$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/GC-rmuBJ36xvuPkBYqX55dC5aE8.roa File: GC-rmuBJ36xvuPkBYqX55dC5aE8.roa (raw, json) Hash identifier: OJc/vvB62sq1uw6fdLiSJBm2KZ+zo2o6NxQzKGME4KE= Subject key identifier: 18:2F:AB:9A:E0:49:DF:AC:6F:B8:F9:01:62:A5:F9:E5:D0:B9:68:4F Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2 Certificate serial: 5987 Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/GC-rmuBJ36xvuPkBYqX55dC5aE8.roa Signing time: Mon 10 Feb 2025 14:10:36 +0000 ROA not before: Mon 10 Feb 2025 14:10:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38851 IP address blocks: 43.227.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22919 (0x5987) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2 Validity Not Before: Feb 10 14:10:36 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=182FAB9AE049DFAC6FB8F90162A5F9E5D0B9684F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b8:e6:28:63:9e:0c:ad:73:2e:f2:28:14:f6: 8f:de:4d:86:4e:bb:a4:2a:22:de:1a:3f:fa:36:d1: ea:2d:14:e7:84:4e:b9:36:d5:cd:4e:55:6b:89:a6: 42:c9:39:53:d6:b7:46:a4:84:e9:3b:fc:51:61:9e: 6b:03:d8:9f:99:ad:24:54:b6:b4:e5:9e:33:f5:ff: 6f:f9:c2:47:8e:01:3e:dd:a7:cb:9e:a5:a0:2e:c4: 93:99:8c:d2:4c:dd:ea:14:75:34:8d:0a:ce:e8:25: 26:58:7a:75:ee:78:d5:3c:18:30:99:47:05:09:1f: b5:ff:fa:4e:00:33:b5:95:2d:d0:48:da:ba:e7:fc: 15:7e:f8:63:32:bc:58:44:b9:c4:1d:3f:4e:a3:03: 8a:4b:0b:e4:26:f6:d3:fd:fb:d7:1f:44:5e:6b:92: eb:d0:81:77:7e:c0:84:43:2e:d5:aa:b4:fe:5d:a8: b2:03:c0:ed:17:58:a9:08:f2:7a:e2:24:68:45:25: dc:f6:33:3e:c1:d8:91:dc:34:cf:3a:74:58:e5:c7: 7a:18:49:0a:32:7c:93:c9:93:4b:b8:a6:4c:a3:a3: da:70:07:97:b5:16:69:39:0b:0e:3a:68:38:74:aa: 3c:fd:2b:2a:83:61:50:40:6c:8e:15:a5:91:79:72: 4a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2F:AB:9A:E0:49:DF:AC:6F:B8:F9:01:62:A5:F9:E5:D0:B9:68:4F X509v3 Authority Key Identifier: keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/GC-rmuBJ36xvuPkBYqX55dC5aE8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.227.24.0/22 Signature Algorithm: sha256WithRSAEncryption 83:e9:4d:37:05:a3:a1:78:e5:e7:8e:24:d0:16:d7:43:32:6d: 99:51:72:fb:e6:c9:a8:d2:f7:c6:ec:b4:9e:c2:88:39:d6:69: a0:b7:f1:ff:1f:d0:26:19:d7:e7:a9:f6:79:19:2c:59:58:b2: 7e:95:b5:f3:86:de:8b:8c:14:eb:0b:9f:2c:60:e6:95:6e:bc: d7:63:5a:c3:64:de:99:79:ad:08:03:37:2d:16:16:a6:37:c5: 80:98:1e:a5:fd:34:72:ce:7c:4a:3d:6a:73:39:83:de:75:df: ab:3e:e3:a0:e6:1a:a2:16:d0:66:42:5a:44:32:fb:ea:42:7d: c2:d6:ba:f4:c5:8f:e8:5c:11:54:75:be:9e:6f:22:c9:12:34: a1:ec:b2:44:cc:19:fb:1b:b6:03:48:ec:bc:64:03:37:d2:ce: d4:54:8b:74:43:32:d6:7d:8d:88:ec:5c:be:c1:a5:a7:5d:72: 10:3b:79:1c:82:5f:00:74:e4:c1:9d:e9:17:f7:1c:b9:f0:f4: 07:90:d7:38:cf:47:38:c2:06:cf:0d:76:4a:05:34:67:2e:76: 5e:41:4c:a4:4a:0c:e2:e8:64:32:48:62:cb:b7:52:9e:0f:31: 14:60:68:f6:58:3a:0c:65:09:fa:81:25:74:11:35:69:81:db: 4f:79:85:64 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICWYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjQz MjBGRDc4REZCNkE0RDFDOTIzMjJGNzk0OTY2Qjg1MjVERkREMjAeFw0yNTAyMTAx NDEwMzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE4MkZBQjlBRTA0OURG QUM2RkI4RjkwMTYyQTVGOUU1RDBCOTY4NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnuOYoY54MrXMu8igU9o/eTYZOu6QqIt4aP/o20eotFOeETrk2 1c1OVWuJpkLJOVPWt0akhOk7/FFhnmsD2J+ZrSRUtrTlnjP1/2/5wkeOAT7dp8ue paAuxJOZjNJM3eoUdTSNCs7oJSZYenXueNU8GDCZRwUJH7X/+k4AM7WVLdBI2rrn /BV++GMyvFhEucQdP06jA4pLC+Qm9tP9+9cfRF5rkuvQgXd+wIRDLtWqtP5dqLID wO0XWKkI8nriJGhFJdz2Mz7B2JHcNM86dFjlx3oYSQoyfJPJk0u4pkyjo9pwB5e1 Fmk5Cw46aDh0qjz9KyqDYVBAbI4VpZF5ckpvAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUGC+rmuBJ36xvuPkBYqX55dC5aE8wHwYDVR0jBBgwFoAUtDIP1437ak0ckjIv eUlmuFJd/dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlRDQ0FU Vi90RElQMTQzN2FrMGNrakl2ZVVsbXVGSmRfZEkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3RESVAxNDM3YWswY2tqSXZlVWxtdUZKZF9kSS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05UQ0NBVFYvR0Mtcm11QkozNnh2dVBr QllxWDU1ZEM1YUU4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AivjGDANBgkqhkiG9w0BAQsFAAOCAQEAg+lNNwWjoXjl544k0BbXQzJtmVFy++bJ qNL3xuy0nsKIOdZpoLfx/x/QJhnX56n2eRksWViyfpW184bei4wU6wufLGDmlW68 12Naw2TemXmtCAM3LRYWpjfFgJgepf00cs58Sj1qczmD3nXfqz7joOYaohbQZkJa RDL76kJ9wta69MWP6FwRVHW+nm8iyRI0oeyyRMwZ+xu2A0jsvGQDN9LO1FSLdEMy 1n2NiOxcvsGlp11yEDt5HIJfAHTkwZ3pF/ccufD0B5DXOM9HOMIGzw12SgU0Zy52 XkFMpEoM4uhkMkhiy7dSng8xFGBo9lg6DGUJ+oEldBE1aYHbT3mFZA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:42 2025 by rpki-client on console.sobornost.net