$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/YADMAFioNbo8VJrOlFD6CT0_jWw.roa File: YADMAFioNbo8VJrOlFD6CT0_jWw.roa (raw, json) Hash identifier: n7cVF1rcqrkoRbR1WinTXy+WuuvKS0WnE5vFC+yYu2k= Subject key identifier: 60:00:CC:00:58:A8:35:BA:3C:54:9A:CE:94:50:FA:09:3D:3F:8D:6C Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 0F6F Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YADMAFioNbo8VJrOlFD6CT0_jWw.roa Signing time: Mon 10 Feb 2025 14:08:04 +0000 ROA not before: Mon 10 Feb 2025 14:08:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 192.72.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3951 (0xf6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Feb 10 14:08:04 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6000CC0058A835BA3C549ACE9450FA093D3F8D6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9e:f6:1a:16:44:91:56:a7:c3:31:0c:20:3e: 7e:b0:3e:e1:0b:0f:da:21:fc:f8:1a:ae:9e:e4:b3: 15:fe:ca:30:40:21:b3:98:10:4d:b3:c8:bb:5a:4c: 2e:8f:ac:9e:94:8b:41:a8:d8:2a:66:8c:0e:a2:2d: c0:49:ac:ae:83:be:3d:45:a5:ff:77:41:4d:76:d2: 67:07:04:4c:07:07:e8:42:ea:1c:8e:e0:f0:6c:de: 7c:66:6a:9d:8c:a0:d8:b7:aa:2d:4d:24:06:7c:c2: e6:fa:81:ff:58:67:69:14:14:9a:af:1a:76:38:54: 3f:ef:ca:66:06:94:b4:f2:f9:00:6a:b7:65:4d:7e: c7:76:80:45:d7:26:6e:f8:f5:e4:f5:f0:a2:83:b6: 2c:7a:2b:98:45:30:93:bb:21:e6:21:f6:25:ec:79: 39:cb:e7:02:5b:cd:01:2c:0a:b2:ac:e0:8d:2e:af: 96:73:f3:42:1b:ed:d5:75:85:ac:9d:37:0b:82:5a: 82:31:af:d8:6a:96:07:59:99:d8:d8:c0:12:cf:ab: 2e:76:88:a2:ff:19:5f:8b:33:da:9e:33:5b:dc:bc: f0:ff:a5:6b:bc:3b:3d:30:53:c3:87:7d:b2:a2:20: f7:e6:10:d0:09:94:4d:53:85:7b:56:b1:ed:f6:70: ee:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:00:CC:00:58:A8:35:BA:3C:54:9A:CE:94:50:FA:09:3D:3F:8D:6C X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YADMAFioNbo8VJrOlFD6CT0_jWw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.128.0/18 Signature Algorithm: sha256WithRSAEncryption 9e:d9:61:06:0f:76:13:c5:57:30:8a:d2:d2:99:09:d3:d0:52: ca:73:c1:eb:97:94:1e:dc:b4:74:4f:54:ce:56:bc:1e:0d:fb: 16:0a:c1:51:d5:5d:9a:5c:0b:0a:09:b1:58:d9:98:fd:6e:3f: b2:8f:c3:1f:23:af:39:79:c2:05:97:1c:ac:ee:3d:37:68:ea: d9:8a:a8:77:56:bd:e3:70:0a:bd:1c:ef:84:13:e9:81:35:53: 2d:84:2b:4b:d3:6f:5a:67:22:e3:b7:0f:8b:84:95:d0:92:e0: 6c:0d:56:41:d3:55:60:23:d3:8e:05:27:62:e8:b9:f6:64:de: aa:00:d8:48:0e:42:ec:0d:90:91:f2:62:43:fd:e1:71:7e:6d: a6:1a:b1:03:99:14:40:79:b9:c4:c9:d1:e4:42:6e:31:4d:6a: 63:d3:b6:8e:16:af:c0:25:2c:51:7a:86:9a:dc:3c:9f:f6:30: fc:46:a6:e7:29:21:c1:9e:c0:a1:23:fe:c5:e4:8e:77:d8:69: 01:b6:82:d4:83:07:02:eb:d8:d9:17:26:66:83:b1:d5:d9:b0: 5b:1a:47:55:1c:4b:69:d2:a5:8d:37:63:f3:d9:c6:3f:65:47: de:10:5d:b5:ae:52:a6:dc:58:95:e0:67:07:3e:f2:c2:f6:97: bb:f5:eb:eb -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD28wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNTAyMTAx NDA4MDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYwMDBDQzAwNThBODM1 QkEzQzU0OUFDRTk0NTBGQTA5M0QzRjhENkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9nvYaFkSRVqfDMQwgPn6wPuELD9oh/Pgarp7ksxX+yjBAIbOY EE2zyLtaTC6PrJ6Ui0Go2CpmjA6iLcBJrK6Dvj1Fpf93QU120mcHBEwHB+hC6hyO 4PBs3nxmap2MoNi3qi1NJAZ8wub6gf9YZ2kUFJqvGnY4VD/vymYGlLTy+QBqt2VN fsd2gEXXJm749eT18KKDtix6K5hFMJO7IeYh9iXseTnL5wJbzQEsCrKs4I0ur5Zz 80Ib7dV1haydNwuCWoIxr9hqlgdZmdjYwBLPqy52iKL/GV+LM9qeM1vcvPD/pWu8 Oz0wU8OHfbKiIPfmENAJlE1ThXtWse32cO6XAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUYADMAFioNbo8VJrOlFD6CT0/jWwwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvWUFETUFGaW9OYm84VkpyT2xGRDZD VDBfald3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBsBIgDAN BgkqhkiG9w0BAQsFAAOCAQEAntlhBg92E8VXMIrS0pkJ09BSynPB65eUHty0dE9U zla8Hg37FgrBUdVdmlwLCgmxWNmY/W4/so/DHyOvOXnCBZccrO49N2jq2Yqod1a9 43AKvRzvhBPpgTVTLYQrS9NvWmci47cPi4SV0JLgbA1WQdNVYCPTjgUnYui59mTe qgDYSA5C7A2QkfJiQ/3hcX5tphqxA5kUQHm5xMnR5EJuMU1qY9O2jhavwCUsUXqG mtw8n/Yw/Eam5ykhwZ7AoSP+xeSOd9hpAbaC1IMHAuvY2RcmZoOx1dmwWxpHVRxL adKljTdj89nGP2VH3hBdta5SptxYleBnBz7ywvaXu/Xr6w== -----END CERTIFICATE-----Generated at Sat Apr 26 14:34:47 2025 by rpki-client