$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/rWl6NotwtLQOZWCiib3bQHLT8YU.roa File: rWl6NotwtLQOZWCiib3bQHLT8YU.roa (raw, json) Hash identifier: qpSXwJy7qdVnk16NTYf9W1UlD4df/FkZXTJc/x32X2Q= Subject key identifier: AD:69:7A:36:8B:70:B4:B4:0E:65:60:A2:89:BD:DB:40:72:D3:F1:85 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1789 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/rWl6NotwtLQOZWCiib3bQHLT8YU.roa Signing time: Mon 10 Feb 2025 14:07:00 +0000 ROA not before: Mon 10 Feb 2025 14:07:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18049 IP address blocks: 175.183.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 08:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6025 (0x1789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:00 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AD697A368B70B4B40E6560A289BDDB4072D3F185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:84:c1:df:94:0c:e6:f4:82:44:f2:5c:13: 54:ab:05:40:8a:c0:ea:34:86:b1:24:97:a0:cd:35: ca:e0:59:e9:67:b6:ce:ac:f6:7a:b2:7c:38:d5:3b: bf:de:e7:fc:ac:4e:21:8e:8f:a6:08:77:af:16:38: 93:a2:0d:6d:0d:11:3f:70:58:70:0d:70:ba:42:2b: 4e:87:67:f2:58:c3:bf:ba:6a:0e:f5:3b:fc:b2:64: a5:6a:cd:e7:05:f4:09:4a:72:44:2a:8d:3e:dc:c4: 54:48:57:90:49:f1:ba:06:0f:fa:e5:c9:56:93:b3: 26:fe:8d:9a:e1:09:75:6c:e1:f7:8d:49:f1:a5:06: d9:ea:c3:a3:88:8e:a0:e2:fe:60:10:4f:7c:62:ac: eb:7b:f9:79:d0:e5:23:f2:e2:9b:47:f8:3e:54:03: ac:9d:f5:d3:f8:46:82:9f:0f:5a:32:1c:01:45:99: 0f:46:de:8e:9c:76:e9:4e:24:48:c9:a2:22:d1:5a: 9d:5f:53:9e:52:00:1f:ff:8f:d7:d9:f6:66:2a:26: 81:da:d7:ad:97:14:da:46:d5:16:63:bb:1a:98:63: 8d:e6:42:f6:42:bc:0d:8b:9b:68:00:48:e1:8d:7e: 90:b2:36:70:4c:96:fb:f4:48:fe:0b:78:18:7b:68: 3d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:69:7A:36:8B:70:B4:B4:0E:65:60:A2:89:BD:DB:40:72:D3:F1:85 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/rWl6NotwtLQOZWCiib3bQHLT8YU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.183.80.0/20 Signature Algorithm: sha256WithRSAEncryption c0:53:ec:35:e0:84:34:44:d2:86:b2:40:25:31:a8:22:d2:95: 48:04:37:61:1e:5e:97:ec:88:87:cf:cb:43:4f:32:a1:ea:31: 00:98:bb:27:16:32:9b:2f:86:2e:65:b5:dd:2f:93:52:ed:85: 42:d0:da:92:c3:43:22:b9:e4:76:8c:f2:f7:05:d9:3c:82:e2: 80:07:c0:59:92:98:02:b9:b8:3f:35:7d:79:20:50:db:24:08: 3d:10:48:6e:f0:6e:33:76:ca:6c:34:27:6d:f9:7a:92:15:ad: 7c:af:56:a6:4d:ac:85:93:b4:15:a0:23:80:65:22:e6:1c:7b: 47:4c:80:16:33:b7:1f:79:15:97:64:f7:46:18:09:32:4f:98: 5b:67:34:86:16:2f:89:09:8b:c3:4b:ad:85:8a:63:04:7d:48: 5f:c4:44:81:ea:ca:0e:cd:20:89:d8:7e:b5:b0:55:12:7a:5c: c6:23:33:42:86:38:1a:96:48:2f:43:46:02:41:8f:6e:28:4d: 77:85:01:20:d4:3b:24:29:26:60:34:5e:9c:20:32:03:f4:6a: 0d:e7:bb:3b:38:2c:c3:92:19:ee:00:53:51:96:6e:ff:41:f2: 02:d7:ae:1b:9c:7a:85:bd:51:a7:1f:03:80:86:db:a0:3b:15: 1e:44:e1:f3 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICF4kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFENjk3QTM2OEI3MEI0 QjQwRTY1NjBBMjg5QkREQjQwNzJEM0YxODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzxYTB35QM5vSCRPJcE1SrBUCKwOo0hrEkl6DNNcrgWelnts6s 9nqyfDjVO7/e5/ysTiGOj6YId68WOJOiDW0NET9wWHANcLpCK06HZ/JYw7+6ag71 O/yyZKVqzecF9AlKckQqjT7cxFRIV5BJ8boGD/rlyVaTsyb+jZrhCXVs4feNSfGl Btnqw6OIjqDi/mAQT3xirOt7+XnQ5SPy4ptH+D5UA6yd9dP4RoKfD1oyHAFFmQ9G 3o6cdulOJEjJoiLRWp1fU55SAB//j9fZ9mYqJoHa162XFNpG1RZjuxqYY43mQvZC vA2Lm2gASOGNfpCyNnBMlvv0SP4LeBh7aD0DAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUrWl6NotwtLQOZWCiib3bQHLT8YUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvcldsNk5vdHd0TFFPWldDaWliM2JR SExUOFlVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBK+3UDAN BgkqhkiG9w0BAQsFAAOCAQEAwFPsNeCENETShrJAJTGoItKVSAQ3YR5el+yIh8/L Q08yoeoxAJi7JxYymy+GLmW13S+TUu2FQtDaksNDIrnkdozy9wXZPILigAfAWZKY Arm4PzV9eSBQ2yQIPRBIbvBuM3bKbDQnbfl6khWtfK9Wpk2shZO0FaAjgGUi5hx7 R0yAFjO3H3kVl2T3RhgJMk+YW2c0hhYviQmLw0uthYpjBH1IX8REgerKDs0gidh+ tbBVEnpcxiMzQoY4GpZIL0NGAkGPbihNd4UBINQ7JCkmYDRenCAyA/RqDee7Ozgs w5IZ7gBTUZZu/0HyAteuG5x6hb1Rpx8DgIbboDsVHkTh8w== -----END CERTIFICATE-----Generated at Mon Apr 7 07:59:34 2025 by rpki-client