$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_6lx53SZGJi7gemirUAjkhG1vK4.roa File: _6lx53SZGJi7gemirUAjkhG1vK4.roa (raw, json) Hash identifier: T/pM//GrpHV29ZttJSynIV2hBeOwYjfgJ4FLQTYGp4A= Subject key identifier: FF:A9:71:E7:74:99:18:98:BB:81:E9:A2:AD:40:23:92:11:B5:BC:AE Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 0F73 Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_6lx53SZGJi7gemirUAjkhG1vK4.roa Signing time: Mon 10 Feb 2025 14:08:06 +0000 ROA not before: Mon 10 Feb 2025 14:08:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 192.72.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3955 (0xf73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Feb 10 14:08:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FFA971E774991898BB81E9A2AD40239211B5BCAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:29:75:09:51:d9:58:4e:84:42:98:84:ea: fb:17:68:06:bd:f8:ed:ab:c0:12:0d:0e:01:73:7f: a3:49:d6:d6:22:98:ed:18:a2:6b:22:ba:f9:4e:6f: 5f:84:c4:67:ac:26:3f:92:b9:e4:6d:1d:72:64:cb: 05:f5:34:eb:40:c1:ae:6b:3d:f8:3c:48:c1:fd:b5: 13:cc:bc:fb:70:eb:60:d3:49:3a:08:fc:d9:97:d7: 83:88:85:c2:27:57:16:52:05:b6:14:bb:31:6e:c9: 97:9b:c2:38:c3:e6:b6:f0:18:e6:5d:de:1a:d9:8e: e9:d1:b4:9b:fd:20:b6:1a:f5:7a:4a:00:3f:90:90: 9c:92:71:3b:bb:c0:33:36:43:68:12:03:cb:91:08: a1:2b:0e:13:4f:35:eb:35:da:2d:0d:b0:0b:32:21: 68:e4:df:b6:0b:1c:67:0f:31:74:21:3a:10:6b:55: 4c:66:ef:a2:67:4d:c7:c0:a2:a6:df:3d:b2:5c:ab: 11:cd:8b:55:ac:b0:d7:34:00:e7:e6:3b:9f:ec:92: d5:09:19:d1:5f:8f:28:9c:a5:1c:16:22:0e:72:99: c2:93:16:3e:d8:7e:77:90:03:20:31:be:0d:0f:66: 8b:00:49:1c:46:c7:80:0e:69:f1:6f:9c:ea:80:e5: 94:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A9:71:E7:74:99:18:98:BB:81:E9:A2:AD:40:23:92:11:B5:BC:AE X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_6lx53SZGJi7gemirUAjkhG1vK4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.32.0/19 Signature Algorithm: sha256WithRSAEncryption 26:03:3c:99:16:4d:7f:66:0d:32:40:cc:bc:8e:b7:c3:14:32: 23:ac:67:40:83:7e:7e:6a:3c:e3:8a:bd:11:25:5b:e3:26:8a: c3:0e:e8:18:28:1f:4a:f6:c3:8b:0a:f5:8f:2d:72:34:00:b5: ae:9e:11:a6:85:cf:ba:fd:89:a3:00:98:4c:2d:e4:10:e4:e4: 86:14:03:b8:ba:94:fa:bf:b1:a0:25:59:e9:8f:08:37:15:a4: 58:64:63:3b:23:b0:ee:aa:24:5a:f0:38:3c:72:52:39:72:7e: 5e:0e:a4:ce:6f:da:58:06:45:e8:9d:ed:ef:86:bc:86:97:f2: d4:2f:c3:30:a2:83:31:81:e4:5d:6d:e1:49:d6:bc:ef:dd:f7: 80:22:24:af:bf:e5:b0:5e:f7:0a:3e:14:78:85:b6:b3:2b:61: 72:92:e5:e7:b8:ac:76:32:87:1c:17:b1:45:c3:b9:14:09:16: 65:85:79:4c:dc:c6:62:c4:e2:da:2b:7f:cd:a8:40:97:5f:db: c4:a9:2c:9e:13:66:6e:08:70:fe:cb:ed:ec:6d:e1:09:c9:e7: 3b:1d:ab:26:65:f7:c3:21:30:54:36:4d:2a:e2:c2:b5:42:05: 82:ed:47:14:d1:ea:51:de:15:c3:5a:e9:47:33:9e:98:84:ae: d0:7d:09:51 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD3MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNTAyMTAx NDA4MDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZGQTk3MUU3NzQ5OTE4 OThCQjgxRTlBMkFENDAyMzkyMTFCNUJDQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC50Cl1CVHZWE6EQpiE6vsXaAa9+O2rwBINDgFzf6NJ1tYimO0Y omsiuvlOb1+ExGesJj+SueRtHXJkywX1NOtAwa5rPfg8SMH9tRPMvPtw62DTSToI /NmX14OIhcInVxZSBbYUuzFuyZebwjjD5rbwGOZd3hrZjunRtJv9ILYa9XpKAD+Q kJyScTu7wDM2Q2gSA8uRCKErDhNPNes12i0NsAsyIWjk37YLHGcPMXQhOhBrVUxm 76JnTcfAoqbfPbJcqxHNi1WssNc0AOfmO5/sktUJGdFfjyicpRwWIg5ymcKTFj7Y fneQAyAxvg0PZosASRxGx4AOafFvnOqA5ZTFAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU/6lx53SZGJi7gemirUAjkhG1vK4wHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvXzZseDUzU1pHSmk3Z2VtaXJVQWpr aEcxdks0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcBIIDAN BgkqhkiG9w0BAQsFAAOCAQEAJgM8mRZNf2YNMkDMvI63wxQyI6xnQIN+fmo844q9 ESVb4yaKww7oGCgfSvbDiwr1jy1yNAC1rp4RpoXPuv2JowCYTC3kEOTkhhQDuLqU +r+xoCVZ6Y8INxWkWGRjOyOw7qokWvA4PHJSOXJ+Xg6kzm/aWAZF6J3t74a8hpfy 1C/DMKKDMYHkXW3hSda87933gCIkr7/lsF73Cj4UeIW2sythcpLl57isdjKHHBex RcO5FAkWZYV5TNzGYsTi2it/zahAl1/bxKksnhNmbghw/svt7G3hCcnnOx2rJmX3 wyEwVDZNKuLCtUIFgu1HFNHqUd4Vw1rpRzOemISu0H0JUQ== -----END CERTIFICATE-----Generated at Sat Apr 26 14:31:27 2025 by rpki-client