$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/IlenO6gLy_WSup6mEZHn4QkiLgA.roa File: IlenO6gLy_WSup6mEZHn4QkiLgA.roa (raw, json) Hash identifier: Dp08m69GCDFKTY1ro9nM4yRCohaYIlR4/OudXrMcgPQ= Subject key identifier: 22:57:A7:3B:A8:0B:CB:F5:92:BA:9E:A6:11:91:E7:E1:09:22:2E:00 Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 0F6C Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IlenO6gLy_WSup6mEZHn4QkiLgA.roa Signing time: Mon 10 Feb 2025 14:08:04 +0000 ROA not before: Mon 10 Feb 2025 14:08:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 192.72.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3948 (0xf6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Feb 10 14:08:04 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2257A73BA80BCBF592BA9EA61191E7E109222E00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:aa:25:63:b9:51:d0:fd:93:8b:ce:51:c5:13: dc:17:98:fa:58:10:25:c4:7e:42:02:a4:d0:e2:29: 15:b0:88:71:f6:2b:84:91:d8:fd:e6:a6:6d:70:0c: eb:74:5b:29:35:d6:90:4d:f9:63:25:63:19:80:2b: ee:06:d3:2b:f6:c2:e0:6b:54:c5:18:ab:f0:69:6f: b5:54:ea:c1:0f:21:3e:13:d4:4b:3f:ff:92:44:28: 1c:3f:68:58:50:fc:90:44:c5:5e:e8:64:ec:c0:2f: be:c6:f8:7e:f3:0a:5b:cc:21:ca:e3:c9:a9:96:e0: 96:f8:a6:aa:e2:24:f7:0d:ea:21:42:99:a0:44:bf: 50:98:95:03:13:d3:3f:15:16:8e:79:a3:2e:4c:5f: 37:3d:14:09:a8:67:d4:6b:4d:cf:e9:92:be:fb:46: 02:6c:46:d1:2d:02:62:07:da:3a:78:66:55:57:01: 72:d6:f2:d7:89:ec:93:98:6b:28:e2:b6:04:f5:f5: fb:fa:5e:8a:d8:b1:a9:00:cf:b9:1a:2f:37:e9:44: c9:bc:1e:1e:93:6c:7a:fb:bd:56:21:89:f8:08:69: 5e:11:9f:75:30:b3:90:53:34:67:2c:50:b1:33:5b: 9e:f1:03:98:0c:c4:9d:aa:e4:ce:bb:ea:a0:c1:10: cb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:57:A7:3B:A8:0B:CB:F5:92:BA:9E:A6:11:91:E7:E1:09:22:2E:00 X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IlenO6gLy_WSup6mEZHn4QkiLgA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.192.0/19 Signature Algorithm: sha256WithRSAEncryption 1e:91:5e:ff:8f:f3:01:d4:44:cb:c0:d2:c4:0d:e0:aa:48:3b: 2f:60:36:24:0c:22:57:b2:e8:08:8d:29:ac:1a:88:14:2e:60: 96:3e:cc:d0:ce:a0:a9:ac:d5:89:7e:52:af:cf:26:87:08:0f: 5c:4b:57:73:2a:4e:80:de:2a:0a:15:4d:bc:f2:db:9c:75:c7: 98:80:04:22:a1:d4:b7:86:fb:5a:50:25:14:11:45:08:e2:01: 06:86:f6:06:7b:8e:2f:c2:79:96:91:eb:6a:30:49:5d:4f:48: 12:7f:ee:dd:5c:76:bf:4e:f7:cc:9b:ed:3f:2d:df:3e:f2:69: d3:29:e9:60:2d:68:de:dc:f9:ff:39:59:97:56:d6:65:95:d1: bc:3e:b2:e0:d0:cc:c0:a9:79:93:03:6c:32:1f:2a:8b:84:04: 87:f9:54:16:38:18:56:34:47:a5:e8:47:4f:21:8c:7a:8f:ac: 69:95:38:71:09:f4:b7:cb:61:7e:f6:5b:8e:13:01:1d:1e:7b: c9:54:b8:16:d1:4c:ca:a8:70:06:7e:43:df:f6:9b:52:60:ab: 56:b1:28:3f:52:12:c0:28:62:88:df:72:62:a2:7f:19:82:b4: f9:c5:89:ed:09:e4:be:e7:36:d6:9f:a7:b3:91:a8:e8:cb:af: dd:a2:63:6b -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD2wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNTAyMTAx NDA4MDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIyNTdBNzNCQTgwQkNC RjU5MkJBOUVBNjExOTFFN0UxMDkyMjJFMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhqiVjuVHQ/ZOLzlHFE9wXmPpYECXEfkICpNDiKRWwiHH2K4SR 2P3mpm1wDOt0Wyk11pBN+WMlYxmAK+4G0yv2wuBrVMUYq/Bpb7VU6sEPIT4T1Es/ /5JEKBw/aFhQ/JBExV7oZOzAL77G+H7zClvMIcrjyamW4Jb4pqriJPcN6iFCmaBE v1CYlQMT0z8VFo55oy5MXzc9FAmoZ9RrTc/pkr77RgJsRtEtAmIH2jp4ZlVXAXLW 8teJ7JOYayjitgT19fv6XorYsakAz7kaLzfpRMm8Hh6TbHr7vVYhifgIaV4Rn3Uw s5BTNGcsULEzW57xA5gMxJ2q5M676qDBEMu/AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUIlenO6gLy/WSup6mEZHn4QkiLgAwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSWxlbk82Z0x5X1dTdXA2bUVaSG40 UWtpTGdBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcBIwDAN BgkqhkiG9w0BAQsFAAOCAQEAHpFe/4/zAdREy8DSxA3gqkg7L2A2JAwiV7LoCI0p rBqIFC5glj7M0M6gqazViX5Sr88mhwgPXEtXcypOgN4qChVNvPLbnHXHmIAEIqHU t4b7WlAlFBFFCOIBBob2BnuOL8J5lpHrajBJXU9IEn/u3Vx2v073zJvtPy3fPvJp 0ynpYC1o3tz5/zlZl1bWZZXRvD6y4NDMwKl5kwNsMh8qi4QEh/lUFjgYVjRHpehH TyGMeo+saZU4cQn0t8thfvZbjhMBHR57yVS4FtFMyqhwBn5D3/abUmCrVrEoP1IS wChiiN9yYqJ/GYK0+cWJ7Qnkvuc21p+ns5Go6Muv3aJjaw== -----END CERTIFICATE-----Generated at Sat Apr 26 14:37:16 2025 by rpki-client