$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/sIvPzW63HhQTNCiRRc_KtuU_BV0.roa File: sIvPzW63HhQTNCiRRc_KtuU_BV0.roa (raw, json) Hash identifier: bonhmO17MQ6ldx6YJIMvpBWnjXwEOS4+2Y9Jnpv1qSU= Subject key identifier: B0:8B:CF:CD:6E:B7:1E:14:13:34:28:91:45:CF:CA:B6:E5:3F:05:5D Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 17CA Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sIvPzW63HhQTNCiRRc_KtuU_BV0.roa Signing time: Mon 10 Feb 2025 14:07:15 +0000 ROA not before: Mon 10 Feb 2025 14:07:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 60.245.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6090 (0x17ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:15 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B08BCFCD6EB71E141334289145CFCAB6E53F055D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1d:85:84:fb:a4:39:68:50:55:78:55:94:f0: 95:2d:63:d8:ac:28:0a:5d:cb:c9:cf:f8:eb:3e:30: 0f:9b:e2:c7:a6:e1:bd:06:40:39:55:de:4a:c4:61: 7c:23:b0:0b:3f:d1:75:1e:2a:17:21:35:6e:d4:ce: cc:7f:fc:97:0d:68:1c:03:de:bc:76:72:a5:ed:e4: 8c:29:5a:6e:8b:37:42:00:5b:f9:bf:0e:03:95:86: 0e:5e:20:64:d4:a0:38:0a:4d:21:5d:77:bb:14:40: e8:d0:6d:81:e8:95:c4:27:6b:e1:8d:dc:1b:6a:d3: 07:bb:49:24:39:e1:c6:4a:48:1c:9d:e8:c4:57:cb: 9d:43:c4:4a:e9:99:36:8b:7c:57:81:f9:8b:7a:f1: 6b:26:9a:9e:8d:ad:7f:63:f3:85:0a:c6:f4:c4:01: 3a:26:fc:e1:9b:43:07:60:71:56:a1:fc:97:d5:35: b2:b1:0e:b8:2c:d1:75:5c:8c:93:42:f7:f8:c2:cc: db:4d:87:c2:42:c0:9c:e1:f6:5b:46:b2:7d:e5:aa: f6:11:d3:76:fc:b4:08:6a:30:77:f2:9b:1d:73:75: 4b:95:ac:de:32:80:4f:b2:63:0b:78:00:f7:44:aa: a0:e5:5c:4f:c1:db:15:50:d1:87:66:a3:b3:21:0e: 03:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8B:CF:CD:6E:B7:1E:14:13:34:28:91:45:CF:CA:B6:E5:3F:05:5D X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sIvPzW63HhQTNCiRRc_KtuU_BV0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.245.64.0/19 Signature Algorithm: sha256WithRSAEncryption 7b:3f:37:47:82:48:d1:07:bd:bd:1e:66:2f:84:0a:43:ab:95: 15:91:1f:06:1e:c4:c8:07:e2:cd:12:e3:4c:95:fd:f8:1a:88: 0b:54:7d:eb:b9:5b:ec:e4:72:85:eb:41:f9:b5:bf:27:a6:9f: a5:d3:34:c1:70:82:c5:99:36:09:21:9c:bd:34:26:72:e3:89: a2:e0:3a:8e:03:60:fa:ad:3f:27:5e:7e:c6:b3:f4:22:11:1d: 19:43:86:94:1a:44:be:d8:92:2f:cb:80:9a:2d:28:dd:ec:fd: 0a:fb:80:80:d6:90:4a:b6:a4:34:0f:bd:a5:a3:09:71:be:9b: 6d:7b:78:23:e2:01:1c:a1:76:bd:a2:f7:09:d6:ad:71:0b:14: 2f:57:7b:af:2a:e2:ec:b0:b3:03:95:d5:95:75:89:c3:cd:46: 74:bd:b2:e4:28:65:8c:c4:9c:c6:94:f5:2b:64:51:10:27:07: 8d:2e:e2:c1:46:39:60:7b:b1:a2:e8:5b:27:f3:41:9d:aa:5e: ab:fd:f2:6b:09:84:5f:bd:8b:9c:1b:b3:29:72:34:a5:ba:28: 59:f2:41:16:f7:d6:6a:73:e5:1a:44:38:c9:5a:e3:94:a0:f9: 14:2a:cb:6f:b6:47:2d:11:7f:61:18:a4:b1:99:ba:c6:ba:47: 5c:ad:af:e5 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICF8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIwOEJDRkNENkVCNzFF MTQxMzM0Mjg5MTQ1Q0ZDQUI2RTUzRjA1NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBHYWE+6Q5aFBVeFWU8JUtY9isKApdy8nP+Os+MA+b4sem4b0G QDlV3krEYXwjsAs/0XUeKhchNW7Uzsx//JcNaBwD3rx2cqXt5IwpWm6LN0IAW/m/ DgOVhg5eIGTUoDgKTSFdd7sUQOjQbYHolcQna+GN3Btq0we7SSQ54cZKSByd6MRX y51DxErpmTaLfFeB+Yt68Wsmmp6NrX9j84UKxvTEATom/OGbQwdgcVah/JfVNbKx Drgs0XVcjJNC9/jCzNtNh8JCwJzh9ltGsn3lqvYR03b8tAhqMHfymx1zdUuVrN4y gE+yYwt4APdEqqDlXE/B2xVQ0Ydmo7MhDgMfAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUsIvPzW63HhQTNCiRRc/KtuU/BV0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvc0l2UHpXNjNIaFFUTkNpUlJjX0t0 dVVfQlYwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBTz1QDAN BgkqhkiG9w0BAQsFAAOCAQEAez83R4JI0Qe9vR5mL4QKQ6uVFZEfBh7EyAfizRLj TJX9+BqIC1R967lb7ORyhetB+bW/J6afpdM0wXCCxZk2CSGcvTQmcuOJouA6jgNg +q0/J15+xrP0IhEdGUOGlBpEvtiSL8uAmi0o3ez9CvuAgNaQSrakNA+9paMJcb6b bXt4I+IBHKF2vaL3CdatcQsUL1d7ryri7LCzA5XVlXWJw81GdL2y5ChljMScxpT1 K2RRECcHjS7iwUY5YHuxouhbJ/NBnapeq/3yawmEX72LnBuzKXI0pbooWfJBFvfW anPlGkQ4yVrjlKD5FCrLb7ZHLRF/YRiksZm6xrpHXK2v5Q== -----END CERTIFICATE-----Generated at Sat Apr 26 14:37:19 2025 by rpki-client