$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_6opWuhI9evxYE_nRYMo7f4EV3Q.roa File: _6opWuhI9evxYE_nRYMo7f4EV3Q.roa (raw, json) Hash identifier: hbtz5f8vkEAycqblI3x6wcxhFBX8CGfr7WZm+UqrwvA= Subject key identifier: FF:AA:29:5A:E8:48:F5:EB:F1:60:4F:E7:45:83:28:ED:FE:04:57:74 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 135A Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_6opWuhI9evxYE_nRYMo7f4EV3Q.roa Signing time: Fri 01 Sep 2023 09:24:50 +0000 ROA not before: Fri 01 Sep 2023 09:24:50 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 122.147.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4954 (0x135a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:50 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FFAA295AE848F5EBF1604FE7458328EDFE045774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fe:f9:8c:29:d3:ef:2a:f0:69:76:c2:26:72: 01:b5:65:ee:a3:4f:72:4e:3d:50:c0:9e:6e:a3:37: 00:11:cd:13:88:d8:ab:5f:d6:91:f5:9f:72:33:91: 69:a6:a5:56:e2:02:cb:ff:f3:87:50:e3:17:77:e7: ce:76:0e:af:5c:ed:5b:ac:e5:a4:6f:d1:4c:61:e3: c3:49:cd:d0:3b:35:62:26:94:30:b4:c3:73:d9:79: f0:f9:97:de:65:03:0c:76:18:64:c6:56:af:c2:de: c9:a9:9d:4d:f4:86:ad:36:64:76:1e:cf:3a:79:06: 4e:73:18:2e:7f:9a:fd:f8:6a:be:7b:43:4c:43:31: ea:4e:63:18:c9:26:60:8c:a7:cf:58:32:77:2d:dc: 9e:96:8e:d7:19:f1:ee:dc:a1:de:83:7b:ee:94:d6: 6f:44:d2:4e:7f:c5:88:f7:42:b5:9c:81:31:f6:89: 4a:0f:a2:6f:68:f3:1b:50:d8:27:41:b0:ca:4d:b7: c7:52:8f:c5:c8:84:1f:68:98:69:50:b5:79:8d:26: 46:05:ce:75:8d:7a:58:93:52:1e:81:db:c2:49:48: 35:c1:94:67:d5:83:06:e7:2f:99:0f:ba:bc:d4:75: c3:80:70:13:dc:81:0e:60:a7:7b:79:82:5e:8f:a7: fb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AA:29:5A:E8:48:F5:EB:F1:60:4F:E7:45:83:28:ED:FE:04:57:74 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_6opWuhI9evxYE_nRYMo7f4EV3Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.147.0.0/16 Signature Algorithm: sha256WithRSAEncryption c7:33:1c:2c:e5:fb:49:b7:4e:05:1b:d6:bf:7b:8d:63:40:c4: 51:a1:05:03:cd:91:b0:03:69:c3:46:a9:17:2f:2b:b3:7d:79: 67:bb:62:ac:38:f9:12:78:5a:64:e6:a2:b9:3a:03:aa:7f:39: 11:77:f3:e3:64:6f:39:1b:43:25:9e:5f:df:03:56:b4:59:70: b6:66:64:7d:12:ee:5f:79:88:8f:43:33:e1:38:bc:b9:62:33: 25:5b:b4:3b:8e:98:07:7f:b2:7f:5b:ce:39:1c:73:d6:49:08: c6:c1:47:e3:f2:24:49:ce:26:f5:66:4a:1d:2c:74:3f:76:49: 83:55:67:bb:ba:74:94:19:6f:10:6c:b6:41:72:82:76:5a:ee: 6e:f2:bd:44:93:5f:68:f7:7b:fe:3d:ac:1d:52:62:71:94:97: a6:09:95:ca:7a:3e:cf:f7:d9:60:21:d7:3b:c2:e2:e3:0b:dc: 32:d5:af:66:80:12:3d:f6:b0:5d:69:48:5a:ec:f4:38:7d:37: 8d:da:fa:4a:cc:6c:97:af:9d:8d:23:d3:fd:ee:32:44:a8:c5: 46:0f:24:ac:6b:dc:ce:b0:47:53:04:79:af:0b:10:a7:21:ce: c9:a7:aa:0b:63:9b:3a:ee:e6:f6:9f:66:9c:4e:ee:f0:4e:18: 1b:8e:bb:1f -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICE1owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZGQUEyOTVBRTg0OEY1 RUJGMTYwNEZFNzQ1ODMyOEVERkUwNDU3NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8/vmMKdPvKvBpdsImcgG1Ze6jT3JOPVDAnm6jNwARzROI2Ktf 1pH1n3IzkWmmpVbiAsv/84dQ4xd35852Dq9c7Vus5aRv0Uxh48NJzdA7NWImlDC0 w3PZefD5l95lAwx2GGTGVq/C3smpnU30hq02ZHYezzp5Bk5zGC5/mv34ar57Q0xD MepOYxjJJmCMp89YMnct3J6WjtcZ8e7cod6De+6U1m9E0k5/xYj3QrWcgTH2iUoP om9o8xtQ2CdBsMpNt8dSj8XIhB9omGlQtXmNJkYFznWNeliTUh6B28JJSDXBlGfV gwbnL5kPurzUdcOAcBPcgQ5gp3t5gl6Pp/sVAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQU/6opWuhI9evxYE/nRYMo7f4EV3QwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvXzZvcFd1aEk5ZXZ4WUVfblJZTW83 ZjRFVjNRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAHqTMA0G CSqGSIb3DQEBCwUAA4IBAQDHMxws5ftJt04FG9a/e41jQMRRoQUDzZGwA2nDRqkX LyuzfXlnu2KsOPkSeFpk5qK5OgOqfzkRd/PjZG85G0Mlnl/fA1a0WXC2ZmR9Eu5f eYiPQzPhOLy5YjMlW7Q7jpgHf7J/W845HHPWSQjGwUfj8iRJzib1ZkodLHQ/dkmD VWe7unSUGW8QbLZBcoJ2Wu5u8r1Ek19o93v+PawdUmJxlJemCZXKej7P99lgIdc7 wuLjC9wy1a9mgBI99rBdaUha7PQ4fTeN2vpKzGyXr52NI9P97jJEqMVGDySsa9zO sEdTBHmvCxCnIc7Jp6oLY5s67ub2n2acTu7wThgbjrsf -----END CERTIFICATE-----Generated at Sat Jun 1 23:25:37 2024 by rpki-client on console-ams.rpki-client.org