$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/iNPdFd3aRS85k-BWe-y6Ka4ZMo0.roa File: iNPdFd3aRS85k-BWe-y6Ka4ZMo0.roa (raw, json) Hash identifier: Y4WYwJx+48Ai39s+ifso63EOBRpwWrl4Rx8AxMTGeLQ= Subject key identifier: 88:D3:DD:15:DD:DA:45:2F:39:93:E0:56:7B:EC:BA:29:AE:19:32:8D Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 17ED Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iNPdFd3aRS85k-BWe-y6Ka4ZMo0.roa Signing time: Mon 10 Feb 2025 14:07:25 +0000 ROA not before: Mon 10 Feb 2025 14:07:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 175.182.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 20:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6125 (0x17ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:25 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=88D3DD15DDDA452F3993E0567BECBA29AE19328D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8a:0d:42:6e:25:57:74:24:ae:dc:97:57:9b: 78:27:b4:5d:95:4b:a5:08:c6:94:56:f1:c7:3b:1b: 76:03:14:4d:d1:0e:ae:83:73:19:03:77:66:0e:46: 15:e8:a5:95:11:8e:1f:cd:13:83:69:68:8f:d0:60: bb:6f:8e:f6:d6:b5:2b:1f:a5:89:92:82:7c:4d:f9: 7e:9e:ad:d7:d7:a5:b5:a5:d4:50:d8:f4:2d:7b:5f: 17:7e:70:55:7e:e7:66:f1:65:0c:07:b3:91:e1:e4: db:57:7e:f5:39:6a:58:6d:45:3d:20:26:55:91:8f: 50:d5:05:10:e3:a0:3f:15:32:b4:e5:02:ce:dd:99: dc:a5:6e:09:50:dd:c7:8b:a4:4f:65:38:9d:a4:68: e7:08:6d:0c:3f:14:d3:38:07:2c:c3:3c:f1:ba:d0: 2a:2c:57:97:89:76:25:b8:9b:6c:10:e5:82:20:e2: 11:29:b7:a9:60:59:98:33:21:24:e1:89:71:85:02: 85:ba:ca:cf:48:77:6e:9d:c3:24:27:f4:62:6a:7a: ab:33:f5:21:3a:9e:20:31:68:c6:95:e1:fc:2b:43: da:9f:25:ec:f5:3f:79:50:a5:87:70:b3:92:bd:9e: be:81:e1:ec:4a:70:59:6a:f7:d3:65:e1:2a:7c:ae: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D3:DD:15:DD:DA:45:2F:39:93:E0:56:7B:EC:BA:29:AE:19:32:8D X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iNPdFd3aRS85k-BWe-y6Ka4ZMo0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.182.0.0/16 Signature Algorithm: sha256WithRSAEncryption 16:60:b8:c2:a3:68:6b:b1:01:d9:f6:af:2d:f6:46:be:a8:9c: a7:21:c2:b0:35:2c:8d:96:18:21:32:7a:c9:c9:9a:93:b4:13: 04:30:bc:36:30:68:91:ab:63:83:6e:f8:5e:ff:15:7c:00:38: ba:37:eb:6d:6e:11:17:8b:0f:85:c5:bb:83:60:14:c2:e7:ed: 8f:74:c3:9b:6d:5a:c4:93:a6:51:04:10:5b:87:af:b7:be:5e: 43:6f:1c:00:01:cc:7f:65:5f:27:71:9a:48:39:ae:d4:41:2b: c5:7b:e2:b3:3f:31:31:38:e9:46:74:9d:b1:b8:6e:96:94:84: 46:57:43:25:67:98:0c:d0:2d:fe:b8:8f:27:05:ee:51:10:f6: de:49:9d:c7:02:25:e6:13:c0:ed:e0:97:22:5d:67:04:58:29: 86:6f:75:ed:73:ad:67:0e:ca:d5:2b:c7:ea:b5:8a:a0:08:a6: 37:65:57:ae:8d:5e:01:ac:ea:b7:96:da:55:8b:1e:bb:89:b4: 4b:9d:21:bb:f2:a1:73:14:31:01:6c:19:08:a4:f5:5c:f6:25: ce:64:e2:7b:f3:07:ac:ee:26:1f:1c:83:9e:ef:e7:84:bf:69: 42:55:0e:66:49:93:9e:6e:d2:70:7e:81:3d:75:f6:71:be:e3: b1:8c:fa:b5 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICF+0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg4RDNERDE1REREQTQ1 MkYzOTkzRTA1NjdCRUNCQTI5QUUxOTMyOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcig1CbiVXdCSu3JdXm3gntF2VS6UIxpRW8cc7G3YDFE3RDq6D cxkDd2YORhXopZURjh/NE4NpaI/QYLtvjvbWtSsfpYmSgnxN+X6erdfXpbWl1FDY 9C17Xxd+cFV+52bxZQwHs5Hh5NtXfvU5alhtRT0gJlWRj1DVBRDjoD8VMrTlAs7d mdylbglQ3ceLpE9lOJ2kaOcIbQw/FNM4ByzDPPG60CosV5eJdiW4m2wQ5YIg4hEp t6lgWZgzISThiXGFAoW6ys9Id26dwyQn9GJqeqsz9SE6niAxaMaV4fwrQ9qfJez1 P3lQpYdws5K9nr6B4exKcFlq99Nl4Sp8rr0pAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUiNPdFd3aRS85k+BWe+y6Ka4ZMo0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvaU5QZEZkM2FSUzg1ay1CV2UteTZL YTRaTW8wLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAK+2MA0G CSqGSIb3DQEBCwUAA4IBAQAWYLjCo2hrsQHZ9q8t9ka+qJynIcKwNSyNlhghMnrJ yZqTtBMEMLw2MGiRq2ODbvhe/xV8ADi6N+ttbhEXiw+FxbuDYBTC5+2PdMObbVrE k6ZRBBBbh6+3vl5DbxwAAcx/ZV8ncZpIOa7UQSvFe+KzPzExOOlGdJ2xuG6WlIRG V0MlZ5gM0C3+uI8nBe5REPbeSZ3HAiXmE8Dt4JciXWcEWCmGb3Xtc61nDsrVK8fq tYqgCKY3ZVeujV4BrOq3ltpVix67ibRLnSG78qFzFDEBbBkIpPVc9iXOZOJ78wes 7iYfHIOe7+eEv2lCVQ5mSZOebtJwfoE9dfZxvuOxjPq1 -----END CERTIFICATE-----Generated at Mon Apr 14 19:01:09 2025 by rpki-client