$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/4B17qvit_8ZeVytOxDdGI-QiFnE.roa File: 4B17qvit_8ZeVytOxDdGI-QiFnE.roa (raw, json) Hash identifier: RyhcaS1EyR7Bxi4jtDIp2QiErOttjDpr1STg11xPx9E= Subject key identifier: E0:1D:7B:AA:F8:AD:FF:C6:5E:57:2B:4E:C4:37:46:23:E4:22:16:71 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 187A Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4B17qvit_8ZeVytOxDdGI-QiFnE.roa Signing time: Mon 10 Feb 2025 14:07:59 +0000 ROA not before: Mon 10 Feb 2025 14:07:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 113.196.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 02:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6266 (0x187a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:59 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E01D7BAAF8ADFFC65E572B4EC4374623E4221671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:63:4b:ba:8e:dd:6b:18:93:40:fa:9b:ed:43: cc:24:5a:22:d7:60:83:d3:ff:c2:7b:ed:4b:97:e2: fa:19:5b:57:3a:f7:3a:30:fb:b0:7f:e8:cb:26:71: 56:a8:64:36:8a:76:c5:95:49:b6:4e:c8:56:a3:83: c4:0b:ec:2b:b4:c5:dd:54:f0:71:9f:28:e1:d6:1b: 80:e0:ba:00:3f:fa:da:12:0e:fa:99:87:d7:a3:46: 6a:c3:ae:62:98:a9:b2:c6:9a:43:8b:f0:b2:0d:58: b0:57:39:0f:ab:3e:a9:70:d9:95:f3:5f:99:73:62: 06:4b:e9:61:94:a9:9a:86:98:a7:a5:bc:ec:68:10: 2a:09:9e:a6:9f:42:eb:99:e9:08:b0:22:ed:70:24: 45:48:d9:d8:74:d0:17:11:9d:8e:1b:38:49:2a:b4: e6:21:7e:2a:40:76:35:d4:53:3c:3f:6c:c6:c7:4d: 67:8a:d5:ff:d8:32:b9:59:f4:8d:a7:4f:d7:d5:fa: ee:e6:e7:62:ed:cf:20:85:e5:f7:66:c2:c1:af:fd: d2:ee:3e:62:ed:57:f4:7e:78:36:0e:a6:c9:9c:ea: 0b:4f:99:25:2f:49:51:88:fc:bc:da:5d:dd:cc:1d: 14:43:be:3f:59:97:be:5e:a2:1e:15:ba:2e:e7:cf: ac:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:1D:7B:AA:F8:AD:FF:C6:5E:57:2B:4E:C4:37:46:23:E4:22:16:71 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4B17qvit_8ZeVytOxDdGI-QiFnE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.196.192.0/18 Signature Algorithm: sha256WithRSAEncryption 15:ef:b3:cc:26:82:06:bf:40:33:4e:e9:cf:a7:f8:87:2a:b4: 20:35:c2:f6:c0:9f:e0:79:65:26:77:2b:b6:0a:0f:d0:47:d8: 06:5b:55:69:29:2e:3b:48:de:f5:49:66:ee:f9:32:9d:f8:51: 41:20:73:81:43:72:06:ff:b8:3c:e7:8d:5f:11:a0:72:d2:d0: a5:1f:81:98:dc:b8:12:8a:4b:2f:06:7b:da:a8:89:57:af:95: d6:31:bf:a5:c2:0c:c9:e4:68:35:c1:0c:32:a3:16:cf:f1:72: 34:0d:d4:c6:ea:21:d6:51:7f:56:40:2c:10:98:2d:75:60:93: c7:42:e3:b2:73:ed:c1:27:12:67:2c:31:f9:65:57:d3:41:32: 9c:e6:f3:29:9f:c5:aa:d8:59:9d:22:ea:ad:66:a3:8f:aa:32: 4a:4a:d0:34:8e:1f:13:f9:79:74:54:7e:d3:82:c8:ad:11:02: 40:f0:dd:2e:ee:2b:14:81:e4:2f:48:67:fd:9e:75:32:36:07: 3d:63:2e:cb:ac:c9:ac:45:1c:f3:6d:2b:38:6c:ed:95:c8:83: a7:76:b6:78:6f:ef:d6:7f:24:ef:c3:aa:83:43:58:65:65:6a: 3a:98:ca:ea:86:a9:bf:12:bd:ba:fc:35:ff:18:80:c9:22:78: eb:c7:bc:5e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGHowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUwMUQ3QkFBRjhBREZG QzY1RTU3MkI0RUM0Mzc0NjIzRTQyMjE2NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmY0u6jt1rGJNA+pvtQ8wkWiLXYIPT/8J77UuX4voZW1c69zow +7B/6MsmcVaoZDaKdsWVSbZOyFajg8QL7Cu0xd1U8HGfKOHWG4DgugA/+toSDvqZ h9ejRmrDrmKYqbLGmkOL8LINWLBXOQ+rPqlw2ZXzX5lzYgZL6WGUqZqGmKelvOxo ECoJnqafQuuZ6QiwIu1wJEVI2dh00BcRnY4bOEkqtOYhfipAdjXUUzw/bMbHTWeK 1f/YMrlZ9I2nT9fV+u7m52LtzyCF5fdmwsGv/dLuPmLtV/R+eDYOpsmc6gtPmSUv SVGI/LzaXd3MHRRDvj9Zl75eoh4Vui7nz6w/AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU4B17qvit/8ZeVytOxDdGI+QiFnEwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvNEIxN3F2aXRfOFplVnl0T3hEZEdJ LVFpRm5FLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnHEwDAN BgkqhkiG9w0BAQsFAAOCAQEAFe+zzCaCBr9AM07pz6f4hyq0IDXC9sCf4HllJncr tgoP0EfYBltVaSkuO0je9Ulm7vkynfhRQSBzgUNyBv+4POeNXxGgctLQpR+BmNy4 EopLLwZ72qiJV6+V1jG/pcIMyeRoNcEMMqMWz/FyNA3Uxuoh1lF/VkAsEJgtdWCT x0LjsnPtwScSZywx+WVX00EynObzKZ/FqthZnSLqrWajj6oySkrQNI4fE/l5dFR+ 04LIrRECQPDdLu4rFIHkL0hn/Z51MjYHPWMuy6zJrEUc820rOGztlciDp3a2eG/v 1n8k78Oqg0NYZWVqOpjK6oapvxK9uvw1/xiAySJ468e8Xg== -----END CERTIFICATE-----Generated at Sat Apr 5 23:14:27 2025 by rpki-client