$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/aUFL1aP7lDHbP8yWNtbey_Kr2pU.roa File: aUFL1aP7lDHbP8yWNtbey_Kr2pU.roa (raw, json) Hash identifier: f+2Kryywv8+aLSZ7vCxxaZttBrPbut7n5gAX2f1MZQk= Subject key identifier: 69:41:4B:D5:A3:FB:94:31:DB:3F:CC:96:36:D6:DE:CB:F2:AB:DA:95 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 183F Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/aUFL1aP7lDHbP8yWNtbey_Kr2pU.roa Signing time: Mon 10 Feb 2025 14:07:43 +0000 ROA not before: Mon 10 Feb 2025 14:07:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131602 IP address blocks: 123.205.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 08:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6207 (0x183f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=69414BD5A3FB9431DB3FCC9636D6DECBF2ABDA95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f5:2e:90:8a:3d:d5:db:98:f5:33:13:6c:02: f0:8b:02:fe:25:c6:69:a7:42:24:51:8d:54:a7:b5: ee:98:e9:87:6d:cf:fa:ae:ef:c9:19:ef:f2:5f:20: d8:9c:ca:49:33:17:2a:68:f7:10:6a:04:a6:06:f6: 7d:ff:90:da:9f:5e:42:07:52:67:eb:4c:78:70:6e: 20:23:9b:c7:73:e1:29:79:e7:32:bb:ed:b2:41:3b: 8a:08:09:c9:61:70:87:91:df:c0:03:49:53:c8:c5: 15:d3:4b:ce:9e:47:9f:4b:12:e8:d7:bb:5f:dc:f4: 3b:07:8a:99:40:bc:e4:ba:96:d3:11:f1:dd:9d:bf: 1f:28:d7:74:2c:df:88:25:17:72:7b:b3:bf:48:3f: 53:12:2c:1a:f0:d3:a4:55:6a:73:08:56:36:a8:82: 0e:a6:85:8d:22:62:e8:f0:f4:78:c6:b9:bf:a3:a0: 0d:65:d8:d7:44:cd:a7:05:37:72:4e:63:6d:4a:b5: e6:32:01:e7:ff:9e:ea:b4:89:16:cc:0a:69:78:43: 42:8c:c5:2d:45:b3:b4:b5:db:6a:f5:cd:9d:76:bb: b4:58:42:47:bd:48:e1:c7:54:b1:52:fa:96:02:d1: 4f:0f:f1:2f:93:fe:6f:4c:14:21:04:fb:2b:79:92: 97:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:41:4B:D5:A3:FB:94:31:DB:3F:CC:96:36:D6:DE:CB:F2:AB:DA:95 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/aUFL1aP7lDHbP8yWNtbey_Kr2pU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.205.160.0/20 Signature Algorithm: sha256WithRSAEncryption 69:c5:6a:d1:4a:a3:06:16:7c:7a:9d:57:7c:5a:77:8d:a3:3c: 99:45:2d:0f:ec:5f:2e:85:83:85:65:52:83:cc:7f:95:06:c8: 90:b8:9f:4e:9c:88:84:98:11:70:6e:be:29:10:a5:eb:53:7d: 73:f5:08:72:5c:71:4a:b7:16:9c:b0:41:40:6f:ad:71:47:25: 9b:73:65:09:db:ac:54:7e:2c:a5:23:c4:fc:81:bd:4f:e9:5e: d2:c1:08:37:7b:40:c3:74:4e:3b:b5:4a:8d:5d:2c:60:3f:ee: eb:8b:d6:90:19:e6:44:89:ae:77:71:ac:70:f7:d6:d4:f0:49: 8b:d8:74:b1:11:c9:c1:6e:1e:cc:f2:84:16:4f:85:b7:db:c3: d8:98:fc:d6:47:22:8e:8c:3c:f7:e5:ad:17:31:de:d0:97:b8: 15:06:7c:56:37:b8:e2:86:11:c1:6c:7b:da:94:15:c6:eb:26: a6:81:cd:64:07:09:82:15:eb:ac:9f:a3:27:30:11:7b:f3:f0: 69:2a:64:9d:7b:82:6d:49:7b:6d:ac:53:75:b3:32:41:24:6a: 03:cd:2f:22:28:20:ce:68:75:6d:0c:01:54:0d:e8:ea:f0:c7: 74:50:f3:4c:9e:8b:b9:bd:0e:ce:ed:bd:4a:c1:25:06:6c:69: cd:d0:bb:c4 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGD8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY5NDE0QkQ1QTNGQjk0 MzFEQjNGQ0M5NjM2RDZERUNCRjJBQkRBOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCf9S6Qij3V25j1MxNsAvCLAv4lxmmnQiRRjVSnte6Y6Ydtz/qu 78kZ7/JfINicykkzFypo9xBqBKYG9n3/kNqfXkIHUmfrTHhwbiAjm8dz4Sl55zK7 7bJBO4oICclhcIeR38ADSVPIxRXTS86eR59LEujXu1/c9DsHiplAvOS6ltMR8d2d vx8o13Qs34glF3J7s79IP1MSLBrw06RVanMIVjaogg6mhY0iYujw9HjGub+joA1l 2NdEzacFN3JOY21KteYyAef/nuq0iRbMCml4Q0KMxS1Fs7S122r1zZ12u7RYQke9 SOHHVLFS+pYC0U8P8S+T/m9MFCEE+yt5kpenAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUaUFL1aP7lDHbP8yWNtbey/Kr2pUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvYVVGTDFhUDdsREhiUDh5V050YmV5 X0tyMnBVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHvNoDAN BgkqhkiG9w0BAQsFAAOCAQEAacVq0UqjBhZ8ep1XfFp3jaM8mUUtD+xfLoWDhWVS g8x/lQbIkLifTpyIhJgRcG6+KRCl61N9c/UIclxxSrcWnLBBQG+tcUclm3NlCdus VH4spSPE/IG9T+le0sEIN3tAw3ROO7VKjV0sYD/u64vWkBnmRImud3GscPfW1PBJ i9h0sRHJwW4ezPKEFk+Ft9vD2Jj81kcijow89+WtFzHe0Je4FQZ8Vje44oYRwWx7 2pQVxusmpoHNZAcJghXrrJ+jJzARe/PwaSpknXuCbUl7baxTdbMyQSRqA80vIigg zmh1bQwBVA3o6vDHdFDzTJ6Lub0Ozu29SsElBmxpzdC7xA== -----END CERTIFICATE-----Generated at Mon Apr 7 08:07:42 2025 by rpki-client