$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/6W4Ttdsr2z9T9X1XQgDbOPHFIFE.roa File: 6W4Ttdsr2z9T9X1XQgDbOPHFIFE.roa (raw, json) Hash identifier: owy4AoSck8njKOQzJpKmrBBglpYlI2U/k4tAanSVF6s= Subject key identifier: E9:6E:13:B5:DB:2B:DB:3F:53:F5:7D:57:42:00:DB:38:F1:C5:20:51 Certificate issuer: /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC Certificate serial: 0CCD Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/6W4Ttdsr2z9T9X1XQgDbOPHFIFE.roa Signing time: Mon 10 Feb 2025 14:08:32 +0000 ROA not before: Mon 10 Feb 2025 14:08:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4783 IP address blocks: 210.67.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3277 (0xccd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC Validity Not Before: Feb 10 14:08:32 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E96E13B5DB2BDB3F53F57D574200DB38F1C52051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e0:67:13:93:bd:b6:04:a5:56:92:81:eb:62: 33:b5:37:63:f9:d7:cb:99:47:44:c1:9d:ff:75:d3: 79:dc:b7:04:41:e7:a0:07:aa:1f:a1:a2:27:fe:64: 51:8b:19:97:49:e4:f4:76:98:d9:6f:27:81:7d:43: b0:ae:15:24:bb:d3:76:d8:18:6a:c9:f0:d3:9e:08: 0a:fe:bc:a5:af:1c:eb:06:d9:01:92:c7:da:11:a2: 0d:14:66:be:bb:42:f7:48:51:7f:64:bb:51:d8:f4: cc:f3:a6:93:ca:b7:21:15:76:89:48:ec:9a:d7:61: 46:10:e8:2f:7d:f1:9d:1c:8e:0c:f7:31:2c:5b:32: fe:32:cd:dc:59:81:60:c8:ed:4c:1d:67:19:52:22: 10:50:7c:4e:96:fb:5f:7a:8b:2d:14:aa:87:e9:d8: fa:d8:9b:6f:07:c4:9a:5b:f3:1f:4a:a4:ac:2b:d7: 8b:4a:b7:9c:25:eb:ee:66:d3:be:14:24:56:cd:29: 8a:a2:b7:e2:af:4b:cb:61:39:be:94:2c:d5:c4:43: 49:56:84:f7:87:9d:ad:7a:a7:a0:1c:c4:60:b0:51: b7:1b:c7:58:29:a5:37:b4:f0:bc:08:85:1b:e8:ed: eb:23:29:96:72:27:7f:8c:39:36:76:5b:90:a8:fb: a4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6E:13:B5:DB:2B:DB:3F:53:F5:7D:57:42:00:DB:38:F1:C5:20:51 X509v3 Authority Key Identifier: keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/6W4Ttdsr2z9T9X1XQgDbOPHFIFE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.67.128.0/20 Signature Algorithm: sha256WithRSAEncryption 16:b7:0d:d2:b8:94:25:b8:66:20:1f:49:d1:03:8d:f4:55:e6: 28:e9:72:d7:f2:f5:21:75:2b:f9:20:d5:f7:b9:51:de:36:1c: 0a:69:89:bd:6f:ef:ad:41:89:10:32:78:5e:99:ac:08:ac:d8: 2a:f8:13:4c:69:2a:02:d4:b4:3d:ab:31:fc:12:90:2d:f1:38: 40:cc:26:29:04:c0:fc:79:cb:9f:84:ea:5d:14:9d:be:78:cb: b0:5e:83:0d:0d:7b:76:3a:d6:c7:2d:cd:31:35:d9:c6:39:68: 3d:c1:8b:dd:b5:8e:8f:7a:96:9d:3b:98:6f:5c:9c:64:31:ad: 67:b9:d6:ac:dd:61:a5:a6:c0:a3:84:d3:46:a5:6c:0d:5b:8d: 81:4b:f3:c5:9c:8d:87:33:e0:43:4b:8c:ee:56:b0:e5:0c:d3: a8:d6:12:49:e3:5a:4e:8b:59:90:28:e0:49:a6:25:28:83:0b: a9:fe:02:d7:8c:58:b7:64:c4:ec:b4:f0:26:aa:a3:83:2d:b8: 26:f5:9f:a6:fa:e6:b6:0d:b5:47:3c:96:5b:42:dc:7c:f9:a0: c1:30:be:4f:56:a0:7a:f0:b6:8a:d2:56:3a:1a:e7:f0:ec:c1: 6c:fb:b6:97:5d:aa:5d:d6:a4:0c:76:67:38:e9:f9:17:0f:8c: f2:af:78:eb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDM0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTZC Qjk0QjQ1N0Y5RDgyQTI5QjVCMkZEOUYzQTQ0MTg4OTlFNzFFQzAeFw0yNTAyMTAx NDA4MzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU5NkUxM0I1REIyQkRC M0Y1M0Y1N0Q1NzQyMDBEQjM4RjFDNTIwNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDd4GcTk722BKVWkoHrYjO1N2P518uZR0TBnf9103nctwRB56AH qh+hoif+ZFGLGZdJ5PR2mNlvJ4F9Q7CuFSS703bYGGrJ8NOeCAr+vKWvHOsG2QGS x9oRog0UZr67QvdIUX9ku1HY9MzzppPKtyEVdolI7JrXYUYQ6C998Z0cjgz3MSxb Mv4yzdxZgWDI7UwdZxlSIhBQfE6W+196iy0Uqofp2PrYm28HxJpb8x9KpKwr14tK t5wl6+5m074UJFbNKYqit+KvS8thOb6ULNXEQ0lWhPeHna16p6AcxGCwUbcbx1gp pTe08LwIhRvo7esjKZZyJ3+MOTZ2W5Co+6QlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU6W4Ttdsr2z9T9X1XQgDbOPHFIFEwHwYDVR0jBBgwFoAUlruUtFf52CoptbL9 nzpEGImecewwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1lTTkVU L2xydVV0RmY1MkNvcHRiTDluenBFR0ltZWNldy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbHJ1VXRGZjUyQ29wdGJMOW56cEVHSW1lY2V3LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1lTTkVULzZXNFR0ZHNyMno5VDlYMVhR Z0RiT1BIRklGRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATS Q4AwDQYJKoZIhvcNAQELBQADggEBABa3DdK4lCW4ZiAfSdEDjfRV5ijpctfy9SF1 K/kg1fe5Ud42HAppib1v761BiRAyeF6ZrAis2Cr4E0xpKgLUtD2rMfwSkC3xOEDM JikEwPx5y5+E6l0Unb54y7Begw0Ne3Y61sctzTE12cY5aD3Bi921jo96lp07mG9c nGQxrWe51qzdYaWmwKOE00albA1bjYFL88WcjYcz4ENLjO5WsOUM06jWEknjWk6L WZAo4EmmJSiDC6n+AteMWLdkxOy08Caqo4MtuCb1n6b65rYNtUc8lltC3Hz5oMEw vk9WoHrwtorSVjoa5/DswWz7tpddql3WpAx2Zzjp+RcPjPKveOs= -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:38 2025 by rpki-client