$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/zHshaF1NEk3QIiHHVe19bEIDjac.roa File: zHshaF1NEk3QIiHHVe19bEIDjac.roa (raw, json) Hash identifier: 19ynQ7S5mNzIVpOSOwqxoj4BdnW1eqLk2NVZHiezKl0= Subject key identifier: CC:7B:21:68:5D:4D:12:4D:D0:22:21:C7:55:ED:7D:6C:42:03:8D:A7 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1901 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zHshaF1NEk3QIiHHVe19bEIDjac.roa Signing time: Thu 20 Mar 2025 02:54:26 +0000 ROA not before: Thu 20 Mar 2025 02:54:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 140079 IP address blocks: 220.229.65.224/28 maxlen: 28 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 08:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6401 (0x1901) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Mar 20 02:54:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CC7B21685D4D124DD02221C755ED7D6C42038DA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:68:54:c1:7f:03:b2:ce:4d:16:62:44:8a:3c: 92:12:5c:75:12:fa:05:57:8f:c1:5e:78:14:c6:09: 11:68:3a:0e:a1:ef:4d:d9:3d:08:e7:a0:e4:52:d6: 14:78:a9:ee:98:57:a1:40:91:61:e5:27:f5:aa:ef: 3c:44:ce:15:2b:15:f6:f1:5e:40:09:22:b2:5c:83: e9:0a:05:5d:9a:c5:5a:65:23:14:18:49:68:ad:ee: 8b:ab:64:c1:96:29:90:1b:7c:f5:ef:10:c8:95:46: 4e:41:9a:b9:8a:af:ee:03:f7:dc:a1:ab:12:d6:39: 64:9f:3b:e6:58:38:f3:71:22:8a:e7:80:c7:d2:8c: e8:ce:97:c5:7a:45:85:4a:8f:c6:c4:06:78:9a:d1: 8e:3e:af:91:63:23:cf:4e:3a:01:70:e9:b7:8b:13: e4:e0:70:19:8e:8a:b4:55:75:f7:2a:94:fc:c9:ab: ee:26:e5:ea:a8:91:68:c0:33:6b:b0:4f:37:92:00: 03:2f:ad:d9:f4:e3:b2:04:39:27:94:1f:e1:e5:b9: 17:19:0d:15:9b:ab:c6:ae:f0:8f:ef:4d:09:02:fc: 54:43:66:3f:0f:39:31:ad:33:08:60:c5:8b:ff:df: 83:22:4e:c9:04:92:d1:85:3a:36:55:9e:0e:a6:6c: 00:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7B:21:68:5D:4D:12:4D:D0:22:21:C7:55:ED:7D:6C:42:03:8D:A7 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zHshaF1NEk3QIiHHVe19bEIDjac.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.229.65.224/28 Signature Algorithm: sha256WithRSAEncryption 5d:ee:20:c2:5f:35:29:f2:0b:6d:2f:7c:6b:49:3a:fd:89:21: 49:2c:0f:8d:01:7d:3c:a1:5a:5a:6d:a6:08:36:11:aa:14:de: ee:31:c7:f5:29:49:0b:5d:59:d2:21:e2:18:5e:14:36:e8:04: db:43:5c:97:25:47:57:60:3b:69:27:4c:a0:2c:12:bd:5f:11: 23:7a:c1:cb:9c:14:57:f8:d2:6a:45:11:65:90:0f:d7:f7:4b: 1a:49:22:44:8f:3f:ae:78:59:70:c0:ef:a9:ae:d0:91:70:21: 49:4a:b1:51:0f:ce:45:1f:d3:45:6d:ee:6d:f4:1c:d3:76:b6: 1b:ad:46:6f:00:e4:75:a2:19:65:d5:9c:4e:aa:de:3c:7b:f7: ff:a4:b7:cb:dc:16:83:da:7d:39:1b:88:96:95:32:c4:0e:08: 56:3a:78:0f:69:bb:7b:e0:88:96:43:f0:57:31:a2:5b:1f:46: bb:99:61:ec:94:f8:ed:6a:e0:cd:dc:ff:aa:9a:2b:cc:75:d7: 5c:1d:eb:33:8f:01:c4:4b:1e:a0:ec:98:37:d5:14:32:d2:1b: 76:f6:6f:0a:20:95:2b:9a:4e:68:01:47:ec:ba:d3:32:1a:bf: 08:1f:df:57:09:0c:df:7e:4e:66:7e:62:19:ab:6d:ea:72:24: f9:da:14:b8 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICGQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAzMjAw MjU0MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENDN0IyMTY4NUQ0RDEy NEREMDIyMjFDNzU1RUQ3RDZDNDIwMzhEQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHaFTBfwOyzk0WYkSKPJISXHUS+gVXj8FeeBTGCRFoOg6h703Z PQjnoORS1hR4qe6YV6FAkWHlJ/Wq7zxEzhUrFfbxXkAJIrJcg+kKBV2axVplIxQY SWit7ourZMGWKZAbfPXvEMiVRk5BmrmKr+4D99yhqxLWOWSfO+ZYOPNxIorngMfS jOjOl8V6RYVKj8bEBnia0Y4+r5FjI89OOgFw6beLE+TgcBmOirRVdfcqlPzJq+4m 5eqokWjAM2uwTzeSAAMvrdn047IEOSeUH+HluRcZDRWbq8au8I/vTQkC/FRDZj8P OTGtMwhgxYv/34MiTskEktGFOjZVng6mbAAhAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUzHshaF1NEk3QIiHHVe19bEIDjacwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvekhzaGFGMU5FazNRSWlISFZlMTli RUlEamFjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFBNzlQeAw DQYJKoZIhvcNAQELBQADggEBAF3uIMJfNSnyC20vfGtJOv2JIUksD40BfTyhWlpt pgg2EaoU3u4xx/UpSQtdWdIh4hheFDboBNtDXJclR1dgO2knTKAsEr1fESN6wcuc FFf40mpFEWWQD9f3SxpJIkSPP654WXDA76mu0JFwIUlKsVEPzkUf00Vt7m30HNN2 thutRm8A5HWiGWXVnE6q3jx79/+kt8vcFoPafTkbiJaVMsQOCFY6eA9pu3vgiJZD 8FcxolsfRruZYeyU+O1q4M3c/6qaK8x111wd6zOPAcRLHqDsmDfVFDLSG3b2bwog lSuaTmgBR+y60zIavwgf31cJDN9+TmZ+YhmrbepyJPnaFLg= -----END CERTIFICATE-----Generated at Mon Apr 7 08:08:51 2025 by rpki-client