$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/39GhXkPTFEwinaxBPAYsMWu_kXk.roa File: 39GhXkPTFEwinaxBPAYsMWu_kXk.roa (raw, json) Hash identifier: h1tJIZpfl6c4kEttynCQYP/JTTWA2eRsl/N7ZrvLWQ8= Subject key identifier: DF:D1:A1:5E:43:D3:14:4C:22:9D:AC:41:3C:06:2C:31:6B:BF:91:79 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1856 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/39GhXkPTFEwinaxBPAYsMWu_kXk.roa Signing time: Mon 10 Feb 2025 14:07:50 +0000 ROA not before: Mon 10 Feb 2025 14:07:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 211.74.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 08:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6230 (0x1856) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:50 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DFD1A15E43D3144C229DAC413C062C316BBF9179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f8:9d:d5:b0:f5:8a:26:64:e2:a8:c5:00:35: a1:da:ec:ac:e3:ed:bf:3e:e9:d8:d4:af:cd:0c:29: b6:cf:2d:82:00:e0:14:81:c3:3c:5d:0a:93:2a:e8: e5:db:d6:4a:48:76:f8:4f:4b:88:02:c9:d2:d9:65: 91:b9:b9:0f:69:3b:36:8a:18:57:30:8c:bf:32:1c: 1d:9e:33:da:fb:5c:81:de:3b:95:2f:0b:09:7b:27: 1d:f5:2e:c9:bf:11:a6:c8:ca:63:cb:f0:9f:3b:78: 5d:02:f5:f1:3d:87:81:88:9d:60:39:9a:57:78:3f: 09:3d:a8:a8:34:0f:e9:70:80:a4:0e:cc:97:73:ab: 0b:cd:a3:11:c1:49:0f:4c:a3:54:26:f4:ea:5a:ca: ff:52:b5:84:24:b5:17:7d:fa:98:c3:ae:3f:8f:f0: cb:74:99:9b:c2:58:b5:2e:37:ac:da:87:f1:bf:49: bc:fc:2a:67:83:dc:1d:1a:a7:5d:9d:bf:77:f0:8c: b0:8f:86:c6:40:57:8d:51:99:ce:66:f7:10:82:f8: 50:42:f5:ee:c0:ad:c3:2c:37:81:0c:c4:8f:79:43: d9:d1:b2:c4:de:b9:45:ee:99:ab:b2:09:69:75:cc: 11:4d:62:03:84:5e:2a:89:25:31:3b:aa:a6:c6:3d: ed:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D1:A1:5E:43:D3:14:4C:22:9D:AC:41:3C:06:2C:31:6B:BF:91:79 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/39GhXkPTFEwinaxBPAYsMWu_kXk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.74.0.0/16 Signature Algorithm: sha256WithRSAEncryption a3:d2:0e:eb:09:c1:a4:68:33:60:63:00:18:8c:72:02:39:78: 6c:22:c3:02:df:2c:fe:a9:f6:83:b3:c4:f1:ae:f8:42:c6:86: 94:d0:9a:17:b2:17:af:22:31:a3:0c:79:77:97:b8:37:b5:08: ac:bc:74:8d:96:6f:aa:46:c2:2e:d0:e4:0d:6f:2d:27:38:da: 07:c5:ae:40:9e:0f:b8:d1:43:6b:42:ed:1e:b1:91:2a:17:89: 7e:7b:5f:08:39:4e:9b:6b:bd:dd:90:48:d8:c1:81:f7:b5:de: 70:06:34:49:3c:e3:54:9c:09:db:01:a5:9b:ef:4f:d3:e8:27: 12:82:7f:94:f0:26:cd:14:df:f3:8a:b8:64:ae:c0:28:43:84: 70:f2:ec:d0:f9:67:08:57:2f:41:fe:3b:90:08:e0:ca:2b:5a: db:0f:5e:cc:fb:92:e7:cc:ac:ac:31:38:ae:48:ec:85:da:1d: 09:21:45:ab:92:8a:09:85:01:9a:99:7a:29:96:2c:ec:ae:76: a0:cc:f0:bf:35:2c:21:da:85:2e:0a:62:ef:9d:d7:10:12:1d: 09:3e:b9:59:58:9c:2e:ee:6f:e5:ab:0e:31:b4:5f:d7:74:65: d5:9f:ea:14:14:c5:66:57:f0:eb:a0:00:81:16:85:34:2a:c2: ed:b5:58:68 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGFYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERGRDFBMTVFNDNEMzE0 NEMyMjlEQUM0MTNDMDYyQzMxNkJCRjkxNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG+J3VsPWKJmTiqMUANaHa7Kzj7b8+6djUr80MKbbPLYIA4BSB wzxdCpMq6OXb1kpIdvhPS4gCydLZZZG5uQ9pOzaKGFcwjL8yHB2eM9r7XIHeO5Uv Cwl7Jx31Lsm/EabIymPL8J87eF0C9fE9h4GInWA5mld4Pwk9qKg0D+lwgKQOzJdz qwvNoxHBSQ9Mo1Qm9Opayv9StYQktRd9+pjDrj+P8Mt0mZvCWLUuN6zah/G/Sbz8 KmeD3B0ap12dv3fwjLCPhsZAV41Rmc5m9xCC+FBC9e7ArcMsN4EMxI95Q9nRssTe uUXumauyCWl1zBFNYgOEXiqJJTE7qqbGPe2pAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQU39GhXkPTFEwinaxBPAYsMWu/kXkwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMzlHaFhrUFRGRXdpbmF4QlBBWXNN V3Vfa1hrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANNKMA0G CSqGSIb3DQEBCwUAA4IBAQCj0g7rCcGkaDNgYwAYjHICOXhsIsMC3yz+qfaDs8Tx rvhCxoaU0JoXshevIjGjDHl3l7g3tQisvHSNlm+qRsIu0OQNby0nONoHxa5Ang+4 0UNrQu0esZEqF4l+e18IOU6ba73dkEjYwYH3td5wBjRJPONUnAnbAaWb70/T6CcS gn+U8CbNFN/zirhkrsAoQ4Rw8uzQ+WcIVy9B/juQCODKK1rbD17M+5LnzKysMTiu SOyF2h0JIUWrkooJhQGamXoplizsrnagzPC/NSwh2oUuCmLvndcQEh0JPrlZWJwu 7m/lqw4xtF/XdGXVn+oUFMVmV/DroACBFoU0KsLttVho -----END CERTIFICATE-----Generated at Mon Apr 7 08:09:38 2025 by rpki-client