$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/X-bQ5enFzFOfZt_bsLDS34-Xo8M.roa File: X-bQ5enFzFOfZt_bsLDS34-Xo8M.roa (raw, json) Hash identifier: 2u8vTxLJfWPaN7w9YU1jUbNtxjyyaciYbRr88JjhrXg= Subject key identifier: 5F:E6:D0:E5:E9:C5:CC:53:9F:66:DF:DB:B0:B0:D2:DF:8F:97:A3:C3 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 17F3 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/X-bQ5enFzFOfZt_bsLDS34-Xo8M.roa Signing time: Mon 10 Feb 2025 14:07:26 +0000 ROA not before: Mon 10 Feb 2025 14:07:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 60.245.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6131 (0x17f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5FE6D0E5E9C5CC539F66DFDBB0B0D2DF8F97A3C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:70:a9:bf:d9:97:f8:d6:a6:16:ad:d2:59: d7:cb:76:7c:b3:ac:43:ac:b7:5c:5d:b5:b8:16:b8: 47:6a:1b:80:f0:b2:4a:30:87:d5:00:fa:87:9c:22: 70:2d:a3:15:22:2a:52:40:cb:4c:7c:52:cb:05:6d: a9:0f:11:32:33:41:dd:c8:22:cd:9c:d5:81:10:19: b3:0e:71:ef:79:53:d5:6c:d4:f1:9f:46:4b:dd:f3: a3:eb:6b:27:93:51:b0:42:d7:e8:1a:ea:cb:bd:f9: bb:05:e0:da:47:de:a9:7a:b1:f2:55:81:ed:17:d8: c5:af:71:d2:31:82:24:10:c8:c6:92:0a:d1:8a:ac: 28:ed:7f:44:6a:8b:6c:1e:84:20:b1:5a:72:de:1c: 03:15:f4:25:c0:14:a9:87:6f:92:87:68:06:c7:84: 92:34:0d:e9:61:2f:0a:60:50:a5:6c:76:48:a3:da: 4c:60:45:ac:ef:c2:9b:5b:23:86:14:a7:c0:3d:78: 22:73:98:12:52:1c:47:6b:0b:df:e5:7e:be:e1:29: d1:fd:64:24:96:ca:76:82:6c:ca:7c:87:31:9f:fe: f1:d0:66:72:85:68:87:55:a7:ad:79:d1:36:42:6a: 79:da:7f:76:b7:9e:ee:de:60:a2:a5:47:33:1c:0a: 18:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E6:D0:E5:E9:C5:CC:53:9F:66:DF:DB:B0:B0:D2:DF:8F:97:A3:C3 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/X-bQ5enFzFOfZt_bsLDS34-Xo8M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.245.96.0/20 Signature Algorithm: sha256WithRSAEncryption c9:cd:f7:66:2a:ef:d2:fa:d1:cf:23:d1:6a:41:9a:98:3f:e1: 37:d8:27:b6:60:15:08:13:9c:69:24:dc:20:57:81:ab:f3:1f: a9:97:93:03:16:62:04:7e:e6:7e:6b:48:b3:74:f8:c4:3e:5c: be:66:f6:5b:cd:38:d0:c8:81:3e:06:01:ad:c5:3f:96:fb:c5: 80:74:01:39:ae:73:12:0a:32:ee:bf:a3:23:38:5f:a1:a8:c5: 32:61:da:2b:02:f9:e9:62:d5:44:71:88:a5:94:38:3d:02:19: 87:26:28:10:cb:5d:21:9a:ed:f8:c1:8b:57:8f:bd:20:56:29: 30:81:77:ab:0f:f2:ec:2c:1d:a5:03:e7:38:ee:85:d2:f1:11: 3e:27:d0:8c:db:f3:74:1b:33:76:39:ee:36:4f:91:53:b5:64: c0:fc:41:95:3c:fa:b4:0c:f6:f0:93:02:f1:68:a9:1d:a6:22: e5:b1:92:f7:3b:bf:b0:92:7f:f9:a2:d6:41:53:99:39:37:59: 2b:c5:c8:ee:08:97:41:5f:52:e4:50:05:d7:b9:8a:bf:38:64: 99:3b:78:52:e8:e1:a4:fb:cd:3d:fc:34:ff:4f:3f:c5:7d:b7: a1:36:13:e0:c2:4e:d6:3e:30:cd:3b:1a:36:6b:38:84:ae:3b: 65:e6:64:a5 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICF/MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVGRTZEMEU1RTlDNUND NTM5RjY2REZEQkIwQjBEMkRGOEY5N0EzQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxKHCpv9mX+NamFq3SWdfLdnyzrEOst1xdtbgWuEdqG4Dwskow h9UA+oecInAtoxUiKlJAy0x8UssFbakPETIzQd3IIs2c1YEQGbMOce95U9Vs1PGf Rkvd86PrayeTUbBC1+ga6su9+bsF4NpH3ql6sfJVge0X2MWvcdIxgiQQyMaSCtGK rCjtf0Rqi2wehCCxWnLeHAMV9CXAFKmHb5KHaAbHhJI0DelhLwpgUKVsdkij2kxg RazvwptbI4YUp8A9eCJzmBJSHEdrC9/lfr7hKdH9ZCSWynaCbMp8hzGf/vHQZnKF aIdVp6150TZCannaf3a3nu7eYKKlRzMcChgPAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUX+bQ5enFzFOfZt/bsLDS34+Xo8MwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvWC1iUTVlbkZ6Rk9mWnRfYnNMRFMz NC1YbzhNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBDz1YDAN BgkqhkiG9w0BAQsFAAOCAQEAyc33Zirv0vrRzyPRakGamD/hN9gntmAVCBOcaSTc IFeBq/MfqZeTAxZiBH7mfmtIs3T4xD5cvmb2W8040MiBPgYBrcU/lvvFgHQBOa5z Egoy7r+jIzhfoajFMmHaKwL56WLVRHGIpZQ4PQIZhyYoEMtdIZrt+MGLV4+9IFYp MIF3qw/y7CwdpQPnOO6F0vERPifQjNvzdBszdjnuNk+RU7VkwPxBlTz6tAz28JMC 8WipHaYi5bGS9zu/sJJ/+aLWQVOZOTdZK8XI7giXQV9S5FAF17mKvzhkmTt4Uujh pPvNPfw0/08/xX23oTYT4MJO1j4wzTsaNms4hK47ZeZkpQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:41 2025 by rpki-client on console.sobornost.net