$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AMZN/hNrF59v3oU7rHrp82OYhR4Vc1Wg.roa File: hNrF59v3oU7rHrp82OYhR4Vc1Wg.roa (raw, json) Hash identifier: IDbU8VmwPbDVHQ3+dSXyyC5J0IsNzNWDq7fZLLwRQn4= Subject key identifier: 84:DA:C5:E7:DB:F7:A1:4E:EB:1E:BA:7C:D8:E6:21:47:85:5C:D5:68 Certificate issuer: /CN=655679B564FF9DD15745A99C75189C02FC81258E Certificate serial: 0195 Authority key identifier: 65:56:79:B5:64:FF:9D:D1:57:45:A9:9C:75:18:9C:02:FC:81:25:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZVZ5tWT_ndFXRamcdRicAvyBJY4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AMZN/hNrF59v3oU7rHrp82OYhR4Vc1Wg.roa Signing time: Mon 10 Feb 2025 13:42:29 +0000 ROA not before: Mon 10 Feb 2025 13:42:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7538 IP address blocks: 103.149.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/AMZN/ZVZ5tWT_ndFXRamcdRicAvyBJY4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/AMZN/ZVZ5tWT_ndFXRamcdRicAvyBJY4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ZVZ5tWT_ndFXRamcdRicAvyBJY4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=655679B564FF9DD15745A99C75189C02FC81258E Validity Not Before: Feb 10 13:42:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=84DAC5E7DBF7A14EEB1EBA7CD8E62147855CD568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1d:27:99:d6:3e:b4:64:63:ef:ce:69:15:17: 6d:2c:06:73:ea:03:9c:6c:2a:31:53:46:8a:b8:ba: 42:da:e8:1b:c3:46:65:db:7c:42:31:5f:6e:df:60: 3a:ae:98:73:40:34:3f:3c:c5:12:17:65:00:1a:e9: 5e:60:03:f9:fc:62:8b:c6:ad:81:89:0f:e4:87:e5: c9:c7:e7:f9:e4:03:bf:1a:37:21:01:9d:7c:29:f0: d8:e4:73:f2:1b:82:56:5a:e6:8b:79:08:5a:af:8e: 6b:84:e3:0f:81:52:3f:71:4e:8b:6b:7a:a0:eb:01: 01:45:54:05:26:16:08:c1:da:6b:e3:9f:6a:96:8c: 15:9e:a1:a2:d7:da:15:90:47:9a:c4:f9:57:4a:74: 38:15:77:21:97:15:f7:d6:d7:99:97:16:10:ff:ba: 1f:6e:cc:fa:de:3e:24:bd:50:f0:41:21:8f:ff:fe: 97:df:35:b3:e7:40:55:83:cc:0c:07:34:15:c0:cd: 92:9c:eb:83:d6:7c:cf:6e:b5:99:7c:c8:6b:7f:9e: 63:86:5f:89:b3:b4:82:ad:83:c5:c9:fb:56:53:53: 8f:ef:b9:94:56:63:71:6b:be:79:4d:da:d4:46:1c: 3c:4e:c6:1a:31:5d:76:5e:be:b1:68:40:20:d5:93: 60:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DA:C5:E7:DB:F7:A1:4E:EB:1E:BA:7C:D8:E6:21:47:85:5C:D5:68 X509v3 Authority Key Identifier: keyid:65:56:79:B5:64:FF:9D:D1:57:45:A9:9C:75:18:9C:02:FC:81:25:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AMZN/ZVZ5tWT_ndFXRamcdRicAvyBJY4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZVZ5tWT_ndFXRamcdRicAvyBJY4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AMZN/hNrF59v3oU7rHrp82OYhR4Vc1Wg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.149.151.