$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Jmhn9vk1yhzirS_TeIRtPQLMIjU.roa File: Jmhn9vk1yhzirS_TeIRtPQLMIjU.roa (raw, json) Hash identifier: xPG/rCGWwQ+keFNwO9LOmKuUq7mgUVdTZNa6U2OIdfg= Subject key identifier: 26:68:67:F6:F9:35:CA:1C:E2:AD:2F:D3:78:84:6D:3D:02:CC:22:35 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 17EE Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Jmhn9vk1yhzirS_TeIRtPQLMIjU.roa Signing time: Mon 10 Feb 2025 14:07:25 +0000 ROA not before: Mon 10 Feb 2025 14:07:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 106.104.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6126 (0x17ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:25 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=266867F6F935CA1CE2AD2FD378846D3D02CC2235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:76:d7:71:a0:dc:00:9a:71:83:31:cc:79:45: de:3b:74:17:59:80:5c:7e:d7:20:a7:f6:ba:59:ff: c9:26:a4:12:51:82:43:95:4a:10:64:f4:81:3d:2a: 6e:57:f6:f1:66:16:97:96:34:86:f2:50:d3:09:d6: 24:79:d3:d2:b9:54:71:96:e3:ff:ac:64:93:e1:ac: 70:83:67:d5:2a:d1:51:db:b9:04:48:6f:6f:90:52: 4c:3c:9a:8a:f0:d8:34:8b:43:f9:84:27:3c:83:0a: 18:3a:8b:a0:d8:71:c0:54:34:59:61:cf:1b:11:14: 20:70:75:fb:ea:bf:25:68:7a:ae:10:f4:16:3b:d0: 0b:ed:8a:ab:bc:a9:ed:8f:b8:68:e2:53:2a:7c:fd: 33:11:01:27:8b:54:33:45:4d:81:54:c8:c9:5a:32: f1:d2:19:46:c4:ed:d3:8b:52:b1:04:df:f5:ea:3e: e7:64:47:2d:bf:b7:94:19:60:97:66:d6:06:cc:e9: 6f:b1:96:9a:fb:bd:b9:57:96:62:e3:5d:05:cf:4e: 66:13:ee:d3:aa:f9:13:87:ab:c8:ba:6c:5c:0d:25: bb:49:cc:de:88:7c:9e:a9:08:36:5a:6b:ac:f4:fe: 88:13:0c:2c:02:24:e7:c2:c9:cb:35:4a:07:e6:9d: 93:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:68:67:F6:F9:35:CA:1C:E2:AD:2F:D3:78:84:6D:3D:02:CC:22:35 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Jmhn9vk1yhzirS_TeIRtPQLMIjU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.104.0.0/16 Signature Algorithm: sha256WithRSAEncryption b5:88:51:29:e1:9b:77:29:b2:28:e5:56:36:27:f0:91:a9:0e: 93:d3:d9:26:24:cb:53:e2:bc:b4:a0:57:6e:29:42:2e:db:98: e9:77:81:c1:44:72:73:10:50:df:f3:b7:84:48:24:82:c8:93: 75:a3:f2:b4:e5:00:16:58:62:f2:75:59:0f:65:4e:26:bd:ec: 7d:86:c2:ef:e5:22:28:a2:5c:00:6f:a6:14:93:b8:5a:bd:26: 19:8e:74:09:b8:4d:fe:d0:b1:2f:c3:4b:90:b3:3e:2e:2d:af: fc:64:01:c1:3d:b4:c3:b3:29:2e:b7:19:40:5a:bf:1b:2f:c0: a8:e8:b7:b6:04:29:6d:ac:dd:53:73:bd:6d:36:5f:52:10:56: c9:39:8e:d1:45:88:1c:a3:95:dd:0d:a8:3f:77:b9:a4:ec:d1: a1:4c:78:47:37:1d:e3:f9:10:65:42:55:42:ab:00:55:09:8a: a9:8f:63:52:4a:65:f7:9e:76:1a:62:9f:03:c9:49:d3:24:26: a3:1b:6c:50:f9:e1:61:fc:12:99:2f:0d:8a:08:a8:96:3d:aa: fc:a4:36:55:5c:1a:a1:ff:c9:08:44:28:8c:9a:86:b4:68:29: e9:7a:44:64:3b:7b:6a:70:56:3a:6d:95:30:3d:79:89:39:fa: dc:1f:b9:f3 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICF+4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI2Njg2N0Y2RjkzNUNB MUNFMkFEMkZEMzc4ODQ2RDNEMDJDQzIyMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhdtdxoNwAmnGDMcx5Rd47dBdZgFx+1yCn9rpZ/8kmpBJRgkOV ShBk9IE9Km5X9vFmFpeWNIbyUNMJ1iR509K5VHGW4/+sZJPhrHCDZ9Uq0VHbuQRI b2+QUkw8morw2DSLQ/mEJzyDChg6i6DYccBUNFlhzxsRFCBwdfvqvyVoeq4Q9BY7 0Avtiqu8qe2PuGjiUyp8/TMRASeLVDNFTYFUyMlaMvHSGUbE7dOLUrEE3/XqPudk Ry2/t5QZYJdm1gbM6W+xlpr7vblXlmLjXQXPTmYT7tOq+ROHq8i6bFwNJbtJzN6I fJ6pCDZaa6z0/ogTDCwCJOfCycs1SgfmnZNBAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUJmhn9vk1yhzirS/TeIRtPQLMIjUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSm1objl2azF5aHppclNfVGVJUnRQ UUxNSWpVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAGpoMA0G CSqGSIb3DQEBCwUAA4IBAQC1iFEp4Zt3KbIo5VY2J/CRqQ6T09kmJMtT4ry0oFdu KUIu25jpd4HBRHJzEFDf87eESCSCyJN1o/K05QAWWGLydVkPZU4mvex9hsLv5SIo olwAb6YUk7havSYZjnQJuE3+0LEvw0uQsz4uLa/8ZAHBPbTDsykutxlAWr8bL8Co 6Le2BCltrN1Tc71tNl9SEFbJOY7RRYgco5XdDag/d7mk7NGhTHhHNx3j+RBlQlVC qwBVCYqpj2NSSmX3nnYaYp8DyUnTJCajG2xQ+eFh/BKZLw2KCKiWPar8pDZVXBqh /8kIRCiMmoa0aCnpekRkO3tqcFY6bZUwPXmJOfrcH7nz -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:40 2025 by rpki-client on console.sobornost.net