$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCDTV/hBmZW1C5ZYweEOM192xQVhg5874.roa File: hBmZW1C5ZYweEOM192xQVhg5874.roa (raw, json) Hash identifier: e+Sl+vLax2YjIedAQhPW/7vm9UG4I1ihlbWI6SJi+mE= Subject key identifier: 84:19:99:5B:50:B9:65:8C:1E:10:E3:35:F7:6C:50:56:18:39:F3:BE Certificate issuer: /CN=4B81BB31FA5292C8025B828F802722DE0D5EADE3 Certificate serial: 0C8E Authority key identifier: 4B:81:BB:31:FA:52:92:C8:02:5B:82:8F:80:27:22:DE:0D:5E:AD:E3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/S4G7MfpSksgCW4KPgCci3g1ereM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCDTV/hBmZW1C5ZYweEOM192xQVhg5874.roa Signing time: Mon 10 Feb 2025 14:16:00 +0000 ROA not before: Mon 10 Feb 2025 14:16:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131597 IP address blocks: 202.123.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCDTV/S4G7MfpSksgCW4KPgCci3g1ereM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCDTV/S4G7MfpSksgCW4KPgCci3g1ereM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/S4G7MfpSksgCW4KPgCci3g1ereM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3214 (0xc8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B81BB31FA5292C8025B828F802722DE0D5EADE3 Validity Not Before: Feb 10 14:16:00 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8419995B50B9658C1E10E335F76C50561839F3BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b3:dd:78:7f:f8:4c:d7:3a:14:4d:de:04:8b: 43:7c:0f:5c:7f:34:63:89:51:f5:98:ee:49:66:30: 8d:1b:98:16:56:eb:5e:6e:63:d4:b5:9a:09:f6:98: 33:cd:4e:4f:e9:d6:8f:96:8e:0d:30:ac:66:4f:4c: 6f:87:ef:2e:fc:d1:6a:b5:11:34:38:38:66:4c:45: 4d:58:e1:ed:fc:77:38:23:63:45:77:49:03:5c:c3: a7:3c:92:0c:ec:d7:0d:3b:e0:d2:cf:8e:37:b2:30: 97:de:45:3b:03:76:6f:f8:2e:f8:cc:0e:61:42:f8: 3b:af:59:c7:1e:51:f8:29:0b:8b:b7:6a:3d:bd:76: bb:64:e9:c0:6f:a7:9a:6f:26:8d:af:ad:82:f8:28: 5e:d8:72:d5:ea:30:2a:e2:2a:aa:20:c8:c4:84:46: 7f:61:ec:6f:f9:38:9b:10:f4:04:ea:f3:71:70:d5: 1e:c8:d0:68:4e:10:fb:54:b3:91:a0:9e:46:2e:da: b2:c4:77:e7:32:f1:2d:d3:9d:fb:e2:86:09:33:0e: 88:3d:5c:68:63:b8:05:54:c5:42:6f:12:ff:52:4f: 73:85:57:b6:ce:79:78:dd:91:61:3d:2e:b3:34:fe: 82:07:a9:12:05:8a:59:47:38:66:80:a6:2a:d7:bc: a0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:19:99:5B:50:B9:65:8C:1E:10:E3:35:F7:6C:50:56:18:39:F3:BE X509v3 Authority Key Identifier: keyid:4B:81:BB:31:FA:52:92:C8:02:5B:82:8F:80:27:22:DE:0D:5E:AD:E3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCDTV/S4G7MfpSksgCW4KPgCci3g1ereM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/S4G7MfpSksgCW4KPgCci3g1ereM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCDTV/hBmZW1C5ZYweEOM192xQVhg5874.