$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wu4KZvAIV4CjrEDpNi3RKgx2-xs.roa File: Wu4KZvAIV4CjrEDpNi3RKgx2-xs.roa (raw, json) Hash identifier: Wxx5AUnm0Rfwu8bmeQcnj6FEGxAqnnLg46tmRMhGC5s= Subject key identifier: 5A:EE:0A:66:F0:08:57:80:A3:AC:40:E9:36:2D:D1:2A:0C:76:FB:1B Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 183E Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wu4KZvAIV4CjrEDpNi3RKgx2-xs.roa Signing time: Mon 10 Feb 2025 14:07:43 +0000 ROA not before: Mon 10 Feb 2025 14:07:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 220.228.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6206 (0x183e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5AEE0A66F0085780A3AC40E9362DD12A0C76FB1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c3:dc:58:54:37:22:9a:0b:31:e0:d1:33:58: c0:de:40:ae:d3:d6:d0:ec:b2:6d:30:1f:12:eb:2d: 10:eb:f8:94:85:56:c3:9f:f1:81:cb:95:1e:5e:26: 98:5f:e8:ba:d9:dc:37:8d:97:fe:cb:34:5c:18:47: 24:21:06:93:03:a0:69:ce:3e:54:da:de:8c:0f:20: e9:8e:a1:f7:9f:46:bf:56:3b:b0:e5:73:52:60:ae: c9:63:43:09:45:5e:61:1e:dd:c2:df:36:fb:7b:8c: 98:e6:7d:28:95:55:f3:41:12:17:3e:42:1f:d5:28: 0b:38:76:92:57:a6:87:e7:f0:de:88:86:d4:9e:cc: 5e:66:78:89:12:54:d0:c8:ed:b3:4b:15:93:c1:62: 3a:be:42:8a:d2:fe:83:91:bd:35:8e:b3:1f:cc:3f: 65:49:83:65:fb:2d:ea:6e:ea:83:0c:8b:42:23:32: bd:16:af:f8:4e:87:a5:72:de:9e:e9:99:e3:37:80: e0:d6:07:cb:70:9e:6a:6e:ea:0d:c0:7d:dc:a9:03: f8:25:64:8f:74:62:70:03:49:7c:fc:4f:ea:16:23: 04:98:7a:57:0a:20:3e:07:5e:07:e9:dc:ce:ad:53: 94:54:ac:45:3d:1f:07:19:85:f3:e8:4d:7a:a7:39: 7e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EE:0A:66:F0:08:57:80:A3:AC:40:E9:36:2D:D1:2A:0C:76:FB:1B X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wu4KZvAIV4CjrEDpNi3RKgx2-xs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.228.0.0/16 Signature Algorithm: sha256WithRSAEncryption 36:0e:5e:74:6c:e4:07:fa:6c:2f:5a:f9:7d:f6:01:2d:96:e6: 66:85:13:3a:b5:94:bf:45:25:ec:18:22:19:ec:70:a1:ec:ea: 53:47:91:2d:7d:ed:88:5b:fd:23:ac:29:ef:f4:92:72:23:a9: c4:f0:92:78:14:6f:18:93:37:6d:86:ea:dc:97:a9:89:a1:d0: 9b:68:7c:2a:f9:d5:fc:a3:00:9d:96:d4:06:39:be:0b:ec:cd: 7e:9f:cd:ca:9c:f8:c0:72:06:8e:3f:28:eb:99:0b:ac:28:a6: 2c:63:fd:5c:d7:97:cd:01:05:f3:04:bc:09:07:c0:9c:d0:5b: b3:60:30:29:79:50:57:fa:7c:09:bc:91:93:af:3e:87:38:20: 97:50:93:47:da:bb:8a:c5:d5:17:fa:2a:09:8d:d2:56:87:2e: a1:44:2e:a1:e6:f4:3a:99:3f:53:21:b6:f1:22:fe:2b:86:bc: 90:52:da:a1:7d:76:44:e5:a8:c6:da:15:a0:d9:52:bf:17:2b: de:1c:8b:b1:4b:11:90:b3:7a:68:b4:37:12:86:32:3c:d9:46: 19:62:88:be:ae:fe:67:01:76:7d:76:2b:32:61:9f:9d:05:4c: fd:24:fd:b0:cf:a3:8c:a7:8a:35:ba:3b:7c:ef:94:22:77:99: 45:ec:71:4a -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGD4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVBRUUwQTY2RjAwODU3 ODBBM0FDNDBFOTM2MkREMTJBMEM3NkZCMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMw9xYVDcimgsx4NEzWMDeQK7T1tDssm0wHxLrLRDr+JSFVsOf 8YHLlR5eJphf6LrZ3DeNl/7LNFwYRyQhBpMDoGnOPlTa3owPIOmOofefRr9WO7Dl c1JgrsljQwlFXmEe3cLfNvt7jJjmfSiVVfNBEhc+Qh/VKAs4dpJXpofn8N6IhtSe zF5meIkSVNDI7bNLFZPBYjq+QorS/oORvTWOsx/MP2VJg2X7Lepu6oMMi0IjMr0W r/hOh6Vy3p7pmeM3gODWB8twnmpu6g3AfdypA/glZI90YnADSXz8T+oWIwSYelcK ID4HXgfp3M6tU5RUrEU9HwcZhfPoTXqnOX51AgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUWu4KZvAIV4CjrEDpNi3RKgx2+xswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvV3U0S1p2QUlWNENqckVEcE5pM1JL Z3gyLXhzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANzkMA0G CSqGSIb3DQEBCwUAA4IBAQA2Dl50bOQH+mwvWvl99gEtluZmhRM6tZS/RSXsGCIZ 7HCh7OpTR5Etfe2IW/0jrCnv9JJyI6nE8JJ4FG8Ykzdthurcl6mJodCbaHwq+dX8 owCdltQGOb4L7M1+n83KnPjAcgaOPyjrmQusKKYsY/1c15fNAQXzBLwJB8Cc0Fuz YDApeVBX+nwJvJGTrz6HOCCXUJNH2ruKxdUX+ioJjdJWhy6hRC6h5vQ6mT9TIbbx Iv4rhryQUtqhfXZE5ajG2hWg2VK/FyveHIuxSxGQs3potDcShjI82UYZYoi+rv5n AXZ9disyYZ+dBUz9JP2wz6OMp4o1ujt875Qid5lF7HFK -----END CERTIFICATE-----Generated at Mon Apr 7 15:14:12 2025 by rpki-client