d:2a:f0:35:62:53:2c:55:7f:02:39:ac:52:d6:73:80:7a: 9d:88:e2:b2 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEykwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MzRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDYyNjg3QTkwODI1MDk0 NkRDQTQwNDNENjZDQzJERERCMkI5RjI5RjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0tpQr2B4peMSbTr9w0faG07j40nioAIATRE7U1uwV6cnecLC4 LT/nE6hC8ypLgmM+Wa9EJj139eiI/4qrQsynIPV3fsaRVlkUMomnrBrUQkWdvH6e ISyIgjl4Xnebb/gxck3j+tk7GwrwZuXYkmbbgTZPJaogXmG/q+UJcXFPygafOOrK w0B3UwJefwKSvEzTVJRTdrsK5ql40FSq3GtdXR4TahjbdYsoGNtPCXsqc6c6ojOa ZfUZrY2yC6NYVOMbErpqBpk5uT3jKbU3sYP5htFCWiNwTvcd7UMPgVhuglkK8YR1 dTx3rGilcfW39oM/57/2a33LNRW9gnf+DZg9AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUYmh6kIJQlG3KQEPWbMLd2yufKfkwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvWW1oNmtJSlFsRzNLUUVQV2JNTGQy eXVmS2ZrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3qSYDAN BgkqhkiG9w0BAQsFAAOCAQEAuPaSZXWG8Wr08ETTjmewzqyuWv12bPavLyr1LZB5 iFUzqdTs/qPQy9EJkBm25+3WDYMplSw+HT4uoxSt4v+DAKOmM3KgYyBg44V+Wo6J +7thH0511Eui4vU+vXnE9FptYUb8+nPeCY29mhb8uotcJzY+pg3VnX5IBYffg3YM 3jW1VneuXh5UaPKz4ecKbqBG5vn+wWp9xzsW/uzD+aJURfyQcgqE3LLPH7bUr9IR AjxTmEIXJOys89KDQ7lZYKe9uPQ0W8nV8efeTficKHP0Ylk+loCAqSk+IJn2FjwM pXE3kXBLk4fB3/Ks8W0q8DViUyxVfwI5rFLWc4B6nYjisg== -----END CERTIFICATE-----Generated at Sat Jun 1 23:25:37 2024 by rpki-client on console-ams.rpki-client.org