$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Yl02UduPmrntAqRb2OztihFi3O4.roa File: Yl02UduPmrntAqRb2OztihFi3O4.roa (raw, json) Hash identifier: ag4SYgJ6gOQnQWZLE6L0NcBR+6cbziFaR1Zqfcj2rWY= Subject key identifier: 62:5D:36:51:DB:8F:9A:B9:ED:02:A4:5B:D8:EC:ED:8A:11:62:DC:EE Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 185C Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Yl02UduPmrntAqRb2OztihFi3O4.roa Signing time: Mon 10 Feb 2025 14:07:51 +0000 ROA not before: Mon 10 Feb 2025 14:07:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 61.59.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6236 (0x185c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:51 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=625D3651DB8F9AB9ED02A45BD8ECED8A1162DCEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:69:f7:2c:eb:d3:ff:ae:91:df:15:7b:25:c7: 94:bb:0e:d8:3b:1e:a0:35:4e:fd:1a:f2:e2:50:0c: 7b:3b:26:ee:d2:83:fc:f8:e8:79:96:9b:37:96:e6: 75:f0:f0:7c:9a:4a:2f:d2:70:70:3c:67:94:89:ae: 26:d6:40:ec:23:ae:37:0b:8e:5d:9e:3f:7d:a7:52: 0f:f8:20:70:cb:f6:7b:85:e9:0e:f9:4e:9e:76:71: be:db:ff:85:44:1a:63:ec:46:8f:57:df:f1:f6:4d: a4:f0:87:a2:5f:f7:d3:7c:f6:0e:24:65:28:37:50: c3:4c:3e:65:f0:f2:87:ea:18:3f:7b:a2:2d:de:34: d1:aa:da:6c:c0:39:30:9a:0c:e5:1b:54:06:fc:b1: cd:16:aa:ad:a2:99:45:df:5d:f8:0c:38:d2:08:8e: 1a:a2:e2:ca:9e:c3:da:15:27:27:23:76:c3:a7:2a: 5d:69:1c:74:3a:fc:fc:08:aa:2b:2f:da:eb:d1:85: 05:dd:7c:d6:2d:66:ce:dd:9a:47:84:68:65:3e:79: a9:12:ec:08:69:a1:02:0a:6a:83:5a:77:2c:eb:0b: bb:b3:21:15:be:ac:c8:89:b4:32:68:91:bf:59:c1: 01:d0:a2:03:f1:44:83:dc:7b:91:87:57:6b:52:c9: 74:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5D:36:51:DB:8F:9A:B9:ED:02:A4:5B:D8:EC:ED:8A:11:62:DC:EE X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Yl02UduPmrntAqRb2OztihFi3O4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.59.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0a:5b:f4:b5:68:b9:f2:bf:8d:f0:27:97:a3:65:98:fc:25:ac: 7c:56:0e:7d:a7:a5:7a:d3:76:bb:12:cb:d5:19:3d:39:ec:66: 1d:4d:88:1d:65:da:0b:51:37:69:e9:2b:da:a8:73:e9:97:f6: c7:d7:fb:ea:b4:6a:32:5e:d2:c6:f4:cd:d3:f0:f1:03:77:3b: 41:08:7b:c0:85:57:b9:8a:ce:43:31:6a:f8:45:e0:a8:08:b1: c7:de:f2:32:54:c7:73:13:48:30:97:ad:87:45:a3:b9:d0:10: a7:ae:32:d3:51:11:52:b5:f0:63:10:cd:dc:db:6d:1a:55:e2: b5:92:53:48:11:e2:32:43:92:3f:ab:d5:fb:31:29:e4:cc:d0: 55:b5:5f:10:36:70:18:e8:a0:58:72:67:59:fa:8b:05:a1:7b: d2:2d:15:99:cd:78:da:0a:42:ee:ff:75:3b:00:b2:dc:5a:96: ab:6e:6b:0c:3b:55:f0:b2:2e:2b:22:8e:bf:44:98:7c:40:2e: fb:b8:3d:a7:6e:e9:b4:0c:ab:2e:d3:aa:40:42:0a:bd:9a:22: 19:4f:3a:ca:ee:80:0e:7b:97:20:5d:d6:20:06:be:2e:0c:1d: 60:19:26:fb:35:86:96:fe:6a:4c:8d:28:b0:e8:db:91:4a:ed: 33:7d:27:7c -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGFwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYyNUQzNjUxREI4RjlB QjlFRDAyQTQ1QkQ4RUNFRDhBMTE2MkRDRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClafcs69P/rpHfFXslx5S7Dtg7HqA1Tv0a8uJQDHs7Ju7Sg/z4 6HmWmzeW5nXw8HyaSi/ScHA8Z5SJribWQOwjrjcLjl2eP32nUg/4IHDL9nuF6Q75 Tp52cb7b/4VEGmPsRo9X3/H2TaTwh6Jf99N89g4kZSg3UMNMPmXw8ofqGD97oi3e NNGq2mzAOTCaDOUbVAb8sc0Wqq2imUXfXfgMONIIjhqi4sqew9oVJycjdsOnKl1p HHQ6/PwIqisv2uvRhQXdfNYtZs7dmkeEaGU+eakS7AhpoQIKaoNadyzrC7uzIRW+ rMiJtDJokb9ZwQHQogPxRIPce5GHV2tSyXQhAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUYl02UduPmrntAqRb2OztihFi3O4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvWWwwMlVkdVBtcm50QXFSYjJPenRp aEZpM080LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAD07MA0G CSqGSIb3DQEBCwUAA4IBAQAKW/S1aLnyv43wJ5ejZZj8Jax8Vg59p6V603a7EsvV GT057GYdTYgdZdoLUTdp6SvaqHPpl/bH1/vqtGoyXtLG9M3T8PEDdztBCHvAhVe5 is5DMWr4ReCoCLHH3vIyVMdzE0gwl62HRaO50BCnrjLTURFStfBjEM3c220aVeK1 klNIEeIyQ5I/q9X7MSnkzNBVtV8QNnAY6KBYcmdZ+osFoXvSLRWZzXjaCkLu/3U7 ALLcWparbmsMO1Xwsi4rIo6/RJh8QC77uD2nbum0DKsu06pAQgq9miIZTzrK7oAO e5cgXdYgBr4uDB1gGSb7NYaW/mpMjSiw6NuRSu0zfSd8 -----END CERTIFICATE-----Generated at Mon Apr 7 15:16:28 2025 by rpki-client