$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ipm_h_E_98WQa1rdQpKxd1YhZDI.roa File: Ipm_h_E_98WQa1rdQpKxd1YhZDI.roa (raw, json) Hash identifier: tDF+1ipbKw+6UCTVnXQXC6ysrHlwAMXLav02AzxnBZI= Subject key identifier: 22:99:BF:87:F1:3F:F7:C5:90:6B:5A:DD:42:92:B1:77:56:21:64:32 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 183B Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ipm_h_E_98WQa1rdQpKxd1YhZDI.roa Signing time: Mon 10 Feb 2025 14:07:42 +0000 ROA not before: Mon 10 Feb 2025 14:07:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 218.32.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 02:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6203 (0x183b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:42 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2299BF87F13FF7C5906B5ADD4292B17756216432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bf:b5:dd:df:8a:17:f3:42:fb:56:7e:ed:3d: 12:40:74:ed:3b:aa:9b:b5:36:12:d6:df:72:f4:1b: 66:20:ad:44:3c:ce:33:0e:6a:2b:63:ce:7c:9f:26: 13:bd:78:9e:fa:63:da:ae:67:bc:f6:f0:d1:ca:d8: cb:27:92:a2:d2:f6:78:bc:c5:e4:a6:4d:ea:e1:e3: 68:b1:0e:cc:b8:47:6b:d1:39:8e:60:3f:4d:4c:20: a3:9a:37:2a:97:48:b2:3a:58:02:1d:34:5f:34:2c: 0b:00:c9:bf:24:49:f0:fb:35:90:34:a2:19:82:13: 28:1c:d8:10:b4:0e:73:ca:1d:72:e0:8c:90:ea:5c: 13:35:c2:ca:0d:fb:a9:4c:73:0e:97:47:3d:e8:9b: 73:f5:c9:06:97:e1:09:0c:b2:dd:e8:6f:64:45:6c: cf:4d:fa:1b:3d:09:d1:8a:d0:23:46:dd:56:17:b3: 20:45:f1:17:ed:3b:89:a4:29:b4:28:2d:64:ab:37: 46:06:15:2b:e2:85:e7:64:0d:51:ad:74:ca:d6:ed: 66:84:26:cd:5b:69:54:8f:f4:d6:6c:76:90:b4:e6: cb:09:00:91:5d:c4:2d:93:9a:13:68:84:19:3b:ab: 39:f1:81:94:bf:a2:e8:bf:4e:94:d7:50:54:3b:97: 09:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:99:BF:87:F1:3F:F7:C5:90:6B:5A:DD:42:92:B1:77:56:21:64:32 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ipm_h_E_98WQa1rdQpKxd1YhZDI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.32.0.0/16 Signature Algorithm: sha256WithRSAEncryption c2:6b:e0:3e:75:a3:8e:d3:98:f6:67:af:42:10:92:99:a9:d6: a0:26:84:97:74:59:66:04:58:ac:4b:27:84:ca:c6:67:4b:61: 33:41:fc:41:c6:88:96:f5:13:7b:52:3b:e0:d2:c7:c0:a7:a9: b3:17:3f:ab:ae:29:70:0e:30:a2:78:ad:fc:7e:97:17:45:11: b0:46:68:ed:1e:00:9e:13:dc:ab:3d:f5:0c:f6:af:37:28:f2: d2:86:95:83:5e:8c:95:cd:62:4c:0e:75:1f:00:90:38:50:ac: 93:fc:90:21:26:b4:f8:7c:4b:e2:f9:e9:84:49:cb:d7:dd:d6: 05:93:f7:cd:59:06:96:c8:25:00:e6:f1:83:70:b1:52:fe:05: 29:ca:c3:34:e6:1f:53:98:fc:f2:f6:b1:66:0d:14:c2:31:bd: e0:0d:2b:c1:e6:f9:72:bc:2d:f0:bc:76:73:c2:ab:76:05:d3: e8:7f:cc:2b:19:f7:5a:50:63:3f:70:9a:dd:6b:38:ba:3f:2b: b0:a1:6c:3a:35:e4:ae:de:31:60:63:c6:92:c4:9e:ae:14:04: ae:74:c5:1c:68:67:97:0e:28:1b:6b:04:d1:31:4d:b3:74:c6: 4d:7d:b4:d3:9e:d4:3b:b1:a5:cb:2e:7b:e2:dc:37:3c:b9:55: 9f:fb:cc:b3 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGDswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIyOTlCRjg3RjEzRkY3 QzU5MDZCNUFERDQyOTJCMTc3NTYyMTY0MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrv7Xd34oX80L7Vn7tPRJAdO07qpu1NhLW33L0G2YgrUQ8zjMO aitjznyfJhO9eJ76Y9quZ7z28NHK2MsnkqLS9ni8xeSmTerh42ixDsy4R2vROY5g P01MIKOaNyqXSLI6WAIdNF80LAsAyb8kSfD7NZA0ohmCEygc2BC0DnPKHXLgjJDq XBM1wsoN+6lMcw6XRz3om3P1yQaX4QkMst3ob2RFbM9N+hs9CdGK0CNG3VYXsyBF 8RftO4mkKbQoLWSrN0YGFSvihedkDVGtdMrW7WaEJs1baVSP9NZsdpC05ssJAJFd xC2TmhNohBk7qznxgZS/oui/TpTXUFQ7lwkhAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUIpm/h/E/98WQa1rdQpKxd1YhZDIwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSXBtX2hfRV85OFdRYTFyZFFwS3hk MVloWkRJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANogMA0G CSqGSIb3DQEBCwUAA4IBAQDCa+A+daOO05j2Z69CEJKZqdagJoSXdFlmBFisSyeE ysZnS2EzQfxBxoiW9RN7Ujvg0sfAp6mzFz+rrilwDjCieK38fpcXRRGwRmjtHgCe E9yrPfUM9q83KPLShpWDXoyVzWJMDnUfAJA4UKyT/JAhJrT4fEvi+emEScvX3dYF k/fNWQaWyCUA5vGDcLFS/gUpysM05h9TmPzy9rFmDRTCMb3gDSvB5vlyvC3wvHZz wqt2BdPof8wrGfdaUGM/cJrdazi6PyuwoWw6NeSu3jFgY8aSxJ6uFASudMUcaGeX DigbawTRMU2zdMZNfbTTntQ7saXLLnvi3Dc8uVWf+8yz -----END CERTIFICATE-----Generated at Sat Apr 5 23:14:30 2025 by rpki-client