$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/8hE8bPCDM2peqKYZ8RnIZ2ghdGg.roa File: 8hE8bPCDM2peqKYZ8RnIZ2ghdGg.roa (raw, json) Hash identifier: smGkIiha+7Vk4KO9JJDiDGpIe+jDDTRlk8iE6U7zZ6U= Subject key identifier: F2:11:3C:6C:F0:83:33:6A:5E:A8:A6:19:F1:19:C8:67:68:21:74:68 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1793 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8hE8bPCDM2peqKYZ8RnIZ2ghdGg.roa Signing time: Mon 10 Feb 2025 14:07:03 +0000 ROA not before: Mon 10 Feb 2025 14:07:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131584 IP address blocks: 106.105.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6035 (0x1793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:03 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F2113C6CF083336A5EA8A619F119C86768217468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4b:a1:44:21:d5:06:c5:19:52:52:49:87:04: 1f:46:e6:b0:b9:37:15:c0:8a:77:7e:ae:31:33:1f: b3:eb:9a:7b:63:4d:91:fa:1e:cf:9f:0b:a4:c0:9f: 2f:b9:16:fe:8a:30:14:95:e7:7b:25:25:c8:ba:80: 22:b7:c0:2e:e8:0e:1a:63:99:e5:a0:e9:bd:b1:5e: e0:f1:b1:ac:71:00:46:2f:7f:98:5a:06:4f:a7:3c: 31:17:4d:44:88:85:a3:a2:76:e8:86:9f:ea:66:19: c7:9b:17:f1:3d:37:6a:ce:f4:cf:55:a8:eb:52:e4: fd:1b:99:f4:4e:61:20:2b:f2:f8:3d:b1:fe:7e:71: 93:9d:cd:3f:c3:02:9d:d5:e9:b4:3f:23:35:4f:85: c6:3e:06:46:3e:97:5d:f6:fd:b4:51:03:c0:a2:0d: bd:cb:db:b0:0f:30:9b:6f:67:a9:a7:a9:df:59:2e: be:c1:51:84:a8:0b:07:44:df:6b:2d:00:24:d8:31: 71:66:9a:11:13:c1:d7:9e:3d:55:03:ef:71:ec:67: 07:1f:e0:57:e7:79:bd:6e:97:a6:1f:83:01:e5:07: d4:53:ee:6c:92:11:34:d6:e3:0f:57:1e:0b:bc:37: 40:8a:9a:84:6e:8d:71:4d:03:ab:a4:f9:65:05:27: 92:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:11:3C:6C:F0:83:33:6A:5E:A8:A6:19:F1:19:C8:67:68:21:74:68 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8hE8bPCDM2peqKYZ8RnIZ2ghdGg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.176.0/23 Signature Algorithm: sha256WithRSAEncryption 08:45:98:a1:05:76:1b:bf:d6:bc:38:ee:88:fd:5c:d5:35:a7: 49:e0:9d:ea:d0:8a:9a:6b:3b:7d:48:51:ad:ba:14:75:9e:a3: 55:63:be:74:88:f4:bc:23:6f:1f:e2:c1:e2:c0:1c:45:e8:b3: cd:8f:93:61:e6:0d:1a:4a:ec:46:c9:19:11:7a:7b:55:73:46: cb:f2:01:95:f4:e5:08:e0:7e:7f:9f:44:07:4f:6f:34:01:16: a3:5c:b3:0d:34:6e:0b:cb:c3:c0:3a:bc:9b:2a:b9:63:c2:68: 30:ff:c5:3f:ff:08:f9:72:c4:87:54:69:e9:e8:82:53:04:c4: ce:49:12:3a:72:9d:56:af:6f:83:af:1e:1b:4f:24:59:ab:b1: 85:f0:73:d1:1b:35:13:af:7f:c4:67:36:4e:aa:72:71:2c:0d: 40:39:ae:e5:16:58:c3:bd:78:27:b4:66:4f:aa:e6:1a:0a:56: 2a:db:ae:a6:2a:ab:9e:26:e4:89:6f:4f:c5:8c:f7:5b:e4:58: f0:2e:8b:fa:b7:01:39:cb:d6:56:7b:03:54:eb:8c:81:00:ff: 9f:6f:c5:83:b8:93:be:76:7e:d5:a9:1e:45:79:6d:bd:32:55: 0c:76:4e:db:9d:a1:11:b0:f2:ed:ba:12:9b:dd:9a:e8:50:d2: e5:a6:c8:87 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICF5MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYyMTEzQzZDRjA4MzMz NkE1RUE4QTYxOUYxMTlDODY3NjgyMTc0NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBS6FEIdUGxRlSUkmHBB9G5rC5NxXAind+rjEzH7PrmntjTZH6 Hs+fC6TAny+5Fv6KMBSV53slJci6gCK3wC7oDhpjmeWg6b2xXuDxsaxxAEYvf5ha Bk+nPDEXTUSIhaOiduiGn+pmGcebF/E9N2rO9M9VqOtS5P0bmfROYSAr8vg9sf5+ cZOdzT/DAp3V6bQ/IzVPhcY+BkY+l132/bRRA8CiDb3L27APMJtvZ6mnqd9ZLr7B UYSoCwdE32stACTYMXFmmhETwdeePVUD73HsZwcf4Ffneb1ul6YfgwHlB9RT7myS ETTW4w9XHgu8N0CKmoRujXFNA6uk+WUFJ5KDAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU8hE8bPCDM2peqKYZ8RnIZ2ghdGgwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvOGhFOGJQQ0RNMnBlcUtZWjhSbkla MmdoZEdnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWppsDAN BgkqhkiG9w0BAQsFAAOCAQEACEWYoQV2G7/WvDjuiP1c1TWnSeCd6tCKmms7fUhR rboUdZ6jVWO+dIj0vCNvH+LB4sAcReizzY+TYeYNGkrsRskZEXp7VXNGy/IBlfTl COB+f59EB09vNAEWo1yzDTRuC8vDwDq8myq5Y8JoMP/FP/8I+XLEh1Rp6eiCUwTE zkkSOnKdVq9vg68eG08kWauxhfBz0Rs1E69/xGc2TqpycSwNQDmu5RZYw714J7Rm T6rmGgpWKtuupiqrnibkiW9PxYz3W+RY8C6L+rcBOcvWVnsDVOuMgQD/n2/Fg7iT vnZ+1akeRXltvTJVDHZO252hEbDy7boSm92a6FDS5abIhw== -----END CERTIFICATE-----Generated at Sat May 3 20:39:03 2025 by rpki-client