$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/G2Tgg57ISX5HxQYygnourBLbhaY.roa File: G2Tgg57ISX5HxQYygnourBLbhaY.roa (raw, json) Hash identifier: W7+XrImlbNQrd/vG/VqFFNa6PB3L36kSRV37pDYiI+Y= Subject key identifier: 1B:64:E0:83:9E:C8:49:7E:47:C5:06:32:82:7A:2E:AC:12:DB:85:A6 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 177A Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/G2Tgg57ISX5HxQYygnourBLbhaY.roa Signing time: Mon 10 Feb 2025 14:06:56 +0000 ROA not before: Mon 10 Feb 2025 14:06:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18049 IP address blocks: 106.107.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 21:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6010 (0x177a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:06:56 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1B64E0839EC8497E47C50632827A2EAC12DB85A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fb:33:c9:d8:e4:34:b3:f2:9a:f1:c9:2c:6f: 89:6e:53:e2:f3:38:ef:ef:d4:e8:15:2e:9e:7c:00: d6:54:53:40:01:ea:c5:09:2f:2b:89:c2:bd:13:2c: 99:12:df:b7:3f:b8:71:32:d1:09:c9:4e:5b:4d:f0: da:a2:8a:20:d6:1f:fa:69:8a:9d:52:71:b3:1c:39: aa:6e:21:aa:c3:9d:d8:3c:6a:bb:8e:83:59:d6:d5: d5:4c:e9:f7:18:c7:93:b9:45:d9:d2:a3:ec:12:2b: 33:13:8d:9d:eb:11:5c:10:ee:27:c6:94:5a:bd:4f: 0b:49:db:04:8b:73:41:80:7d:a1:be:29:b7:c8:6f: bb:d4:9f:ee:7f:bc:63:c1:8f:ed:e8:d4:83:80:a1: 9a:e8:f5:89:51:89:f8:24:44:7c:af:cb:4f:2a:68: e8:6b:c4:3b:bc:54:c5:10:66:33:e0:ca:c3:86:72: 4f:ca:c4:6c:6c:64:9f:c8:b0:26:a9:4c:66:02:13: 0b:40:c9:a5:e4:05:bd:74:76:0f:f5:78:58:d5:03: 6f:96:e0:a0:49:46:6f:2b:5f:12:83:08:3e:3b:f1: c3:f4:3d:68:b8:77:d2:ed:c9:5b:c2:84:d2:9f:af: 37:f0:64:3e:80:77:8d:bf:d4:f5:d9:1c:0a:28:e0: ff:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:64:E0:83:9E:C8:49:7E:47:C5:06:32:82:7A:2E:AC:12:DB:85:A6 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/G2Tgg57ISX5HxQYygnourBLbhaY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.107.240.0/20 Signature Algorithm: sha256WithRSAEncryption 60:80:96:e9:fd:cc:bb:42:f1:24:43:aa:9e:c7:ec:9f:85:52: 34:4e:f7:75:8e:8e:ee:d9:ca:ec:6e:61:24:b3:29:8f:44:6b: 91:49:49:80:e0:83:0d:20:b2:e3:d9:be:e6:c6:eb:ed:ce:7a: b1:56:a0:0c:bb:41:88:8a:e3:a5:d4:4e:09:17:b9:61:f4:b6: b7:9f:b5:65:4b:64:8a:96:e2:75:ff:91:9d:d3:4e:32:ea:50: 79:17:58:f9:7c:68:1e:b4:75:60:75:a2:57:2d:51:bb:b0:cb: db:7f:e9:82:23:7b:95:cc:12:27:c2:b3:35:09:be:b2:97:c9: d8:d9:77:fd:b9:13:29:4e:96:01:1c:0b:7a:cc:cd:78:29:35: b8:b1:f2:1a:32:37:9c:87:83:05:da:94:5c:b6:92:4b:d8:e8: 5e:8f:3d:05:73:64:03:ae:90:8e:2e:f7:cf:e3:53:ce:fb:2d: b5:b2:92:ac:35:b0:89:bf:3a:c8:96:00:35:c5:97:f2:70:c7: 24:4a:40:1d:cf:8a:d3:0b:d6:91:ff:80:28:61:af:a8:41:ae: 88:14:e2:90:46:7e:44:a5:d8:09:27:57:ab:a8:65:e1:a2:65: 3a:38:0e:c7:c4:c9:3b:67:d0:ff:50:be:3b:62:52:49:73:d3: 52:cd:64:56 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICF3owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA2NTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFCNjRFMDgzOUVDODQ5 N0U0N0M1MDYzMjgyN0EyRUFDMTJEQjg1QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDK+zPJ2OQ0s/Ka8cksb4luU+LzOO/v1OgVLp58ANZUU0AB6sUJ LyuJwr0TLJkS37c/uHEy0QnJTltN8NqiiiDWH/ppip1ScbMcOapuIarDndg8aruO g1nW1dVM6fcYx5O5RdnSo+wSKzMTjZ3rEVwQ7ifGlFq9TwtJ2wSLc0GAfaG+KbfI b7vUn+5/vGPBj+3o1IOAoZro9YlRifgkRHyvy08qaOhrxDu8VMUQZjPgysOGck/K xGxsZJ/IsCapTGYCEwtAyaXkBb10dg/1eFjVA2+W4KBJRm8rXxKDCD478cP0PWi4 d9LtyVvChNKfrzfwZD6Ad42/1PXZHAoo4P8hAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUG2Tgg57ISX5HxQYygnourBLbhaYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRzJUZ2c1N0lTWDVIeFFZeWdub3Vy QkxiaGFZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGpr8DAN BgkqhkiG9w0BAQsFAAOCAQEAYICW6f3Mu0LxJEOqnsfsn4VSNE73dY6O7tnK7G5h JLMpj0RrkUlJgOCDDSCy49m+5sbr7c56sVagDLtBiIrjpdROCRe5YfS2t5+1ZUtk ipbidf+RndNOMupQeRdY+XxoHrR1YHWiVy1Ru7DL23/pgiN7lcwSJ8KzNQm+spfJ 2Nl3/bkTKU6WARwLeszNeCk1uLHyGjI3nIeDBdqUXLaSS9joXo89BXNkA66Qji73 z+NTzvsttbKSrDWwib86yJYANcWX8nDHJEpAHc+K0wvWkf+AKGGvqEGuiBTikEZ+ RKXYCSdXq6hl4aJlOjgOx8TJO2fQ/1C+O2JSSXPTUs1kVg== -----END CERTIFICATE-----Generated at Sat Apr 26 17:57:41 2025 by rpki-client