$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/lajmvwV2JmJ0UaBz4iwYb-7AYRI.roa File: lajmvwV2JmJ0UaBz4iwYb-7AYRI.roa (raw, json) Hash identifier: dirMeSjN+spDy0c8atqBTaRJuD3W0TVvTiwDP++DWio= Subject key identifier: 95:A8:E6:BF:05:76:26:62:74:51:A0:73:E2:2C:18:6F:EE:C0:61:12 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1829 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/lajmvwV2JmJ0UaBz4iwYb-7AYRI.roa Signing time: Mon 10 Feb 2025 14:07:38 +0000 ROA not before: Mon 10 Feb 2025 14:07:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18049 IP address blocks: 123.205.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6185 (0x1829) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=95A8E6BF057626627451A073E22C186FEEC06112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:79:14:f9:c1:8c:9c:a2:a7:4b:20:1b:60:37: 16:17:47:11:9b:8a:32:1d:03:d5:8a:65:e2:58:27: 91:b6:80:09:81:c5:57:7e:06:dc:f5:2d:1d:98:3c: 82:03:b3:5b:48:cd:ae:27:bc:2c:08:eb:26:00:42: 15:73:0f:f9:91:11:d1:65:f3:d4:38:70:4b:d2:8e: 5b:60:43:38:18:bf:75:2c:4a:0b:0a:06:80:56:b2: 4a:f5:61:de:d7:c8:0c:c2:52:47:7c:b4:e3:49:87: af:d5:33:84:4c:65:a2:08:56:7d:7e:d6:51:60:9c: 19:39:0c:8f:38:20:23:55:3c:c3:8c:1b:4f:2a:08: ea:4e:bc:cc:1e:0d:c6:4b:90:32:be:f3:a5:60:ec: 6e:8e:fb:a2:00:ef:03:09:7a:9b:09:e1:a1:b2:e7: 7d:5e:e3:94:21:dc:81:12:71:6f:ce:57:ff:ac:34: 49:41:5b:4a:ea:a3:59:34:f3:e2:a0:74:7f:af:da: 6d:2b:1c:1f:58:65:f1:e0:0a:d5:b9:a4:16:96:29: 4e:b7:bd:04:4a:2e:5b:c8:cd:e7:10:05:04:f9:27: b9:12:e3:9f:01:5c:4b:5e:e8:d8:7f:8a:ee:28:a5: 18:b1:4d:d4:ea:7d:71:65:b3:59:b5:55:61:3a:35: de:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A8:E6:BF:05:76:26:62:74:51:A0:73:E2:2C:18:6F:EE:C0:61:12 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/lajmvwV2JmJ0UaBz4iwYb-7AYRI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.205.0.0/17 Signature Algorithm: sha256WithRSAEncryption 65:8d:63:2a:da:80:3b:f5:df:c1:ce:7a:e4:94:b2:98:d0:61: 44:45:dc:16:32:d3:d4:5d:91:fc:82:8e:f8:53:1f:bf:d9:f9: e3:de:7e:08:40:6c:fd:ea:bd:16:a6:62:10:b7:53:4b:a6:c2: 0f:ce:b3:96:bc:af:5f:43:86:5c:b0:3f:da:0b:71:f4:58:55: 4f:5f:fe:d7:0b:4b:60:03:66:1c:d4:a5:8c:4c:39:f5:48:f4: dc:a0:2a:c3:b7:27:af:5d:64:ab:d9:90:f8:ad:db:e9:14:cb: 33:4b:46:0e:3a:9e:02:38:ba:73:bb:98:b1:76:ea:ea:7a:68: a1:7a:81:dd:ae:e1:a4:92:d9:2d:0f:3e:fd:36:3e:6a:f2:0e: 7d:7a:07:64:c6:a4:f9:f6:1c:da:5f:ab:63:b0:9c:f7:76:07: ec:16:69:93:ec:cc:e7:2b:eb:a1:64:77:b7:e4:c3:36:28:f0: b6:b3:d8:1e:c4:a8:db:46:00:b0:aa:58:ca:4d:23:22:77:a8: 36:c8:83:a0:6a:3a:65:c4:ff:25:a0:2d:1b:3c:48:9e:83:ef: 56:ac:12:86:db:52:9b:44:81:ce:f6:d6:01:06:00:37:f7:49: fd:7d:ae:86:8c:5a:ef:3b:e1:e4:af:23:da:dd:a7:02:a2:01: ee:be:af:d7 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGCkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk1QThFNkJGMDU3NjI2 NjI3NDUxQTA3M0UyMkMxODZGRUVDMDYxMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMeRT5wYycoqdLIBtgNxYXRxGbijIdA9WKZeJYJ5G2gAmBxVd+ Btz1LR2YPIIDs1tIza4nvCwI6yYAQhVzD/mREdFl89Q4cEvSjltgQzgYv3UsSgsK BoBWskr1Yd7XyAzCUkd8tONJh6/VM4RMZaIIVn1+1lFgnBk5DI84ICNVPMOMG08q COpOvMweDcZLkDK+86Vg7G6O+6IA7wMJepsJ4aGy531e45Qh3IEScW/OV/+sNElB W0rqo1k08+KgdH+v2m0rHB9YZfHgCtW5pBaWKU63vQRKLlvIzecQBQT5J7kS458B XEte6Nh/iu4opRixTdTqfXFls1m1VWE6Nd7JAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUlajmvwV2JmJ0UaBz4iwYb+7AYRIwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbGFqbXZ3VjJKbUowVWFCejRpd1li LTdBWVJJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB3vNADAN BgkqhkiG9w0BAQsFAAOCAQEAZY1jKtqAO/Xfwc565JSymNBhREXcFjLT1F2R/IKO +FMfv9n5495+CEBs/eq9FqZiELdTS6bCD86zlryvX0OGXLA/2gtx9FhVT1/+1wtL YANmHNSljEw59Uj03KAqw7cnr11kq9mQ+K3b6RTLM0tGDjqeAji6c7uYsXbq6npo oXqB3a7hpJLZLQ8+/TY+avIOfXoHZMak+fYc2l+rY7Cc93YH7BZpk+zM5yvroWR3 t+TDNijwtrPYHsSo20YAsKpYyk0jIneoNsiDoGo6ZcT/JaAtGzxInoPvVqwShttS m0SBzvbWAQYAN/dJ/X2uhoxa7zvh5K8j2t2nAqIB7r6v1w== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:41 2025 by rpki-client on console.sobornost.net