$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ChrSbTMKVYOmKVgsR3oi99qqiVo.roa File: ChrSbTMKVYOmKVgsR3oi99qqiVo.roa (raw, json) Hash identifier: zoRLdoujj8Mnpy+HLbui6+wWkkSqjQ/tvRpk/dd3Q7c= Subject key identifier: 0A:1A:D2:6D:33:0A:55:83:A6:29:58:2C:47:7A:22:F7:DA:AA:89:5A Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 180E Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ChrSbTMKVYOmKVgsR3oi99qqiVo.roa Signing time: Mon 10 Feb 2025 14:07:32 +0000 ROA not before: Mon 10 Feb 2025 14:07:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 123.204.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6158 (0x180e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:32 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0A1AD26D330A5583A629582C477A22F7DAAA895A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e6:aa:43:6e:d1:9d:c7:2a:57:19:5e:42:ba: 28:e4:11:31:35:88:dd:41:7a:fd:76:7e:fc:4a:a2: d2:43:14:c9:ec:e4:92:a9:dc:d0:d2:8d:0d:b1:8a: ab:21:5b:d4:73:39:4b:e5:fe:89:b1:5f:59:f8:79: 20:0c:5c:0d:fc:b1:ed:0f:c7:94:9f:16:56:ee:c8: 2b:11:30:34:3c:b9:c2:b5:18:1f:d5:d3:b1:63:88: d3:ee:6c:78:21:4c:3c:27:93:2f:1d:d9:c9:7c:45: 8e:4d:20:62:e4:c3:e6:66:3b:9b:a4:af:2d:4d:bb: b3:6d:83:3f:11:4b:5f:81:5c:60:5c:39:64:46:22: e4:24:f9:b8:06:bd:95:e6:96:cb:ce:06:79:c1:ae: 1e:89:8b:20:48:05:1f:fb:98:47:69:67:f7:38:46: 77:02:4b:c3:03:53:c5:18:5a:0d:d5:8c:c8:28:91: 67:69:aa:b1:0b:cb:e8:78:22:f6:d6:98:91:27:46: 6f:04:43:8d:61:ca:8d:86:2d:f5:93:ef:55:ad:ab: db:a4:b5:6e:4e:ca:7d:28:49:25:36:1b:82:56:0a: ef:8a:97:e2:8d:e5:c9:da:14:99:03:04:95:61:81: e4:35:38:bb:d5:92:a2:b4:d8:54:26:20:50:dc:70: ca:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1A:D2:6D:33:0A:55:83:A6:29:58:2C:47:7A:22:F7:DA:AA:89:5A X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ChrSbTMKVYOmKVgsR3oi99qqiVo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.204.0.0/16 Signature Algorithm: sha256WithRSAEncryption 70:46:aa:cc:f7:d5:56:91:d6:2e:7a:1c:22:b5:bb:9d:07:2e: f9:7e:16:48:fd:0b:ed:b8:bd:d1:7d:f1:94:e2:39:54:27:db: 32:b1:e2:02:0a:ff:df:5c:cc:6d:12:e5:d1:4d:34:47:7c:54: 8f:f4:6a:1a:b6:ec:fc:77:34:b5:f2:6c:b3:69:52:b9:74:0c: de:09:f3:4e:22:e3:f6:26:f3:e3:f8:f0:d9:37:ec:b3:31:81: 02:9a:f9:fb:b2:f2:f0:bf:04:4b:90:71:c9:bd:3e:65:5d:32: ac:a9:9a:c4:e5:d5:ac:d1:ca:df:26:05:c9:71:03:1b:ee:49: 25:79:45:5e:9b:02:1f:fe:c8:c2:cf:46:24:a2:c8:25:a8:bb: 52:24:19:16:6a:45:e1:a4:df:fc:38:1b:37:5d:53:47:11:bc: 2f:28:66:91:a3:38:55:45:3f:92:fb:6a:02:4e:58:b6:f2:95: 57:b7:e7:f7:bf:0a:62:23:1a:3a:9e:d8:9b:14:7f:52:1a:19: 1d:f5:eb:84:bd:e0:f8:50:55:f2:0b:9f:cd:44:cf:2c:d3:f1: 8e:4e:36:fc:f5:db:a9:88:82:a2:10:5a:e8:4a:1e:f6:af:e1: a5:51:04:bb:46:36:43:1e:02:5a:9c:02:c2:fe:6b:7d:4a:e8: 7d:6b:c2:76 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGA4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBBMUFEMjZEMzMwQTU1 ODNBNjI5NTgyQzQ3N0EyMkY3REFBQTg5NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCX5qpDbtGdxypXGV5CuijkETE1iN1Bev12fvxKotJDFMns5JKp 3NDSjQ2xiqshW9RzOUvl/omxX1n4eSAMXA38se0Px5SfFlbuyCsRMDQ8ucK1GB/V 07FjiNPubHghTDwnky8d2cl8RY5NIGLkw+ZmO5ukry1Nu7Ntgz8RS1+BXGBcOWRG IuQk+bgGvZXmlsvOBnnBrh6JiyBIBR/7mEdpZ/c4RncCS8MDU8UYWg3VjMgokWdp qrELy+h4IvbWmJEnRm8EQ41hyo2GLfWT71Wtq9uktW5Oyn0oSSU2G4JWCu+Kl+KN 5cnaFJkDBJVhgeQ1OLvVkqK02FQmIFDccMrfAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUChrSbTMKVYOmKVgsR3oi99qqiVowHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQ2hyU2JUTUtWWU9tS1Znc1Izb2k5 OXFxaVZvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAHvMMA0G CSqGSIb3DQEBCwUAA4IBAQBwRqrM99VWkdYuehwitbudBy75fhZI/QvtuL3RffGU 4jlUJ9syseICCv/fXMxtEuXRTTRHfFSP9Goatuz8dzS18myzaVK5dAzeCfNOIuP2 JvPj+PDZN+yzMYECmvn7svLwvwRLkHHJvT5lXTKsqZrE5dWs0crfJgXJcQMb7kkl eUVemwIf/sjCz0YkosglqLtSJBkWakXhpN/8OBs3XVNHEbwvKGaRozhVRT+S+2oC Tli28pVXt+f3vwpiIxo6ntibFH9SGhkd9euEveD4UFXyC5/NRM8s0/GOTjb89dup iIKiEFroSh72r+GlUQS7RjZDHgJanALC/mt9Suh9a8J2 -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:40 2025 by rpki-client on console.sobornost.net