$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Y0FQReZy-faEoxavfyFEesGQro0.roa File: Y0FQReZy-faEoxavfyFEesGQro0.roa (raw, json) Hash identifier: LyTYtXEsHg/uCiJXZ/Cj/IbNT+/tpuFnAMOeXSYP3HQ= Subject key identifier: 63:41:50:45:E6:72:F9:F6:84:A3:16:AF:7F:21:44:7A:C1:90:AE:8D Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 178D Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Y0FQReZy-faEoxavfyFEesGQro0.roa Signing time: Mon 10 Feb 2025 14:07:01 +0000 ROA not before: Mon 10 Feb 2025 14:07:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 123.205.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6029 (0x178d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:01 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=63415045E672F9F684A316AF7F21447AC190AE8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cb:73:a6:9a:ef:34:8b:26:17:5b:e7:f5:ac: fe:51:ac:c7:18:fd:27:52:18:b5:80:0c:d3:b2:e6: c4:0f:92:a8:dd:a3:7a:0b:b8:f9:93:47:ac:90:52: 07:1b:91:8d:e8:5e:7a:9a:e3:fa:be:7e:49:a1:55: e5:88:56:4b:ff:e9:e3:50:c5:e1:e9:09:07:52:e2: 9f:55:e9:06:75:42:06:fc:00:68:ff:c2:76:4a:91: 99:4d:c1:fd:b4:bc:9d:a8:3d:bf:25:0f:c2:2e:79: ea:61:c4:8a:e0:66:1d:54:fd:6c:62:bd:f5:20:7c: 8c:49:37:9f:e4:9a:02:ca:d0:d9:1a:eb:66:59:82: 65:ba:d6:cc:b5:5f:8f:81:09:03:aa:e2:74:1f:e6: be:90:66:1b:d4:62:97:44:f9:bc:b6:b9:4b:53:c8: 4c:2b:14:80:29:8a:02:5e:48:43:1e:fe:8f:18:f9: a9:79:ad:c5:d1:84:92:9b:73:cd:2e:82:03:35:25: 54:1c:45:b7:ef:9a:aa:1c:a2:2e:2f:97:39:f7:89: b0:b7:ce:bb:8c:02:85:fe:ff:36:19:16:f5:1a:2c: ab:e6:c4:0e:69:55:77:7b:62:8c:96:c0:44:98:44: 8f:b8:41:13:42:00:85:8a:90:eb:fd:75:5d:11:8f: b8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:41:50:45:E6:72:F9:F6:84:A3:16:AF:7F:21:44:7A:C1:90:AE:8D X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Y0FQReZy-faEoxavfyFEesGQro0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.205.32.0/19 Signature Algorithm: sha256WithRSAEncryption 7e:f3:20:78:c5:9a:2f:94:0e:28:1a:1f:9a:db:9a:40:90:d0: aa:bc:e2:33:f8:76:3d:db:20:3a:fb:0e:4c:9d:91:ff:70:10: 81:cf:90:b4:43:49:69:31:d6:be:f2:9c:20:b1:aa:6c:b1:f2: b6:5f:81:c7:54:48:e8:57:c9:ea:ab:a4:b4:b2:4f:df:6e:fb: b1:af:7b:3e:28:33:04:67:47:2d:45:07:cf:8b:e2:30:97:1a: 62:3e:26:ed:bb:66:28:e3:b1:97:db:6e:aa:b4:28:4d:d6:2c: ce:52:95:ae:8a:e1:b9:67:f0:b0:73:a2:e0:db:bd:f8:6a:8c: ba:7c:31:92:57:d5:1e:ba:f5:c3:2b:26:ce:7a:9b:06:2b:50: 5a:1c:32:3f:6b:0d:af:5e:99:fd:4a:46:cf:6b:3e:26:11:13: fe:23:a7:c6:64:70:f2:26:59:a8:7f:f9:21:cf:1a:b0:10:b5: 9a:b7:d4:6e:49:89:fa:db:4c:5b:cd:93:e5:fd:00:0d:cf:fe: cc:b7:52:cf:62:af:28:60:18:9e:2f:dc:7f:cb:c2:17:82:ce: 68:0b:46:76:80:ea:50:70:24:4c:52:a6:da:84:e7:14:ee:e6: 55:8e:a6:fe:90:da:8a:ba:98:12:32:6e:34:71:b4:7f:8b:62: 73:86:24:2e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICF40wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYzNDE1MDQ1RTY3MkY5 RjY4NEEzMTZBRjdGMjE0NDdBQzE5MEFFOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCey3Ommu80iyYXW+f1rP5RrMcY/SdSGLWADNOy5sQPkqjdo3oL uPmTR6yQUgcbkY3oXnqa4/q+fkmhVeWIVkv/6eNQxeHpCQdS4p9V6QZ1Qgb8AGj/ wnZKkZlNwf20vJ2oPb8lD8IueephxIrgZh1U/WxivfUgfIxJN5/kmgLK0Nka62ZZ gmW61sy1X4+BCQOq4nQf5r6QZhvUYpdE+by2uUtTyEwrFIApigJeSEMe/o8Y+al5 rcXRhJKbc80uggM1JVQcRbfvmqocoi4vlzn3ibC3zruMAoX+/zYZFvUaLKvmxA5p VXd7YoyWwESYRI+4QRNCAIWKkOv9dV0Rj7gTAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUY0FQReZy+faEoxavfyFEesGQro0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvWTBGUVJlWnktZmFFb3hhdmZ5RkVl c0dRcm8wLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXvNIDAN BgkqhkiG9w0BAQsFAAOCAQEAfvMgeMWaL5QOKBofmtuaQJDQqrziM/h2PdsgOvsO TJ2R/3AQgc+QtENJaTHWvvKcILGqbLHytl+Bx1RI6FfJ6quktLJP3277sa97Pigz BGdHLUUHz4viMJcaYj4m7btmKOOxl9tuqrQoTdYszlKVrorhuWfwsHOi4Nu9+GqM unwxklfVHrr1wysmznqbBitQWhwyP2sNr16Z/UpGz2s+JhET/iOnxmRw8iZZqH/5 Ic8asBC1mrfUbkmJ+ttMW82T5f0ADc/+zLdSz2KvKGAYni/cf8vCF4LOaAtGdoDq UHAkTFKm2oTnFO7mVY6m/pDairqYEjJuNHG0f4tic4YkLg== -----END CERTIFICATE-----Generated at Mon Apr 7 15:14:08 2025 by rpki-client