$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/zBcC_CEICp3ljsMuQTc_nXKK4R4.roa File: zBcC_CEICp3ljsMuQTc_nXKK4R4.roa (raw, json) Hash identifier: xD63CMlE2fHDiwuRTomNgmovBl+I7rxxiunBSLdzFqE= Subject key identifier: CC:17:02:FC:21:08:0A:9D:E5:8E:C3:2E:41:37:3F:9D:72:8A:E1:1E Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 181C Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zBcC_CEICp3ljsMuQTc_nXKK4R4.roa Signing time: Mon 10 Feb 2025 14:07:35 +0000 ROA not before: Mon 10 Feb 2025 14:07:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 61.56.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6172 (0x181c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CC1702FC21080A9DE58EC32E41373F9D728AE11E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:87:d0:de:e7:e6:83:b5:02:fa:ad:23:2f:73: c6:aa:ce:38:5f:37:50:0a:eb:05:b3:eb:13:14:7a: ab:08:39:44:be:c5:60:4e:fc:82:9c:23:4d:f9:aa: 06:d0:31:6d:db:87:5b:f1:19:61:c0:56:a4:f2:06: c2:e6:2d:b6:38:8d:0c:c7:e6:fe:fa:31:8d:2a:44: dd:23:2d:37:a0:ac:7e:cc:87:32:f6:70:df:12:5b: 5a:86:a6:ea:87:d5:15:aa:69:8f:55:d6:65:91:60: 80:61:5c:4a:62:92:93:3e:31:8b:29:d2:cd:61:04: 43:ae:21:f7:19:d0:5b:54:9a:71:2a:0d:cc:56:ec: eb:36:26:9b:af:1c:15:29:63:ae:08:76:9a:4b:27: 99:a1:d4:a4:11:82:5a:14:fd:39:f1:9a:4b:29:a3: 5a:a1:51:9c:b1:a7:6f:be:8a:b4:c8:66:dd:8a:f7: 4a:57:49:58:f4:f1:47:fb:8c:ba:54:32:9f:8c:68: e5:61:a3:9c:e7:16:83:82:d4:89:ad:3e:4c:ea:cf: 4e:72:c8:c0:03:67:e9:f4:25:34:9a:a7:1e:87:8e: 93:c5:7e:4f:9d:c3:11:b7:b6:44:f3:86:7e:88:e2: 8b:c4:04:2a:b3:2f:52:02:38:a4:63:b4:6d:37:81: 68:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:17:02:FC:21:08:0A:9D:E5:8E:C3:2E:41:37:3F:9D:72:8A:E1:1E X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zBcC_CEICp3ljsMuQTc_nXKK4R4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.192.0/19 Signature Algorithm: sha256WithRSAEncryption 8e:ab:d8:f7:11:36:5c:74:10:af:0f:a1:4e:7a:4c:13:04:c0: fa:2f:ed:70:4f:1f:df:1e:2e:5c:d9:5e:bb:dd:f7:b5:b7:6e: bf:2c:ce:d9:97:f8:d5:30:34:33:84:14:fd:8f:71:cb:1f:03: 6c:20:6b:9f:eb:ed:78:eb:1f:df:af:31:74:d8:e2:69:d3:22: 53:ba:a4:cd:50:db:3d:af:95:3b:85:7e:c0:43:49:c0:e3:a1: f9:0c:94:43:37:bb:0b:aa:1f:a6:07:b4:66:e2:60:bc:db:5f: 66:f1:d7:ab:c3:17:57:0b:25:1e:7e:a2:2b:10:2e:2f:86:6c: 69:82:e5:e1:35:09:9d:b4:77:2d:e0:c1:7e:ae:81:83:9f:1b: 67:ee:ff:fb:ca:89:d0:33:6e:7c:ae:59:95:75:05:aa:f6:f9: 9e:38:bf:fa:6e:bd:c5:90:ee:c0:7e:3d:b5:98:b0:a1:f6:8f: de:41:12:08:59:ee:e8:1f:7e:f7:24:ea:41:9b:c1:89:f5:4a: 4a:25:08:14:00:a2:f2:4a:6c:80:1f:08:7c:b0:51:e3:a5:8b: ef:34:e9:c6:31:f6:21:0c:12:72:8d:3a:db:ab:90:9b:91:94: fe:5e:17:37:a7:1b:9b:a0:eb:00:30:e6:9b:d9:4d:9e:c2:e5: 43:ab:26:66 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGBwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENDMTcwMkZDMjEwODBB OURFNThFQzMyRTQxMzczRjlENzI4QUUxMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIh9De5+aDtQL6rSMvc8aqzjhfN1AK6wWz6xMUeqsIOUS+xWBO /IKcI035qgbQMW3bh1vxGWHAVqTyBsLmLbY4jQzH5v76MY0qRN0jLTegrH7MhzL2 cN8SW1qGpuqH1RWqaY9V1mWRYIBhXEpikpM+MYsp0s1hBEOuIfcZ0FtUmnEqDcxW 7Os2JpuvHBUpY64IdppLJ5mh1KQRgloU/Tnxmkspo1qhUZyxp2++irTIZt2K90pX SVj08Uf7jLpUMp+MaOVho5znFoOC1ImtPkzqz05yyMADZ+n0JTSapx6HjpPFfk+d wxG3tkTzhn6I4ovEBCqzL1ICOKRjtG03gWgXAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUzBcC/CEICp3ljsMuQTc/nXKK4R4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvekJjQ19DRUlDcDNsanNNdVFUY19u WEtLNFI0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBT04wDAN BgkqhkiG9w0BAQsFAAOCAQEAjqvY9xE2XHQQrw+hTnpMEwTA+i/tcE8f3x4uXNle u933tbduvyzO2Zf41TA0M4QU/Y9xyx8DbCBrn+vteOsf368xdNjiadMiU7qkzVDb Pa+VO4V+wENJwOOh+QyUQze7C6ofpge0ZuJgvNtfZvHXq8MXVwslHn6iKxAuL4Zs aYLl4TUJnbR3LeDBfq6Bg58bZ+7/+8qJ0DNufK5ZlXUFqvb5nji/+m69xZDuwH49 tZiwofaP3kESCFnu6B9+9yTqQZvBifVKSiUIFACi8kpsgB8IfLBR46WL7zTpxjH2 IQwSco0626uQm5GU/l4XN6cbm6DrADDmm9lNnsLlQ6smZg== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:41 2025 by rpki-client on console.sobornost.net