$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/6sIvrxCchI7ZPT9HIRNiIEip60U.roa File: 6sIvrxCchI7ZPT9HIRNiIEip60U.roa (raw, json) Hash identifier: m6bDKfbfzaiTkGLDbqkZsa4gLvCGnPjIQfjTAd/CKiQ= Subject key identifier: EA:C2:2F:AF:10:9C:84:8E:D9:3D:3F:47:21:13:62:20:48:A9:EB:45 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 17C0 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6sIvrxCchI7ZPT9HIRNiIEip60U.roa Signing time: Mon 10 Feb 2025 14:07:14 +0000 ROA not before: Mon 10 Feb 2025 14:07:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38851 IP address blocks: 122.147.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 19:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6080 (0x17c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Feb 10 14:07:14 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EAC22FAF109C848ED93D3F472113622048A9EB45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ac:a7:23:5c:94:0a:ab:92:98:1b:75:a1:a0: 9e:4c:bf:63:47:38:18:48:c2:c0:58:b6:bc:a2:80: 58:90:56:4e:ab:20:63:ed:f7:a0:e0:d2:1c:3a:c0: 96:57:aa:cc:46:4d:5d:9b:b7:c5:44:3c:b8:61:10: 45:c2:a7:0e:cd:18:61:36:28:52:a0:25:ac:ad:f0: 3d:4d:7e:5b:af:ec:1b:93:ae:30:08:3e:1f:48:5e: d2:6a:46:78:00:b7:ed:7b:ef:1b:e4:f5:54:89:4d: 71:4f:b1:b9:43:cc:f1:9b:b7:1b:52:b7:6f:c0:63: 22:0a:2b:4b:7c:a0:13:8f:5b:af:32:d0:de:2f:1e: 38:a8:58:ad:d4:38:33:53:bf:77:2b:ad:51:00:b0: 05:ab:85:f3:47:83:2e:50:dc:3e:9a:2e:f6:ca:c0: 95:7e:ba:07:f8:70:44:4c:33:08:6a:a0:f4:60:8e: 4f:d5:6e:e9:df:a8:1c:b3:ff:22:e2:1b:f8:2f:a1: ff:88:6d:82:2c:61:98:66:42:28:36:55:39:ed:fa: 4c:86:ca:88:19:e6:ba:00:45:f0:28:f5:d3:2d:bd: e5:9b:70:eb:3c:be:d9:08:5a:3b:5b:9a:64:4f:9f: a2:00:6d:d9:25:bd:d1:33:8e:80:eb:f7:02:14:cc: 81:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C2:2F:AF:10:9C:84:8E:D9:3D:3F:47:21:13:62:20:48:A9:EB:45 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6sIvrxCchI7ZPT9HIRNiIEip60U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.147.160.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:78:d2:18:5e:4d:ae:88:84:c7:9d:07:ac:c1:26:e3:cf:55: 71:aa:81:d5:f2:3d:52:7d:fa:4c:21:31:e9:63:07:7b:43:88: 95:98:4d:73:f9:88:17:cc:43:3b:ed:b2:1f:83:b2:cb:cc:77: 4b:e4:8a:28:be:ff:f8:a5:db:6e:1f:0c:32:7d:6d:3f:70:a2: 9f:ee:39:0d:bb:63:2a:46:ba:1f:63:8d:c9:17:53:5c:d8:cc: 1d:42:a7:a1:2d:1f:e8:ab:ed:a2:92:e6:d2:22:47:b6:6c:cb: 74:f0:e7:e5:95:1b:44:b3:80:2a:7c:1f:79:a6:c7:52:23:2d: 41:2e:ed:95:51:49:2c:a2:5b:be:dd:89:1d:71:43:d4:29:57: 8f:f1:a2:8f:c5:42:75:de:ef:e3:d2:0a:8f:7e:6e:9d:d5:f2: 46:25:42:f2:62:fb:8d:95:1c:f6:fd:e8:da:06:b2:b6:9d:f4: 91:c0:85:9f:3a:20:14:f5:e7:40:a9:64:fe:9f:f4:41:fe:2d: 47:6a:bc:fc:74:92:b1:68:f5:00:f3:33:22:9a:5e:43:94:81: 81:52:64:e6:4e:11:90:16:a9:29:7d:67:1e:82:2f:f4:5f:f3: fe:78:8b:b0:0f:41:81:4c:58:0b:97:90:f3:1d:ce:1a:54:c3: 34:5a:8a:5c -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICF8AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx NDA3MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVBQzIyRkFGMTA5Qzg0 OEVEOTNEM0Y0NzIxMTM2MjIwNDhBOUVCNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDarKcjXJQKq5KYG3WhoJ5Mv2NHOBhIwsBYtryigFiQVk6rIGPt 96Dg0hw6wJZXqsxGTV2bt8VEPLhhEEXCpw7NGGE2KFKgJayt8D1Nfluv7BuTrjAI Ph9IXtJqRngAt+177xvk9VSJTXFPsblDzPGbtxtSt2/AYyIKK0t8oBOPW68y0N4v HjioWK3UODNTv3crrVEAsAWrhfNHgy5Q3D6aLvbKwJV+ugf4cERMMwhqoPRgjk/V bunfqByz/yLiG/gvof+IbYIsYZhmQig2VTnt+kyGyogZ5roARfAo9dMtveWbcOs8 vtkIWjtbmmRPn6IAbdklvdEzjoDr9wIUzIEJAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU6sIvrxCchI7ZPT9HIRNiIEip60UwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvNnNJdnJ4Q2NoSTdaUFQ5SElSTmlJ RWlwNjBVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnqToDAN BgkqhkiG9w0BAQsFAAOCAQEADXjSGF5NroiEx50HrMEm489VcaqB1fI9Un36TCEx 6WMHe0OIlZhNc/mIF8xDO+2yH4Oyy8x3S+SKKL7/+KXbbh8MMn1tP3Cin+45Dbtj Kka6H2ONyRdTXNjMHUKnoS0f6KvtopLm0iJHtmzLdPDn5ZUbRLOAKnwfeabHUiMt QS7tlVFJLKJbvt2JHXFD1ClXj/Gij8VCdd7v49IKj35undXyRiVC8mL7jZUc9v3o 2gaytp30kcCFnzogFPXnQKlk/p/0Qf4tR2q8/HSSsWj1APMzIppeQ5SBgVJk5k4R kBapKX1nHoIv9F/z/niLsA9BgUxYC5eQ8x3OGlTDNFqKXA== -----END CERTIFICATE-----Generated at Sun May 18 18:06:22 2025 by rpki-client