$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wql8Yqy1gMB85ymJ1wfytb82WcA.roa File: Wql8Yqy1gMB85ymJ1wfytb82WcA.roa (raw, json) Hash identifier: 2pvbfuW3A7fK3xFvF7JaDfRA0fjfc8EzXUqo8V9C4SE= Subject key identifier: 5A:A9:7C:62:AC:B5:80:C0:7C:E7:29:89:D7:07:F2:B5:BF:36:59:C0 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1812 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wql8Yqy1gMB85ymJ1wfytb82WcA.roa Signing time: Mon 10 Feb 2025 14:07:33 +0000 ROA not before: Mon 10 Feb 2025 14:07:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18049 IP address blocks: 106.107.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 21:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6162 (0x1812) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:33 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5AA97C62ACB580C07CE72989D707F2B5BF3659C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0e:87:c3:c2:b3:81:02:54:ca:02:cc:80:a7: 65:94:6e:c0:e1:20:41:ca:8c:64:ec:a0:4d:47:96: 04:e4:25:fd:35:0e:cb:3b:43:f6:c0:cf:5c:3b:bb: 26:c1:78:2e:51:05:26:07:31:06:19:1e:3c:01:6d: 15:ee:b2:ca:c0:81:35:2e:34:fd:3e:91:eb:bf:d9: 6f:44:84:63:25:86:d8:db:49:dd:71:4c:d0:6e:e7: eb:00:3e:36:9a:67:29:5d:9f:cc:70:16:b6:d4:40: 49:35:57:bd:1d:ea:3d:09:7f:76:36:49:9c:ff:37: e3:3d:7f:05:7c:17:87:b5:98:6d:9b:af:b3:6e:4f: 33:39:7c:c1:b7:89:4d:a5:b0:61:9c:bf:04:55:6f: 4b:a0:5d:15:df:44:53:55:45:b8:27:08:69:27:f5: 33:9e:14:87:cc:c0:58:1f:17:ff:02:e6:ab:92:f8: f8:8a:ef:bd:df:de:01:7c:41:a2:f1:6d:5b:fb:50: db:ea:26:dc:f1:eb:81:ea:c7:85:21:79:50:ef:9f: 6c:0b:88:e3:1d:b6:3e:3a:3d:0e:79:a8:a4:e5:3f: be:7c:21:6e:07:3b:c4:78:15:cd:87:6a:49:70:2c: ae:06:78:1f:75:e3:e4:f0:9d:22:d4:34:e2:5b:bd: e6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A9:7C:62:AC:B5:80:C0:7C:E7:29:89:D7:07:F2:B5:BF:36:59:C0 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wql8Yqy1gMB85ymJ1wfytb82WcA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.107.176.0/20 Signature Algorithm: sha256WithRSAEncryption 88:41:1e:b1:a0:82:01:46:fa:ce:9d:16:66:1a:a9:3b:05:7f: 5b:18:e0:64:86:a9:45:3a:cf:74:db:24:2a:e4:4c:c5:06:98: 22:e3:c5:62:41:9c:d7:12:ca:28:b3:c5:95:50:25:0c:82:c3: 2e:7d:8e:2f:f2:65:7b:f8:61:7d:c7:6a:1c:88:0e:78:91:72: bd:20:2d:65:25:4f:6c:bd:c1:4f:d8:d7:12:bd:0c:4d:b6:dc: 8c:b4:6a:e4:b6:f7:cc:08:cd:34:5a:65:7e:07:09:20:e6:6c: 11:25:c7:c0:d6:fa:1a:ee:41:e3:ac:84:c5:1d:16:51:6b:5d: 9b:45:20:55:7b:52:d1:fa:d0:9a:00:24:82:0a:33:da:e5:91: 4f:11:49:43:7d:38:43:73:33:bd:a2:08:00:3b:42:e3:d0:d7: c4:66:b4:68:14:ed:83:17:f0:40:69:11:ab:9f:73:d4:2a:fe: 6d:0c:13:c0:64:30:4a:0f:04:cb:87:ca:1c:71:0f:44:42:5b: ff:2f:d3:ad:aa:02:0b:b3:66:7d:80:ac:2b:74:0b:c3:83:72: 1c:31:3e:bd:b0:73:e9:61:5c:37:96:68:b0:6b:32:8c:4a:18: 06:57:a3:9e:b2:07:fa:bb:41:88:46:b1:88:28:59:ff:8a:9f: 1d:09:3f:07 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGBIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVBQTk3QzYyQUNCNTgw QzA3Q0U3Mjk4OUQ3MDdGMkI1QkYzNjU5QzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPDofDwrOBAlTKAsyAp2WUbsDhIEHKjGTsoE1HlgTkJf01Dss7 Q/bAz1w7uybBeC5RBSYHMQYZHjwBbRXussrAgTUuNP0+keu/2W9EhGMlhtjbSd1x TNBu5+sAPjaaZyldn8xwFrbUQEk1V70d6j0Jf3Y2SZz/N+M9fwV8F4e1mG2br7Nu TzM5fMG3iU2lsGGcvwRVb0ugXRXfRFNVRbgnCGkn9TOeFIfMwFgfF/8C5quS+PiK 773f3gF8QaLxbVv7UNvqJtzx64Hqx4UheVDvn2wLiOMdtj46PQ55qKTlP758IW4H O8R4Fc2HaklwLK4GeB914+TwnSLUNOJbvearAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUWql8Yqy1gMB85ymJ1wfytb82WcAwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvV3FsOFlxeTFnTUI4NXltSjF3Znl0 YjgyV2NBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGprsDAN BgkqhkiG9w0BAQsFAAOCAQEAiEEesaCCAUb6zp0WZhqpOwV/WxjgZIapRTrPdNsk KuRMxQaYIuPFYkGc1xLKKLPFlVAlDILDLn2OL/Jle/hhfcdqHIgOeJFyvSAtZSVP bL3BT9jXEr0MTbbcjLRq5Lb3zAjNNFplfgcJIOZsESXHwNb6Gu5B46yExR0WUWtd m0UgVXtS0frQmgAkggoz2uWRTxFJQ304Q3MzvaIIADtC49DXxGa0aBTtgxfwQGkR q59z1Cr+bQwTwGQwSg8Ey4fKHHEPREJb/y/TraoCC7NmfYCsK3QLw4NyHDE+vbBz 6WFcN5ZosGsyjEoYBlejnrIH+rtBiEaxiChZ/4qfHQk/Bw== -----END CERTIFICATE-----Generated at Sat Apr 26 19:46:44 2025 by rpki-client