$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/k3D2RLEvsf3aB55FnVSGmNKlE9g.roa File: k3D2RLEvsf3aB55FnVSGmNKlE9g.roa (raw, json) Hash identifier: Xp4KNQcCRgoR86hh0DshDkX+0LDL342mLsREGxhyNHQ= Subject key identifier: 93:70:F6:44:B1:2F:B1:FD:DA:07:9E:45:9D:54:86:98:D2:A5:13:D8 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 17B6 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/k3D2RLEvsf3aB55FnVSGmNKlE9g.roa Signing time: Mon 10 Feb 2025 14:07:11 +0000 ROA not before: Mon 10 Feb 2025 14:07:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 210.244.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6070 (0x17b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9370F644B12FB1FDDA079E459D548698D2A513D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c9:f5:2b:ab:f1:67:ec:83:16:40:f9:54:57: 01:b6:98:e6:65:6e:c8:d8:72:1e:81:08:5f:44:0a: 63:40:f1:08:53:ff:96:17:e5:9f:de:75:c2:cf:6b: 59:68:40:f5:f0:6a:01:3f:02:95:c1:2e:4b:13:1e: 93:0c:12:60:ba:f5:00:91:f0:1a:8e:7f:85:88:d5: dc:03:d1:3d:d2:ed:29:1f:2b:f6:85:ce:0d:83:43: b9:41:8a:bf:94:21:5c:b5:a1:c6:43:fe:96:fc:d2: 52:f4:2f:0b:e3:dc:7e:89:ae:44:ad:66:58:85:22: 05:f9:61:8d:41:9b:e1:f0:29:12:f1:60:ff:11:dd: af:13:9b:06:bf:32:39:23:b1:0a:26:04:42:e8:24: 7a:96:c8:16:2e:5a:c9:8b:8e:17:23:ac:28:0c:97: 7a:3e:31:3f:e6:41:6f:21:00:9c:09:1a:4b:04:b7: d6:46:38:01:a2:a6:e6:f8:b3:76:07:38:15:7f:30: 61:53:c5:29:26:74:b7:6b:99:97:11:4b:8c:46:a7: f1:d6:4d:58:08:ea:8b:3a:a2:07:68:13:c8:4e:51: ca:4a:81:d6:cc:c0:01:6c:9c:6c:00:1e:e2:3a:b9: 09:e7:aa:97:30:f4:83:12:19:9a:9c:6b:c0:d3:7d: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:70:F6:44:B1:2F:B1:FD:DA:07:9E:45:9D:54:86:98:D2:A5:13:D8 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/k3D2RLEvsf3aB55FnVSGmNKlE9g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.244.0.0/17 Signature Algorithm: sha256WithRSAEncryption 59:94:78:c3:45:a0:ef:36:17:fd:0f:e7:bb:04:2d:9c:a2:f4: 5d:7b:38:0b:4a:9e:10:04:ea:8d:6e:11:da:3d:89:9c:ea:97: 52:ed:91:90:7c:65:74:cf:3f:be:55:b6:19:c4:ab:10:b5:f0: 23:77:b5:0f:a6:ce:91:6f:bf:6e:05:41:7b:19:00:73:1e:a4: a5:f9:08:7c:17:12:a8:4a:93:2e:f6:6e:91:bb:e6:12:ad:6d: c7:9d:84:18:2f:4c:bc:5c:5a:15:94:65:f6:f1:59:38:49:89: 0f:3a:46:6a:7e:d9:5a:c6:71:d4:7b:be:8a:ca:91:50:a3:26: 69:18:d6:77:0d:81:70:dd:f9:a2:76:d7:1e:49:91:d5:13:b8: fa:67:19:a4:49:dc:56:7d:11:25:9b:a3:75:1b:6b:93:8a:92: 02:00:d9:41:c7:ee:55:a3:d0:27:bd:26:d2:1e:de:bd:b4:6c: 08:f8:4d:a2:79:15:d6:98:f2:dc:52:99:28:54:3e:5f:5e:3e: 62:74:64:19:32:f1:97:0e:89:ce:87:9a:17:a9:f3:f5:76:6b: bf:26:ae:78:3a:8e:02:94:4f:99:e6:74:b6:bc:06:ac:8e:fe: 58:41:c2:a3:bc:21:d0:00:8c:3c:81:e7:83:91:11:ca:92:8d: f5:0e:c5:11 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICF7YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkzNzBGNjQ0QjEyRkIx RkREQTA3OUU0NTlENTQ4Njk4RDJBNTEzRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPyfUrq/Fn7IMWQPlUVwG2mOZlbsjYch6BCF9ECmNA8QhT/5YX 5Z/edcLPa1loQPXwagE/ApXBLksTHpMMEmC69QCR8BqOf4WI1dwD0T3S7SkfK/aF zg2DQ7lBir+UIVy1ocZD/pb80lL0Lwvj3H6JrkStZliFIgX5YY1Bm+HwKRLxYP8R 3a8Tmwa/MjkjsQomBELoJHqWyBYuWsmLjhcjrCgMl3o+MT/mQW8hAJwJGksEt9ZG OAGipub4s3YHOBV/MGFTxSkmdLdrmZcRS4xGp/HWTVgI6os6ogdoE8hOUcpKgdbM wAFsnGwAHuI6uQnnqpcw9IMSGZqca8DTfRyvAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUk3D2RLEvsf3aB55FnVSGmNKlE9gwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvazNEMlJMRXZzZjNhQjU1Rm5WU0dt TktsRTlnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9L0ADAN BgkqhkiG9w0BAQsFAAOCAQEAWZR4w0Wg7zYX/Q/nuwQtnKL0XXs4C0qeEATqjW4R 2j2JnOqXUu2RkHxldM8/vlW2GcSrELXwI3e1D6bOkW+/bgVBexkAcx6kpfkIfBcS qEqTLvZukbvmEq1tx52EGC9MvFxaFZRl9vFZOEmJDzpGan7ZWsZx1Hu+isqRUKMm aRjWdw2BcN35onbXHkmR1RO4+mcZpEncVn0RJZujdRtrk4qSAgDZQcfuVaPQJ70m 0h7evbRsCPhNonkV1pjy3FKZKFQ+X14+YnRkGTLxlw6JzoeaF6nz9XZrvyaueDqO ApRPmeZ0trwGrI7+WEHCo7wh0ACMPIHng5ERypKN9Q7FEQ== -----END CERTIFICATE-----Generated at Sat Apr 26 14:37:13 2025 by rpki-client