$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/YwYhc80GgfuMbUN4Ot6MGP9-LB8.roa File: YwYhc80GgfuMbUN4Ot6MGP9-LB8.roa (raw, json) Hash identifier: JX8wpFxNHQqeK9ccBR6txraPUKv416BgpEG9G7UHszo= Subject key identifier: 63:06:21:73:CD:06:81:FB:8C:6D:43:78:3A:DE:8C:18:FF:7E:2C:1F Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA Certificate serial: 05D4 Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/YwYhc80GgfuMbUN4Ot6MGP9-LB8.roa Signing time: Mon 10 Feb 2025 13:57:52 +0000 ROA not before: Mon 10 Feb 2025 13:57:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38136 IP address blocks: 103.156.184.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 22:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1492 (0x5d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA Validity Not Before: Feb 10 13:57:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=63062173CD0681FB8C6D43783ADE8C18FF7E2C1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:51:2f:f4:ef:2a:dc:e0:01:ff:66:3f:3d: b4:eb:a3:34:0e:eb:b2:c1:58:02:94:34:6a:a3:64: 29:a9:92:0a:03:4c:cf:e1:3b:ee:e7:5c:73:61:e1: cb:d8:c2:f1:e6:28:41:1b:0d:5b:ae:60:11:76:19: 7d:00:b7:3d:42:22:9e:b9:2d:a8:3e:be:e7:bd:a5: 5c:aa:7c:76:92:79:f5:4d:ea:fc:2e:4c:04:53:b3: 50:90:cf:fd:6b:4e:06:7c:52:f9:10:d1:d8:cd:95: 47:04:1d:14:8f:8e:f8:cd:c0:45:ec:63:82:13:cb: 92:25:ce:cc:8f:8e:03:11:f0:a2:7b:96:72:4a:0d: 83:11:97:1e:c6:4d:a1:9d:99:0a:f8:e5:71:6d:47: e7:20:38:37:a1:d1:c6:76:e1:83:d5:33:09:22:71: 88:33:c8:f4:85:d0:cb:2b:f2:cd:25:64:87:87:03: e9:4c:d6:1b:91:cb:28:ae:b4:36:aa:95:6a:69:c9: 1c:31:06:1d:aa:94:62:e4:8d:ce:75:91:d4:88:c8: 70:c8:52:1a:63:1e:1e:a9:53:c2:ba:89:48:a4:5e: 73:5d:8c:a8:e2:ca:12:8f:e0:61:b3:d5:09:10:08: ea:a3:ca:62:0a:c1:e5:d0:01:4a:f2:fd:3b:05:46: 9a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:06:21:73:CD:06:81:FB:8C:6D:43:78:3A:DE:8C:18:FF:7E:2C:1F X509v3 Authority Key Identifier: keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/YwYhc80GgfuMbUN4Ot6MGP9-LB8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.156.184.0/24 Signature Algorithm: sha256WithRSAEncryption db:5f:68:c1:83:96:cd:b7:c6:1d:e6:34:3c:50:d2:91:60:de: b0:7c:ca:1e:87:1a:bf:25:3e:f3:41:b1:ff:a8:1c:e2:cd:db: bf:f2:90:b7:73:aa:59:dd:e3:40:8f:45:b2:2e:44:42:0f:de: 00:67:ec:88:18:13:86:b6:b9:d1:7f:44:b5:62:38:ac:64:e4: 9e:65:84:e8:8c:06:a6:8f:cd:c9:9e:05:17:5b:fa:a3:1c:e0: fc:ee:37:7d:2f:fd:72:f8:83:45:a3:04:fe:a1:88:3b:44:0d: b6:95:52:e5:c2:31:f2:3a:fd:58:ee:bd:a4:e0:3c:37:fc:a1: 30:05:1a:ec:8b:d1:47:63:ef:df:37:cf:3d:b8:78:6e:25:0b: 50:49:f4:83:b6:b5:e6:e2:2f:17:8a:e6:76:9f:ea:9b:31:6f: ff:20:85:f2:6e:e5:42:99:d2:70:65:7a:12:11:3e:7a:11:a8: 9e:5a:6c:f6:1e:a3:1c:db:10:6b:bf:7a:c4:6e:44:a2:dd:fb: cc:e4:17:e9:62:eb:c4:f5:92:1c:91:ca:5c:c0:61:fd:3a:c0: 75:a9:55:dd:c9:28:95:46:2d:af:f0:4f:64:c2:5b:02:a1:1c: b4:40:ce:43:fa:27:3f:c2:e7:92:47:ca:06:66:6f:99:24:b6: a8:2d:ae:97 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yNTAyMTAx MzU3NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYzMDYyMTczQ0QwNjgx RkI4QzZENDM3ODNBREU4QzE4RkY3RTJDMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwdlEv9O8q3OAB/2Y/PbTrozQO67LBWAKUNGqjZCmpkgoDTM/h O+7nXHNh4cvYwvHmKEEbDVuuYBF2GX0Atz1CIp65Lag+vue9pVyqfHaSefVN6vwu TARTs1CQz/1rTgZ8UvkQ0djNlUcEHRSPjvjNwEXsY4ITy5IlzsyPjgMR8KJ7lnJK DYMRlx7GTaGdmQr45XFtR+cgODeh0cZ24YPVMwkicYgzyPSF0Msr8s0lZIeHA+lM 1huRyyiutDaqlWppyRwxBh2qlGLkjc51kdSIyHDIUhpjHh6pU8K6iUikXnNdjKji yhKP4GGz1QkQCOqjymIKweXQAUry/TsFRpqFAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUYwYhc80GgfuMbUN4Ot6MGP9+LB8wHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvWXdZaGM4MEdnZnVNYlVO NE90Nk1HUDktTEI4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGecuDANBgkqhkiG9w0BAQsFAAOCAQEA219owYOWzbfGHeY0PFDSkWDesHzKHoca vyU+80Gx/6gc4s3bv/KQt3OqWd3jQI9Fsi5EQg/eAGfsiBgThra50X9EtWI4rGTk nmWE6IwGpo/NyZ4FF1v6oxzg/O43fS/9cviDRaME/qGIO0QNtpVS5cIx8jr9WO69 pOA8N/yhMAUa7IvRR2Pv3zfPPbh4biULUEn0g7a15uIvF4rmdp/qmzFv/yCF8m7l QpnScGV6EhE+ehGonlps9h6jHNsQa796xG5Eot37zOQX6WLrxPWSHJHKXMBh/TrA dalV3ckolUYtr/BPZMJbAqEctEDOQ/onP8LnkkfKBmZvmSS2qC2ulw== -----END CERTIFICATE-----Generated at Sat Apr 5 19:55:46 2025 by rpki-client