$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/bWN6xhp4Nm6s5vR0zVjP3JQMr4g.roa File: bWN6xhp4Nm6s5vR0zVjP3JQMr4g.roa (raw, json) Hash identifier: pEeMIujSnBMBZF807lXbwIhftA+cRr5rEAJ6SXD/mz4= Subject key identifier: 6D:63:7A:C6:1A:78:36:6E:AC:E6:F4:74:CD:58:CF:DC:94:0C:AF:88 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 12E6 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bWN6xhp4Nm6s5vR0zVjP3JQMr4g.roa Signing time: Fri 01 Sep 2023 09:24:14 +0000 ROA not before: Fri 01 Sep 2023 09:24:14 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 61.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4838 (0x12e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:14 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6D637AC61A78366EACE6F474CD58CFDC940CAF88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3b:d7:39:c0:dc:13:52:d8:cd:b4:8c:f7:d1: 3c:82:5c:59:93:d7:7a:b1:be:d8:8d:31:f5:7f:59: 68:e6:2a:06:12:b3:a6:51:a9:b9:14:e0:80:d4:65: ff:b7:9a:6f:8b:ff:a4:9d:b3:70:49:6d:7a:87:8f: 76:ae:c6:e1:f8:e8:d9:a4:89:12:df:5b:5d:d2:f0: e3:d2:f0:4e:86:3f:aa:e1:76:2f:a6:f8:f1:03:41: 8f:3a:35:01:06:0f:97:8e:89:c5:95:30:3c:24:42: 88:57:d8:5d:44:bc:e1:1e:2a:0a:40:0c:50:71:83: a3:2f:43:67:0d:96:7e:76:56:15:fa:47:f2:90:87: 34:74:e2:40:be:58:d8:1c:8d:18:1d:3e:a6:0c:37: ad:44:6b:85:af:70:12:f3:2d:33:2d:26:0f:51:f1: 43:82:f2:c2:e2:2c:cd:05:92:6a:a9:e7:c8:e4:5b: 90:d0:bd:75:2d:b7:90:90:cf:f0:d6:45:7c:be:3c: 63:d6:78:5e:29:fc:ed:a1:49:43:3f:4c:52:21:a1: 09:bf:b9:47:de:d6:5e:17:01:24:49:16:95:b9:55: 32:96:4e:5c:a5:41:27:72:55:46:4b:87:5c:17:fd: 12:81:47:c1:71:17:b7:61:56:c6:1f:9e:2b:02:f5: 39:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:63:7A:C6:1A:78:36:6E:AC:E6:F4:74:CD:58:CF:DC:94:0C:AF:88 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bWN6xhp4Nm6s5vR0zVjP3JQMr4g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.66.0.0/16 Signature Algorithm: sha256WithRSAEncryption 60:b7:78:a3:29:72:24:a0:e4:ec:77:8e:6f:b7:72:d4:e3:d0: cb:41:8b:97:14:77:b0:50:3e:ba:c6:1d:6b:57:a1:cf:91:0f: 6b:93:a8:02:c8:ac:fb:aa:95:fc:2d:f8:5c:66:28:cb:63:fd: 83:81:73:82:3d:12:85:2b:b1:e1:6f:61:1e:fe:35:8c:24:86: 9f:5b:a0:9e:b7:da:ca:08:f4:91:6d:e0:2c:9b:a7:30:09:ff: e4:5a:0d:86:d9:42:96:1b:ad:1a:e2:80:78:f5:4b:3e:0f:16: 9e:80:7f:ad:ff:ba:94:ef:49:69:c9:ee:96:1e:22:dd:02:91: 58:fb:15:43:9b:fc:14:ea:8a:dc:7d:76:f3:cd:b4:50:f1:df: c2:b5:a0:d8:ad:3b:a4:36:1a:07:3d:70:bb:ba:64:bd:e8:29: 44:18:06:2e:22:14:09:18:b0:79:f2:50:0a:15:56:49:c7:b2: 50:df:7d:40:f0:4a:36:09:cd:04:f1:de:fd:9c:57:b9:78:dc: 92:63:92:bb:49:b0:29:f6:f6:38:46:55:42:a8:0d:f4:ed:5f: 3a:b1:d8:62:3b:98:47:db:4b:05:a7:e8:c8:c2:12:4d:b9:77: 70:c7:59:2d:92:fa:3c:12:e4:32:dd:26:cc:fa:f1:f4:87:d4: 58:19:80:ee -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICEuYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZENjM3QUM2MUE3ODM2 NkVBQ0U2RjQ3NENENThDRkRDOTQwQ0FGODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEO9c5wNwTUtjNtIz30TyCXFmT13qxvtiNMfV/WWjmKgYSs6ZR qbkU4IDUZf+3mm+L/6Sds3BJbXqHj3auxuH46NmkiRLfW13S8OPS8E6GP6rhdi+m +PEDQY86NQEGD5eOicWVMDwkQohX2F1EvOEeKgpADFBxg6MvQ2cNln52VhX6R/KQ hzR04kC+WNgcjRgdPqYMN61Ea4WvcBLzLTMtJg9R8UOC8sLiLM0Fkmqp58jkW5DQ vXUtt5CQz/DWRXy+PGPWeF4p/O2hSUM/TFIhoQm/uUfe1l4XASRJFpW5VTKWTlyl QSdyVUZLh1wX/RKBR8FxF7dhVsYfnisC9TkbAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUbWN6xhp4Nm6s5vR0zVjP3JQMr4gwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvYldONnhocDRObTZzNXZSMHpWalAz SlFNcjRnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAD1CMA0G CSqGSIb3DQEBCwUAA4IBAQBgt3ijKXIkoOTsd45vt3LU49DLQYuXFHewUD66xh1r V6HPkQ9rk6gCyKz7qpX8LfhcZijLY/2DgXOCPRKFK7Hhb2Ee/jWMJIafW6Cet9rK CPSRbeAsm6cwCf/kWg2G2UKWG60a4oB49Us+DxaegH+t/7qU70lpye6WHiLdApFY +xVDm/wU6orcfXbzzbRQ8d/CtaDYrTukNhoHPXC7umS96ClEGAYuIhQJGLB58lAK FVZJx7JQ331A8Eo2Cc0E8d79nFe5eNySY5K7SbAp9vY4RlVCqA307V86sdhiO5hH 20sFp+jIwhJNuXdwx1ktkvo8EuQy3SbM+vH0h9RYGYDu -----END CERTIFICATE-----Generated at Sat Jun 1 23:25:38 2024 by rpki-client on console-ams.rpki-client.org