$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/QXXYSF2EeJ93qw-BEYxcelPtqng.roa File: QXXYSF2EeJ93qw-BEYxcelPtqng.roa (raw, json) Hash identifier: Tuivs4KX2iPOh4fvs6RA5NNT200tYgF+rcfpio+PJPE= Subject key identifier: 41:75:D8:48:5D:84:78:9F:77:AB:0F:81:11:8C:5C:7A:53:ED:AA:78 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 177D Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QXXYSF2EeJ93qw-BEYxcelPtqng.roa Signing time: Mon 10 Feb 2025 14:06:57 +0000 ROA not before: Mon 10 Feb 2025 14:06:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 122.147.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6013 (0x177d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:06:57 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4175D8485D84789F77AB0F81118C5C7A53EDAA78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:83:63:bb:12:34:ea:51:cd:04:98:96:1f: d5:ec:cf:c0:83:88:25:19:bc:58:60:1a:00:1d:8e: 0f:3f:47:31:7f:c4:26:7f:ec:55:78:b7:84:21:db: f6:51:97:0c:15:a9:65:5d:e6:6b:88:14:54:98:14: 13:22:99:ab:51:a4:d4:c3:03:e4:50:d2:10:46:6c: 92:43:16:5b:d7:19:7b:71:21:96:fa:89:e4:2f:5a: e2:cd:60:9e:53:58:1c:91:ca:e4:cc:b1:a9:a8:e4: 00:20:0d:66:00:18:7f:33:63:67:58:5e:e1:21:75: 21:24:a3:b4:83:5b:81:f1:81:b6:a1:ea:c3:a0:06: 56:64:b8:84:bd:e5:e4:38:9f:17:ae:a9:d0:e8:c6: 63:96:11:87:fb:d6:72:58:47:39:60:9d:ac:bc:20: 21:dd:d5:0b:19:fd:50:fe:6e:4f:7b:1c:5a:30:7c: 8a:88:37:fa:e5:5c:b3:df:eb:27:11:2e:ff:7b:fd: 0b:a2:c6:07:3c:6a:d8:67:1d:c7:0e:4f:26:3f:52: e4:97:24:f9:83:41:6a:04:5c:5c:f9:15:eb:b1:00: 5a:0b:4e:88:00:62:74:8c:c0:c7:78:14:57:f2:71: 5c:07:4d:ef:ff:2a:0f:d4:40:f6:ab:be:73:be:87: 0d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:75:D8:48:5D:84:78:9F:77:AB:0F:81:11:8C:5C:7A:53:ED:AA:78 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QXXYSF2EeJ93qw-BEYxcelPtqng.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.147.166.0/23 Signature Algorithm: sha256WithRSAEncryption 14:a2:b5:61:32:92:61:29:54:a0:cb:5b:37:ec:fd:bd:0b:a3: f6:fb:d2:a8:96:6b:f3:01:f0:9f:2f:ee:72:3b:9e:00:50:68: 85:0f:d0:10:52:48:57:2b:5b:9e:9f:42:3f:61:24:b5:4b:fa: 34:7a:13:58:11:23:f2:ae:ca:60:e3:1c:fe:73:a0:8c:d9:08: fc:43:16:c7:99:41:19:03:ed:b9:a9:39:d5:b0:13:32:da:11: 20:0e:17:1a:07:60:e6:0b:67:5c:64:3c:2f:fa:6c:c9:05:0a: b5:5e:f1:16:60:1c:df:53:d2:4e:f1:68:7e:09:c3:4d:90:15: e8:2f:7f:5b:c9:d9:4a:c8:c3:24:fb:2d:d8:fc:bd:57:b2:2d: 04:e5:98:ac:28:eb:97:80:76:5c:60:e7:8f:5d:17:e5:56:e9: 10:d1:58:43:ff:df:8e:24:c1:1f:19:ed:32:f6:7b:53:5d:aa: 64:a9:14:9a:22:67:a1:5e:6c:04:a5:13:35:5c:0f:4b:a9:7d: 8e:9a:f6:44:c7:d6:c1:a5:bb:38:13:bb:73:dc:f2:74:2c:03: 7f:80:3a:1a:8c:c1:93:67:73:5a:25:61:98:2c:c2:60:84:0b: d8:e8:70:c6:77:07:13:57:67:7d:82:7d:03:eb:e6:a8:a8:8f: e7:7f:ac:71 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICF30wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA2NTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQxNzVEODQ4NUQ4NDc4 OUY3N0FCMEY4MTExOEM1QzdBNTNFREFBNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKMYNjuxI06lHNBJiWH9Xsz8CDiCUZvFhgGgAdjg8/RzF/xCZ/ 7FV4t4Qh2/ZRlwwVqWVd5muIFFSYFBMimatRpNTDA+RQ0hBGbJJDFlvXGXtxIZb6 ieQvWuLNYJ5TWByRyuTMsamo5AAgDWYAGH8zY2dYXuEhdSEko7SDW4Hxgbah6sOg BlZkuIS95eQ4nxeuqdDoxmOWEYf71nJYRzlgnay8ICHd1QsZ/VD+bk97HFowfIqI N/rlXLPf6ycRLv97/Quixgc8athnHccOTyY/UuSXJPmDQWoEXFz5FeuxAFoLTogA YnSMwMd4FFfycVwHTe//Kg/UQParvnO+hw3BAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUQXXYSF2EeJ93qw+BEYxcelPtqngwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvUVhYWVNGMkVlSjkzcXctQkVZeGNl bFB0cW5nLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAXqTpjAN BgkqhkiG9w0BAQsFAAOCAQEAFKK1YTKSYSlUoMtbN+z9vQuj9vvSqJZr8wHwny/u cjueAFBohQ/QEFJIVytbnp9CP2EktUv6NHoTWBEj8q7KYOMc/nOgjNkI/EMWx5lB GQPtuak51bATMtoRIA4XGgdg5gtnXGQ8L/psyQUKtV7xFmAc31PSTvFofgnDTZAV 6C9/W8nZSsjDJPst2Py9V7ItBOWYrCjrl4B2XGDnj10X5VbpENFYQ//fjiTBHxnt MvZ7U12qZKkUmiJnoV5sBKUTNVwPS6l9jpr2RMfWwaW7OBO7c9zydCwDf4A6GozB k2dzWiVhmCzCYIQL2OhwxncHE1dnfYJ9A+vmqKiP53+scQ== -----END CERTIFICATE-----Generated at Sat Apr 26 14:31:28 2025 by rpki-client