$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/lU7BLIccfhndvqUAuXKeQjYAaR8.roa File: lU7BLIccfhndvqUAuXKeQjYAaR8.roa (raw, json) Hash identifier: nr2E0NSIfQbUNu1jnU4iwQ+uCAFEcWP2fAsWbChFhk8= Subject key identifier: 95:4E:C1:2C:87:1C:7E:19:DD:BE:A5:00:B9:72:9E:42:36:00:69:1F Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1875 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/lU7BLIccfhndvqUAuXKeQjYAaR8.roa Signing time: Mon 10 Feb 2025 14:07:58 +0000 ROA not before: Mon 10 Feb 2025 14:07:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131597 IP address blocks: 106.105.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6261 (0x1875) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=954EC12C871C7E19DDBEA500B9729E423600691F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e8:8e:63:9e:65:99:c5:61:eb:2e:22:7e:fb: 4d:21:79:ce:33:0f:8e:ec:78:72:26:8a:99:8f:7c: 8a:a2:d5:2e:55:03:07:47:3c:8e:ca:88:25:6f:45: 95:87:02:29:f0:b7:0b:9c:e3:d8:08:c5:44:4f:e0: 78:91:84:be:6d:92:48:81:71:6e:43:93:64:14:c5: 12:4f:40:52:81:13:2c:a3:b0:a4:49:1a:23:47:a8: 70:eb:f4:b8:3c:4c:a1:a1:8e:72:e6:8a:96:e1:50: 2f:ef:60:16:01:2d:61:bb:7b:0d:47:c6:f8:dd:bb: e5:9e:44:48:56:c6:14:7e:82:48:75:7b:cf:05:89: 45:0c:cc:eb:c7:76:0c:10:fb:12:af:b4:3b:75:1f: 36:a4:01:a1:2a:62:b4:bf:62:aa:f6:d4:c3:5b:8e: 80:72:03:e8:4b:b4:c8:59:4f:a9:39:3a:3b:91:5e: e1:55:16:f0:62:b7:d5:99:a5:b3:38:80:14:1b:8e: e9:dd:60:7f:c2:f4:eb:69:50:ff:46:20:99:77:6c: bf:48:bd:75:83:92:72:73:fd:26:7a:e3:dc:98:8b: 86:f0:3a:81:36:25:cb:71:54:ea:30:39:87:45:f5: 8a:61:d0:2d:7b:f1:e0:c8:a2:77:3e:2d:07:8d:9b: c3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4E:C1:2C:87:1C:7E:19:DD:BE:A5:00:B9:72:9E:42:36:00:69:1F X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/lU7BLIccfhndvqUAuXKeQjYAaR8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.232.0/21 Signature Algorithm: sha256WithRSAEncryption 2f:e6:a1:c6:25:ff:89:cf:16:c2:80:76:f0:71:4d:47:fb:93: 89:49:5d:c4:56:ae:f6:c8:fb:b4:96:c1:1d:0a:aa:6e:44:ac: eb:ed:bb:82:b2:60:a1:80:b2:00:3a:f9:ef:5f:0b:d2:22:ed: b1:be:56:d1:a8:68:da:29:56:39:9d:2c:aa:f9:78:47:bf:3f: 6d:4b:ac:b3:d3:1d:56:3c:aa:7a:86:34:f8:8a:f1:f3:83:a8: c5:21:d4:2a:7e:16:26:6f:ac:63:ed:7f:62:5a:ce:1e:38:a6: 41:c2:02:3f:d2:b4:b1:dd:00:32:ba:54:be:76:b6:25:ea:58: e9:7c:ed:cf:9f:2b:ae:37:8a:dc:17:4c:00:a3:f2:02:5a:c8: ac:5f:aa:c2:ac:8f:39:77:e3:89:9b:32:50:29:b4:be:5f:e7: fe:da:a3:a2:2c:15:c2:86:3b:88:61:48:df:6f:00:1f:a8:76: 7d:e3:5d:51:ae:75:3c:d6:3a:c1:39:90:bb:91:18:1c:c5:5e: 5e:aa:69:2b:29:9f:3f:c4:e7:2b:25:a2:d1:7e:38:46:06:45: 3f:9d:85:c1:5b:a2:8d:67:11:56:71:4e:23:99:c7:1e:92:40: 1c:50:23:61:e7:ab:c2:b2:00:3b:a3:b9:74:ec:40:b2:5f:30: af:cf:09:6a -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGHUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk1NEVDMTJDODcxQzdF MTlEREJFQTUwMEI5NzI5RTQyMzYwMDY5MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDl6I5jnmWZxWHrLiJ++00hec4zD47seHImipmPfIqi1S5VAwdH PI7KiCVvRZWHAinwtwuc49gIxURP4HiRhL5tkkiBcW5Dk2QUxRJPQFKBEyyjsKRJ GiNHqHDr9Lg8TKGhjnLmipbhUC/vYBYBLWG7ew1Hxvjdu+WeREhWxhR+gkh1e88F iUUMzOvHdgwQ+xKvtDt1HzakAaEqYrS/Yqr21MNbjoByA+hLtMhZT6k5OjuRXuFV FvBit9WZpbM4gBQbjundYH/C9OtpUP9GIJl3bL9IvXWDknJz/SZ649yYi4bwOoE2 JctxVOowOYdF9Yph0C178eDIonc+LQeNm8P1AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUlU7BLIccfhndvqUAuXKeQjYAaR8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbFU3QkxJY2NmaG5kdnFVQXVYS2VR allBYVI4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2pp6DAN BgkqhkiG9w0BAQsFAAOCAQEAL+ahxiX/ic8WwoB28HFNR/uTiUldxFau9sj7tJbB HQqqbkSs6+27grJgoYCyADr5718L0iLtsb5W0aho2ilWOZ0sqvl4R78/bUuss9Md VjyqeoY0+Irx84OoxSHUKn4WJm+sY+1/YlrOHjimQcICP9K0sd0AMrpUvna2JepY 6Xztz58rrjeK3BdMAKPyAlrIrF+qwqyPOXfjiZsyUCm0vl/n/tqjoiwVwoY7iGFI 328AH6h2feNdUa51PNY6wTmQu5EYHMVeXqppKymfP8TnKyWi0X44RgZFP52FwVui jWcRVnFOI5nHHpJAHFAjYeerwrIAO6O5dOxAsl8wr88Jag== -----END CERTIFICATE-----Generated at Mon Apr 7 15:16:36 2025 by rpki-client