$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/awxUeV8D5n8cZaU1yC-9wJ_lNDk.roa File: awxUeV8D5n8cZaU1yC-9wJ_lNDk.roa (raw, json) Hash identifier: Nl3x6CbUGdFioP6Q4m/Mrv0Uu1BgP515IEGFP9nCDHI= Subject key identifier: 6B:0C:54:79:5F:03:E6:7F:1C:65:A5:35:C8:2F:BD:C0:9F:E5:34:39 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 17B1 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/awxUeV8D5n8cZaU1yC-9wJ_lNDk.roa Signing time: Mon 10 Feb 2025 14:07:10 +0000 ROA not before: Mon 10 Feb 2025 14:07:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131584 IP address blocks: 106.105.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6065 (0x17b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:10 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6B0C54795F03E67F1C65A535C82FBDC09FE53439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:39:84:e0:5f:42:08:16:4f:95:d2:31:73:36: 03:b8:45:c0:6d:59:44:7c:a3:36:cc:3e:6a:eb:68: 32:02:f5:a1:58:1a:e2:85:e4:dd:7e:6a:93:e6:56: c2:ee:64:ed:ee:09:5c:35:79:7b:66:03:8b:0f:69: fb:7d:fd:ca:ff:2b:80:cb:a3:0d:77:50:d7:be:64: fc:79:79:bb:7f:41:2f:e7:92:7d:5e:36:ea:72:9a: bf:cf:a5:df:bd:6d:5a:89:17:77:f3:c3:42:ba:80: b3:cf:5d:42:65:64:ec:c0:81:f1:c4:ee:01:8a:c9: 4f:24:ba:e3:07:b3:50:f9:16:cd:83:ba:8e:1c:1b: a7:d1:1a:ba:9f:d6:23:f1:e5:d9:f3:b3:db:a8:d2: 03:b3:20:73:2f:ae:73:d0:d1:71:d3:a0:d6:3f:1b: 33:8e:05:23:52:57:bd:43:c9:c8:cc:73:1e:5b:5a: eb:b1:86:12:08:ce:a9:cd:22:63:7e:c7:fa:cd:0e: 3d:58:b7:61:54:49:b2:b1:0a:f8:2c:e2:08:90:3d: 8c:e3:79:a1:53:65:2d:d2:a9:cb:ff:5a:68:48:6d: 6c:40:40:2f:22:69:df:40:eb:e1:bd:38:03:ab:d0: b5:a1:a3:4c:82:8b:e7:66:bd:13:fe:c7:4c:ea:e8: 7d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0C:54:79:5F:03:E6:7F:1C:65:A5:35:C8:2F:BD:C0:9F:E5:34:39 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/awxUeV8D5n8cZaU1yC-9wJ_lNDk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.181.0/24 Signature Algorithm: sha256WithRSAEncryption bc:07:d4:3b:24:ea:c6:a5:2f:86:26:ff:a6:1e:09:af:22:a2: 39:c5:5b:05:1d:c4:ec:a1:50:d5:4f:44:c9:95:1e:4a:aa:0b: be:4c:fc:ea:cc:f7:47:2c:ed:57:9d:96:89:0f:24:86:f9:a0: b5:9b:c3:9d:28:f6:d2:37:68:b6:93:51:ec:d3:e6:87:75:d8: 5a:80:9b:2b:61:12:76:6d:96:e6:94:3f:2c:1a:49:db:56:8f: 58:92:b5:ae:50:51:63:d5:ba:df:50:83:fa:76:be:98:6f:ff: ee:3d:0b:05:1c:1a:0e:0d:5e:ce:33:aa:8c:e2:18:39:96:a0: 53:de:39:e0:75:32:6d:5f:7e:03:98:44:66:eb:c5:20:d3:2a: 87:85:07:41:e9:b6:d9:36:6f:44:3e:26:67:e7:9d:6b:c8:be: c7:3d:13:d0:cf:a1:fd:53:35:e0:50:82:20:b8:e0:af:25:91: ae:82:f3:d1:fc:73:4c:c9:cc:9e:78:6b:8c:41:ee:cb:2e:69: 81:fc:b6:b3:59:33:a2:03:cc:b8:e1:64:05:48:65:c0:d8:e4: d0:5a:b9:fc:5a:ac:0f:77:3a:40:d4:f0:f0:b4:03:9e:7f:a1: e4:a7:ba:03:2a:54:e0:64:5d:ec:fa:e8:82:43:87:57:17:56: 9b:96:05:b1 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICF7EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZCMEM1NDc5NUYwM0U2 N0YxQzY1QTUzNUM4MkZCREMwOUZFNTM0MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCaOYTgX0IIFk+V0jFzNgO4RcBtWUR8ozbMPmrraDIC9aFYGuKF 5N1+apPmVsLuZO3uCVw1eXtmA4sPaft9/cr/K4DLow13UNe+ZPx5ebt/QS/nkn1e Nupymr/Ppd+9bVqJF3fzw0K6gLPPXUJlZOzAgfHE7gGKyU8kuuMHs1D5Fs2Duo4c G6fRGrqf1iPx5dnzs9uo0gOzIHMvrnPQ0XHToNY/GzOOBSNSV71DycjMcx5bWuux hhIIzqnNImN+x/rNDj1Yt2FUSbKxCvgs4giQPYzjeaFTZS3Sqcv/WmhIbWxAQC8i ad9A6+G9OAOr0LWho0yCi+dmvRP+x0zq6H3xAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUawxUeV8D5n8cZaU1yC+9wJ/lNDkwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvYXd4VWVWOEQ1bjhjWmFVMXlDLTl3 Sl9sTkRrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGpptTAN BgkqhkiG9w0BAQsFAAOCAQEAvAfUOyTqxqUvhib/ph4JryKiOcVbBR3E7KFQ1U9E yZUeSqoLvkz86sz3RyztV52WiQ8khvmgtZvDnSj20jdotpNR7NPmh3XYWoCbK2ES dm2W5pQ/LBpJ21aPWJK1rlBRY9W631CD+na+mG//7j0LBRwaDg1ezjOqjOIYOZag U9454HUybV9+A5hEZuvFINMqh4UHQem22TZvRD4mZ+eda8i+xz0T0M+h/VM14FCC ILjgryWRroLz0fxzTMnMnnhrjEHuyy5pgfy2s1kzogPMuOFkBUhlwNjk0Fq5/Fqs D3c6QNTw8LQDnn+h5Ke6AypU4GRd7ProgkOHVxdWm5YFsQ== -----END CERTIFICATE-----Generated at Wed Jun 4 03:07:56 2025 by rpki-client