$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/7l6JMqjyS7ttKEFc5eS4vZBBiBc.roa File: 7l6JMqjyS7ttKEFc5eS4vZBBiBc.roa (raw, json) Hash identifier: gFGUfOtM7jIup7rrvRDQmz+sthA+/qFqVlP2iKq2cw8= Subject key identifier: EE:5E:89:32:A8:F2:4B:BB:6D:28:41:5C:E5:E4:B8:BD:90:41:88:17 Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 0F6D Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7l6JMqjyS7ttKEFc5eS4vZBBiBc.roa Signing time: Mon 10 Feb 2025 14:08:04 +0000 ROA not before: Mon 10 Feb 2025 14:08:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 192.72.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3949 (0xf6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Feb 10 14:08:04 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EE5E8932A8F24BBB6D28415CE5E4B8BD90418817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5d:d7:b5:08:1e:c7:c3:22:b2:c1:c0:c5:24: da:3f:83:2f:a4:55:e9:18:35:28:ac:ad:12:a7:4f: f3:f5:a3:b7:76:44:88:76:48:d8:c0:b9:4b:9a:cf: 42:50:45:d5:fc:c6:26:ec:31:72:89:74:2a:ce:02: 22:47:7a:85:2f:b7:e2:c2:9e:26:5d:e6:cb:7e:a0: 91:f6:81:a4:96:38:c9:71:78:c5:3e:f0:e9:8f:77: 51:7f:f1:57:13:e1:80:7c:a6:2a:1b:fb:fd:e4:a0: b8:b6:36:b1:5b:ac:24:88:95:cb:b0:7f:1d:ea:01: b9:aa:ad:3e:26:c6:5d:c9:12:51:a4:93:48:4a:f6: 9c:d8:3d:b1:22:58:51:16:87:c1:f5:76:24:d6:8a: cc:9d:13:56:e9:f3:70:50:8b:5e:ef:45:3a:d3:24: a8:72:22:e7:57:99:fb:ae:3f:35:76:94:c4:03:1a: c8:ef:45:33:32:1a:0b:32:66:7f:8d:73:69:23:18: a4:c5:dc:d0:2d:e6:98:97:88:ca:5a:44:ce:de:e2: 10:cf:96:49:fe:a4:12:b2:d4:81:c7:df:53:eb:1f: 6c:15:da:70:bf:5f:ea:ef:d8:7a:53:26:f5:5a:dc: d2:70:88:4f:7e:54:f5:7e:78:29:3a:b5:c5:e3:7b: 6f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5E:89:32:A8:F2:4B:BB:6D:28:41:5C:E5:E4:B8:BD:90:41:88:17 X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7l6JMqjyS7ttKEFc5eS4vZBBiBc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.64.0/18 Signature Algorithm: sha256WithRSAEncryption 97:74:40:e3:9e:4e:83:95:d2:c0:10:0b:a6:23:b1:a5:d6:a7: 2f:98:50:c6:81:c5:5b:a4:89:6a:b7:2a:d3:b6:37:9a:e8:fa: 84:42:69:48:bd:77:f4:15:4e:61:78:23:c6:73:f7:1c:34:a6: c3:91:19:39:9e:d7:82:9e:8d:72:46:21:a8:42:67:5d:dd:c7: 1b:ec:52:8d:ea:11:bc:5b:14:46:68:d1:3d:2c:07:e7:0d:95: ed:be:5f:55:54:1d:8c:6c:c9:5e:a4:c8:b7:1c:b9:b7:0f:d2: 9d:76:49:e9:23:c3:19:bb:5e:ec:9d:50:46:36:90:fa:62:57: cd:81:7c:72:1d:83:54:00:e4:ba:e9:c6:41:0b:47:c2:b4:c8: 2e:d2:65:8b:29:09:67:07:c2:25:82:d1:94:0c:91:4b:fe:fb: e2:dc:13:6a:b6:4f:44:1d:2b:1e:8e:65:4f:fe:5a:31:e2:fa: bd:c5:00:cb:b8:e3:57:93:ed:8c:49:99:40:a9:38:42:29:56: 6d:dd:79:6a:e1:d2:2b:98:09:fb:0b:83:dd:6a:e5:bd:dd:e5: 29:4e:c2:51:7b:15:93:47:63:42:37:e9:6f:07:93:2c:66:a1: 66:d7:c6:18:a0:c2:9e:74:46:1f:ce:23:8a:86:a8:fe:3a:5c: e3:92:a6:e5 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD20wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNTAyMTAx NDA4MDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVFNUU4OTMyQThGMjRC QkI2RDI4NDE1Q0U1RTRCOEJEOTA0MTg4MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8Xde1CB7HwyKywcDFJNo/gy+kVekYNSisrRKnT/P1o7d2RIh2 SNjAuUuaz0JQRdX8xibsMXKJdCrOAiJHeoUvt+LCniZd5st+oJH2gaSWOMlxeMU+ 8OmPd1F/8VcT4YB8piob+/3koLi2NrFbrCSIlcuwfx3qAbmqrT4mxl3JElGkk0hK 9pzYPbEiWFEWh8H1diTWisydE1bp83BQi17vRTrTJKhyIudXmfuuPzV2lMQDGsjv RTMyGgsyZn+Nc2kjGKTF3NAt5piXiMpaRM7e4hDPlkn+pBKy1IHH31PrH2wV2nC/ X+rv2HpTJvVa3NJwiE9+VPV+eCk6tcXje29lAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU7l6JMqjyS7ttKEFc5eS4vZBBiBcwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvN2w2Sk1xanlTN3R0S0VGYzVlUzR2 WkJCaUJjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBsBIQDAN BgkqhkiG9w0BAQsFAAOCAQEAl3RA455Og5XSwBALpiOxpdanL5hQxoHFW6SJarcq 07Y3muj6hEJpSL139BVOYXgjxnP3HDSmw5EZOZ7Xgp6NckYhqEJnXd3HG+xSjeoR vFsURmjRPSwH5w2V7b5fVVQdjGzJXqTItxy5tw/SnXZJ6SPDGbte7J1QRjaQ+mJX zYF8ch2DVADkuunGQQtHwrTILtJliykJZwfCJYLRlAyRS/774twTarZPRB0rHo5l T/5aMeL6vcUAy7jjV5PtjEmZQKk4QilWbd15auHSK5gJ+wuD3Wrlvd3lKU7CUXsV k0djQjfpbweTLGahZtfGGKDCnnRGH84jioao/jpc45Km5Q== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:40 2025 by rpki-client on console.sobornost.net