$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/GXS0cm7vhAfDsWmVs7EpMiafBl0.roa File: GXS0cm7vhAfDsWmVs7EpMiafBl0.roa (raw, json) Hash identifier: gmmh0Hb2wlTwkoPJMT5zXmmgELGjANqkVXgtHQXVT5c= Subject key identifier: 19:74:B4:72:6E:EF:84:07:C3:B1:69:95:B3:B1:29:32:26:9F:06:5D Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 179F Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GXS0cm7vhAfDsWmVs7EpMiafBl0.roa Signing time: Mon 10 Feb 2025 14:07:06 +0000 ROA not before: Mon 10 Feb 2025 14:07:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 112.105.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6047 (0x179f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1974B4726EEF8407C3B16995B3B12932269F065D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bd:7b:77:2e:c9:f9:82:d1:ab:39:3f:bd:1b: 07:1a:69:a2:f4:4d:e2:4a:7b:7e:76:22:de:d2:62: 64:6c:c6:42:12:74:55:d5:3d:11:55:99:a9:4f:5f: cf:ef:29:47:98:99:16:cd:d9:33:fd:13:4b:63:9c: dd:3b:37:17:70:83:84:39:b8:0c:02:fb:bc:46:17: 44:6f:69:af:09:74:ef:7a:5e:54:4e:18:de:e8:2c: d7:a9:e9:28:e3:d4:29:0b:04:ce:41:4c:b2:6d:a1: ac:16:cb:d4:81:f9:6e:1e:55:77:10:05:28:dd:f1: af:e7:f7:9f:ea:a4:24:09:4c:8c:4c:fb:3b:1e:6c: 62:37:47:6a:be:6b:20:29:8d:d2:12:ed:cb:0c:da: c5:69:b2:c4:68:e5:e1:0a:3f:c5:6a:71:88:05:b3: 1e:5e:fe:fd:b3:13:b9:ea:06:4b:65:5d:b8:cb:b6: a6:e3:4e:a5:01:d0:d3:d9:20:6e:bc:4a:fa:b5:2f: 8b:66:0d:1d:40:a2:55:f2:20:13:7e:4b:8e:18:56: 55:a6:f3:50:11:ca:55:3e:4e:c9:02:6c:67:3a:44: fe:05:e1:eb:12:0c:48:0b:64:b6:96:81:25:90:c1: c9:c7:51:b2:d4:19:17:c5:ef:e7:4f:3a:40:7c:31: 32:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:74:B4:72:6E:EF:84:07:C3:B1:69:95:B3:B1:29:32:26:9F:06:5D X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GXS0cm7vhAfDsWmVs7EpMiafBl0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 112.105.64.0/18 Signature Algorithm: sha256WithRSAEncryption 51:00:b3:54:33:4d:7a:b4:ee:58:76:76:0b:8c:37:be:bb:18: f8:be:0c:a6:ff:1d:0a:b3:1c:02:f3:09:71:6d:6d:06:f8:0a: 1b:3d:03:95:d8:97:c1:b3:2f:07:b9:2e:91:d5:b5:10:08:7d: e3:2a:9b:99:10:78:25:71:77:ee:23:f7:a7:5d:d4:85:07:7c: 83:e6:b3:95:ba:4e:e7:19:57:a4:c1:57:38:f2:31:5f:b1:35: a9:80:b5:b7:33:b2:5d:bf:35:16:3b:75:eb:9f:7d:ac:f8:31: e4:c5:23:68:de:66:4a:da:eb:0b:25:46:7a:c8:b7:85:f8:6d: 95:0f:82:a4:c2:5c:e0:64:eb:69:e9:a1:eb:7f:57:73:69:cd: f7:8a:ae:3f:64:30:61:ea:a5:14:ae:24:a0:c9:da:0f:5f:fe: 20:44:0d:75:43:3c:07:c3:69:8c:d4:ac:4b:17:74:fe:bc:2f: 00:14:ca:f6:88:63:98:f6:f2:b4:05:ba:d0:0e:11:51:ab:b2: ad:ea:8b:34:cf:8e:a1:ec:ef:c8:0e:1c:57:79:3b:7e:ca:1d: f0:17:ef:39:60:de:50:cc:4b:7c:bb:e9:c9:09:bd:21:2c:d2: 57:c0:e2:3e:2f:a6:52:66:18:14:60:d0:cb:46:ab:b5:2e:d1: 99:0d:27:f0 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICF58wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE5NzRCNDcyNkVFRjg0 MDdDM0IxNjk5NUIzQjEyOTMyMjY5RjA2NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2vXt3Lsn5gtGrOT+9GwcaaaL0TeJKe352It7SYmRsxkISdFXV PRFVmalPX8/vKUeYmRbN2TP9E0tjnN07Nxdwg4Q5uAwC+7xGF0Rvaa8JdO96XlRO GN7oLNep6Sjj1CkLBM5BTLJtoawWy9SB+W4eVXcQBSjd8a/n95/qpCQJTIxM+zse bGI3R2q+ayApjdIS7csM2sVpssRo5eEKP8VqcYgFsx5e/v2zE7nqBktlXbjLtqbj TqUB0NPZIG68Svq1L4tmDR1AolXyIBN+S44YVlWm81ARylU+TskCbGc6RP4F4esS DEgLZLaWgSWQwcnHUbLUGRfF7+dPOkB8MTIpAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUGXS0cm7vhAfDsWmVs7EpMiafBl0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvR1hTMGNtN3ZoQWZEc1dtVnM3RXBN aWFmQmwwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnBpQDAN BgkqhkiG9w0BAQsFAAOCAQEAUQCzVDNNerTuWHZ2C4w3vrsY+L4Mpv8dCrMcAvMJ cW1tBvgKGz0DldiXwbMvB7kukdW1EAh94yqbmRB4JXF37iP3p13UhQd8g+azlbpO 5xlXpMFXOPIxX7E1qYC1tzOyXb81Fjt16599rPgx5MUjaN5mStrrCyVGesi3hfht lQ+CpMJc4GTraemh639Xc2nN94quP2QwYeqlFK4koMnaD1/+IEQNdUM8B8NpjNSs Sxd0/rwvABTK9ohjmPbytAW60A4RUauyreqLNM+OoezvyA4cV3k7fsod8BfvOWDe UMxLfLvpyQm9ISzSV8DiPi+mUmYYFGDQy0artS7RmQ0n8A== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:40 2025 by rpki-client on console.sobornost.net