$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/nclZxKK8TsKuR7OD9kE3B2V2IJc.roa File: nclZxKK8TsKuR7OD9kE3B2V2IJc.roa (raw, json) Hash identifier: xkIC3vtGzDz0hkTtNJtXi4mPmYahZRufjpxR7gjxN4Q= Subject key identifier: 9D:C9:59:C4:A2:BC:4E:C2:AE:47:B3:83:F6:41:37:07:65:76:20:97 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1330 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/nclZxKK8TsKuR7OD9kE3B2V2IJc.roa Signing time: Fri 01 Sep 2023 09:24:36 +0000 ROA not before: Fri 01 Sep 2023 09:24:36 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 122.146.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4912 (0x1330) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:36 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9DC959C4A2BC4EC2AE47B383F641370765762097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e5:53:74:72:3d:7d:a7:26:a1:81:f4:12:f1: 14:ed:9e:df:5d:bb:8a:e5:04:db:d1:c5:05:71:bd: 08:a6:ae:90:44:69:24:48:6d:e4:8d:85:60:e5:62: cd:d1:9f:70:5a:e3:5b:9c:a1:5d:a5:13:61:23:d1: 33:ce:57:c7:29:f7:56:45:2f:ea:aa:32:e9:0c:21: e8:27:05:48:91:d6:d5:7b:d0:88:3b:39:93:3e:92: f6:04:b3:ba:de:17:ec:14:da:a4:27:d4:b8:f2:15: ef:ff:e8:18:40:77:a7:c7:eb:15:c0:2f:30:bd:40: 45:df:1c:c4:6c:ff:b9:dc:ae:91:e1:26:e5:a6:bc: 1a:60:df:57:19:b0:4d:88:6a:f9:02:f3:b0:82:80: 21:5a:61:4f:a5:85:84:9f:87:c4:c5:a4:6f:e4:3d: 23:e4:e5:29:4e:37:51:3e:6c:0f:f7:bc:08:5b:2e: ee:5a:ba:98:10:07:6f:a1:12:d8:b4:32:93:10:33: f9:39:04:ad:9b:cc:7e:08:c5:3a:22:e4:89:aa:f0: 12:ae:73:44:19:22:9b:7f:f1:2d:3e:b2:c6:9c:c1: 38:7c:aa:6d:d8:97:fc:c3:2e:9b:2f:2b:8e:12:74: d6:8b:d1:a9:e6:d9:12:e2:1c:94:bc:47:53:43:c7: 81:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C9:59:C4:A2:BC:4E:C2:AE:47:B3:83:F6:41:37:07:65:76:20:97 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/nclZxKK8TsKuR7OD9kE3B2V2IJc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.146.0.0/15 Signature Algorithm: sha256WithRSAEncryption 20:c3:2b:5f:5b:0b:fb:e0:28:9f:6c:a6:ba:ae:5b:99:1f:a0: 8e:85:0d:51:db:d4:9b:00:5c:5e:95:cc:86:1d:81:4d:f0:f7: fe:8f:94:4e:1e:d8:ac:bd:ec:d9:eb:8a:0a:56:f9:18:00:23: 80:63:5a:48:27:c0:1c:26:0b:83:1a:58:cd:7c:b5:71:bb:24: 20:d0:82:4a:8c:c5:1a:e5:86:4d:ef:49:02:f1:9c:4e:f2:c7: 29:5c:6a:43:b2:e6:57:e2:38:6f:f4:64:7e:d4:88:d2:91:a3: 2e:c0:61:b0:40:d2:1c:4f:a5:52:fd:59:3e:0c:9b:05:f0:bb: 71:ec:e1:00:18:96:14:2c:17:7f:03:4d:02:ab:f2:11:a0:16: e4:40:3f:61:3c:32:4b:93:5c:a1:fe:12:bc:ad:e5:e6:b7:a1: 11:db:a8:2b:d7:f9:7b:31:4c:6f:67:be:33:39:d6:14:f2:f2: 1f:db:39:93:af:98:51:4d:2a:77:5c:8e:60:5e:ac:60:37:5f: e2:68:b8:0e:50:72:79:c8:ae:35:1c:a0:67:c6:f7:81:e4:cf: ec:9d:af:3b:c5:2d:5a:51:63:67:55:6f:16:18:71:94:70:30: 61:70:5b:6c:8c:5d:92:3a:29:9d:e3:6d:a7:de:98:93:99:d6: f8:c9:82:50 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICEzAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0MzZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlEQzk1OUM0QTJCQzRF QzJBRTQ3QjM4M0Y2NDEzNzA3NjU3NjIwOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu5VN0cj19pyahgfQS8RTtnt9du4rlBNvRxQVxvQimrpBEaSRI beSNhWDlYs3Rn3Ba41ucoV2lE2Ej0TPOV8cp91ZFL+qqMukMIegnBUiR1tV70Ig7 OZM+kvYEs7reF+wU2qQn1LjyFe//6BhAd6fH6xXALzC9QEXfHMRs/7ncrpHhJuWm vBpg31cZsE2IavkC87CCgCFaYU+lhYSfh8TFpG/kPSPk5SlON1E+bA/3vAhbLu5a upgQB2+hEti0MpMQM/k5BK2bzH4IxToi5Imq8BKuc0QZIpt/8S0+ssacwTh8qm3Y l/zDLpsvK44SdNaL0anm2RLiHJS8R1NDx4F1AgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUnclZxKK8TsKuR7OD9kE3B2V2IJcwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbmNsWnhLSzhUc0t1UjdPRDlrRTNC MlYySUpjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAXqSMA0G CSqGSIb3DQEBCwUAA4IBAQAgwytfWwv74CifbKa6rluZH6COhQ1R29SbAFxelcyG HYFN8Pf+j5ROHtisvezZ64oKVvkYACOAY1pIJ8AcJguDGljNfLVxuyQg0IJKjMUa 5YZN70kC8ZxO8scpXGpDsuZX4jhv9GR+1IjSkaMuwGGwQNIcT6VS/Vk+DJsF8Ltx 7OEAGJYULBd/A00Cq/IRoBbkQD9hPDJLk1yh/hK8reXmt6ER26gr1/l7MUxvZ74z OdYU8vIf2zmTr5hRTSp3XI5gXqxgN1/iaLgOUHJ5yK41HKBnxveB5M/sna87xS1a UWNnVW8WGHGUcDBhcFtsjF2SOimd422n3piTmdb4yYJQ -----END CERTIFICATE-----Generated at Mon May 20 12:32:57 2024 by rpki-client on console-fra.rpki-client.org