$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Xz70WsMUS4Zuv-yvkqbYhz21GoY.roa File: Xz70WsMUS4Zuv-yvkqbYhz21GoY.roa (raw, json) Hash identifier: +3pMY1MMAVo6Z2sDP+yWGjPGp4uDSsQ79PpNixoH7b4= Subject key identifier: 5F:3E:F4:5A:C3:14:4B:86:6E:BF:EC:AF:92:A6:D8:87:3D:B5:1A:86 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 17C7 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Xz70WsMUS4Zuv-yvkqbYhz21GoY.roa Signing time: Mon 10 Feb 2025 14:07:15 +0000 ROA not before: Mon 10 Feb 2025 14:07:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 122.146.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6087 (0x17c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:15 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5F3EF45AC3144B866EBFECAF92A6D8873DB51A86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c2:30:bc:11:e2:57:28:48:bf:f3:da:c3:ea: 22:13:d2:cc:36:42:85:5c:82:bb:94:2e:f4:e9:20: 8b:ea:44:c4:41:7b:20:48:ca:6b:8c:58:18:d9:45: 07:11:e4:0f:42:c0:80:53:a6:db:51:49:2b:bd:0d: 00:48:52:63:77:ff:08:68:c2:5a:b4:68:0d:80:55: cc:62:33:7d:6c:a5:1b:fb:c4:86:11:6d:f6:d6:24: 0d:2c:d8:9f:2f:5f:76:5d:46:06:40:9e:49:cf:a0: e3:59:80:9d:ac:87:81:f4:eb:86:08:b0:45:2a:49: b3:56:22:12:c8:9d:85:9e:6a:3f:51:07:07:d0:8c: 24:3e:40:09:e9:39:75:5c:07:ac:31:68:ce:75:86: da:31:da:da:b1:e3:b5:79:74:1c:c7:91:51:78:50: 8c:9e:79:1d:88:7b:99:93:51:ba:c7:82:80:aa:c0: 5a:fb:4f:67:75:08:9d:c3:10:4f:2f:f9:2d:3c:f0: 9c:db:cc:22:8e:96:2d:e3:d4:22:75:96:6c:7f:89: b7:c9:cb:23:31:a8:5d:83:b5:9f:50:ff:bd:ab:fc: 22:6b:26:d3:de:3b:d1:75:ae:ba:8f:48:5e:fe:6c: 68:92:34:c6:be:9f:11:35:90:98:d9:6c:c0:ae:73: 58:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3E:F4:5A:C3:14:4B:86:6E:BF:EC:AF:92:A6:D8:87:3D:B5:1A:86 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Xz70WsMUS4Zuv-yvkqbYhz21GoY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.146.0.0/15 Signature Algorithm: sha256WithRSAEncryption 30:59:1f:78:61:c7:43:c6:13:f6:db:c5:2a:49:4e:33:ea:b2: a0:fe:f2:bc:03:4a:88:8a:3c:29:36:e3:0a:cb:13:32:10:b5: db:a1:7b:c5:22:f3:2c:75:ec:ed:a9:a7:e6:75:37:a7:c3:b3: b4:8a:86:db:fb:c3:0b:64:5a:a8:a8:8d:bb:fb:8b:b2:56:43: 1a:e3:e3:a5:4c:e6:49:3d:1b:95:5e:25:fc:2a:ac:91:ba:af: bb:cb:7c:d9:38:52:43:24:c1:c8:1a:f8:41:d1:bd:f2:0d:08: da:2a:e6:b4:70:5c:97:d2:a1:d6:ae:79:61:51:cf:1b:60:7c: d6:9b:3e:65:78:a1:40:d3:2a:04:65:9f:be:c6:a5:73:c7:a1: ef:10:f4:de:6f:4d:25:ce:6a:5a:97:fa:03:5c:05:56:cb:ff: df:85:44:06:a2:a0:d4:c6:0f:86:d1:6e:8a:bd:cf:83:0b:22: c0:6d:e5:ab:48:69:8f:c5:1c:b3:9c:b6:5a:3b:b5:c4:20:a6: 2a:10:5a:45:fa:f7:a8:fa:19:54:23:01:ce:7a:68:41:69:4f: 62:45:8a:49:1b:c7:1e:f2:17:df:9c:23:a1:24:7e:f8:c4:14: 33:e6:f9:64:1b:c8:76:15:77:6e:68:27:22:9f:12:32:0d:82: 23:0a:0e:9a -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICF8cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVGM0VGNDVBQzMxNDRC ODY2RUJGRUNBRjkyQTZEODg3M0RCNTFBODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQwjC8EeJXKEi/89rD6iIT0sw2QoVcgruULvTpIIvqRMRBeyBI ymuMWBjZRQcR5A9CwIBTpttRSSu9DQBIUmN3/whowlq0aA2AVcxiM31spRv7xIYR bfbWJA0s2J8vX3ZdRgZAnknPoONZgJ2sh4H064YIsEUqSbNWIhLInYWeaj9RBwfQ jCQ+QAnpOXVcB6wxaM51htox2tqx47V5dBzHkVF4UIyeeR2Ie5mTUbrHgoCqwFr7 T2d1CJ3DEE8v+S088JzbzCKOli3j1CJ1lmx/ibfJyyMxqF2DtZ9Q/72r/CJrJtPe O9F1rrqPSF7+bGiSNMa+nxE1kJjZbMCuc1gzAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUXz70WsMUS4Zuv+yvkqbYhz21GoYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvWHo3MFdzTVVTNFp1di15dmtxYllo ejIxR29ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAXqSMA0G CSqGSIb3DQEBCwUAA4IBAQAwWR94YcdDxhP228UqSU4z6rKg/vK8A0qIijwpNuMK yxMyELXboXvFIvMsdeztqafmdTenw7O0iobb+8MLZFqoqI27+4uyVkMa4+OlTOZJ PRuVXiX8KqyRuq+7y3zZOFJDJMHIGvhB0b3yDQjaKua0cFyX0qHWrnlhUc8bYHzW mz5leKFA0yoEZZ++xqVzx6HvEPTeb00lzmpal/oDXAVWy//fhUQGoqDUxg+G0W6K vc+DCyLAbeWrSGmPxRyznLZaO7XEIKYqEFpF+veo+hlUIwHOemhBaU9iRYpJG8ce 8hffnCOhJH74xBQz5vlkG8h2FXduaCcinxIyDYIjCg6a -----END CERTIFICATE-----Generated at Mon Apr 7 15:18:50 2025 by rpki-client