$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/twnvFY3SaTWCHGQljVEnA0nvc2E.roa File: twnvFY3SaTWCHGQljVEnA0nvc2E.roa (raw, json) Hash identifier: XxaoIKFBRagx592KVTFVP+fqsAK3s5Kq7ZVI5UlaNvY= Subject key identifier: B7:09:EF:15:8D:D2:69:35:82:1C:64:25:8D:51:27:03:49:EF:73:61 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 138D Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/twnvFY3SaTWCHGQljVEnA0nvc2E.roa Signing time: Fri 01 Sep 2023 09:25:08 +0000 ROA not before: Fri 01 Sep 2023 09:25:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131602 IP address blocks: 122.147.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5005 (0x138d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Sep 1 09:25:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B709EF158DD26935821C64258D51270349EF7361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3f:ce:c5:e2:ca:51:65:11:4e:aa:cb:0e:d6: 4e:07:71:59:e7:bd:8b:9c:88:4c:ca:6a:16:6b:e0: bf:e9:a2:e2:7f:98:30:74:8f:4f:d5:18:d8:d3:03: 3b:7a:18:83:af:11:dd:4a:ce:b4:06:fe:2d:45:52: 22:aa:f1:8a:a8:3e:0f:52:52:23:9f:ef:fa:18:8f: 4d:dd:c8:7c:98:ff:30:16:e7:82:b2:ce:d1:fa:21: 9f:8c:4e:bf:2f:36:05:45:83:00:ef:90:63:72:bf: 69:bd:62:e5:d3:55:69:ac:f8:02:9e:ec:b9:84:b7: 81:6f:35:c9:8b:29:6b:2e:78:2f:b9:ec:82:c8:6c: b6:56:77:83:b5:f1:17:c7:f1:e3:48:e0:5f:57:af: 2f:a2:58:80:ee:86:f1:94:af:e9:32:d4:a6:cf:be: 92:3d:b8:fc:50:a7:9f:d4:95:31:62:47:e1:22:fd: 77:f7:61:4c:99:f5:ad:98:fc:d4:08:52:65:4c:b2: 34:a1:e2:1b:f2:6a:21:9b:3b:f2:81:bc:a0:1b:87: 46:c2:5f:ed:4b:8c:e1:f1:a7:9d:77:ea:d3:39:73: e1:d9:d6:0e:45:53:a2:5f:3b:a0:a9:21:a6:37:3d: d4:34:d0:6b:28:06:91:3a:de:d5:f1:27:cf:04:7a: ea:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:09:EF:15:8D:D2:69:35:82:1C:64:25:8D:51:27:03:49:EF:73:61 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/twnvFY3SaTWCHGQljVEnA0nvc2E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.147.16.0/21 Signature Algorithm: sha256WithRSAEncryption 78:10:8a:6d:a9:a1:9c:98:ea:19:0d:6c:c0:2b:c2:d6:73:ef: 87:cf:0d:6c:96:ac:52:89:a2:34:e5:71:f4:0b:1d:3f:6a:f1: 26:f4:d2:83:b1:e9:0d:52:e7:c4:da:ea:f6:dd:83:db:1a:5c: 5e:16:c8:7d:4a:77:ad:88:99:9f:f8:dd:ae:4a:6a:7a:c1:06: 92:bd:bb:b5:ec:e9:2d:16:70:31:72:e5:c1:5d:17:62:5e:98: ad:0e:90:d8:c6:62:8a:d9:00:d1:c3:8a:25:f5:c0:99:57:ee: 50:6f:a2:c3:73:af:82:7f:53:53:19:dc:22:64:f2:24:d9:b1: 61:86:d3:ab:f6:99:d1:25:0f:01:d8:e9:d6:ca:03:0a:1e:e9: 4f:23:7a:7e:74:a0:9d:40:82:36:77:e3:44:44:06:62:67:90: b6:f4:64:17:cc:04:85:a6:a4:84:68:a2:be:60:01:71:6f:c0: 7d:25:45:93:47:11:18:ec:27:e0:72:89:fb:52:90:6f:2a:b7: 13:af:57:10:55:91:d0:a2:4d:b0:8e:71:e2:14:54:a1:f4:11: 50:71:ec:de:5a:fc:3d:42:92:01:26:ee:ee:c2:89:e1:db:80: 77:79:73:f2:95:23:df:17:35:ae:b3:70:89:3a:84:e1:80:d6: a2:c8:9e:77 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE40wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw OTI1MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI3MDlFRjE1OEREMjY5 MzU4MjFDNjQyNThENTEyNzAzNDlFRjczNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOP87F4spRZRFOqssO1k4HcVnnvYuciEzKahZr4L/pouJ/mDB0 j0/VGNjTAzt6GIOvEd1KzrQG/i1FUiKq8YqoPg9SUiOf7/oYj03dyHyY/zAW54Ky ztH6IZ+MTr8vNgVFgwDvkGNyv2m9YuXTVWms+AKe7LmEt4FvNcmLKWsueC+57ILI bLZWd4O18RfH8eNI4F9Xry+iWIDuhvGUr+ky1KbPvpI9uPxQp5/UlTFiR+Ei/Xf3 YUyZ9a2Y/NQIUmVMsjSh4hvyaiGbO/KBvKAbh0bCX+1LjOHxp5136tM5c+HZ1g5F U6JfO6CpIaY3PdQ00GsoBpE63tXxJ88EeuppAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUtwnvFY3SaTWCHGQljVEnA0nvc2EwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvdHdudkZZM1NhVFdDSEdRbGpWRW5B MG52YzJFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3qTEDAN BgkqhkiG9w0BAQsFAAOCAQEAeBCKbamhnJjqGQ1swCvC1nPvh88NbJasUomiNOVx 9AsdP2rxJvTSg7HpDVLnxNrq9t2D2xpcXhbIfUp3rYiZn/jdrkpqesEGkr27tezp LRZwMXLlwV0XYl6YrQ6Q2MZiitkA0cOKJfXAmVfuUG+iw3Ovgn9TUxncImTyJNmx YYbTq/aZ0SUPAdjp1soDCh7pTyN6fnSgnUCCNnfjREQGYmeQtvRkF8wEhaakhGii vmABcW/AfSVFk0cRGOwn4HKJ+1KQbyq3E69XEFWR0KJNsI5x4hRUofQRUHHs3lr8 PUKSASbu7sKJ4duAd3lz8pUj3xc1rrNwiTqE4YDWosiedw== -----END CERTIFICATE-----Generated at Sat Jun 1 22:20:18 2024 by rpki-client on console-fra.rpki-client.org