$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/4qog_CO1CX9T4Vns-CtV5Y8jcUM.roa File: 4qog_CO1CX9T4Vns-CtV5Y8jcUM.roa (raw, json) Hash identifier: na0I696XJRM+8QNll2trBNNjCeh1FR+oOKO6kAousnw= Subject key identifier: E2:AA:20:FC:23:B5:09:7F:53:E1:59:EC:F8:2B:55:E5:8F:23:71:43 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1870 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4qog_CO1CX9T4Vns-CtV5Y8jcUM.roa Signing time: Mon 10 Feb 2025 14:07:57 +0000 ROA not before: Mon 10 Feb 2025 14:07:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 112.104.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 03:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6256 (0x1870) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:57 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E2AA20FC23B5097F53E159ECF82B55E58F237143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ad:46:0a:44:76:79:cf:38:ef:81:25:32:8b: 19:f1:77:8d:c3:18:f1:75:60:d7:2a:ea:24:00:30: e4:38:83:ff:a1:68:5a:01:2d:b7:5f:43:7c:07:85: 7e:7c:22:79:06:dc:44:24:3d:93:84:ed:41:9e:b7: c2:13:b0:39:61:91:ca:80:f2:e6:3c:ab:e8:bf:a1: 48:d0:39:b8:2c:dd:80:b1:60:57:5d:d0:bf:56:54: 1e:7a:64:ec:b8:b5:a8:0a:b5:44:6d:bc:dc:85:23: 9a:bd:29:2a:a7:07:1f:de:55:88:43:b0:e0:fe:35: 9e:15:3f:4f:65:b4:a3:f6:2d:e2:a9:00:a6:90:5b: 46:84:fc:06:c7:06:63:57:83:0a:e0:15:23:0c:8e: 66:47:0d:41:24:77:25:5d:3c:14:6d:bc:37:6a:52: d2:d0:55:24:4f:1a:69:14:08:6b:4f:08:ff:19:91: b3:01:d5:21:1e:06:17:c3:66:fa:8e:f5:9c:5b:e9: f8:2e:75:04:3a:54:90:4e:ce:f0:6b:05:68:d0:01: 82:3a:3e:d8:09:a7:6a:38:89:2d:c8:95:2f:1b:c7: e1:2f:7b:8a:0a:76:4f:88:45:6f:a2:1f:43:21:0e: 88:6d:c6:a4:63:20:f3:1f:b8:6d:b6:22:fc:ff:ef: a8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AA:20:FC:23:B5:09:7F:53:E1:59:EC:F8:2B:55:E5:8F:23:71:43 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4qog_CO1CX9T4Vns-CtV5Y8jcUM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.104.0.0/16 Signature Algorithm: sha256WithRSAEncryption 39:3e:f9:36:86:9e:48:a1:60:46:c8:0d:e1:91:fc:3f:95:7d: b0:d4:ff:76:83:de:0b:39:bc:8b:68:dc:39:d5:40:a4:c7:44: bf:04:39:d2:56:ec:b0:b2:46:9d:07:ba:a2:53:06:eb:d0:42: 5b:ec:77:59:ea:3d:f4:9b:76:b8:a1:32:44:b1:ad:54:a1:59: 21:0b:44:d5:54:f9:00:89:00:ea:6e:51:ba:7e:49:ea:8c:89: 15:62:a9:33:0c:4c:c6:1f:bc:35:bc:f6:b9:94:e8:d2:71:d6: 43:92:31:7f:fe:08:89:7a:0a:a0:c4:b4:60:bf:a0:68:5d:cb: 87:0c:ea:bf:35:36:d6:a5:2d:80:50:ad:98:77:29:28:4d:f2: 30:23:83:79:09:fd:50:8a:fa:c6:38:07:86:81:9f:ed:5b:4a: 1b:71:3b:92:f9:af:c7:0c:d7:09:d8:52:e9:18:44:79:5e:ec: 0c:43:ce:48:32:aa:94:97:5e:d3:94:59:72:3c:c1:2b:82:75: 23:f3:a4:84:ee:34:16:ca:69:a2:de:5b:7f:2e:2a:e0:1d:2d: 5a:f7:13:a2:da:e1:fc:ca:d7:69:ed:9c:52:16:26:0c:c8:76: 7c:cd:ec:4b:5f:3c:d7:42:33:cb:9e:c4:a1:18:47:5d:0e:dc: f3:03:17:0e -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGHAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3NTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUyQUEyMEZDMjNCNTA5 N0Y1M0UxNTlFQ0Y4MkI1NUU1OEYyMzcxNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDorUYKRHZ5zzjvgSUyixnxd43DGPF1YNcq6iQAMOQ4g/+haFoB LbdfQ3wHhX58InkG3EQkPZOE7UGet8ITsDlhkcqA8uY8q+i/oUjQObgs3YCxYFdd 0L9WVB56ZOy4tagKtURtvNyFI5q9KSqnBx/eVYhDsOD+NZ4VP09ltKP2LeKpAKaQ W0aE/AbHBmNXgwrgFSMMjmZHDUEkdyVdPBRtvDdqUtLQVSRPGmkUCGtPCP8ZkbMB 1SEeBhfDZvqO9Zxb6fgudQQ6VJBOzvBrBWjQAYI6PtgJp2o4iS3IlS8bx+Eve4oK dk+IRW+iH0MhDohtxqRjIPMfuG22Ivz/76iDAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQU4qog/CO1CX9T4Vns+CtV5Y8jcUMwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvNHFvZ19DTzFDWDlUNFZucy1DdFY1 WThqY1VNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAHBoMA0G CSqGSIb3DQEBCwUAA4IBAQA5Pvk2hp5IoWBGyA3hkfw/lX2w1P92g94LObyLaNw5 1UCkx0S/BDnSVuywskadB7qiUwbr0EJb7HdZ6j30m3a4oTJEsa1UoVkhC0TVVPkA iQDqblG6fknqjIkVYqkzDEzGH7w1vPa5lOjScdZDkjF//giJegqgxLRgv6BoXcuH DOq/NTbWpS2AUK2YdykoTfIwI4N5Cf1QivrGOAeGgZ/tW0obcTuS+a/HDNcJ2FLp GER5XuwMQ85IMqqUl17TlFlyPMErgnUj86SE7jQWymmi3lt/LirgHS1a9xOi2uH8 ytdp7ZxSFiYMyHZ8zexLXzzXQjPLnsShGEddDtzzAxcO -----END CERTIFICATE-----Generated at Fri May 9 02:40:24 2025 by rpki-client