$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/GTrVPm__ebUNkcI5Xi5KjLZLGwo.roa File: GTrVPm__ebUNkcI5Xi5KjLZLGwo.roa (raw, json) Hash identifier: qrtCH8X2ts8HXDL9nKr+7sTyIgRj8Jzerw+zU4vb984= Subject key identifier: 19:3A:D5:3E:6F:FF:79:B5:0D:91:C2:39:5E:2E:4A:8C:B6:4B:1B:0A Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 0F60 Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GTrVPm__ebUNkcI5Xi5KjLZLGwo.roa Signing time: Mon 10 Feb 2025 14:08:00 +0000 ROA not before: Mon 10 Feb 2025 14:08:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 192.72.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3936 (0xf60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Feb 10 14:08:00 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=193AD53E6FFF79B50D91C2395E2E4A8CB64B1B0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a3:8f:29:56:26:24:11:6f:17:bc:6d:10:d0: c4:c9:ee:ce:1a:08:6d:e3:b7:89:de:cf:56:32:92: 41:b2:e7:ba:05:8c:2b:b3:ee:f8:a6:01:7e:04:85: f2:b6:37:c5:93:ae:24:25:e7:5d:4e:97:81:0c:06: e6:62:d0:11:8e:84:18:c5:f5:e7:c2:69:bb:c6:1a: 85:52:9a:fe:bd:44:f2:5c:64:f1:c5:be:ea:e6:94: 2a:6b:2b:5e:1a:f6:22:78:ca:f9:98:5e:6b:65:a0: 5f:cd:25:59:e0:11:e2:a2:a2:e5:89:f9:e4:4f:3a: 5f:5e:69:95:32:2e:7a:5b:a9:d8:01:c9:2c:4f:bf: 6d:c3:71:c0:69:2c:62:81:8c:d6:76:28:d8:2a:77: 3e:67:97:98:4e:c9:09:56:86:8e:60:3d:f7:d4:51: ea:2f:d9:d0:f5:c9:01:25:f7:41:b2:ff:8b:1c:0f: 13:ab:11:1c:0e:0e:50:7d:6a:a1:0b:4b:1a:e2:00: dd:54:f8:bb:35:51:3d:af:e1:8a:31:ee:8a:be:56: 3b:cc:d3:b7:61:a4:49:54:a6:6c:94:cb:b0:8d:30: 76:ce:82:20:86:01:fd:03:4a:a9:14:91:9b:9e:11: f5:c2:3a:fa:c8:9c:32:4b:cf:9f:c2:27:b9:ad:d2: 5a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3A:D5:3E:6F:FF:79:B5:0D:91:C2:39:5E:2E:4A:8C:B6:4B:1B:0A X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GTrVPm__ebUNkcI5Xi5KjLZLGwo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.224.0/20 Signature Algorithm: sha256WithRSAEncryption 6b:9e:08:d7:0b:31:3d:ba:30:9b:67:8d:07:7f:ab:05:cf:52: 5e:4f:2c:54:7b:a2:6a:e8:f7:e9:c2:b3:23:22:f0:85:5c:01: aa:43:54:80:0a:c6:b0:f6:e3:f7:5e:5e:77:62:0b:cc:1b:7c: 41:cb:e6:8f:de:bf:ee:fa:4a:90:84:7c:9e:67:52:1d:44:0d: f5:8c:8e:6f:19:21:c3:b6:f2:fe:42:db:68:03:17:d7:66:11: 59:4c:ac:9e:19:9f:03:83:22:e6:b2:db:2c:b3:4e:c4:a4:46: f2:7c:f0:95:86:4d:bf:99:51:ac:91:1d:e8:98:b4:0a:05:db: fc:ff:9d:18:25:f2:4c:60:b9:29:a7:4a:50:47:81:2b:9c:aa: 61:65:86:87:80:35:b7:8c:01:6d:40:aa:c5:1d:05:a9:2a:4c: e6:e3:90:12:ca:b2:db:e8:bd:e7:3e:f2:ae:8c:b8:06:d5:9d: 2c:9d:32:52:bf:59:98:0b:e8:e7:3e:11:7d:d1:e8:ce:a5:13: fc:81:80:e6:de:e4:3b:7d:e0:a7:d6:90:a2:ea:f0:2f:0b:91: 16:76:27:2b:70:da:4f:87:99:97:f2:d2:57:63:d0:1f:27:f8: 83:27:24:5b:60:0a:b7:e9:3c:83:87:89:63:ab:32:1b:81:e9: fe:f8:44:4f -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD2AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNTAyMTAx NDA4MDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE5M0FENTNFNkZGRjc5 QjUwRDkxQzIzOTVFMkU0QThDQjY0QjFCMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCao48pViYkEW8XvG0Q0MTJ7s4aCG3jt4nez1YykkGy57oFjCuz 7vimAX4EhfK2N8WTriQl511Ol4EMBuZi0BGOhBjF9efCabvGGoVSmv69RPJcZPHF vurmlCprK14a9iJ4yvmYXmtloF/NJVngEeKiouWJ+eRPOl9eaZUyLnpbqdgBySxP v23DccBpLGKBjNZ2KNgqdz5nl5hOyQlWho5gPffUUeov2dD1yQEl90Gy/4scDxOr ERwODlB9aqELSxriAN1U+Ls1UT2v4Yox7oq+VjvM07dhpElUpmyUy7CNMHbOgiCG Af0DSqkUkZueEfXCOvrInDJLz5/CJ7mt0lpBAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUGTrVPm//ebUNkcI5Xi5KjLZLGwowHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvR1RyVlBtX19lYlVOa2NJNVhpNUtq TFpMR3dvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMBI4DAN BgkqhkiG9w0BAQsFAAOCAQEAa54I1wsxPbowm2eNB3+rBc9SXk8sVHuiauj36cKz IyLwhVwBqkNUgArGsPbj915ed2ILzBt8Qcvmj96/7vpKkIR8nmdSHUQN9YyObxkh w7by/kLbaAMX12YRWUysnhmfA4Mi5rLbLLNOxKRG8nzwlYZNv5lRrJEd6Ji0CgXb /P+dGCXyTGC5KadKUEeBK5yqYWWGh4A1t4wBbUCqxR0FqSpM5uOQEsqy2+i95z7y roy4BtWdLJ0yUr9ZmAvo5z4RfdHozqUT/IGA5t7kO33gp9aQourwLwuRFnYnK3Da T4eZl/LSV2PQHyf4gyckW2AKt+k8g4eJY6syG4Hp/vhETw== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:40 2025 by rpki-client on console.sobornost.net