$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/VVjaPxR0BaVO1IvvGOAx6rJbwh8.roa File: VVjaPxR0BaVO1IvvGOAx6rJbwh8.roa (raw, json) Hash identifier: V3ZvoZkQ9cj2T38LjPIIDCLvz+UMmUpiw4QXqRtkSeg= Subject key identifier: 55:58:DA:3F:14:74:05:A5:4E:D4:8B:EF:18:E0:31:EA:B2:5B:C2:1F Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1781 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VVjaPxR0BaVO1IvvGOAx6rJbwh8.roa Signing time: Mon 10 Feb 2025 14:06:58 +0000 ROA not before: Mon 10 Feb 2025 14:06:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 113.196.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 02:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6017 (0x1781) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:06:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5558DA3F147405A54ED48BEF18E031EAB25BC21F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:98:bd:ee:02:9b:00:cd:c6:8b:af:8b:9f:51: b6:0b:7f:3e:44:83:d7:8d:5b:2f:67:79:10:50:73: 4b:03:47:b6:01:df:01:a8:cb:99:eb:a2:ad:12:98: 1a:a9:af:9f:62:5c:ca:b3:14:65:c2:2d:4f:e5:46: c9:9b:a9:94:59:95:e3:f7:7a:8c:a3:2f:34:f0:c8: 16:4e:28:1f:cc:7c:ca:04:d4:3f:84:6c:08:c3:ca: 0a:00:a3:e4:18:6a:30:b3:21:4e:be:a2:a3:6a:c0: 3e:7e:f3:97:fe:18:b5:7e:5d:2c:87:76:95:2d:73: 45:bc:6a:47:06:84:fa:8c:fe:68:db:3d:9d:1e:dc: 9e:9d:11:4e:20:dd:b2:60:29:8b:d0:ca:3b:9d:72: 0c:20:e7:ea:3a:97:3e:5b:a2:93:c7:2b:fe:85:49: 00:85:dc:7e:ef:e9:c3:77:99:30:dc:9b:80:e6:17: 33:a1:a4:0c:e4:0f:bf:34:b2:33:1f:5a:be:a7:57: e7:42:a0:34:43:00:a8:ee:b9:2e:d7:48:ed:44:d6: 4c:f1:1a:a2:15:26:b4:89:0a:ce:ea:f8:30:fe:f8: 79:4e:fd:d8:15:82:ce:f8:94:c5:52:0d:28:c0:0c: 7e:b8:58:56:ea:6a:e1:dc:e1:e2:15:91:66:f0:a1: a2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:58:DA:3F:14:74:05:A5:4E:D4:8B:EF:18:E0:31:EA:B2:5B:C2:1F X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VVjaPxR0BaVO1IvvGOAx6rJbwh8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.196.152.0/21 Signature Algorithm: sha256WithRSAEncryption bc:63:1e:81:3e:76:af:2f:07:22:37:01:2e:c4:3b:ad:2c:51: bb:fc:f7:bc:cd:d5:51:cf:1c:53:49:a8:d2:08:1e:9f:ca:e8: 79:32:f1:10:93:f7:7b:4d:bc:53:56:19:53:3c:4b:25:8d:2d: 06:db:ee:28:83:54:65:f0:83:d3:be:7c:85:a1:96:c4:e6:29: 77:a6:90:9c:80:09:f2:cb:ed:01:f5:0d:be:db:2e:bb:7a:42: 8f:15:a8:f9:e2:83:4d:15:bc:13:f0:42:b0:8e:25:79:fa:49: 95:de:e4:36:42:e0:56:df:5b:16:83:4e:6d:a3:9d:47:1a:43: 47:0d:45:8a:ce:19:14:a5:38:d2:78:c9:4d:e1:0e:ce:42:e9: 85:86:2d:dc:4b:d3:f1:b9:13:19:73:50:d9:e7:da:23:21:05: 9c:c9:49:bd:96:eb:d7:b8:8d:2c:2a:7a:79:33:e9:87:7e:1d: 4b:8a:4f:6f:75:7b:72:6f:47:6c:bd:43:56:6c:f9:f8:32:6a: b9:d3:21:a6:6d:f1:27:a1:7e:b5:e9:70:bd:59:d8:07:83:70: ee:f6:d6:43:d7:75:0d:1a:be:14:2d:a5:76:40:4c:74:da:6f: 15:0f:e6:1e:0e:e9:86:7c:0d:b7:54:25:70:cc:69:6f:74:06: 43:2e:cd:fd -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICF4EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA2NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU1NThEQTNGMTQ3NDA1 QTU0RUQ0OEJFRjE4RTAzMUVBQjI1QkMyMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQmL3uApsAzcaLr4ufUbYLfz5Eg9eNWy9neRBQc0sDR7YB3wGo y5nroq0SmBqpr59iXMqzFGXCLU/lRsmbqZRZleP3eoyjLzTwyBZOKB/MfMoE1D+E bAjDygoAo+QYajCzIU6+oqNqwD5+85f+GLV+XSyHdpUtc0W8akcGhPqM/mjbPZ0e 3J6dEU4g3bJgKYvQyjudcgwg5+o6lz5bopPHK/6FSQCF3H7v6cN3mTDcm4DmFzOh pAzkD780sjMfWr6nV+dCoDRDAKjuuS7XSO1E1kzxGqIVJrSJCs7q+DD++HlO/dgV gs74lMVSDSjADH64WFbqauHc4eIVkWbwoaKHAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUVVjaPxR0BaVO1IvvGOAx6rJbwh8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvVlZqYVB4UjBCYVZPMUl2dkdPQXg2 ckpid2g4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3HEmDAN BgkqhkiG9w0BAQsFAAOCAQEAvGMegT52ry8HIjcBLsQ7rSxRu/z3vM3VUc8cU0mo 0ggen8roeTLxEJP3e028U1YZUzxLJY0tBtvuKINUZfCD0758haGWxOYpd6aQnIAJ 8svtAfUNvtsuu3pCjxWo+eKDTRW8E/BCsI4lefpJld7kNkLgVt9bFoNObaOdRxpD Rw1Fis4ZFKU40njJTeEOzkLphYYt3EvT8bkTGXNQ2efaIyEFnMlJvZbr17iNLCp6 eTPph34dS4pPb3V7cm9HbL1DVmz5+DJqudMhpm3xJ6F+telwvVnYB4Nw7vbWQ9d1 DRq+FC2ldkBMdNpvFQ/mHg7phnwNt1QlcMxpb3QGQy7N/Q== -----END CERTIFICATE-----Generated at Sat Apr 5 23:14:30 2025 by rpki-client