$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/bq5hEWsIe7kL_LpZSHP36Yj3fmc.roa File: bq5hEWsIe7kL_LpZSHP36Yj3fmc.roa (raw, json) Hash identifier: JGhxaXBTjejoYnuFS5zUc1+dFUKO0xh+hLy9OlvgnSg= Subject key identifier: 6E:AE:61:11:6B:08:7B:B9:0B:FC:BA:59:48:73:F7:E9:88:F7:7E:67 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 17BB Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bq5hEWsIe7kL_LpZSHP36Yj3fmc.roa Signing time: Mon 10 Feb 2025 14:07:12 +0000 ROA not before: Mon 10 Feb 2025 14:07:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 113.196.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 02:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6075 (0x17bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:12 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6EAE61116B087BB90BFCBA594873F7E988F77E67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ea:39:be:e4:ff:fe:a4:82:c8:a5:79:16:7c: 81:87:b1:7f:1a:f3:1e:29:2d:83:b3:19:64:e3:bb: 6a:f6:90:02:a6:bd:07:a2:75:18:a6:82:50:63:71: a9:f0:e5:d4:2a:6d:4c:85:b6:f3:c8:11:87:d2:18: db:72:9b:4e:23:e0:86:ba:ed:0c:d7:82:ea:db:28: f6:0b:d5:37:5a:49:0f:35:ef:bb:ba:3c:b9:fa:03: 02:33:d3:7a:1f:ac:09:7c:59:5f:af:25:d6:37:73: 14:b6:a0:21:54:21:94:5b:d1:35:d3:9f:6c:cf:f9: c6:ee:81:89:80:ee:79:73:91:7c:5e:fb:42:ce:20: 10:74:1d:77:e9:53:bf:b8:94:87:5c:04:51:ad:2b: ff:23:b9:0c:53:19:29:71:bc:2d:3f:8f:75:c6:d5: 9b:ab:96:32:27:b8:9a:6a:d7:11:b3:fb:eb:23:9c: 76:be:0f:c9:50:5d:b6:28:64:dd:26:c6:3b:16:87: 48:20:da:cc:63:1c:e5:c0:d4:cb:be:cd:c6:79:f5: cf:7b:a3:4a:c1:94:6b:ae:d4:fc:7b:76:79:f0:4e: 23:72:19:9e:01:16:00:46:04:62:f4:04:78:c8:57: 02:98:63:20:4b:7e:37:72:6a:06:d8:bd:c7:10:1a: 0f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AE:61:11:6B:08:7B:B9:0B:FC:BA:59:48:73:F7:E9:88:F7:7E:67 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bq5hEWsIe7kL_LpZSHP36Yj3fmc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.196.128.0/17 Signature Algorithm: sha256WithRSAEncryption 47:f9:ab:2f:eb:c7:d0:c9:78:06:93:13:34:86:a6:b8:2b:cb: dd:2f:0a:e3:e3:e7:f8:84:e9:f7:45:d0:11:33:50:1f:56:81: f9:fb:31:b0:dc:e5:71:42:30:11:7f:34:af:04:13:67:d7:71: 51:84:73:32:60:91:54:23:14:03:b1:cd:8b:ab:1c:73:be:2c: 38:aa:ce:5b:1a:78:c1:e2:f7:cd:6d:73:8e:b1:ed:ca:d3:59: 6b:d4:f8:af:fa:71:41:e0:a1:7a:7d:f8:01:84:b2:63:5a:c9: 3e:88:02:82:00:df:39:13:39:7d:b2:df:c7:f7:87:e0:41:11: 1b:f2:c6:85:15:3c:de:72:53:66:65:a6:3d:e7:db:7b:aa:e5: 48:f1:4b:da:39:02:4e:55:93:c2:a5:34:f9:cc:3d:08:01:82: 0c:59:44:0a:7a:ff:b0:e9:96:d6:6d:1b:2d:0e:40:94:a1:2f: 40:7b:33:19:80:83:f6:42:74:a4:bc:06:fe:36:59:7e:98:d6: 84:16:57:5f:85:f6:2a:23:da:df:0f:1b:03:c6:71:24:59:31: eb:ee:5d:a4:02:6d:bc:a0:94:38:6b:35:a7:13:b6:d0:75:bd: 59:d7:21:ae:46:4d:e2:a9:86:c5:f8:5d:75:2b:35:78:60:b7: 8e:23:aa:de -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICF7swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZFQUU2MTExNkIwODdC QjkwQkZDQkE1OTQ4NzNGN0U5ODhGNzdFNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDO6jm+5P/+pILIpXkWfIGHsX8a8x4pLYOzGWTju2r2kAKmvQei dRimglBjcanw5dQqbUyFtvPIEYfSGNtym04j4Ia67QzXgurbKPYL1TdaSQ8177u6 PLn6AwIz03ofrAl8WV+vJdY3cxS2oCFUIZRb0TXTn2zP+cbugYmA7nlzkXxe+0LO IBB0HXfpU7+4lIdcBFGtK/8juQxTGSlxvC0/j3XG1ZurljInuJpq1xGz++sjnHa+ D8lQXbYoZN0mxjsWh0gg2sxjHOXA1Mu+zcZ59c97o0rBlGuu1Px7dnnwTiNyGZ4B FgBGBGL0BHjIVwKYYyBLfjdyagbYvccQGg8NAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUbq5hEWsIe7kL/LpZSHP36Yj3fmcwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvYnE1aEVXc0llN2tMX0xwWlNIUDM2 WWozZm1jLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB3HEgDAN BgkqhkiG9w0BAQsFAAOCAQEAR/mrL+vH0Ml4BpMTNIamuCvL3S8K4+Pn+ITp90XQ ETNQH1aB+fsxsNzlcUIwEX80rwQTZ9dxUYRzMmCRVCMUA7HNi6scc74sOKrOWxp4 weL3zW1zjrHtytNZa9T4r/pxQeChen34AYSyY1rJPogCggDfORM5fbLfx/eH4EER G/LGhRU83nJTZmWmPefbe6rlSPFL2jkCTlWTwqU0+cw9CAGCDFlECnr/sOmW1m0b LQ5AlKEvQHszGYCD9kJ0pLwG/jZZfpjWhBZXX4X2KiPa3w8bA8ZxJFkx6+5dpAJt vKCUOGs1pxO20HW9WdchrkZN4qmGxfhddSs1eGC3jiOq3g== -----END CERTIFICATE-----Generated at Sat Apr 5 23:14:25 2025 by rpki-client