$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/1CX3ekEXF20ETb-GOhzoGQotuwI.roa File: 1CX3ekEXF20ETb-GOhzoGQotuwI.roa (raw, json) Hash identifier: 2l2bnJCZEqd4pAQOTeVAnzgNfXiNzJP4QrIWKrYH/RM= Subject key identifier: D4:25:F7:7A:41:17:17:6D:04:4D:BF:86:3A:1C:E8:19:0A:2D:BB:02 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1851 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1CX3ekEXF20ETb-GOhzoGQotuwI.roa Signing time: Mon 10 Feb 2025 14:07:49 +0000 ROA not before: Mon 10 Feb 2025 14:07:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 218.210.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6225 (0x1851) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:49 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D425F77A4117176D044DBF863A1CE8190A2DBB02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:a0:06:ce:05:93:4f:7b:e4:dc:c7:7b:bb: fb:6e:c7:1a:be:4f:03:21:dc:5f:e0:48:f1:5b:1a: c9:e5:1f:db:5b:25:0c:d8:05:99:f0:88:a0:a2:49: dd:18:01:96:57:9d:45:b4:00:1a:4d:53:89:14:98: 0e:c9:c8:2d:23:70:64:37:f0:58:2d:24:8e:4a:2c: eb:68:58:75:af:a7:03:eb:08:c2:6c:81:1b:44:0b: fe:0f:cf:cf:0d:6b:06:b5:fd:0a:f6:bf:99:d5:23: 5b:b2:52:e2:6e:5c:c6:04:09:c2:db:36:39:58:23: 62:d7:cd:b0:38:ac:d8:c9:52:dd:07:31:2c:33:b4: 47:a5:b5:0c:2e:95:a6:a9:90:cf:ca:58:b9:8c:5c: f4:7d:2a:ab:85:f1:ec:80:4d:cf:e0:a3:b2:80:a7: df:28:d9:36:12:61:e5:03:cb:6f:08:40:07:35:4f: 2e:9d:92:37:8c:1c:ed:90:b2:f5:fb:dc:25:8d:7f: e0:9e:9d:6f:da:eb:02:74:04:b7:70:5e:38:9b:89: 8a:d8:cb:3c:a1:bc:27:1a:7d:7d:19:41:04:61:de: f0:2e:d9:71:3d:33:48:1c:0a:62:29:fe:ac:6d:37: 3c:04:49:91:f6:3e:07:7b:22:5a:14:2a:34:ab:ce: 17:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:25:F7:7A:41:17:17:6D:04:4D:BF:86:3A:1C:E8:19:0A:2D:BB:02 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1CX3ekEXF20ETb-GOhzoGQotuwI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.210.0.0/15 Signature Algorithm: sha256WithRSAEncryption 39:ad:0a:73:92:4d:ee:59:d8:b1:fe:f5:79:16:7a:90:05:62: dd:e8:0f:44:e6:11:48:a2:38:f4:63:1b:4f:16:b7:ba:f3:8d: 18:ef:32:e9:d9:cf:8f:e6:0b:d9:cc:9c:df:b6:0f:6f:ef:63: 38:95:3e:0f:c4:d0:23:4a:9c:3e:5c:52:86:c6:23:88:33:23: e0:a2:7b:c6:2e:40:42:7a:8a:9c:a8:d1:bd:dd:d5:95:56:f7: 9a:f9:86:5b:4b:75:70:1c:a8:8d:a2:9d:06:21:f3:5c:17:68: a7:be:e0:41:e4:d9:33:50:df:f8:49:7d:74:fc:ac:a0:98:6d: e2:51:3c:62:78:74:61:6d:06:94:17:8f:06:8b:0e:ca:34:15: 34:2d:67:09:ac:81:40:e1:af:48:ed:3d:3d:97:6f:c2:df:1a: 54:50:1b:10:5c:07:22:76:06:4e:74:f6:d3:d8:e7:0e:c8:a7: aa:ab:10:22:3e:67:a2:78:c2:45:34:de:3f:14:b8:de:a2:4e: 3a:80:70:24:af:6d:0a:2a:36:2d:45:ce:97:b8:a6:d8:25:a0: 14:82:0f:de:62:97:c1:33:7d:d5:cb:75:a4:fa:bb:82:e8:d1: 1f:64:5a:3c:2f:bc:44:20:33:0f:ec:59:05:ad:b2:9e:76:02: ad:03:36:f3 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGFEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3NDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ0MjVGNzdBNDExNzE3 NkQwNDREQkY4NjNBMUNFODE5MEEyREJCMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+9KAGzgWTT3vk3Md7u/tuxxq+TwMh3F/gSPFbGsnlH9tbJQzY BZnwiKCiSd0YAZZXnUW0ABpNU4kUmA7JyC0jcGQ38FgtJI5KLOtoWHWvpwPrCMJs gRtEC/4Pz88Nawa1/Qr2v5nVI1uyUuJuXMYECcLbNjlYI2LXzbA4rNjJUt0HMSwz tEeltQwulaapkM/KWLmMXPR9KquF8eyATc/go7KAp98o2TYSYeUDy28IQAc1Ty6d kjeMHO2QsvX73CWNf+CenW/a6wJ0BLdwXjibiYrYyzyhvCcafX0ZQQRh3vAu2XE9 M0gcCmIp/qxtNzwESZH2Pgd7IloUKjSrzhcBAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQU1CX3ekEXF20ETb+GOhzoGQotuwIwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMUNYM2VrRVhGMjBFVGItR09oem9H UW90dXdJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAdrSMA0G CSqGSIb3DQEBCwUAA4IBAQA5rQpzkk3uWdix/vV5FnqQBWLd6A9E5hFIojj0YxtP Fre6840Y7zLp2c+P5gvZzJzftg9v72M4lT4PxNAjSpw+XFKGxiOIMyPgonvGLkBC eoqcqNG93dWVVvea+YZbS3VwHKiNop0GIfNcF2invuBB5NkzUN/4SX10/KygmG3i UTxieHRhbQaUF48Giw7KNBU0LWcJrIFA4a9I7T09l2/C3xpUUBsQXAcidgZOdPbT 2OcOyKeqqxAiPmeieMJFNN4/FLjeok46gHAkr20KKjYtRc6XuKbYJaAUgg/eYpfB M33Vy3Wk+ruC6NEfZFo8L7xEIDMP7FkFrbKedgKtAzbz -----END CERTIFICATE-----Generated at Mon Apr 7 15:18:49 2025 by rpki-client