$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/HLtNJW8p1yu-kBnoQemobZ1_26k.roa File: HLtNJW8p1yu-kBnoQemobZ1_26k.roa (raw, json) Hash identifier: D8QQIfGDfxbiah3Q5QP2gnS08YodfVBaxGFrzA9pDs4= Subject key identifier: 1C:BB:4D:25:6F:29:D7:2B:BE:90:19:E8:41:E9:A8:6D:9D:7F:DB:A9 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 17A2 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/HLtNJW8p1yu-kBnoQemobZ1_26k.roa Signing time: Mon 10 Feb 2025 14:07:07 +0000 ROA not before: Mon 10 Feb 2025 14:07:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131597 IP address blocks: 106.105.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6050 (0x17a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:07 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1CBB4D256F29D72BBE9019E841E9A86D9D7FDBA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bc:e2:a5:33:23:46:57:a5:08:52:db:cc:f9: 9c:37:9a:f1:1f:55:76:3d:26:c8:4b:cf:e9:66:58: c8:2d:f8:aa:5a:db:f7:7c:92:13:8b:a6:cf:d3:b0: 47:a7:29:e5:ba:04:0b:b6:6f:d0:24:65:31:6f:57: 0d:e5:cf:7f:60:05:dd:3e:59:42:f9:00:d0:b9:a0: 96:5d:9a:00:1e:f5:2d:14:53:22:e0:a7:11:aa:88: 2e:4a:74:a5:61:99:d8:34:c5:b2:80:e3:ea:00:a2: b4:97:e9:4d:85:82:42:30:c8:76:fe:4a:ea:6b:75: 1e:52:61:e1:bb:9f:e9:c0:ef:50:a4:5e:4c:4e:cb: df:60:c3:f8:50:b6:4f:83:6b:19:90:58:fb:56:71: e2:8c:02:9f:e9:5d:74:32:f1:d4:2b:d4:9e:9b:8c: 56:8e:97:db:28:1d:e8:ac:56:4e:df:1a:c3:95:60: da:62:fa:7c:ac:38:9f:6d:46:95:db:d6:1f:28:fd: 8e:b7:d1:61:f4:9c:0f:5f:0d:35:55:9c:01:f3:35: b0:98:2f:fa:cd:89:bc:53:23:15:3c:0c:c7:f5:03: 72:e9:e3:c5:90:7b:e3:67:37:cd:02:50:93:e7:78: af:cf:07:01:ba:2c:90:9f:77:a6:f1:a5:e8:a4:dd: 37:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:BB:4D:25:6F:29:D7:2B:BE:90:19:E8:41:E9:A8:6D:9D:7F:DB:A9 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/HLtNJW8p1yu-kBnoQemobZ1_26k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.240.0/21 Signature Algorithm: sha256WithRSAEncryption 3c:be:1f:10:cf:89:50:48:ca:79:38:fe:46:95:b9:42:a8:04: 0e:74:1d:a2:03:fe:38:6a:a5:9e:d0:84:7c:b0:24:64:0b:d1: c9:14:ea:02:85:20:aa:9b:1f:cc:48:8a:72:3f:92:93:15:7c: b3:4d:05:bc:ef:5a:8b:bd:fe:45:83:38:62:8b:1e:57:ed:2a: 98:9e:1c:25:37:72:02:d1:94:c9:dc:b8:de:91:02:78:03:8b: c7:b4:f3:23:41:41:48:f9:51:a9:64:14:24:10:1f:7e:f7:fe: 2c:f1:fa:5a:77:ce:db:69:b2:7f:00:d0:6c:0b:d0:e0:04:4b: 1d:7e:a5:23:52:19:c0:8f:2a:68:c3:48:b4:3d:23:70:6f:15: 07:d6:cf:b9:b4:f5:c9:05:f5:79:26:7e:c1:86:34:8d:12:8c: a2:57:a5:31:98:2a:07:05:c3:52:2a:28:06:74:d6:8f:fd:6b: bc:66:51:4e:a1:9b:e4:8a:b3:98:8b:23:a2:7b:a3:f2:d9:6a: 52:43:2c:d8:18:69:c8:69:fd:68:54:6d:a4:dc:d8:08:3b:93: c9:51:19:34:f2:5d:00:04:32:f8:aa:30:02:43:2b:e6:51:66: 92:c7:84:28:b3:3c:27:55:b3:a3:88:b5:74:7f:9b:ca:f3:a4: ca:43:7d:6d -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICF6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFDQkI0RDI1NkYyOUQ3 MkJCRTkwMTlFODQxRTlBODZEOUQ3RkRCQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6vOKlMyNGV6UIUtvM+Zw3mvEfVXY9JshLz+lmWMgt+Kpa2/d8 khOLps/TsEenKeW6BAu2b9AkZTFvVw3lz39gBd0+WUL5ANC5oJZdmgAe9S0UUyLg pxGqiC5KdKVhmdg0xbKA4+oAorSX6U2FgkIwyHb+SuprdR5SYeG7n+nA71CkXkxO y99gw/hQtk+DaxmQWPtWceKMAp/pXXQy8dQr1J6bjFaOl9soHeisVk7fGsOVYNpi +nysOJ9tRpXb1h8o/Y630WH0nA9fDTVVnAHzNbCYL/rNibxTIxU8DMf1A3Lp48WQ e+NnN80CUJPneK/PBwG6LJCfd6bxpeik3TeBAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUHLtNJW8p1yu+kBnoQemobZ1/26kwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSEx0TkpXOHAxeXUta0Jub1FlbW9i WjFfMjZrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2pp8DAN BgkqhkiG9w0BAQsFAAOCAQEAPL4fEM+JUEjKeTj+RpW5QqgEDnQdogP+OGqlntCE fLAkZAvRyRTqAoUgqpsfzEiKcj+SkxV8s00FvO9ai73+RYM4YoseV+0qmJ4cJTdy AtGUydy43pECeAOLx7TzI0FBSPlRqWQUJBAffvf+LPH6WnfO22myfwDQbAvQ4ARL HX6lI1IZwI8qaMNItD0jcG8VB9bPubT1yQX1eSZ+wYY0jRKMolelMZgqBwXDUioo BnTWj/1rvGZRTqGb5IqzmIsjonuj8tlqUkMs2BhpyGn9aFRtpNzYCDuTyVEZNPJd AAQy+KowAkMr5lFmkseEKLM8J1Wzo4i1dH+byvOkykN9bQ== -----END CERTIFICATE-----Generated at Mon Apr 7 15:16:36 2025 by rpki-client