$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/sslHKU-uS0tQeIwSyd-QvAuW8Fc.roa File: sslHKU-uS0tQeIwSyd-QvAuW8Fc.roa (raw, json) Hash identifier: DLaluWLeDXgVpXdpYFvNk3z/2sVn0NmWrO4tw3Szx9w= Subject key identifier: B2:C9:47:29:4F:AE:4B:4B:50:78:8C:12:C9:DF:90:BC:0B:96:F0:57 Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 0F62 Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sslHKU-uS0tQeIwSyd-QvAuW8Fc.roa Signing time: Mon 10 Feb 2025 14:08:01 +0000 ROA not before: Mon 10 Feb 2025 14:08:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 192.72.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 21:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3938 (0xf62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Feb 10 14:08:01 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B2C947294FAE4B4B50788C12C9DF90BC0B96F057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5c:7f:85:68:96:ab:83:0e:c4:8c:d8:71:64: 47:9d:5f:5c:17:49:4e:18:77:a4:b1:42:bf:8f:0a: 43:33:39:ee:82:a9:6d:2c:7c:a1:07:e2:dc:ee:6a: 45:32:2e:e3:fe:5d:b3:bb:76:9d:fc:80:cc:dc:b4: a4:07:45:f5:74:be:47:62:95:ac:14:38:15:e8:14: 19:81:04:49:29:be:1f:7d:25:d4:66:a1:3d:d3:30: a2:49:f0:e3:b4:e2:03:f8:db:cf:52:91:58:bd:6c: 84:e4:40:24:93:16:92:78:22:84:40:8c:b8:a4:8b: e3:31:9d:c5:82:ed:28:04:56:e6:51:03:7d:d7:75: 60:13:77:29:97:52:95:50:d8:88:e0:e1:13:cb:54: 75:63:b2:70:9e:f2:49:a3:8f:60:0d:d6:45:89:04: 94:28:b6:ec:bd:e3:2e:a0:7c:68:fc:44:1a:a0:47: 34:8e:9e:d1:b4:8c:c2:8e:fc:61:c8:38:54:52:4d: 5e:2e:a8:39:ce:db:ab:9e:7a:02:87:31:f0:c8:e0: d2:31:b7:f9:f0:fc:62:39:bb:f8:03:e5:a2:1f:55: 8b:97:f9:bb:ae:7b:90:ec:8a:6d:74:a9:ab:d1:1f: 4b:cd:89:f7:1b:0f:d6:9b:76:9c:c8:ac:55:82:bf: 06:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C9:47:29:4F:AE:4B:4B:50:78:8C:12:C9:DF:90:BC:0B:96:F0:57 X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sslHKU-uS0tQeIwSyd-QvAuW8Fc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.16.0/20 Signature Algorithm: sha256WithRSAEncryption 47:54:dd:62:01:c6:24:c5:e1:8e:25:be:9f:8b:ab:3a:3f:a1: 64:9c:38:48:d2:71:40:5b:62:9e:51:6b:ad:34:e0:3a:bc:4e: ee:99:45:7f:86:f4:f8:1c:a8:bc:b2:39:88:45:51:7e:22:58: d9:06:68:1d:5e:6b:49:08:1c:6e:8a:17:5b:ef:20:a4:9f:04: b1:7b:a1:b9:2e:64:5e:c9:c1:f8:51:f3:c9:7b:58:65:68:a1: 99:f9:5c:61:b8:e5:40:5f:7d:8c:71:00:f8:49:3c:3a:35:4f: 08:5b:e1:74:05:48:dc:51:17:2f:38:01:a7:2c:d2:f5:f4:6b: 14:0f:ad:f8:2b:f2:16:5e:7b:d1:d8:dc:1a:c7:bd:d0:e4:03: c5:56:99:f8:eb:44:c0:03:d6:94:4d:1a:b5:a5:cf:e1:6d:41: 0d:47:84:27:b9:5d:d0:28:5c:0c:1d:00:be:f7:0a:c0:1d:5e: ca:df:85:81:30:77:a5:a0:ec:92:81:57:33:09:a1:08:4d:a3: d8:3c:4c:66:39:37:7f:a1:de:36:b0:63:0d:3f:09:e8:af:74: bb:fb:c4:8d:55:2c:71:99:f9:f5:ce:fc:e7:4d:0c:cc:7a:af: 64:e8:99:fe:62:43:86:8b:b7:f3:3e:75:f8:ea:04:bc:a2:4c: a0:22:c6:fc -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD2IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNTAyMTAx NDA4MDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIyQzk0NzI5NEZBRTRC NEI1MDc4OEMxMkM5REY5MEJDMEI5NkYwNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtXH+FaJargw7EjNhxZEedX1wXSU4Yd6SxQr+PCkMzOe6CqW0s fKEH4tzuakUyLuP+XbO7dp38gMzctKQHRfV0vkdilawUOBXoFBmBBEkpvh99JdRm oT3TMKJJ8OO04gP4289SkVi9bITkQCSTFpJ4IoRAjLiki+MxncWC7SgEVuZRA33X dWATdymXUpVQ2Ijg4RPLVHVjsnCe8kmjj2AN1kWJBJQotuy94y6gfGj8RBqgRzSO ntG0jMKO/GHIOFRSTV4uqDnO26ueegKHMfDI4NIxt/nw/GI5u/gD5aIfVYuX+buu e5Dsim10qavRH0vNifcbD9abdpzIrFWCvwZ7AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUsslHKU+uS0tQeIwSyd+QvAuW8FcwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvc3NsSEtVLXVTMHRRZUl3U3lkLVF2 QXVXOEZjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMBIEDAN BgkqhkiG9w0BAQsFAAOCAQEAR1TdYgHGJMXhjiW+n4urOj+hZJw4SNJxQFtinlFr rTTgOrxO7plFf4b0+ByovLI5iEVRfiJY2QZoHV5rSQgcbooXW+8gpJ8EsXuhuS5k XsnB+FHzyXtYZWihmflcYbjlQF99jHEA+Ek8OjVPCFvhdAVI3FEXLzgBpyzS9fRr FA+t+CvyFl570djcGse90OQDxVaZ+OtEwAPWlE0ataXP4W1BDUeEJ7ld0ChcDB0A vvcKwB1eyt+FgTB3paDskoFXMwmhCE2j2DxMZjk3f6HeNrBjDT8J6K90u/vEjVUs cZn59c78500MzHqvZOiZ/mJDhou38z51+OoEvKJMoCLG/A== -----END CERTIFICATE-----Generated at Sat Apr 5 20:07:39 2025 by rpki-client