$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/npP8-0XS7KkXkE3_nA2k7n9Mzmg.roa File: npP8-0XS7KkXkE3_nA2k7n9Mzmg.roa (raw, json) Hash identifier: tgRqzNV1eFI1SJtgg0ViS9XsuWm8ipso9TBlIl2YnU0= Subject key identifier: 9E:93:FC:FB:45:D2:EC:A9:17:90:4D:FF:9C:0D:A4:EE:7F:4C:CE:68 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1371 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/npP8-0XS7KkXkE3_nA2k7n9Mzmg.roa Signing time: Fri 01 Sep 2023 09:24:56 +0000 ROA not before: Fri 01 Sep 2023 09:24:56 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 122.147.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4977 (0x1371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:24:56 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9E93FCFB45D2ECA917904DFF9C0DA4EE7F4CCE68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:56:86:3f:60:75:9d:90:e8:b6:b4:d4:98:a4: 10:85:ef:f5:4b:64:13:df:80:88:c1:c8:ae:65:d7: 7a:85:2a:49:eb:b3:16:33:46:7e:45:a6:ae:9c:75: 9f:9c:dc:93:5a:c2:1b:90:6c:84:f8:70:45:87:44: e0:89:06:8c:d0:ec:35:52:50:81:58:78:aa:80:1a: 1d:b0:29:eb:d9:54:b7:35:dc:61:f9:fc:e5:6b:ba: 83:04:5e:f8:c4:a8:64:1e:8a:dc:fd:79:74:6a:f7: 63:22:88:38:3d:d7:c3:f6:1b:e7:f3:cd:03:3c:f2: 4a:4f:be:68:be:98:b0:96:2c:5c:d3:0f:34:cf:ce: 89:14:f9:2a:f5:1c:5d:5d:d0:d9:32:26:6b:ad:4d: eb:f6:1d:6c:39:58:64:86:1a:77:eb:87:f2:fc:90: 79:58:5e:d7:4f:6f:e0:d6:08:15:43:2f:67:b4:68: 87:5d:a8:d1:38:ab:bc:8a:e6:0b:d6:36:da:d1:5d: 97:b2:76:60:f7:f1:87:43:46:6e:5d:68:f4:95:10: 23:11:41:c9:d2:07:9e:03:fc:98:51:09:e9:5d:f6: eb:91:5f:6a:57:ad:41:26:59:32:63:2a:9c:1d:a5: ab:cc:ab:6c:27:7e:45:41:56:a3:e5:ce:fd:30:d0: 85:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:93:FC:FB:45:D2:EC:A9:17:90:4D:FF:9C:0D:A4:EE:7F:4C:CE:68 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/npP8-0XS7KkXkE3_nA2k7n9Mzmg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.147.64.0/18 Signature Algorithm: sha256WithRSAEncryption 64:a1:46:db:22:f9:96:48:ae:3f:41:0c:e9:76:9a:72:f6:13: d4:ab:3f:2c:03:df:c6:d8:fb:72:c4:22:37:f1:64:a6:ef:70: 88:75:3a:57:be:20:1f:e4:73:5a:c0:6c:7f:4f:ec:a9:1e:af: c5:51:df:eb:a8:14:29:6a:0a:e7:8a:36:54:09:e8:7b:9a:87: 29:40:fb:74:72:cd:f1:6b:df:c5:35:21:e4:af:14:f4:79:3f: f3:2c:82:23:41:0e:61:40:4e:de:07:e5:c0:16:56:26:92:0a: 84:25:90:54:65:d0:4c:58:65:b7:15:2a:4c:6a:07:0b:b3:d5: c0:a0:eb:19:bf:93:69:c0:47:53:e6:4b:59:19:2f:5c:49:26: 44:15:43:c9:3b:8c:80:91:e9:0f:ae:fc:05:2d:c9:79:0c:c7: e2:91:70:0c:1c:40:62:dc:59:95:c5:7a:22:35:67:fd:c0:b7: a8:d4:57:19:f6:fe:49:fb:d1:75:60:2d:b4:be:98:79:67:55: 67:f3:ba:5d:56:e4:f7:f4:0f:ed:b8:d9:ec:0d:ba:e1:06:a2: b4:3f:bc:2d:10:e6:76:e4:fb:cd:d0:82:f1:dc:ee:8f:b1:99: 0e:74:78:72:98:f4:b9:4e:7d:d8:8e:b6:df:fc:70:3e:30:21: d9:23:94:a6 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE3EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI0NTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlFOTNGQ0ZCNDVEMkVD QTkxNzkwNERGRjlDMERBNEVFN0Y0Q0NFNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdVoY/YHWdkOi2tNSYpBCF7/VLZBPfgIjByK5l13qFKknrsxYz Rn5Fpq6cdZ+c3JNawhuQbIT4cEWHROCJBozQ7DVSUIFYeKqAGh2wKevZVLc13GH5 /OVruoMEXvjEqGQeitz9eXRq92MiiDg918P2G+fzzQM88kpPvmi+mLCWLFzTDzTP zokU+Sr1HF1d0NkyJmutTev2HWw5WGSGGnfrh/L8kHlYXtdPb+DWCBVDL2e0aIdd qNE4q7yK5gvWNtrRXZeydmD38YdDRm5daPSVECMRQcnSB54D/JhRCeld9uuRX2pX rUEmWTJjKpwdpavMq2wnfkVBVqPlzv0w0IW3AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUnpP8+0XS7KkXkE3/nA2k7n9MzmgwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbnBQOC0wWFM3S2tYa0UzX25BMms3 bjlNem1nLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnqTQDAN BgkqhkiG9w0BAQsFAAOCAQEAZKFG2yL5lkiuP0EM6XaacvYT1Ks/LAPfxtj7csQi N/Fkpu9wiHU6V74gH+RzWsBsf0/sqR6vxVHf66gUKWoK54o2VAnoe5qHKUD7dHLN 8WvfxTUh5K8U9Hk/8yyCI0EOYUBO3gflwBZWJpIKhCWQVGXQTFhltxUqTGoHC7PV wKDrGb+TacBHU+ZLWRkvXEkmRBVDyTuMgJHpD678BS3JeQzH4pFwDBxAYtxZlcV6 IjVn/cC3qNRXGfb+SfvRdWAttL6YeWdVZ/O6XVbk9/QP7bjZ7A264QaitD+8LRDm duT7zdCC8dzuj7GZDnR4cpj0uU592I623/xwPjAh2SOUpg== -----END CERTIFICATE-----Generated at Sat Jun 1 23:25:38 2024 by rpki-client on console-ams.rpki-client.org