$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/s2nYkHG8p6ORHXXGJlR0ndw2TyA.roa File: s2nYkHG8p6ORHXXGJlR0ndw2TyA.roa (raw, json) Hash identifier: 7BrjyBoT2KGCd1EXqvMfnQKd5L/o/EPj0vI02jCXHAI= Subject key identifier: B3:69:D8:90:71:BC:A7:A3:91:1D:75:C6:26:54:74:9D:DC:36:4F:20 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 181E Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/s2nYkHG8p6ORHXXGJlR0ndw2TyA.roa Signing time: Mon 10 Feb 2025 14:07:35 +0000 ROA not before: Mon 10 Feb 2025 14:07:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18049 IP address blocks: 106.105.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6174 (0x181e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B369D89071BCA7A3911D75C62654749DDC364F20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:33:a8:2c:64:77:53:b6:0e:c1:ae:2b:1c:fa: f1:a8:fa:b2:ad:35:38:4c:fc:66:73:c7:18:37:36: ec:47:14:55:c8:e0:b1:32:d9:3e:36:f8:52:8a:01: 04:6e:67:94:e7:cb:31:ff:e9:e6:3f:33:2f:c6:3f: c7:63:9a:b1:7e:b5:46:df:f6:66:21:05:19:6c:68: 55:bd:7e:a8:7a:5e:e9:58:e4:15:f3:8d:88:62:79: 9c:f7:64:3a:87:8d:63:aa:32:91:01:50:46:38:cd: fb:5e:aa:54:ca:34:9f:2a:1d:60:07:28:5a:98:9a: e0:91:8c:1a:cf:3d:06:d2:f1:90:4b:b2:32:e5:e3: 6c:7b:2b:0f:98:10:51:fe:1c:03:6a:70:1c:15:95: 75:77:23:92:3e:cc:cf:0c:af:50:8c:cc:bf:bf:5f: 3e:ee:2a:ac:71:cc:35:5e:7c:26:21:cd:f3:08:5b: f9:4f:09:cb:f5:3c:b0:9e:03:d2:ab:2a:27:e2:b5: 3a:ad:96:83:fb:c5:1f:37:53:a0:36:c2:46:df:84: 48:2f:be:2b:62:17:0a:78:03:52:cb:e5:16:4c:f3: 29:f3:6a:0c:8a:ea:b5:42:b5:d7:de:5b:ae:f0:6e: 55:3f:2d:19:1c:44:6c:71:5f:30:d1:dc:17:b9:2f: 0d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:69:D8:90:71:BC:A7:A3:91:1D:75:C6:26:54:74:9D:DC:36:4F:20 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/s2nYkHG8p6ORHXXGJlR0ndw2TyA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.88.0/21 Signature Algorithm: sha256WithRSAEncryption 75:f2:23:30:a0:9b:06:e6:18:c4:36:fa:83:65:8d:46:95:fa: 07:07:1c:1d:f5:2f:0c:5e:a1:df:93:d5:14:59:bf:af:f5:18: 90:4e:75:0c:44:3d:d9:50:5a:f4:e7:57:cf:a2:fd:e8:bc:70: 77:76:f2:69:74:ab:72:37:6d:ec:5f:49:db:07:93:89:e8:0b: d9:b4:e9:ca:8a:bd:5a:41:10:87:f6:da:f8:e4:a9:44:9a:14: ae:8c:16:b5:cd:20:a9:a7:33:e0:d8:4a:6a:5c:cb:31:1c:73: 21:3c:ef:80:f2:d5:be:93:0f:53:b2:ea:86:82:fc:f4:9f:ec: d9:76:14:dc:9a:92:df:18:ea:00:cf:18:18:61:07:c2:9f:b9: 9c:29:3c:94:2b:5f:c7:ff:f8:bf:92:a8:31:77:f6:ba:c7:b2: 94:ac:a5:6d:3f:dd:d3:44:cb:9d:ca:cf:c7:62:4a:cd:a0:e5: 28:3f:d8:94:62:15:7e:3c:d5:92:4f:d7:7f:1a:df:f3:95:d1: 07:ef:cb:3a:b3:e6:4f:b4:11:3a:f8:22:f0:f6:d8:76:55:60: 90:21:81:f2:8b:15:7f:4b:c0:ea:bc:8e:6e:81:7d:8b:28:9e: fd:ec:52:42:66:e6:5a:9b:ec:db:ad:d4:74:cc:75:ad:dd:3a: 21:73:7c:07 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGB4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIzNjlEODkwNzFCQ0E3 QTM5MTFENzVDNjI2NTQ3NDlEREMzNjRGMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzM6gsZHdTtg7Brisc+vGo+rKtNThM/GZzxxg3NuxHFFXI4LEy 2T42+FKKAQRuZ5TnyzH/6eY/My/GP8djmrF+tUbf9mYhBRlsaFW9fqh6XulY5BXz jYhieZz3ZDqHjWOqMpEBUEY4zfteqlTKNJ8qHWAHKFqYmuCRjBrPPQbS8ZBLsjLl 42x7Kw+YEFH+HANqcBwVlXV3I5I+zM8Mr1CMzL+/Xz7uKqxxzDVefCYhzfMIW/lP Ccv1PLCeA9KrKifitTqtloP7xR83U6A2wkbfhEgvvitiFwp4A1LL5RZM8ynzagyK 6rVCtdfeW67wblU/LRkcRGxxXzDR3Be5Lw05AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUs2nYkHG8p6ORHXXGJlR0ndw2TyAwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvczJuWWtIRzhwNk9SSFhYR0psUjBu ZHcyVHlBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2ppWDAN BgkqhkiG9w0BAQsFAAOCAQEAdfIjMKCbBuYYxDb6g2WNRpX6BwccHfUvDF6h35PV FFm/r/UYkE51DEQ92VBa9OdXz6L96Lxwd3byaXSrcjdt7F9J2weTiegL2bTpyoq9 WkEQh/ba+OSpRJoUrowWtc0gqacz4NhKalzLMRxzITzvgPLVvpMPU7LqhoL89J/s 2XYU3JqS3xjqAM8YGGEHwp+5nCk8lCtfx//4v5KoMXf2useylKylbT/d00TLncrP x2JKzaDlKD/YlGIVfjzVkk/Xfxrf85XRB+/LOrPmT7QROvgi8PbYdlVgkCGB8osV f0vA6ryOboF9iyie/exSQmbmWpvs263UdMx1rd06IXN8Bw== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:41 2025 by rpki-client on console.sobornost.net