$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/njcIaI7GjrNHpQWK8wBscCMHYUE.roa File: njcIaI7GjrNHpQWK8wBscCMHYUE.roa (raw, json) Hash identifier: mgSOfS6EeN37PMS2WQRCBsyenoPjMtzIUPpVi6vXgJs= Subject key identifier: 9E:37:08:68:8E:C6:8E:B3:47:A5:05:8A:F3:00:6C:70:23:07:61:41 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 181A Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/njcIaI7GjrNHpQWK8wBscCMHYUE.roa Signing time: Mon 10 Feb 2025 14:07:35 +0000 ROA not before: Mon 10 Feb 2025 14:07:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 175.183.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 02:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6170 (0x181a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9E3708688EC68EB347A5058AF3006C7023076141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3c:20:1d:bb:8b:94:c2:7b:66:50:82:1e:06: 06:aa:10:19:1c:97:21:f5:5f:22:4b:09:34:b2:c7: 84:5e:cb:06:f4:a9:ac:47:17:56:b4:4d:90:1d:76: 79:ac:cc:67:1d:c5:8b:15:d9:1c:56:6f:2d:30:71: 7c:22:9a:9f:bd:b5:40:24:a1:3b:5d:8b:fb:31:93: 52:8c:b1:84:d1:5a:8b:d7:b8:1f:fc:67:99:e6:5e: 1f:4a:ea:07:c6:72:f3:a5:87:a4:9f:23:54:6c:28: 58:22:39:cf:4f:f5:fd:36:4b:82:14:b4:7c:20:14: a7:3d:d1:4f:10:88:b6:8a:ab:84:bb:b1:b2:44:03: 87:82:29:22:b1:b9:23:df:24:e7:4b:1a:14:5e:f8: 1a:29:2a:97:c2:71:57:08:6d:70:08:22:3e:55:93: 67:d5:af:ac:0f:00:83:f2:b7:54:41:b7:4c:c2:cc: e5:0c:94:46:79:e1:7d:71:72:77:08:e4:56:ac:a7: 98:5f:31:b0:57:67:36:8e:bf:d6:3a:9f:3c:5e:31: 2c:6a:fa:5a:99:b9:e2:73:46:8b:16:60:82:16:d0: 0f:43:58:a8:78:07:91:95:61:a4:47:1d:80:50:26: d8:3a:e0:8d:62:48:27:0f:96:7c:a5:00:ab:e4:41: 36:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:37:08:68:8E:C6:8E:B3:47:A5:05:8A:F3:00:6C:70:23:07:61:41 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/njcIaI7GjrNHpQWK8wBscCMHYUE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.183.138.0/23 Signature Algorithm: sha256WithRSAEncryption a8:11:fa:66:98:30:e5:71:55:87:04:08:74:7a:3d:95:13:f5: ea:52:10:f7:63:eb:3e:1f:bf:13:f5:48:99:e0:85:9e:dd:4f: f1:78:33:cf:76:59:ab:f6:75:41:b9:47:49:60:fe:64:76:2d: 59:d5:e9:cf:22:ef:06:f7:94:2a:82:ff:a5:61:2a:35:71:ab: 1f:e2:d7:38:c2:83:ad:6e:0e:d1:b2:a4:c6:6c:83:e1:b7:a7: e5:60:cf:a8:38:03:3e:07:5a:d1:38:03:ea:38:4d:ab:bc:d8: a0:d7:5b:7c:d7:c8:ec:01:2d:24:fb:04:07:db:a4:8d:96:37: d9:b0:17:83:af:01:81:4e:32:87:e6:14:ad:f2:02:85:85:48: ff:d0:90:bf:ca:bc:81:da:f8:12:e7:98:39:44:d0:d3:82:2b: 73:81:29:8a:0b:e6:86:8b:6b:86:88:e2:74:1c:f9:04:1c:1f: 57:5f:7f:4a:ae:39:39:41:87:da:93:91:11:d2:b5:83:30:a1: 19:3a:17:87:60:3b:ab:97:d4:6c:fe:02:06:21:fe:03:65:5a: bf:ad:b1:90:e0:b1:a8:1c:10:ff:34:d2:e4:7a:94:29:b5:47: 0b:83:d1:dd:0c:87:73:50:70:4b:db:05:8d:0a:41:e2:14:90: 01:f8:b9:d7 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGBowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlFMzcwODY4OEVDNjhF QjM0N0E1MDU4QUYzMDA2QzcwMjMwNzYxNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzPCAdu4uUwntmUIIeBgaqEBkclyH1XyJLCTSyx4Reywb0qaxH F1a0TZAddnmszGcdxYsV2RxWby0wcXwimp+9tUAkoTtdi/sxk1KMsYTRWovXuB/8 Z5nmXh9K6gfGcvOlh6SfI1RsKFgiOc9P9f02S4IUtHwgFKc90U8QiLaKq4S7sbJE A4eCKSKxuSPfJOdLGhRe+BopKpfCcVcIbXAIIj5Vk2fVr6wPAIPyt1RBt0zCzOUM lEZ54X1xcncI5Fasp5hfMbBXZzaOv9Y6nzxeMSxq+lqZueJzRosWYIIW0A9DWKh4 B5GVYaRHHYBQJtg64I1iSCcPlnylAKvkQTZDAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUnjcIaI7GjrNHpQWK8wBscCMHYUEwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbmpjSWFJN0dqck5IcFFXSzh3QnNj Q01IWVVFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAa+3ijAN BgkqhkiG9w0BAQsFAAOCAQEAqBH6Zpgw5XFVhwQIdHo9lRP16lIQ92PrPh+/E/VI meCFnt1P8Xgzz3ZZq/Z1QblHSWD+ZHYtWdXpzyLvBveUKoL/pWEqNXGrH+LXOMKD rW4O0bKkxmyD4ben5WDPqDgDPgda0TgD6jhNq7zYoNdbfNfI7AEtJPsEB9ukjZY3 2bAXg68BgU4yh+YUrfIChYVI/9CQv8q8gdr4EueYOUTQ04Irc4Epigvmhotrhoji dBz5BBwfV19/Sq45OUGH2pOREdK1gzChGToXh2A7q5fUbP4CBiH+A2Vav62xkOCx qBwQ/zTS5HqUKbVHC4PR3QyHc1BwS9sFjQpB4hSQAfi51w== -----END CERTIFICATE-----Generated at Sat Apr 5 23:14:25 2025 by rpki-client