$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/n1VEopNWj54nIHGJ9eHQOTWSwa4.roa File: n1VEopNWj54nIHGJ9eHQOTWSwa4.roa (raw, json) Hash identifier: cqr1ZSs9mKdJb10oxpzJFCK+BGvwbbMftKQUz5MofXg= Subject key identifier: 9F:55:44:A2:93:56:8F:9E:27:20:71:89:F5:E1:D0:39:35:92:C1:AE Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1378 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/n1VEopNWj54nIHGJ9eHQOTWSwa4.roa Signing time: Fri 01 Sep 2023 09:24:59 +0000 ROA not before: Fri 01 Sep 2023 09:24:59 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 211.74.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4984 (0x1378) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:59 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9F5544A293568F9E27207189F5E1D0393592C1AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5a:da:9e:3a:fb:1a:da:18:0c:f7:26:97:0c: e5:7a:9b:60:9c:02:db:50:c3:1c:4a:62:52:bd:3f: 03:d6:d3:7d:e1:c5:aa:58:5a:75:b2:7f:de:95:27: d3:c2:18:7f:30:06:32:4c:73:6d:fe:f1:98:42:b7: bc:9e:09:aa:d9:1a:28:9a:bb:be:53:c8:2f:fb:f1: d8:a6:94:57:40:16:d1:56:4b:54:49:79:2a:5b:32: c5:8c:ac:3e:b8:39:74:4c:8f:64:56:d5:2e:67:7a: 71:36:a8:04:fc:9a:65:92:f6:73:4b:13:fb:38:38: eb:6d:dd:7e:01:e4:68:55:d5:b1:7e:01:fc:10:bf: 07:fb:75:8b:3d:54:71:79:f4:ae:4a:42:9b:a5:e1: 09:30:47:55:22:6e:73:83:37:ab:b4:55:56:a8:6d: 40:e7:21:fa:ab:48:08:88:3b:88:99:1f:85:46:c6: 6e:a4:7b:0d:4a:5e:e4:29:74:c2:f1:8d:fc:5c:48: 29:90:36:5c:1f:a2:da:9e:dc:c3:32:5b:de:aa:77: 77:a9:86:22:d1:3f:58:11:63:b0:e9:92:7f:e9:68: 5f:c5:98:ba:52:76:98:4d:f2:6e:fb:57:b2:15:e3: 27:98:05:c0:7d:03:8c:df:fe:72:0a:1a:3d:9f:e5: 1b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:55:44:A2:93:56:8F:9E:27:20:71:89:F5:E1:D0:39:35:92:C1:AE X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/n1VEopNWj54nIHGJ9eHQOTWSwa4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.74.0.0/17 Signature Algorithm: sha256WithRSAEncryption 60:35:48:b4:96:8f:d0:9e:b1:ee:61:f9:2a:6e:62:2e:bf:18: c0:5b:06:6c:28:40:c8:b8:08:f5:5b:90:b7:2d:05:c1:ac:8b: 2c:04:1c:b8:1d:67:ca:71:c7:1b:94:b7:68:7b:f3:44:78:61: c9:47:b1:db:b4:49:60:fd:66:4b:16:30:c8:3a:37:10:09:8f: 98:57:d6:53:ad:c6:f8:0a:5e:a3:85:3d:aa:0d:10:a2:9a:c8: 1e:5b:5f:03:59:4a:4b:bb:58:fc:d3:a6:31:ee:2e:3f:35:37: 1d:c8:6c:54:0b:86:3f:6a:5a:83:21:f4:b2:f6:7c:46:0b:79: 87:59:01:a8:69:be:45:83:31:f7:d7:63:0b:95:3b:1e:70:a8: f3:c0:d5:33:54:69:39:c7:0c:20:bf:d5:79:40:c8:15:4e:85: 80:61:58:0b:79:04:4a:de:e0:3d:05:76:d4:4c:d6:e6:15:9b: 5d:5f:89:4a:95:7e:86:5d:50:90:d9:c2:fa:3a:63:e3:c7:61: f5:d2:17:1c:c8:48:bd:c3:2b:46:b0:70:71:8c:e1:4a:e5:df: 54:fe:a0:de:89:92:b7:80:82:0b:d0:08:cd:34:8c:3d:da:10: bf:93:d1:6a:c5:36:c0:21:3f:f8:61:60:0d:21:f6:e5:7f:73: 0b:26:cd:b5 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE3gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlGNTU0NEEyOTM1NjhG OUUyNzIwNzE4OUY1RTFEMDM5MzU5MkMxQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFWtqeOvsa2hgM9yaXDOV6m2CcAttQwxxKYlK9PwPW033hxapY WnWyf96VJ9PCGH8wBjJMc23+8ZhCt7yeCarZGiiau75TyC/78dimlFdAFtFWS1RJ eSpbMsWMrD64OXRMj2RW1S5nenE2qAT8mmWS9nNLE/s4OOtt3X4B5GhV1bF+AfwQ vwf7dYs9VHF59K5KQpul4QkwR1UibnODN6u0VVaobUDnIfqrSAiIO4iZH4VGxm6k ew1KXuQpdMLxjfxcSCmQNlwfotqe3MMyW96qd3ephiLRP1gRY7Dpkn/paF/FmLpS dphN8m77V7IV4yeYBcB9A4zf/nIKGj2f5Rt/AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUn1VEopNWj54nIHGJ9eHQOTWSwa4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbjFWRW9wTldqNTRuSUhHSjllSFFP VFdTd2E0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9NKADAN BgkqhkiG9w0BAQsFAAOCAQEAYDVItJaP0J6x7mH5Km5iLr8YwFsGbChAyLgI9VuQ ty0FwayLLAQcuB1nynHHG5S3aHvzRHhhyUex27RJYP1mSxYwyDo3EAmPmFfWU63G +Apeo4U9qg0QoprIHltfA1lKS7tY/NOmMe4uPzU3HchsVAuGP2pagyH0svZ8Rgt5 h1kBqGm+RYMx99djC5U7HnCo88DVM1RpOccMIL/VeUDIFU6FgGFYC3kESt7gPQV2 1EzW5hWbXV+JSpV+hl1QkNnC+jpj48dh9dIXHMhIvcMrRrBwcYzhSuXfVP6g3omS t4CCC9AIzTSMPdoQv5PRasU2wCE/+GFgDSH25X9zCybNtQ== -----END CERTIFICATE-----Generated at Sat Jun 1 23:25:38 2024 by rpki-client on console-ams.rpki-client.org