$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/5b5ATk8NjEyWm6F0-dUD2Sewg9M.roa File: 5b5ATk8NjEyWm6F0-dUD2Sewg9M.roa (raw, json) Hash identifier: ls7Fwz0LCUDwoZzxaRYpWgK6a5PYCN0E5aQawAJcsUI= Subject key identifier: E5:BE:40:4E:4F:0D:8C:4C:96:9B:A1:74:F9:D5:03:D9:27:B0:83:D3 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1844 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5b5ATk8NjEyWm6F0-dUD2Sewg9M.roa Signing time: Mon 10 Feb 2025 14:07:45 +0000 ROA not before: Mon 10 Feb 2025 14:07:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 123.205.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 02:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6212 (0x1844) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E5BE404E4F0D8C4C969BA174F9D503D927B083D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:dd:c5:09:31:ed:35:cf:29:95:66:db:5a:41: 57:0d:96:62:ed:2f:72:21:a9:d1:93:bf:c1:d3:ab: 6d:29:7a:90:08:9f:a8:ed:39:0c:f1:75:8a:89:7c: 96:91:7a:09:8c:9d:02:15:cf:1b:0b:81:c9:01:69: 63:2c:37:c5:5c:80:e4:85:92:6e:4a:02:5d:17:a6: 44:8c:96:e8:b9:6f:c1:61:03:09:0c:7d:85:41:d9: fe:d1:f2:5f:47:f7:20:fc:18:a5:57:30:b9:bc:aa: fc:2c:a4:c5:66:b5:85:7c:54:ef:6a:fd:37:b0:66: 29:c6:1c:cb:b2:f6:22:9f:2f:46:37:63:ae:62:7b: c0:96:5d:3c:19:c1:81:d1:5f:26:e7:86:f2:e0:4c: 5e:b2:19:cf:09:5a:4e:f0:69:72:46:d8:04:70:1a: fd:03:7a:3e:9f:c9:aa:59:1f:42:27:93:8f:d1:5e: 9e:95:33:af:7d:4e:47:35:bb:8f:28:65:40:2e:de: a7:9c:af:6c:0f:8c:33:8b:2e:1a:80:a2:54:8d:09: d5:b9:41:b1:97:6e:80:29:c0:cd:f5:c8:8a:95:ff: 32:89:c7:d0:1b:92:a2:e3:ca:e5:e6:e7:cd:af:8c: 7d:50:5f:d0:b2:39:62:af:ef:44:55:8f:23:18:68: 55:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BE:40:4E:4F:0D:8C:4C:96:9B:A1:74:F9:D5:03:D9:27:B0:83:D3 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5b5ATk8NjEyWm6F0-dUD2Sewg9M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.205.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9f:3a:1e:d6:6c:3b:4c:12:d8:61:af:d7:dd:0f:12:d4:d4:b0: ef:75:9c:21:02:9e:cd:b6:e5:75:8d:ca:f8:9a:29:f9:bd:b3: a5:5d:d3:e3:cd:a2:61:59:bf:64:71:30:66:f6:de:dd:07:fa: 81:ba:a7:78:95:1c:82:5d:c1:f5:67:bb:85:30:7b:07:f3:fd: 0f:69:60:b2:f5:e8:77:ac:d2:ca:49:de:23:9e:27:97:2b:46: 4f:2a:59:33:31:18:c9:de:b0:2f:5e:02:0c:ed:6d:bf:ae:18: c2:f5:9b:72:b3:bc:dc:b4:c1:39:23:23:f6:92:23:b2:23:92: 91:c2:18:0f:59:a9:53:63:20:06:0a:60:ff:cb:51:01:f1:26: 3d:11:5d:60:ba:14:e0:55:62:e6:95:8e:9c:19:02:49:ad:e0: 92:85:23:8b:d9:34:81:c6:82:e1:22:f9:62:20:32:2e:17:4c: fc:ed:d3:13:a5:2c:ed:77:fe:9a:a3:a9:57:44:c9:ca:e9:ef: 0a:a3:9e:e3:22:96:a8:1c:80:53:8d:e0:e6:07:ca:01:c5:c2: 0b:0c:f5:df:97:63:51:e3:d6:df:e7:d7:fc:6e:40:03:f7:62: e5:05:a7:d4:aa:89:a1:f0:48:df:77:f8:18:c0:80:14:b9:4c: f9:4f:b9:88 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGEQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU1QkU0MDRFNEYwRDhD NEM5NjlCQTE3NEY5RDUwM0Q5MjdCMDgzRDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDr3cUJMe01zymVZttaQVcNlmLtL3IhqdGTv8HTq20pepAIn6jt OQzxdYqJfJaRegmMnQIVzxsLgckBaWMsN8VcgOSFkm5KAl0XpkSMlui5b8FhAwkM fYVB2f7R8l9H9yD8GKVXMLm8qvwspMVmtYV8VO9q/TewZinGHMuy9iKfL0Y3Y65i e8CWXTwZwYHRXybnhvLgTF6yGc8JWk7waXJG2ARwGv0Dej6fyapZH0Ink4/RXp6V M699Tkc1u48oZUAu3qecr2wPjDOLLhqAolSNCdW5QbGXboApwM31yIqV/zKJx9Ab kqLjyuXm582vjH1QX9CyOWKv70RVjyMYaFUJAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQU5b5ATk8NjEyWm6F0+dUD2Sewg9MwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvNWI1QVRrOE5qRXlXbTZGMC1kVUQy U2V3ZzlNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAHvNMA0G CSqGSIb3DQEBCwUAA4IBAQCfOh7WbDtMEthhr9fdDxLU1LDvdZwhAp7NtuV1jcr4 min5vbOlXdPjzaJhWb9kcTBm9t7dB/qBuqd4lRyCXcH1Z7uFMHsH8/0PaWCy9eh3 rNLKSd4jnieXK0ZPKlkzMRjJ3rAvXgIM7W2/rhjC9Ztys7zctME5IyP2kiOyI5KR whgPWalTYyAGCmD/y1EB8SY9EV1guhTgVWLmlY6cGQJJreCShSOL2TSBxoLhIvli IDIuF0z87dMTpSztd/6ao6lXRMnK6e8Ko57jIpaoHIBTjeDmB8oBxcILDPXfl2NR 49bf59f8bkAD92LlBafUqomh8Ejfd/gYwIAUuUz5T7mI -----END CERTIFICATE-----Generated at Sat Apr 5 23:11:15 2025 by rpki-client