$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Lf1ypfGm_BaLR85yLrCKS_CXrU0.roa File: Lf1ypfGm_BaLR85yLrCKS_CXrU0.roa (raw, json) Hash identifier: vV6a3Quiw6dfrrgEXlV9gw27mqNuG7+1a5uCqkmziKM= Subject key identifier: 2D:FD:72:A5:F1:A6:FC:16:8B:47:CE:72:2E:B0:8A:4B:F0:97:AD:4D Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 186B Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Lf1ypfGm_BaLR85yLrCKS_CXrU0.roa Signing time: Mon 10 Feb 2025 14:07:56 +0000 ROA not before: Mon 10 Feb 2025 14:07:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 122.147.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6251 (0x186b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:56 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2DFD72A5F1A6FC168B47CE722EB08A4BF097AD4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6c:7d:4d:9b:e3:84:b1:ad:50:1f:eb:ec:79: ec:1c:16:05:41:94:f0:24:e7:c1:45:4c:e4:58:02: b4:fb:e5:f0:fc:d7:05:de:56:ea:57:96:f5:e8:aa: c5:bd:91:b6:6a:51:57:2e:0c:69:b1:31:41:51:6e: 9f:99:3e:4e:5d:ae:1c:7f:c3:40:47:dc:cb:fb:25: d0:09:9c:e3:3a:e5:66:1b:62:48:71:c3:ab:a3:15: 41:87:a0:08:b7:2c:d9:38:07:a2:84:a3:22:55:12: 2d:d7:10:71:dd:31:7f:ac:10:3d:21:03:4f:08:28: ce:e1:f9:5d:cb:12:56:ed:fa:0c:88:2f:d8:31:0d: 75:9a:bd:c0:81:db:9b:5d:42:74:42:67:21:d0:19: 01:44:a8:f7:bd:a2:a5:47:f3:de:75:96:d2:7a:2b: ba:2d:4c:b9:13:0c:29:13:f3:1f:a5:b7:f5:35:0d: 70:ce:d3:e5:32:1f:6e:ee:15:50:91:de:c0:db:62: 78:df:fd:09:b0:90:06:55:d1:12:8f:fa:a7:f0:14: ff:0d:ea:b7:75:f5:90:b0:e4:27:b8:d4:91:c6:02: 71:3a:09:e7:f3:42:fb:17:52:2e:80:dd:63:1f:8c: 24:51:c3:12:57:68:2d:df:4c:ff:14:5a:68:25:81: ce:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FD:72:A5:F1:A6:FC:16:8B:47:CE:72:2E:B0:8A:4B:F0:97:AD:4D X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Lf1ypfGm_BaLR85yLrCKS_CXrU0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.147.0.0/16 Signature Algorithm: sha256WithRSAEncryption c7:2c:d9:bb:37:d2:78:36:af:b2:67:71:7f:ec:c4:55:62:55: 63:ab:11:39:c8:72:65:63:9e:37:f4:eb:8f:14:b7:42:e8:94: d8:fb:a5:64:e7:76:ef:29:bb:33:40:e6:91:17:56:9c:16:32: a6:33:65:0b:76:c8:66:41:65:16:ee:b0:9c:c8:ba:fa:ca:89: a8:16:01:d4:a9:7c:eb:d5:32:4b:a8:4e:ed:44:be:0c:b7:bd: b1:89:b0:c2:ea:cb:c5:e8:66:9c:cd:9b:23:c3:e0:8e:f3:cf: 4c:fc:0b:48:99:68:e0:47:be:42:f9:31:60:99:a4:9c:3f:65: 96:e5:21:7e:73:ce:dc:7f:15:1c:7a:23:5e:12:ee:81:98:3f: 96:d2:45:f5:47:d6:63:44:d5:aa:c3:a0:5d:9e:8e:59:f2:63: b0:6b:ae:80:39:cd:75:d5:cc:11:82:d2:ce:40:7a:0d:84:56: 01:27:6f:3d:62:b6:84:b9:82:33:98:da:9e:1b:c0:08:49:0b: 93:0e:4f:c3:bb:2f:d6:d5:55:40:07:15:74:35:d7:ce:9f:48: 85:dd:7c:4a:21:13:d5:06:36:2e:a4:df:c7:5e:35:7f:20:b4: d5:22:c0:9e:ab:f8:bd:58:f5:1e:c2:2c:b7:93:48:8a:04:c5: d2:ea:a3:98 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGGswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3NTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJERkQ3MkE1RjFBNkZD MTY4QjQ3Q0U3MjJFQjA4QTRCRjA5N0FENEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIbH1Nm+OEsa1QH+vseewcFgVBlPAk58FFTORYArT75fD81wXe VupXlvXoqsW9kbZqUVcuDGmxMUFRbp+ZPk5drhx/w0BH3Mv7JdAJnOM65WYbYkhx w6ujFUGHoAi3LNk4B6KEoyJVEi3XEHHdMX+sED0hA08IKM7h+V3LElbt+gyIL9gx DXWavcCB25tdQnRCZyHQGQFEqPe9oqVH8951ltJ6K7otTLkTDCkT8x+lt/U1DXDO 0+UyH27uFVCR3sDbYnjf/QmwkAZV0RKP+qfwFP8N6rd19ZCw5Ce41JHGAnE6Cefz QvsXUi6A3WMfjCRRwxJXaC3fTP8UWmglgc4BAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQULf1ypfGm/BaLR85yLrCKS/CXrU0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvTGYxeXBmR21fQmFMUjg1eUxyQ0tT X0NYclUwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAHqTMA0G CSqGSIb3DQEBCwUAA4IBAQDHLNm7N9J4Nq+yZ3F/7MRVYlVjqxE5yHJlY5439OuP FLdC6JTY+6Vk53bvKbszQOaRF1acFjKmM2ULdshmQWUW7rCcyLr6yomoFgHUqXzr 1TJLqE7tRL4Mt72xibDC6svF6GaczZsjw+CO889M/AtImWjgR75C+TFgmaScP2WW 5SF+c87cfxUceiNeEu6BmD+W0kX1R9ZjRNWqw6Bdno5Z8mOwa66AOc111cwRgtLO QHoNhFYBJ289YraEuYIzmNqeG8AISQuTDk/Duy/W1VVABxV0NdfOn0iF3XxKIRPV BjYupN/HXjV/ILTVIsCeq/i9WPUewiy3k0iKBMXS6qOY -----END CERTIFICATE-----Generated at Sat Apr 26 14:42:20 2025 by rpki-client