$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/lIyhInUpanA6NSKR56m8MK5wThQ.roa File: lIyhInUpanA6NSKR56m8MK5wThQ.roa (raw, json) Hash identifier: 1r2nRqTQPRvNdAnGf2kIHJyvOX61YhEgwhKwyH0C2GQ= Subject key identifier: 94:8C:A1:22:75:29:6A:70:3A:35:22:91:E7:A9:BC:30:AE:70:4E:14 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1808 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/lIyhInUpanA6NSKR56m8MK5wThQ.roa Signing time: Mon 10 Feb 2025 14:07:31 +0000 ROA not before: Mon 10 Feb 2025 14:07:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 61.56.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 02:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6152 (0x1808) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=948CA12275296A703A352291E7A9BC30AE704E14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:71:9f:a5:05:3a:ae:89:fe:1d:78:cb:5b:3d: 99:68:cf:14:b9:82:bb:fa:fc:26:95:9c:3f:9a:a8: 52:13:5b:6a:35:40:51:84:77:5f:4d:53:1d:c9:e8: fc:3f:39:7f:bc:b3:b6:11:17:13:85:9d:7a:a6:68: 14:78:90:46:91:ff:44:8b:6d:81:b0:8b:35:73:d5: 99:4a:bd:b6:d5:22:8a:1f:bb:88:52:43:ac:a2:ed: 50:d5:15:50:8a:a5:b3:9d:11:f4:f3:41:9d:01:73: 51:16:a8:e0:62:cc:f0:ec:06:05:9a:ff:bc:23:6c: 8d:d7:84:d6:7f:4a:a3:de:82:e9:18:0f:2e:82:d8: 91:8f:cd:c4:85:7b:9f:83:96:23:94:a2:32:db:26: b4:5e:5c:e5:77:16:4e:5d:03:45:5e:b1:08:61:a5: 7a:83:01:82:03:2b:cb:8b:ef:8d:33:2f:5d:9e:c4: 3e:8d:10:9c:02:e7:e0:8c:17:60:7c:96:5f:ee:14: 2c:68:d4:74:25:a9:25:28:4c:f6:58:e7:ae:e0:4a: 12:f0:e5:96:c2:db:c3:06:6a:b6:c6:74:b4:fc:30: 99:9d:01:92:f9:f3:3e:2e:d4:5d:1f:cb:5b:00:c9: 9c:05:00:80:02:34:4d:cf:86:15:b5:b9:5c:95:26: f2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8C:A1:22:75:29:6A:70:3A:35:22:91:E7:A9:BC:30:AE:70:4E:14 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/lIyhInUpanA6NSKR56m8MK5wThQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.224.0/19 Signature Algorithm: sha256WithRSAEncryption c1:c3:03:ae:26:f9:82:75:ad:69:e3:86:ee:3e:bd:d3:ee:4e: 12:98:a8:76:c3:39:6a:86:06:8f:35:93:80:3d:49:ce:73:fa: f2:17:58:02:60:88:26:6f:6d:ab:fe:6b:12:11:af:e1:df:f5: 10:32:fd:3f:0a:21:ce:f9:94:37:24:7e:70:a2:41:8c:bc:42: 0b:4b:8f:a2:99:0d:bd:c1:a6:54:76:65:84:a6:01:08:e5:c4: 8b:c1:dc:6f:09:a1:a9:aa:a3:ea:72:e5:00:c1:eb:01:5e:5d: aa:32:65:35:86:0a:9b:37:18:90:e5:11:ea:78:fc:34:75:79: 27:94:4d:a1:73:f4:c3:bb:39:50:09:2a:da:17:cc:91:2c:be: 26:d2:f7:c2:4b:08:e4:23:2f:9e:23:9a:ab:fd:5e:ed:94:12: 17:7e:0f:72:3d:15:ed:98:94:8b:27:3c:f1:44:0d:41:52:8b: c0:2f:be:67:3e:a4:4b:2c:d9:29:53:f6:47:41:59:ea:77:91: c3:87:2e:19:c3:9e:b4:65:6b:aa:85:24:f3:29:ef:53:f0:42: e5:6d:a0:9b:4e:ac:dc:ec:95:fd:be:62:8e:01:ad:0d:84:59: 66:b0:62:44:54:77:56:6d:03:c5:87:47:c0:9f:81:11:54:4e: aa:d4:c4:77 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGAgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk0OENBMTIyNzUyOTZB NzAzQTM1MjI5MUU3QTlCQzMwQUU3MDRFMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHcZ+lBTquif4deMtbPZlozxS5grv6/CaVnD+aqFITW2o1QFGE d19NUx3J6Pw/OX+8s7YRFxOFnXqmaBR4kEaR/0SLbYGwizVz1ZlKvbbVIoofu4hS Q6yi7VDVFVCKpbOdEfTzQZ0Bc1EWqOBizPDsBgWa/7wjbI3XhNZ/SqPegukYDy6C 2JGPzcSFe5+DliOUojLbJrReXOV3Fk5dA0VesQhhpXqDAYIDK8uL740zL12exD6N EJwC5+CMF2B8ll/uFCxo1HQlqSUoTPZY567gShLw5ZbC28MGarbGdLT8MJmdAZL5 8z4u1F0fy1sAyZwFAIACNE3PhhW1uVyVJvIdAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUlIyhInUpanA6NSKR56m8MK5wThQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbEl5aEluVXBhbkE2TlNLUjU2bThN SzV3VGhRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBT044DAN BgkqhkiG9w0BAQsFAAOCAQEAwcMDrib5gnWtaeOG7j690+5OEpiodsM5aoYGjzWT gD1JznP68hdYAmCIJm9tq/5rEhGv4d/1EDL9PwohzvmUNyR+cKJBjLxCC0uPopkN vcGmVHZlhKYBCOXEi8Hcbwmhqaqj6nLlAMHrAV5dqjJlNYYKmzcYkOUR6nj8NHV5 J5RNoXP0w7s5UAkq2hfMkSy+JtL3wksI5CMvniOaq/1e7ZQSF34Pcj0V7ZiUiyc8 8UQNQVKLwC++Zz6kSyzZKVP2R0FZ6neRw4cuGcOetGVrqoUk8ynvU/BC5W2gm06s 3OyV/b5ijgGtDYRZZrBiRFR3Vm0DxYdHwJ+BEVROqtTEdw== -----END CERTIFICATE-----Generated at Sat Apr 5 23:14:24 2025 by rpki-client