$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/hNBpY7xIfh3kXWqE6-EvTjVEfKU.roa File: hNBpY7xIfh3kXWqE6-EvTjVEfKU.roa (raw, json) Hash identifier: 12IJEro3SeWuY5elIbQRqij5AB0mZ8kcNQEnqXcn6uc= Subject key identifier: 84:D0:69:63:BC:48:7E:1D:E4:5D:6A:84:EB:E1:2F:4E:35:44:7C:A5 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 17D1 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hNBpY7xIfh3kXWqE6-EvTjVEfKU.roa Signing time: Mon 10 Feb 2025 14:07:17 +0000 ROA not before: Mon 10 Feb 2025 14:07:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 112.104.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6097 (0x17d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:17 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=84D06963BC487E1DE45D6A84EBE12F4E35447CA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1e:50:9a:db:e4:13:17:8f:4b:56:54:99:7a: 39:6e:29:1c:6b:81:54:d7:34:ba:d1:18:5c:ca:43: ec:37:67:f4:78:26:dd:78:51:3d:e5:7c:c6:5b:d5: 00:71:84:09:03:54:43:aa:76:f3:52:f0:aa:eb:74: 04:72:b8:aa:09:16:ab:69:3d:3d:2c:ec:3e:6b:39: b5:75:a7:68:78:f3:e5:aa:f5:4e:10:b7:8d:a6:7d: fc:55:3d:a9:e7:bd:91:66:7a:ba:8f:9f:d0:8f:36: cb:74:b1:67:e6:01:4a:39:05:17:e9:9d:35:f4:0b: a0:ef:e5:1a:0f:22:71:b1:67:4b:db:11:65:9f:4f: 60:3b:c1:ab:6c:c8:a2:7c:07:09:2e:c5:04:37:ac: d9:94:a2:47:d9:92:92:e4:64:28:25:32:12:51:6c: a3:86:c2:ca:9d:e1:41:22:bd:66:d6:94:6e:c9:6d: dc:7d:f2:95:d6:df:6f:e0:d2:17:eb:46:5b:01:49: 2b:d3:06:01:b2:3e:90:c5:aa:66:93:9b:99:57:d1: 3c:f4:89:58:93:5e:8c:5a:22:20:31:82:fe:d7:b4: 55:49:2c:dd:3e:28:87:63:37:fc:a8:45:76:d0:95: dd:60:13:f9:56:4e:70:a8:ab:bd:af:c1:32:a0:ac: b2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D0:69:63:BC:48:7E:1D:E4:5D:6A:84:EB:E1:2F:4E:35:44:7C:A5 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hNBpY7xIfh3kXWqE6-EvTjVEfKU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.104.0.0/15 Signature Algorithm: sha256WithRSAEncryption c8:c3:da:92:01:aa:de:5a:74:b2:20:d0:cc:24:d7:0c:b1:1b: f1:7a:e9:4b:ac:de:f4:ef:b9:c2:73:65:1c:f7:54:b4:15:d8: f6:7b:a1:be:36:81:69:eb:e7:86:2d:35:63:84:7c:0d:2a:9f: 0f:d9:0d:c3:72:e1:af:9d:47:90:75:d6:a9:4b:79:55:4e:83: d3:dd:df:9f:5e:17:5f:af:94:f0:3e:fe:e9:dd:25:60:d7:9f: 89:15:92:4c:c5:f8:6d:2e:bb:34:ab:96:fb:5e:7d:cd:74:98: 34:28:11:14:fe:de:10:b8:7b:22:14:7e:9f:2d:ff:7e:93:71: 3c:97:e6:05:1e:7f:d1:5b:49:39:e9:64:33:1c:c6:4d:e1:b8: 1d:a5:0e:41:2c:70:d2:fd:f3:2e:67:5b:57:ab:b4:41:21:73: 89:b8:15:39:4c:5e:a2:44:5c:2e:c1:2a:7d:0b:74:97:4b:60: d0:20:b7:20:cf:4f:6d:0b:d8:4c:5a:0b:29:1c:af:89:e8:78: 4a:f5:4d:64:e8:e8:93:49:a7:fb:60:9a:4a:c2:a0:11:4e:2d: 0e:96:89:64:e6:7d:31:42:3c:db:0e:58:20:bc:f2:39:e3:2f: 4d:8a:50:f5:2b:69:93:d1:3a:41:0c:9a:05:f9:f2:5b:83:43: f9:ed:e6:80 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICF9EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg0RDA2OTYzQkM0ODdF MURFNDVENkE4NEVCRTEyRjRFMzU0NDdDQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXHlCa2+QTF49LVlSZejluKRxrgVTXNLrRGFzKQ+w3Z/R4Jt14 UT3lfMZb1QBxhAkDVEOqdvNS8KrrdARyuKoJFqtpPT0s7D5rObV1p2h48+Wq9U4Q t42mffxVPannvZFmerqPn9CPNst0sWfmAUo5BRfpnTX0C6Dv5RoPInGxZ0vbEWWf T2A7watsyKJ8BwkuxQQ3rNmUokfZkpLkZCglMhJRbKOGwsqd4UEivWbWlG7Jbdx9 8pXW32/g0hfrRlsBSSvTBgGyPpDFqmaTm5lX0Tz0iViTXoxaIiAxgv7XtFVJLN0+ KIdjN/yoRXbQld1gE/lWTnCoq72vwTKgrLIrAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUhNBpY7xIfh3kXWqE6+EvTjVEfKUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvaE5CcFk3eElmaDNrWFdxRTYtRXZU alZFZktVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAXBoMA0G CSqGSIb3DQEBCwUAA4IBAQDIw9qSAareWnSyINDMJNcMsRvxeulLrN7077nCc2Uc 91S0Fdj2e6G+NoFp6+eGLTVjhHwNKp8P2Q3DcuGvnUeQddapS3lVToPT3d+fXhdf r5TwPv7p3SVg15+JFZJMxfhtLrs0q5b7Xn3NdJg0KBEU/t4QuHsiFH6fLf9+k3E8 l+YFHn/RW0k56WQzHMZN4bgdpQ5BLHDS/fMuZ1tXq7RBIXOJuBU5TF6iRFwuwSp9 C3SXS2DQILcgz09tC9hMWgspHK+J6HhK9U1k6OiTSaf7YJpKwqARTi0Ololk5n0x QjzbDlggvPI54y9NilD1K2mT0TpBDJoF+fJbg0P57eaA -----END CERTIFICATE-----Generated at Sat Apr 26 14:37:02 2025 by rpki-client