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:64:0b:50:d1:32:43:df:bb:e3:dc:f9:c3:39:2c:2c:0f:16: 76:58:bf:ca:cd:58:07:e6:d9:88:a7:6f:5c:0e:28:1b:ea:87: c7:5a:4c:fd:0f:0c:b8:97:15:40:17:f1:48:09:00:5c:03:18: b8:db:2a:bb:3c:d0:79:8d:95:dd:02:40:4b:96:c8:c3:3d:22: 23:03:24:b3:ef:2b:08:74:8b:6e:20:37:64:8a:f9:2b:8d:29: 38:9c:83:db:da:8c:7c:67:3f:90:cf:83:96:86:44:b6:5c:81: a1:35:06:21:da:49:fc:24:d1:e0:9d:57:f1:90:76:45:ae:53: 7a:08:b0:ef:a4:42:66:bb:02:9b:fe:3c:37:99:59:b3:51:46: a6:78:f9:b5:aa:8b:7e:5e:15:eb:1b:a6:1a:21:ad:15:a3:c9: 18:4c:41:c4:e8:21:a6:fa:3b:20:ef:cc:86:e2:cd:1c:bc:f1: 60:e4:dd:d8:f4:d1:8a:35:18:4a:99:69:80:b9:9e:33:74:1d: 03:af:49:98:34:96:88:ff:61:8c:18:e1:de:7d:64:56:93:cd: 8a:76:58:af:a1:17:13:d8:b1:3b:af:d9:0d:2c:ed:ca:8b:db: d3:b1:59:33:db:59:a6:a4:7c:17:b7:74:d1:23:4f:56:af:ef: 50:3c:53:c7 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjU1 Njc5QjU2NEZGOUREMTU3NDVBOTlDNzUxODlDMDJGQzgxMjU4RTAeFw0yNTAyMTAx MzQyMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg0REFDNUU3REJGN0Ex NEVFQjFFQkE3Q0Q4RTYyMTQ3ODU1Q0Q1NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFHSeZ1j60ZGPvzmkVF20sBnPqA5xsKjFTRoq4ukLa6BvDRmXb fEIxX27fYDqumHNAND88xRIXZQAa6V5gA/n8YovGrYGJD+SH5cnH5/nkA78aNyEB nXwp8Njkc/IbglZa5ot5CFqvjmuE4w+BUj9xTotreqDrAQFFVAUmFgjB2mvjn2qW jBWeoaLX2hWQR5rE+VdKdDgVdyGXFffW15mXFhD/uh9uzPrePiS9UPBBIY///pff NbPnQFWDzAwHNBXAzZKc64PWfM9utZl8yGt/nmOGX4mztIKtg8XJ+1ZTU4/vuZRW Y3FrvnlN2tRGHDxOxhoxXXZevrFoQCDVk2B/AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUhNrF59v3oU7rHrp82OYhR4Vc1WgwHwYDVR0jBBgwFoAUZVZ5tWT/ndFXRamc dRicAvyBJY4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQU1aTi9a Vlo1dFdUX25kRlhSYW1jZFJpY0F2eUJKWTQuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L1pWWjV0V1RfbmRGWFJhbWNkUmljQXZ5QkpZNC5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0FNWk4vaE5yRjU5djNvVTdySHJwODJPWWhS NFZjMVdnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeVlzAN BgkqhkiG9w0BAQsFAAOCAQEAbmQLUNEyQ9+749z5wzksLA8Wdli/ys1YB+bZiKdv XA4oG+qHx1pM/Q8MuJcVQBfxSAkAXAMYuNsquzzQeY2V3QJAS5bIwz0iIwMks+8r CHSLbiA3ZIr5K40pOJyD29qMfGc/kM+DloZEtlyBoTUGIdpJ/CTR4J1X8ZB2Ra5T egiw76RCZrsCm/48N5lZs1FGpnj5taqLfl4V6xumGiGtFaPJGExBxOghpvo7IO/M huLNHLzxYOTd2PTRijUYSplpgLmeM3QdA69JmDSWiP9hjBjh3n1kVpPNinZYr6EX E9ixO6/ZDSztyovb07FZM9tZpqR8F7d00SNPVq/vUDxTxw== -----END CERTIFICATE-----Generated at Fri Apr 18 23:56:43 2025 by rpki-client