$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/3CdszcY-EJ5a3CG-beuQtleioFg.roa File: 3CdszcY-EJ5a3CG-beuQtleioFg.roa (raw, json) Hash identifier: RTwsulyc4EGnwDQhmMKymPlxFf3aAuW42E96s3Pbv7s= Subject key identifier: DC:27:6C:CD:C6:3E:10:9E:5A:DC:21:BE:6D:EB:90:B6:57:A2:A0:58 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1869 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/3CdszcY-EJ5a3CG-beuQtleioFg.roa Signing time: Mon 10 Feb 2025 14:07:55 +0000 ROA not before: Mon 10 Feb 2025 14:07:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131597 IP address blocks: 106.105.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 08:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6249 (0x1869) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:55 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DC276CCDC63E109E5ADC21BE6DEB90B657A2A058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:1b:10:6e:93:2c:27:94:e7:be:f2:73:2f: 89:ce:97:df:2a:86:94:9a:b8:72:20:67:ea:d6:e9: c9:70:31:90:2d:86:33:1b:78:30:41:4a:a3:3a:d2: 1f:42:a1:27:71:6d:4d:89:f9:dc:d1:d5:b0:76:02: f7:9c:22:21:bf:96:e2:fe:53:91:50:be:99:12:36: 43:2b:3b:7d:45:3a:55:57:d2:b6:61:db:77:29:26: 4a:56:b9:3f:18:ea:5c:6c:36:12:22:84:3f:bf:50: ce:69:b2:0e:de:77:b5:cb:0e:62:50:07:ce:fb:3b: 89:f9:a1:a1:60:e9:4d:a1:de:24:66:94:a3:f1:3a: c6:e6:c3:95:49:bb:1c:6e:09:63:c6:c7:47:08:2f: 41:56:eb:c7:9a:cb:36:fd:ef:3c:ae:82:da:4d:df: 3c:07:92:7a:01:3c:70:d8:dd:56:f7:ff:09:31:b3: 4d:f4:a8:6d:6a:a8:73:d2:7b:9f:b8:6f:91:30:2a: e7:df:a6:19:e5:89:50:fb:bc:be:88:91:cf:8c:39: a5:7b:ac:e7:a2:8f:ec:22:a2:00:3d:c7:41:33:bf: c7:74:63:c3:7b:c1:37:52:2f:93:c1:be:73:aa:f6: e8:10:da:5c:49:01:2e:83:2f:cc:9c:f9:1c:b1:9a: 7d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:27:6C:CD:C6:3E:10:9E:5A:DC:21:BE:6D:EB:90:B6:57:A2:A0:58 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/3CdszcY-EJ5a3CG-beuQtleioFg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.224.0/21 Signature Algorithm: sha256WithRSAEncryption 4a:7a:9a:db:67:65:b3:d8:e1:79:0c:eb:b3:45:99:de:54:7a: aa:44:72:69:89:f3:ac:00:54:58:dd:36:ce:a8:43:8e:a8:b3: 52:8e:33:e6:66:0f:b1:4d:78:e3:32:11:98:4a:94:73:ae:78: 0e:7f:50:cc:8f:75:6a:24:d4:d1:70:19:42:be:66:b2:f5:5e: d1:65:d6:24:63:6e:d9:1e:90:bc:14:41:90:2e:75:38:55:f9: ef:ae:e5:08:9d:7a:af:04:82:c8:28:da:23:5c:4d:7f:39:b0: 14:71:c2:4c:86:65:9d:1b:59:b7:e3:b1:ca:98:88:f1:87:73: d3:d9:db:50:4d:94:ea:3f:8f:34:88:7e:d7:f4:8e:ed:07:8a: b2:09:3f:c7:b8:81:14:a3:d9:d6:6a:5e:6d:f3:ea:11:f9:a5: a6:da:89:43:8c:fa:cb:38:c8:67:71:a8:2c:29:77:47:6e:ac: f9:0f:99:56:b2:3e:23:b2:f7:52:d6:69:11:7f:ea:75:d2:24: f4:f3:7c:c3:88:96:cb:38:06:7e:96:90:cb:80:3b:d8:c2:64: d0:ce:d6:76:54:c6:5b:b8:33:0e:24:e3:4a:4c:44:da:60:f9: df:6b:f2:9d:f7:7f:f6:2b:58:ec:a8:32:9a:d0:7a:e5:ee:31: 77:89:f2:13 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGGkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3NTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERDMjc2Q0NEQzYzRTEw OUU1QURDMjFCRTZERUI5MEI2NTdBMkEwNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrOxsQbpMsJ5TnvvJzL4nOl98qhpSauHIgZ+rW6clwMZAthjMb eDBBSqM60h9CoSdxbU2J+dzR1bB2AvecIiG/luL+U5FQvpkSNkMrO31FOlVX0rZh 23cpJkpWuT8Y6lxsNhIihD+/UM5psg7ed7XLDmJQB877O4n5oaFg6U2h3iRmlKPx Osbmw5VJuxxuCWPGx0cIL0FW68eayzb97zyugtpN3zwHknoBPHDY3Vb3/wkxs030 qG1qqHPSe5+4b5EwKuffphnliVD7vL6Ikc+MOaV7rOeij+wiogA9x0Ezv8d0Y8N7 wTdSL5PBvnOq9ugQ2lxJAS6DL8yc+Ryxmn3jAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU3CdszcY+EJ5a3CG+beuQtleioFgwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvM0Nkc3pjWS1FSjVhM0NHLWJldVF0 bGVpb0ZnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2pp4DAN BgkqhkiG9w0BAQsFAAOCAQEASnqa22dls9jheQzrs0WZ3lR6qkRyaYnzrABUWN02 zqhDjqizUo4z5mYPsU144zIRmEqUc654Dn9QzI91aiTU0XAZQr5msvVe0WXWJGNu 2R6QvBRBkC51OFX5767lCJ16rwSCyCjaI1xNfzmwFHHCTIZlnRtZt+OxypiI8Ydz 09nbUE2U6j+PNIh+1/SO7QeKsgk/x7iBFKPZ1mpebfPqEfmlptqJQ4z6yzjIZ3Go LCl3R26s+Q+ZVrI+I7L3UtZpEX/qddIk9PN8w4iWyzgGfpaQy4A72MJk0M7WdlTG W7gzDiTjSkxE2mD532vynfd/9itY7KgymtB65e4xd4nyEw== -----END CERTIFICATE-----Generated at Mon Apr 7 08:09:17 2025 by rpki-client