$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_dUmMoQtQhwJf5nXbh0nsT4Abuc.roa File: _dUmMoQtQhwJf5nXbh0nsT4Abuc.roa (raw, json) Hash identifier: R0D81/8MQNHzLN1wXVuHz+mTxpukdaVZOs/Qz6ggt5c= Subject key identifier: FD:D5:26:32:84:2D:42:1C:09:7F:99:D7:6E:1D:27:B1:3E:00:6E:E7 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1785 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_dUmMoQtQhwJf5nXbh0nsT4Abuc.roa Signing time: Mon 10 Feb 2025 14:06:59 +0000 ROA not before: Mon 10 Feb 2025 14:06:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 60.245.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 16:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6021 (0x1785) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:06:59 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FDD52632842D421C097F99D76E1D27B13E006EE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:3e:0b:cc:eb:50:e1:d6:ac:48:41:5d:a6: 34:82:4c:16:b8:2b:c2:54:67:c9:d4:64:5c:de:06: 5a:ab:92:3d:9d:70:b6:52:79:f2:04:a5:da:c0:8f: 44:83:ff:06:67:27:ae:8d:76:96:7b:8f:1d:30:a0: 7c:2f:78:9a:ef:db:fc:b3:b3:f7:14:48:a6:2f:dc: 26:2b:f2:51:f2:0e:76:1e:e9:b1:e7:17:99:52:d8: b0:f6:81:c5:0e:72:0d:e8:3d:d9:9d:6b:a1:ad:fa: c0:e6:d2:5d:28:81:79:29:10:21:06:1a:6c:b5:93: f0:4b:7c:0b:b5:19:d0:2b:d9:a2:eb:a8:5e:78:f9: 8e:d2:2e:64:b2:7e:72:cd:9a:e1:02:41:90:1b:17: b3:23:89:40:c2:7c:0e:e5:f3:f3:cf:d5:53:92:52: 1f:5d:56:6e:82:da:9a:e8:e6:05:38:05:71:59:f0: 69:b9:c4:a7:90:c4:2a:bb:00:71:c8:65:06:05:b7: 82:68:d0:59:16:09:04:91:79:df:de:6a:5a:fd:aa: c8:48:4c:e8:c7:bf:82:c7:ac:62:85:f7:b2:3b:6b: 68:bc:40:87:71:ae:34:3a:d0:f2:25:3b:f1:3b:2c: c7:22:fc:e6:dc:98:1d:40:f5:a9:4a:68:24:64:b9: b0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D5:26:32:84:2D:42:1C:09:7F:99:D7:6E:1D:27:B1:3E:00:6E:E7 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_dUmMoQtQhwJf5nXbh0nsT4Abuc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.245.96.0/19 Signature Algorithm: sha256WithRSAEncryption 03:09:5b:80:2e:8a:d2:39:89:e4:5c:f2:33:31:a0:ab:de:eb: ae:26:91:f5:57:9f:76:31:1f:aa:b5:cc:3e:97:5a:21:f1:55: 96:fa:96:54:04:58:ac:17:cc:59:26:92:a0:2c:cc:ec:46:bb: 36:e5:64:64:4b:ca:c4:fd:fd:07:e2:26:88:bd:aa:c0:f6:9d: d5:d8:96:18:85:d0:3b:32:03:44:76:f6:17:d4:15:16:9b:66: 42:23:fd:15:69:7f:29:08:e6:68:31:dd:5e:fc:0a:bb:15:56: 64:a3:c3:1d:33:34:bd:29:39:6a:02:61:c2:83:a2:f5:26:ed: 14:38:33:7d:e1:fd:38:5f:3b:4e:00:e3:c2:f8:6f:81:99:d6: 83:3a:af:84:1c:ab:69:65:47:68:0f:5e:62:75:56:b1:85:67: 76:44:69:79:73:3a:8b:99:07:e9:48:f5:0a:99:72:2a:59:1b: 8c:c5:34:c9:6e:f4:55:7c:10:6d:9c:bb:fc:10:ca:30:f5:1c: 88:d0:a0:a1:b6:50:7c:61:24:ab:14:0d:9f:0c:16:d8:09:d1: 43:3a:7d:2c:e4:11:eb:c5:e5:23:f7:97:d3:50:34:51:ff:61: d2:da:18:95:34:21:52:70:ff:01:a4:ad:1e:38:73:ef:46:1e: a6:ef:f4:15 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICF4UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA2NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZERDUyNjMyODQyRDQy MUMwOTdGOTlENzZFMUQyN0IxM0UwMDZFRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6pz4LzOtQ4dasSEFdpjSCTBa4K8JUZ8nUZFzeBlqrkj2dcLZS efIEpdrAj0SD/wZnJ66NdpZ7jx0woHwveJrv2/yzs/cUSKYv3CYr8lHyDnYe6bHn F5lS2LD2gcUOcg3oPdmda6Gt+sDm0l0ogXkpECEGGmy1k/BLfAu1GdAr2aLrqF54 +Y7SLmSyfnLNmuECQZAbF7MjiUDCfA7l8/PP1VOSUh9dVm6C2pro5gU4BXFZ8Gm5 xKeQxCq7AHHIZQYFt4Jo0FkWCQSRed/ealr9qshITOjHv4LHrGKF97I7a2i8QIdx rjQ60PIlO/E7LMci/ObcmB1A9alKaCRkubBjAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU/dUmMoQtQhwJf5nXbh0nsT4AbucwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvX2RVbU1vUXRRaHdKZjVuWGJoMG5z VDRBYnVjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBTz1YDAN BgkqhkiG9w0BAQsFAAOCAQEAAwlbgC6K0jmJ5FzyMzGgq97rriaR9VefdjEfqrXM PpdaIfFVlvqWVARYrBfMWSaSoCzM7Ea7NuVkZEvKxP39B+ImiL2qwPad1diWGIXQ OzIDRHb2F9QVFptmQiP9FWl/KQjmaDHdXvwKuxVWZKPDHTM0vSk5agJhwoOi9Sbt FDgzfeH9OF87TgDjwvhvgZnWgzqvhByraWVHaA9eYnVWsYVndkRpeXM6i5kH6Uj1 CplyKlkbjMU0yW70VXwQbZy7/BDKMPUciNCgobZQfGEkqxQNnwwW2AnRQzp9LOQR 68XlI/eX01A0Uf9h0toYlTQhUnD/AaStHjhz70Yepu/0FQ== -----END CERTIFICATE-----Generated at Mon Apr 14 15:15:09 2025 by rpki-client