$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_SDEp8_LmlnM-1NvJNnN5Wtwg94.roa File: _SDEp8_LmlnM-1NvJNnN5Wtwg94.roa (raw, json) Hash identifier: MWZnO716TEtSMDimsoZrGdtI5ArHo1kY0Tr7prZ+VTo= Subject key identifier: FD:20:C4:A7:CF:CB:9A:59:CC:FB:53:6F:24:D9:CD:E5:6B:70:83:DE Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1804 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_SDEp8_LmlnM-1NvJNnN5Wtwg94.roa Signing time: Mon 10 Feb 2025 14:07:30 +0000 ROA not before: Mon 10 Feb 2025 14:07:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 175.180.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6148 (0x1804) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:30 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FD20C4A7CFCB9A59CCFB536F24D9CDE56B7083DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fe:5a:df:e2:75:40:12:31:55:c9:02:ef:e2: d7:95:fa:24:16:19:49:2f:fa:ac:2a:54:71:06:ca: af:2d:d4:e9:be:9f:0d:bc:96:2a:b7:39:ac:79:30: 31:f9:5f:53:8c:3a:47:48:ac:f2:04:e7:db:40:34: 09:64:db:e6:6e:4d:0b:a0:1e:5a:23:c3:1e:ae:1c: fe:d9:c6:55:01:e5:89:ff:c3:30:80:70:a3:e2:b9: 97:aa:6a:e8:b7:d6:d8:0c:a6:2f:fd:4b:45:d9:93: 38:67:35:05:bb:46:e3:1c:60:7d:0f:3e:41:39:c8: b8:14:08:46:73:20:71:1f:ec:24:35:f9:5e:c1:d2: f0:b5:50:9e:c3:38:e8:5a:43:58:d2:d2:ec:3a:e2: 06:f9:50:13:0d:26:d6:09:dd:2c:70:8f:ed:57:23: 76:f1:4b:66:eb:62:a0:f9:ee:e7:c4:68:e4:a2:7d: d7:15:db:8e:94:91:e4:ac:ef:6f:72:19:60:98:41: 4b:9d:7a:8b:ef:b6:d7:e2:77:79:c0:d6:a8:e0:92: ba:4d:26:d4:b9:8d:3d:57:d3:08:22:01:40:06:a2: 3e:d4:cf:83:e0:bd:2e:d6:b0:ee:99:71:c1:4e:7f: 5c:f9:f7:cf:d8:56:ab:96:fc:e1:88:d3:c6:21:4e: 41:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:20:C4:A7:CF:CB:9A:59:CC:FB:53:6F:24:D9:CD:E5:6B:70:83:DE X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_SDEp8_LmlnM-1NvJNnN5Wtwg94.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.180.0.0/16 Signature Algorithm: sha256WithRSAEncryption 25:8e:ba:b8:d9:ce:3f:5e:a5:15:e2:e8:49:12:08:a7:50:6b: a9:19:5b:fa:9d:42:2a:8f:b1:7b:ac:04:39:dd:55:7e:8d:30: 2a:08:a2:3c:f8:91:4a:7d:67:e4:04:e2:ab:76:7b:d5:d7:a6: 2c:7b:57:95:f7:4a:d9:83:7e:82:43:18:e7:df:06:02:93:af: 5e:43:6c:f2:70:6f:37:a9:da:c0:fe:f9:ff:b5:a5:eb:05:cc: 3e:81:2f:1c:90:39:14:66:20:39:3d:7e:58:2f:b9:42:e0:49: 0e:80:67:d3:b9:63:2b:b5:ff:fe:25:fa:48:29:99:2d:b5:22: 4d:a3:1f:15:da:7b:ec:1a:f9:20:7b:db:5c:dc:c3:ad:c7:a5: 5e:bf:ea:37:f1:16:c7:3e:dd:9d:59:bf:0b:16:28:cd:4e:75: c6:fd:2e:ef:98:45:3d:b5:db:1e:8a:66:d9:ba:d4:29:33:ad: 1d:d8:2f:c6:b8:72:26:a0:b0:c7:b4:58:08:62:21:fa:cc:e2: ad:04:ee:2a:1f:b0:e7:e7:8f:ac:c3:31:2d:fa:a4:54:91:98: 33:e7:d5:97:19:0a:65:7a:c8:8e:08:a3:7c:ac:51:2b:2b:ae: 88:78:35:1f:cb:01:a1:d3:54:05:8e:37:0e:86:22:67:ae:73: 22:9d:6f:61 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGAQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZEMjBDNEE3Q0ZDQjlB NTlDQ0ZCNTM2RjI0RDlDREU1NkI3MDgzREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCn/lrf4nVAEjFVyQLv4teV+iQWGUkv+qwqVHEGyq8t1Om+nw28 liq3Oax5MDH5X1OMOkdIrPIE59tANAlk2+ZuTQugHlojwx6uHP7ZxlUB5Yn/wzCA cKPiuZeqaui31tgMpi/9S0XZkzhnNQW7RuMcYH0PPkE5yLgUCEZzIHEf7CQ1+V7B 0vC1UJ7DOOhaQ1jS0uw64gb5UBMNJtYJ3Sxwj+1XI3bxS2brYqD57ufEaOSifdcV 246UkeSs729yGWCYQUudeovvttfid3nA1qjgkrpNJtS5jT1X0wgiAUAGoj7Uz4Pg vS7WsO6ZccFOf1z598/YVquW/OGI08YhTkF3AgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQU/SDEp8/LmlnM+1NvJNnN5Wtwg94wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvX1NERXA4X0xtbG5NLTFOdkpObk41 V3R3Zzk0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAK+0MA0G CSqGSIb3DQEBCwUAA4IBAQAljrq42c4/XqUV4uhJEginUGupGVv6nUIqj7F7rAQ5 3VV+jTAqCKI8+JFKfWfkBOKrdnvV16Yse1eV90rZg36CQxjn3wYCk69eQ2zycG83 qdrA/vn/taXrBcw+gS8ckDkUZiA5PX5YL7lC4EkOgGfTuWMrtf/+JfpIKZkttSJN ox8V2nvsGvkge9tc3MOtx6Vev+o38RbHPt2dWb8LFijNTnXG/S7vmEU9tdseimbZ utQpM60d2C/GuHImoLDHtFgIYiH6zOKtBO4qH7Dn54+swzEt+qRUkZgz59WXGQpl esiOCKN8rFErK66IeDUfywGh01QFjjcOhiJnrnMinW9h -----END CERTIFICATE-----Generated at Sat Apr 26 14:42:26 2025 by rpki-client