$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/d6WH3lJgbz_GQMiDIvUxYIsLFIc.roa File: d6WH3lJgbz_GQMiDIvUxYIsLFIc.roa (raw, json) Hash identifier: KGJJoHaCo1X2PXOITjYMZKoviWkYHFUfa7zdyU7FbYw= Subject key identifier: 77:A5:87:DE:52:60:6F:3F:C6:40:C8:83:22:F5:31:60:8B:0B:14:87 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 17FB Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/d6WH3lJgbz_GQMiDIvUxYIsLFIc.roa Signing time: Mon 10 Feb 2025 14:07:28 +0000 ROA not before: Mon 10 Feb 2025 14:07:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 210.244.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 08:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6139 (0x17fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=77A587DE52606F3FC640C88322F531608B0B1487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6e:5f:91:ca:14:9e:39:50:70:95:bf:58:7b: dd:cf:52:a3:0c:24:96:8b:80:c9:a2:22:b7:49:3e: c2:2a:93:7c:d5:90:e6:f2:6c:24:3d:9a:90:5f:ca: c4:6e:39:3c:05:1b:da:99:0c:b7:bc:5c:88:04:f4: 65:e0:dc:e8:3e:2b:61:a3:ed:90:42:d9:8a:3e:ed: 0d:4c:54:00:3d:8e:f9:98:b8:00:06:41:83:1b:be: 47:ba:f2:e3:c4:d8:60:fb:ea:ff:9f:05:11:5a:30: ee:34:86:f6:5b:2b:28:3d:d5:36:37:cb:9c:eb:7a: d7:53:58:96:56:43:e8:86:c2:6b:ca:c6:dc:21:e0: b2:d6:12:a3:28:c3:df:a0:94:99:29:b6:aa:1e:8f: e6:5b:54:17:56:4f:29:68:3e:85:c9:f7:7e:00:75: 1d:7f:56:2f:6b:8a:cc:5b:2a:12:81:44:02:19:75: 31:9c:61:c5:9d:13:b2:59:ce:9a:6e:47:6d:9d:a1: 39:75:54:0e:2f:c4:cd:b6:6a:46:79:66:f1:37:79: 85:16:ef:99:c4:81:c6:e8:f4:74:5d:78:10:52:75: 48:fe:f6:f1:33:3f:50:cf:3e:4f:87:96:4d:a4:cd: 34:b8:60:d8:c3:ea:98:0b:da:3d:1f:ae:0d:01:20: cd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A5:87:DE:52:60:6F:3F:C6:40:C8:83:22:F5:31:60:8B:0B:14:87 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/d6WH3lJgbz_GQMiDIvUxYIsLFIc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.244.84.0/22 Signature Algorithm: sha256WithRSAEncryption a0:cf:54:4e:59:99:89:ec:78:53:2e:9c:4a:b7:63:64:6e:6d: e5:29:af:5f:30:70:e5:5c:89:73:a7:e0:04:21:0d:d4:d9:f8: 2b:ae:72:c3:7a:bb:f6:86:87:2d:49:8b:ee:aa:0f:d8:f4:fd: 2f:f3:d9:c4:ad:22:39:7a:62:38:fa:b3:66:63:d6:df:61:fb: 8f:09:a2:30:a8:76:41:e5:0f:01:5d:05:62:63:c2:9f:e2:45: b6:30:b6:6f:5b:97:98:08:7f:14:d6:1f:5f:81:3b:a5:66:ff: a7:e0:b2:72:9c:fb:23:49:64:95:e1:a7:2c:30:ae:35:97:35: e3:a6:8f:c6:be:91:20:73:c1:70:c0:90:ab:4a:4e:25:bf:42: 62:d3:bb:45:62:a0:f4:36:de:80:7a:57:7e:2a:2b:4f:c1:ea: d0:d0:15:d6:d8:50:ad:02:5f:6c:80:5d:43:fc:02:8d:48:0e: ea:77:12:f9:4a:cf:e2:3e:d1:3c:f9:74:ed:7f:eb:7e:bf:19: 70:6e:c2:05:47:f3:35:14:d6:57:6e:97:cc:8c:a2:c6:a2:b4: 16:0a:bd:93:85:f0:32:49:57:2a:23:f3:67:c2:a7:78:e8:d4: bb:70:0e:67:65:e7:12:11:a5:20:c0:78:9a:ba:5b:6a:9f:6d: eb:36:78:b3 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICF/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc3QTU4N0RFNTI2MDZG M0ZDNjQwQzg4MzIyRjUzMTYwOEIwQjE0ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVbl+RyhSeOVBwlb9Ye93PUqMMJJaLgMmiIrdJPsIqk3zVkOby bCQ9mpBfysRuOTwFG9qZDLe8XIgE9GXg3Og+K2Gj7ZBC2Yo+7Q1MVAA9jvmYuAAG QYMbvke68uPE2GD76v+fBRFaMO40hvZbKyg91TY3y5zretdTWJZWQ+iGwmvKxtwh 4LLWEqMow9+glJkptqoej+ZbVBdWTyloPoXJ934AdR1/Vi9risxbKhKBRAIZdTGc YcWdE7JZzppuR22doTl1VA4vxM22akZ5ZvE3eYUW75nEgcbo9HRdeBBSdUj+9vEz P1DPPk+Hlk2kzTS4YNjD6pgL2j0frg0BIM1nAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUd6WH3lJgbz/GQMiDIvUxYIsLFIcwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZDZXSDNsSmdiel9HUU1pREl2VXhZ SXNMRkljLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtL0VDAN BgkqhkiG9w0BAQsFAAOCAQEAoM9UTlmZiex4Uy6cSrdjZG5t5SmvXzBw5VyJc6fg BCEN1Nn4K65yw3q79oaHLUmL7qoP2PT9L/PZxK0iOXpiOPqzZmPW32H7jwmiMKh2 QeUPAV0FYmPCn+JFtjC2b1uXmAh/FNYfX4E7pWb/p+Cycpz7I0lkleGnLDCuNZc1 46aPxr6RIHPBcMCQq0pOJb9CYtO7RWKg9DbegHpXfiorT8Hq0NAV1thQrQJfbIBd Q/wCjUgO6ncS+UrP4j7RPPl07X/rfr8ZcG7CBUfzNRTWV26XzIyixqK0Fgq9k4Xw MklXKiPzZ8KneOjUu3AOZ2XnEhGlIMB4mrpbap9t6zZ4sw== -----END CERTIFICATE-----Generated at Mon Apr 7 08:07:31 2025 by rpki-client