$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/H5W1Wt_XIwlNsneps3zSBIjpKsQ.roa File: H5W1Wt_XIwlNsneps3zSBIjpKsQ.roa (raw, json) Hash identifier: embkYEO/0O5lpJIv2r/zZZ08t5Tx3f9JHSSqTxa7zkk= Subject key identifier: 1F:95:B5:5A:DF:D7:23:09:4D:B2:77:A9:B3:7C:D2:04:88:E9:2A:C4 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 17D8 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/H5W1Wt_XIwlNsneps3zSBIjpKsQ.roa Signing time: Mon 10 Feb 2025 14:07:19 +0000 ROA not before: Mon 10 Feb 2025 14:07:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 42.0.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6104 (0x17d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1F95B55ADFD723094DB277A9B37CD20488E92AC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a1:04:f0:a9:56:d9:0d:a0:75:86:b8:29:28: 0e:a1:99:73:18:db:9c:15:41:79:88:fb:fd:ed:13: 0f:8e:76:3a:98:cf:bf:43:e3:03:51:d6:54:e6:92: 43:56:d7:3e:f4:e0:0e:06:8e:f5:83:c4:ff:b9:c3: ad:1d:92:4b:23:30:4a:7f:a3:5e:31:9c:8a:76:d3: 0e:76:dd:37:07:c6:6b:00:5a:c8:69:96:3e:41:aa: b5:80:09:d3:16:f5:07:2e:58:8f:b9:df:af:61:8c: 3a:57:0c:c6:e4:24:0b:36:c5:a4:5e:45:e8:c1:56: b0:c0:a2:1e:48:04:61:ad:0f:ca:d1:ab:58:be:fb: 79:0f:df:30:2f:12:93:cf:21:c1:4e:7c:42:2a:51: 7a:9c:cf:54:39:be:4f:0e:90:04:01:76:84:4e:83: 34:53:f3:15:c8:aa:60:79:7b:8d:e5:d2:9a:e7:ee: 74:dd:69:04:d3:cb:db:b7:4d:f5:ca:95:a8:7d:d8: 36:9b:cc:b7:0f:e1:b3:c5:fd:7a:6d:52:14:20:45: 8e:d6:09:d0:f5:67:5d:c5:19:07:81:10:b8:8d:ab: 23:9b:30:72:ac:89:74:21:83:17:38:10:b6:6e:0c: 86:00:b6:d1:e6:d3:74:42:90:fe:57:4f:95:d7:07: da:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:95:B5:5A:DF:D7:23:09:4D:B2:77:A9:B3:7C:D2:04:88:E9:2A:C4 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/H5W1Wt_XIwlNsneps3zSBIjpKsQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 42.0.64.0/18 Signature Algorithm: sha256WithRSAEncryption 82:f3:00:9b:d9:f0:20:8e:2d:0f:71:78:ee:67:ff:31:2b:79: 64:13:15:38:95:bf:45:cc:52:00:52:1f:ed:73:c3:d1:96:c5: dc:d7:3c:15:b7:d3:89:66:c1:43:ad:e2:96:e1:a9:ad:cd:76: 3b:67:f0:aa:fd:dd:9d:54:de:94:07:41:24:d9:8d:90:0b:c8: fb:65:bc:5f:65:5c:b8:cb:c8:9b:73:19:41:48:69:f3:63:a4: e6:c7:5d:da:38:a5:06:bb:f3:fd:85:48:c3:1e:9c:22:14:ce: f8:6a:19:8b:2c:cb:03:36:41:a7:bf:68:0c:6f:3f:64:ff:6e: bd:1a:8e:a0:f4:d6:fa:58:12:e3:00:4b:04:74:3d:0d:5d:cb: 7c:28:7c:b2:58:41:7a:c7:59:f3:39:68:29:4e:87:bd:b5:db: 5e:3e:bf:0d:9d:f3:02:6f:ed:3a:cb:1c:8c:69:86:dc:d9:36: ef:02:2c:c6:8d:c2:ab:f2:03:e0:1d:c2:c7:2b:5e:20:6d:28: 94:c6:da:ae:5f:65:8c:09:b5:7a:45:fa:4b:f9:73:50:84:7c: cc:0b:97:5a:c2:56:0d:67:99:d4:42:6b:b9:c8:0d:b2:e3:fb: f7:c0:4e:1d:3e:48:bd:2e:f8:e0:4c:14:d0:0f:17:2b:2c:4a: a9:0a:d7:f9 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICF9gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFGOTVCNTVBREZENzIz MDk0REIyNzdBOUIzN0NEMjA0ODhFOTJBQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUoQTwqVbZDaB1hrgpKA6hmXMY25wVQXmI+/3tEw+OdjqYz79D 4wNR1lTmkkNW1z704A4GjvWDxP+5w60dkksjMEp/o14xnIp20w523TcHxmsAWshp lj5BqrWACdMW9QcuWI+5369hjDpXDMbkJAs2xaReRejBVrDAoh5IBGGtD8rRq1i+ +3kP3zAvEpPPIcFOfEIqUXqcz1Q5vk8OkAQBdoROgzRT8xXIqmB5e43l0prn7nTd aQTTy9u3TfXKlah92DabzLcP4bPF/XptUhQgRY7WCdD1Z13FGQeBELiNqyObMHKs iXQhgxc4ELZuDIYAttHm03RCkP5XT5XXB9rBAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUH5W1Wt/XIwlNsneps3zSBIjpKsQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSDVXMVd0X1hJd2xOc25lcHMzelNC SWpwS3NRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBioAQDAN BgkqhkiG9w0BAQsFAAOCAQEAgvMAm9nwII4tD3F47mf/MSt5ZBMVOJW/RcxSAFIf 7XPD0ZbF3Nc8FbfTiWbBQ63iluGprc12O2fwqv3dnVTelAdBJNmNkAvI+2W8X2Vc uMvIm3MZQUhp82Ok5sdd2jilBrvz/YVIwx6cIhTO+GoZiyzLAzZBp79oDG8/ZP9u vRqOoPTW+lgS4wBLBHQ9DV3LfCh8slhBesdZ8zloKU6HvbXbXj6/DZ3zAm/tOssc jGmG3Nk27wIsxo3Cq/ID4B3CxyteIG0olMbarl9ljAm1ekX6S/lzUIR8zAuXWsJW DWeZ1EJrucgNsuP798BOHT5IvS744EwU0A8XKyxKqQrX+Q== -----END CERTIFICATE-----Generated at Mon Apr 7 15:16:31 2025 by rpki-client