$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/NjVf5L3x6fMGtaQ1Tfqsm8kGu3s.roa File: NjVf5L3x6fMGtaQ1Tfqsm8kGu3s.roa (raw, json) Hash identifier: 5SCitNywz6f7Foipq2XwctBuUHLpT/xLiFmfHfexRT0= Subject key identifier: 36:35:5F:E4:BD:F1:E9:F3:06:B5:A4:35:4D:FA:AC:9B:C9:06:BB:7B Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 183C Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NjVf5L3x6fMGtaQ1Tfqsm8kGu3s.roa Signing time: Mon 10 Feb 2025 14:07:43 +0000 ROA not before: Mon 10 Feb 2025 14:07:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 123.205.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6204 (0x183c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=36355FE4BDF1E9F306B5A4354DFAAC9BC906BB7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2c:1e:b9:9a:15:21:10:ae:e7:f9:11:f7:e0: c7:86:03:71:36:2b:66:5f:e8:46:1c:e4:e4:47:b5: 55:a8:d5:69:50:90:69:fe:b1:37:42:89:f0:e7:5b: ba:26:40:0e:86:7f:5d:47:f8:d8:80:a9:f6:3d:3e: 11:2f:49:80:b5:84:2b:07:d3:3f:2b:59:ae:e4:cc: 88:61:6c:8e:1a:bb:63:ba:c8:3e:3e:47:67:04:22: 4f:44:1d:7b:0f:bc:71:11:1a:58:3b:20:c3:f5:91: db:bc:f0:80:60:65:7f:5b:56:8c:45:8c:8d:16:f4: 4f:c2:f1:05:eb:4a:7e:32:30:94:56:f6:63:df:1f: 20:be:56:ec:55:f4:4f:b3:88:88:fb:ab:7e:ef:03: 73:7a:8f:f5:6e:f7:31:73:57:59:e2:5a:21:96:5a: cf:1f:33:dd:75:9c:c2:11:83:aa:2f:62:a8:bf:47: c0:2e:1b:11:8c:9d:79:ba:c0:f8:00:3c:dc:5d:91: c9:48:2e:3f:37:b8:a9:9b:c2:3b:c4:d7:43:09:e9: 1d:9f:7f:af:aa:80:df:5c:bf:3c:a3:15:38:00:8f: 41:6c:dd:dc:c2:01:4f:d9:87:0f:10:64:49:59:e4: 9e:40:e8:a8:1d:b8:b5:ba:2f:f1:a5:ff:fe:16:b2: 8b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:35:5F:E4:BD:F1:E9:F3:06:B5:A4:35:4D:FA:AC:9B:C9:06:BB:7B X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NjVf5L3x6fMGtaQ1Tfqsm8kGu3s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.205.58.0/24 Signature Algorithm: sha256WithRSAEncryption c6:60:6c:ac:20:99:03:3f:76:de:28:19:00:6f:50:c3:34:52: e4:25:f6:f5:c2:be:e1:1e:5b:9a:3c:39:59:67:06:a8:3e:67: 21:c0:2c:28:39:d2:9d:d8:03:29:ab:28:cd:5c:88:0c:c3:82: b7:7a:ab:7f:c3:e7:73:77:ef:2d:48:90:d6:44:8b:49:2f:03: 18:f9:da:60:81:f9:f2:d8:98:79:3f:e4:6a:c4:61:ee:e3:de: 83:bb:19:92:1f:b3:fd:4b:48:d9:36:44:0b:0c:2c:c6:29:38: ee:97:34:24:c3:0a:58:85:e8:a4:af:53:12:f4:44:40:fe:ed: 92:53:a8:2f:b0:8e:ea:a0:95:7f:35:e5:70:bd:d9:9c:24:47: 90:e6:99:80:d7:72:89:eb:32:d8:95:a8:58:1c:82:1c:1b:16: 74:84:0b:06:3c:87:4e:a7:70:68:2c:49:fa:3d:d1:ef:62:f7: fe:3b:3f:d2:5a:fa:38:41:fc:d4:75:be:fb:08:e9:29:36:ff: db:1c:15:73:64:48:70:f1:21:6b:46:fd:8b:a9:ea:df:de:35: b9:1e:8f:bf:15:36:5e:5e:a9:fd:83:f1:db:3d:40:e6:67:90: 38:e4:0e:5e:f8:69:9e:58:1f:95:b7:30:c8:9f:78:b7:e1:7f: f9:51:61:e8 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGDwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM2MzU1RkU0QkRGMUU5 RjMwNkI1QTQzNTRERkFBQzlCQzkwNkJCN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsLB65mhUhEK7n+RH34MeGA3E2K2Zf6EYc5ORHtVWo1WlQkGn+ sTdCifDnW7omQA6Gf11H+NiAqfY9PhEvSYC1hCsH0z8rWa7kzIhhbI4au2O6yD4+ R2cEIk9EHXsPvHERGlg7IMP1kdu88IBgZX9bVoxFjI0W9E/C8QXrSn4yMJRW9mPf HyC+VuxV9E+ziIj7q37vA3N6j/Vu9zFzV1niWiGWWs8fM911nMIRg6ovYqi/R8Au GxGMnXm6wPgAPNxdkclILj83uKmbwjvE10MJ6R2ff6+qgN9cvzyjFTgAj0Fs3dzC AU/Zhw8QZElZ5J5A6KgduLW6L/Gl//4WsouxAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUNjVf5L3x6fMGtaQ1Tfqsm8kGu3swHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvTmpWZjVMM3g2Zk1HdGFRMVRmcXNt OGtHdTNzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHvNOjAN BgkqhkiG9w0BAQsFAAOCAQEAxmBsrCCZAz923igZAG9QwzRS5CX29cK+4R5bmjw5 WWcGqD5nIcAsKDnSndgDKasozVyIDMOCt3qrf8Pnc3fvLUiQ1kSLSS8DGPnaYIH5 8tiYeT/kasRh7uPeg7sZkh+z/UtI2TZECwwsxik47pc0JMMKWIXopK9TEvREQP7t klOoL7CO6qCVfzXlcL3ZnCRHkOaZgNdyiesy2JWoWByCHBsWdIQLBjyHTqdwaCxJ +j3R72L3/js/0lr6OEH81HW++wjpKTb/2xwVc2RIcPEha0b9i6nq3941uR6PvxU2 Xl6p/YPx2z1A5meQOOQOXvhpnlgflbcwyJ94t+F/+VFh6A== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:41 2025 by rpki-client on console.sobornost.net