$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/WoIp1lTGFLT2NYFC5c-fpa47c0k.roa File: WoIp1lTGFLT2NYFC5c-fpa47c0k.roa (raw, json) Hash identifier: wbAbYDIonvZrWp5qkF94LmxvoFFKk5irKa9Y/6Whvy8= Subject key identifier: 5A:82:29:D6:54:C6:14:B4:F6:35:81:42:E5:CF:9F:A5:AE:3B:73:49 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 17E8 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/WoIp1lTGFLT2NYFC5c-fpa47c0k.roa Signing time: Mon 10 Feb 2025 14:07:23 +0000 ROA not before: Mon 10 Feb 2025 14:07:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 106.105.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 13:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6120 (0x17e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:23 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5A8229D654C614B4F6358142E5CF9FA5AE3B7349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f9:9d:97:74:c2:e1:a4:39:ba:db:88:d9:84: 0a:6c:b0:c7:7a:ab:b4:89:c0:76:61:26:e8:21:12: 91:2c:a9:52:3e:0c:b0:a8:29:dd:55:f9:42:71:7f: a8:c6:88:5c:3b:01:4d:21:f5:52:ad:19:62:39:5d: 9a:5a:fb:bc:da:fa:c0:af:40:a1:17:1f:63:76:e3: 95:b2:d6:48:22:08:96:6c:b7:5c:a8:94:d3:b5:46: 34:1b:3c:8c:bd:eb:81:60:45:c5:11:41:c8:11:fa: 04:5b:8f:d6:1c:75:e3:b5:95:f3:30:7d:1f:f2:eb: 48:74:3c:9a:94:67:bd:94:90:e4:6a:cc:57:90:0e: a6:c8:11:52:d4:86:90:74:42:fc:72:b5:b4:2a:43: 19:23:43:9b:c1:86:d3:b6:11:4a:23:7f:7a:ea:8a: 34:88:2a:95:61:dc:be:65:12:92:34:f7:90:4b:45: 8c:5e:6b:bc:55:2b:bd:11:e0:21:ff:46:d1:6b:4e: 8f:bb:9d:d4:50:83:3b:bb:17:09:d2:da:0e:e4:4f: d2:d5:a6:23:43:7d:c5:65:79:b6:02:42:29:5f:98: 7a:2b:52:7e:bc:55:1c:31:4b:7d:ab:46:af:8b:96: 90:6e:ce:53:b9:d0:68:39:bb:55:28:56:d7:d6:5d: 49:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:82:29:D6:54:C6:14:B4:F6:35:81:42:E5:CF:9F:A5:AE:3B:73:49 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/WoIp1lTGFLT2NYFC5c-fpa47c0k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.128.0/19 Signature Algorithm: sha256WithRSAEncryption 54:38:a5:e9:b1:cd:ab:98:5c:24:01:3d:17:a8:77:d5:ba:a5: b6:30:64:e8:11:9c:ea:19:cb:23:bd:bf:06:3d:5b:ea:ad:ab: b8:dd:56:61:89:d7:9c:7d:b6:85:12:9c:ff:31:e0:5b:7d:af: db:22:ec:fc:c6:64:49:90:b0:db:19:20:34:85:d7:7b:81:ae: 99:55:35:4f:f7:95:d6:6e:6d:43:55:10:ce:5a:b8:9e:30:c8: 20:e6:c3:b7:74:a1:91:ef:36:78:7d:b1:e8:56:8a:8d:a9:8d: 31:87:ef:6d:86:a8:06:bd:7f:a2:20:92:3a:89:e9:15:c4:fe: 44:eb:c0:de:09:9d:83:90:2e:3f:2b:8f:26:82:a0:77:3f:39: 42:bd:35:85:3a:9e:47:1b:82:1b:de:1d:b1:79:9b:7f:1c:79: 69:3e:a1:2f:01:80:ac:0e:57:d2:f7:cb:35:10:a9:d7:65:6c: 48:22:35:b3:a8:9c:be:2d:16:86:0d:34:8d:7f:39:19:d9:88: 77:98:6e:84:11:21:66:d0:39:d0:38:1d:64:9b:16:a3:51:ff: 85:d1:c8:7e:97:34:bf:4e:3b:38:f9:5b:72:37:cd:b0:10:fa: 6a:bc:6f:65:fc:0f:77:8f:1d:32:76:ff:6a:e0:b8:bc:50:cd: 98:c7:e3:5f -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICF+gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVBODIyOUQ2NTRDNjE0 QjRGNjM1ODE0MkU1Q0Y5RkE1QUUzQjczNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDm+Z2XdMLhpDm624jZhApssMd6q7SJwHZhJughEpEsqVI+DLCo Kd1V+UJxf6jGiFw7AU0h9VKtGWI5XZpa+7za+sCvQKEXH2N245Wy1kgiCJZst1yo lNO1RjQbPIy964FgRcURQcgR+gRbj9YcdeO1lfMwfR/y60h0PJqUZ72UkORqzFeQ DqbIEVLUhpB0QvxytbQqQxkjQ5vBhtO2EUojf3rqijSIKpVh3L5lEpI095BLRYxe a7xVK70R4CH/RtFrTo+7ndRQgzu7FwnS2g7kT9LVpiNDfcVlebYCQilfmHorUn68 VRwxS32rRq+LlpBuzlO50Gg5u1UoVtfWXUlvAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUWoIp1lTGFLT2NYFC5c+fpa47c0kwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvV29JcDFsVEdGTFQyTllGQzVjLWZw YTQ3YzBrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBWppgDAN BgkqhkiG9w0BAQsFAAOCAQEAVDil6bHNq5hcJAE9F6h31bqltjBk6BGc6hnLI72/ Bj1b6q2ruN1WYYnXnH22hRKc/zHgW32v2yLs/MZkSZCw2xkgNIXXe4GumVU1T/eV 1m5tQ1UQzlq4njDIIObDt3Shke82eH2x6FaKjamNMYfvbYaoBr1/oiCSOonpFcT+ ROvA3gmdg5AuPyuPJoKgdz85Qr01hTqeRxuCG94dsXmbfxx5aT6hLwGArA5X0vfL NRCp12VsSCI1s6icvi0Whg00jX85GdmId5huhBEhZtA50DgdZJsWo1H/hdHIfpc0 v047OPlbcjfNsBD6arxvZfwPd48dMnb/auC4vFDNmMfjXw== -----END CERTIFICATE-----Generated at Mon Apr 7 11:39:37 2025 by rpki-client