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.123.124.0/22 Signature Algorithm: sha256WithRSAEncryption 15:d8:5a:77:34:b1:35:c1:39:1a:a4:fa:e6:f4:9d:a6:69:94: 4e:30:45:49:fd:20:73:c7:14:06:a3:c6:c2:b2:a4:6c:9b:f2: 5c:eb:6b:96:bc:62:16:e9:5e:68:6f:c9:2e:b3:f8:b6:7b:9c: 1b:61:c3:f1:19:a9:dc:44:2c:05:2e:72:58:19:7d:4d:6a:46: 88:6d:19:74:3c:3d:c2:be:07:d6:ae:e6:3d:38:0c:02:2b:be: c3:00:eb:9b:f7:c5:58:c3:ef:3d:ce:2c:17:72:84:8a:f8:f2: bf:9e:6f:4b:ca:82:49:36:5d:c8:48:89:29:a0:d2:1c:42:df: 6e:c0:0e:f1:09:32:a2:36:6d:2c:84:98:a7:64:dc:7f:e4:b1: 96:02:ec:4f:d0:2d:b8:a2:6d:9a:d9:68:af:f5:50:e7:58:b6: b3:49:c6:39:2f:44:e5:08:be:32:ed:98:9b:4d:be:a5:7c:07: 14:12:5a:c2:19:54:70:64:9e:04:ef:ce:55:46:07:eb:97:32: f9:08:62:f8:73:0c:81:34:97:ba:49:64:ec:60:45:e0:2f:50: 8b:22:04:eb:0f:80:6d:0c:c0:1b:c2:c5:13:c3:f8:24:db:0e: 6f:c6:1d:11:92:43:5e:9d:28:df:b9:b8:28:df:fa:a1:a5:7a: 85:78:c8:76 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEI4 MUJCMzFGQTUyOTJDODAyNUI4MjhGODAyNzIyREUwRDVFQURFMzAeFw0yNTAyMTAx NDE2MDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg0MTk5OTVCNTBCOTY1 OEMxRTEwRTMzNUY3NkM1MDU2MTgzOUYzQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3s914f/hM1zoUTd4Ei0N8D1x/NGOJUfWY7klmMI0bmBZW615u Y9S1mgn2mDPNTk/p1o+Wjg0wrGZPTG+H7y780Wq1ETQ4OGZMRU1Y4e38dzgjY0V3 SQNcw6c8kgzs1w074NLPjjeyMJfeRTsDdm/4LvjMDmFC+DuvWcceUfgpC4u3aj29 drtk6cBvp5pvJo2vrYL4KF7YctXqMCriKqogyMSERn9h7G/5OJsQ9ATq83Fw1R7I 0GhOEPtUs5GgnkYu2rLEd+cy8S3TnfvihgkzDog9XGhjuAVUxUJvEv9ST3OFV7bO eXjdkWE9LrM0/oIHqRIFillHOGaApirXvKBnAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUhBmZW1C5ZYweEOM192xQVhg5874wHwYDVR0jBBgwFoAUS4G7MfpSksgCW4KP gCci3g1ereMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNEVFYv UzRHN01mcFNrc2dDVzRLUGdDY2kzZzFlcmVNLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9TNEc3TWZwU2tzZ0NXNEtQZ0NjaTNnMWVyZU0uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9OQ0RUVi9oQm1aVzFDNVpZd2VFT00xOTJ4 UVZoZzU4NzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCynt8 MA0GCSqGSIb3DQEBCwUAA4IBAQAV2Fp3NLE1wTkapPrm9J2maZROMEVJ/SBzxxQG o8bCsqRsm/Jc62uWvGIW6V5ob8kus/i2e5wbYcPxGancRCwFLnJYGX1NakaIbRl0 PD3CvgfWruY9OAwCK77DAOub98VYw+89ziwXcoSK+PK/nm9LyoJJNl3ISIkpoNIc Qt9uwA7xCTKiNm0shJinZNx/5LGWAuxP0C24om2a2Wiv9VDnWLazScY5L0TlCL4y 7ZibTb6lfAcUElrCGVRwZJ4E785VRgfrlzL5CGL4cwyBNJe6SWTsYEXgL1CLIgTr D4BtDMAbwsUTw/gk2w5vxh0RkkNenSjfubgo3/qhpXqFeMh2 -----END CERTIFICATE-----Generated at Fri Apr 11 15:42:39 2025 by rpki-client