$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/3rjn4UNc4TnVg0vxbN5mePQ4VMU.roa File: 3rjn4UNc4TnVg0vxbN5mePQ4VMU.roa (raw, json) Hash identifier: hII9qakNXUsPyg6wjR4kE6cuXNGhmyofOdVdmSJFsZc= Subject key identifier: DE:B8:E7:E1:43:5C:E1:39:D5:83:4B:F1:6C:DE:66:78:F4:38:54:C5 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1868 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/3rjn4UNc4TnVg0vxbN5mePQ4VMU.roa Signing time: Mon 10 Feb 2025 14:07:55 +0000 ROA not before: Mon 10 Feb 2025 14:07:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 60.245.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6248 (0x1868) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:55 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DEB8E7E1435CE139D5834BF16CDE6678F43854C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1f:33:b9:2c:5d:1b:fa:78:38:ce:e2:43:47: d8:bd:34:c7:50:31:c9:bd:82:48:ca:fd:9a:b3:05: 42:5f:d7:59:4f:7f:c9:1e:5b:79:48:dc:79:c8:9a: 0c:07:ef:3c:12:3f:ab:4f:53:ef:d3:5e:dd:3c:f7: 67:0c:bb:e8:db:c4:c3:bc:d4:63:69:03:0a:f7:b3: ba:b3:51:d8:21:91:a9:fc:64:cb:55:6e:38:36:59: ec:39:ee:ac:15:4b:cf:cc:2b:0a:8c:0a:c5:1c:6a: 1c:b4:30:45:e8:94:36:ea:5c:ce:f7:83:1e:04:2f: d6:09:ce:44:38:34:94:a9:12:37:57:27:30:d5:df: a8:09:cc:29:70:ec:26:fb:e6:a0:80:62:a5:00:69: fc:f7:53:f9:35:a9:8f:eb:ef:7b:3a:0a:02:52:bc: 7e:52:c4:b2:50:ef:58:b6:f7:ce:b3:17:b9:a1:94: f4:ed:5d:7a:de:46:5b:ea:62:c7:94:9c:7e:bc:8c: b5:0b:04:ff:7d:d0:2f:c2:db:56:b5:75:a7:8e:20: d2:6f:80:57:31:56:de:92:28:1a:53:f3:63:00:8b: 3a:b4:94:00:df:91:a3:8a:8a:6e:6c:5d:5e:fd:80: de:58:00:25:bb:af:92:5d:89:4d:49:a3:7a:4d:17: d8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B8:E7:E1:43:5C:E1:39:D5:83:4B:F1:6C:DE:66:78:F4:38:54:C5 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/3rjn4UNc4TnVg0vxbN5mePQ4VMU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.245.96.0/19 Signature Algorithm: sha256WithRSAEncryption 63:5f:87:ce:2a:d2:46:bf:e4:94:b8:fa:14:8a:0c:c7:30:6c: 73:fe:22:02:06:69:14:72:21:31:80:82:59:f9:44:eb:43:32: b3:34:84:46:90:26:91:9c:9a:f0:c6:a5:fb:f1:e8:2e:9c:8b: 1f:3c:5a:4d:e5:4e:6c:5f:0a:55:9b:81:99:2a:d8:a8:90:d3: 5f:2c:af:c8:06:77:b2:bb:b2:74:ab:19:1d:09:39:a3:91:57: ad:a9:5c:bc:6a:a6:6f:79:3f:7e:be:e7:80:35:80:59:58:71: d1:8f:ef:35:29:cf:57:db:23:ef:76:6d:56:9b:23:07:7e:1e: b4:7c:85:5f:eb:53:b0:8d:ce:8c:c0:ad:4f:6a:c4:90:d4:0c: 1d:7c:8a:71:79:70:e3:00:12:18:fe:7e:06:25:90:e2:28:82: a6:32:22:5c:bb:12:14:cd:4d:a2:b5:87:d5:c1:11:03:57:70: c0:62:2e:17:29:31:00:27:4b:ec:02:6d:56:b2:b0:c0:f4:45: cc:aa:ba:14:64:b4:25:a5:1e:21:7d:aa:83:f7:c4:6e:d1:c2: 25:da:5c:86:da:a8:b9:4d:49:2b:fe:c3:c1:a1:15:6a:d1:1f: 91:ea:3e:b6:4c:57:77:6b:a3:af:59:2a:c3:29:21:a9:f5:ae: 27:d0:e8:ff -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGGgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3NTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERFQjhFN0UxNDM1Q0Ux MzlENTgzNEJGMTZDREU2Njc4RjQzODU0QzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQHzO5LF0b+ng4zuJDR9i9NMdQMcm9gkjK/ZqzBUJf11lPf8ke W3lI3HnImgwH7zwSP6tPU+/TXt0892cMu+jbxMO81GNpAwr3s7qzUdghkan8ZMtV bjg2Wew57qwVS8/MKwqMCsUcahy0MEXolDbqXM73gx4EL9YJzkQ4NJSpEjdXJzDV 36gJzClw7Cb75qCAYqUAafz3U/k1qY/r73s6CgJSvH5SxLJQ71i2986zF7mhlPTt XXreRlvqYseUnH68jLULBP990C/C21a1daeOINJvgFcxVt6SKBpT82MAizq0lADf kaOKim5sXV79gN5YACW7r5JdiU1Jo3pNF9jJAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU3rjn4UNc4TnVg0vxbN5mePQ4VMUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvM3JqbjRVTmM0VG5WZzB2eGJONW1l UFE0Vk1VLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBTz1YDAN BgkqhkiG9w0BAQsFAAOCAQEAY1+HzirSRr/klLj6FIoMxzBsc/4iAgZpFHIhMYCC WflE60MyszSERpAmkZya8Mal+/HoLpyLHzxaTeVObF8KVZuBmSrYqJDTXyyvyAZ3 sruydKsZHQk5o5FXralcvGqmb3k/fr7ngDWAWVhx0Y/vNSnPV9sj73ZtVpsjB34e tHyFX+tTsI3OjMCtT2rEkNQMHXyKcXlw4wASGP5+BiWQ4iiCpjIiXLsSFM1NorWH 1cERA1dwwGIuFykxACdL7AJtVrKwwPRFzKq6FGS0JaUeIX2qg/fEbtHCJdpchtqo uU1JK/7DwaEVatEfkeo+tkxXd2ujr1kqwykhqfWuJ9Do/w== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:40 2025 by rpki-client on console.sobornost.net