$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/nB9DPaSAl4WWARVMno0IFv4VL0o.roa File: nB9DPaSAl4WWARVMno0IFv4VL0o.roa (raw, json) Hash identifier: FtnXWQ45J4Kdz4ELabJLuKUuZAnWW9qzClU0cpxTd8s= Subject key identifier: 9C:1F:43:3D:A4:80:97:85:96:01:15:4C:9E:8D:08:16:FE:15:2F:4A Certificate issuer: /CN=578183A0FE5DA4A0F3C0546FB6EC26CBD1232F99 Certificate serial: 02E9 Authority key identifier: 57:81:83:A0:FE:5D:A4:A0:F3:C0:54:6F:B6:EC:26:CB:D1:23:2F:99 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V4GDoP5dpKDzwFRvtuwmy9EjL5k.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/nB9DPaSAl4WWARVMno0IFv4VL0o.roa Signing time: Mon 10 Feb 2025 14:00:39 +0000 ROA not before: Mon 10 Feb 2025 14:00:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 63893 IP address blocks: 2400:5060::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/V4GDoP5dpKDzwFRvtuwmy9EjL5k.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/V4GDoP5dpKDzwFRvtuwmy9EjL5k.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/V4GDoP5dpKDzwFRvtuwmy9EjL5k.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 745 (0x2e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=578183A0FE5DA4A0F3C0546FB6EC26CBD1232F99 Validity Not Before: Feb 10 14:00:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9C1F433DA48097859601154C9E8D0816FE152F4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c7:38:17:4f:4f:7a:23:b6:b9:90:62:de:6c: 82:07:33:c3:10:a6:f4:3b:48:8e:64:e3:e0:98:08: a1:23:7c:e9:8a:04:a1:49:dd:0e:13:cc:e6:20:9f: c0:66:c4:3a:b8:fe:62:7f:1a:44:4b:9d:55:64:49: 62:41:c7:e5:44:51:bd:bc:df:7f:ca:b8:6b:13:d6: 61:09:86:dc:82:ee:29:e7:4b:fd:c4:14:a8:54:c0: 0a:f2:ca:98:a2:0e:a6:8a:3b:3f:30:2a:9a:82:f5: e7:b3:e8:ca:f1:12:f1:3f:30:90:ed:95:6e:3e:a5: 10:2e:d3:e4:2d:07:68:a9:ec:73:4c:ae:47:72:4a: a1:1f:95:90:28:87:71:55:07:65:e1:54:db:6d:a1: f6:16:89:71:d4:ae:e0:ab:d9:63:2b:b7:0b:f5:1d: 8b:9f:3b:b8:91:1a:a8:05:63:78:10:42:e7:f4:63: 47:a2:54:25:fb:8b:53:40:1a:4a:b7:c9:86:a8:8e: 85:f1:0b:02:6f:46:f3:6e:e4:28:3c:b4:34:3a:77: 66:98:05:e5:7b:81:d5:85:15:b3:99:12:2e:5b:cf: 14:a1:87:de:fa:b0:30:d3:a5:af:bb:19:0a:eb:a1: 02:93:f5:93:ba:2f:44:54:c5:5c:52:6a:16:d9:d8: 75:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1F:43:3D:A4:80:97:85:96:01:15:4C:9E:8D:08:16:FE:15:2F:4A X509v3 Authority Key Identifier: keyid:57:81:83:A0:FE:5D:A4:A0:F3:C0:54:6F:B6:EC:26:CB:D1:23:2F:99 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/V4GDoP5dpKDzwFRvtuwmy9EjL5k.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V4GDoP5dpKDzwFRvtuwmy9EjL5k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/nB9DPaSAl4WWARVMno0IFv4VL0o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:5060::/32 Signature Algorithm: sha256WithRSAEncryption 09:b9:f0:19:85:be:ce:00:45:a1:44:2f:b8:6c:24:fc:06:cd: 50:8f:1a:44:56:99:c2:5b:a5:6f:d8:07:b0:6a:f9:0c:16:52: 6b:71:b4:eb:da:d1:57:43:2b:a2:71:97:10:4f:89:b7:70:84: 4a:fe:d4:ef:80:0e:6c:b9:f4:5b:50:16:a1:92:36:44:69:bf: ee:a0:3f:75:a8:97:8f:06:6e:42:1e:aa:e1:fd:ff:88:0c:89: f9:2c:05:b2:9b:14:d7:db:66:4a:92:d8:97:42:6a:58:41:70: d6:15:70:c8:09:d4:6c:d0:a8:a8:bd:0c:2e:49:3d:51:4d:ff: 76:db:06:5a:40:ab:9a:84:c9:a6:42:a4:a5:10:60:a5:97:93: c5:7b:d8:40:7a:f2:98:6c:16:6b:6f:88:99:06:be:f6:51:a5: 03:28:f6:2b:1c:e0:bd:ec:e8:e3:0a:09:75:78:df:85:07:6e: 09:9c:af:43:cd:71:a8:05:f1:ef:72:0b:03:91:c4:ed:83:55: 08:92:13:f3:60:1d:88:d3:ed:16:ba:9f:97:12:bc:f4:6f:53: e8:5b:f6:0a:f9:27:c2:5a:d8:e5:c2:ee:1e:1c:b2:06:a8:59: e5:e6:09:c9:3f:0d:44:35:64:88:57:9a:98:70:8c:31:db:6b: 3c:a5:18:39 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICAukwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTc4 MTgzQTBGRTVEQTRBMEYzQzA1NDZGQjZFQzI2Q0JEMTIzMkY5OTAeFw0yNTAyMTAx NDAwMzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlDMUY0MzNEQTQ4MDk3 ODU5NjAxMTU0QzlFOEQwODE2RkUxNTJGNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqxzgXT096I7a5kGLebIIHM8MQpvQ7SI5k4+CYCKEjfOmKBKFJ 3Q4TzOYgn8BmxDq4/mJ/GkRLnVVkSWJBx+VEUb2833/KuGsT1mEJhtyC7innS/3E FKhUwAryypiiDqaKOz8wKpqC9eez6MrxEvE/MJDtlW4+pRAu0+QtB2ip7HNMrkdy SqEflZAoh3FVB2XhVNttofYWiXHUruCr2WMrtwv1HYufO7iRGqgFY3gQQuf0Y0ei VCX7i1NAGkq3yYaojoXxCwJvRvNu5Cg8tDQ6d2aYBeV7gdWFFbOZEi5bzxShh976 sDDTpa+7GQrroQKT9ZO6L0RUxVxSahbZ2HXrAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUnB9DPaSAl4WWARVMno0IFv4VL0owHwYDVR0jBBgwFoAUV4GDoP5dpKDzwFRv tuwmy9EjL5kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NQMTEz ODQ3MC9WNEdEb1A1ZHBLRHp3RlJ2dHV3bXk5RWpMNWsuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1Y0R0RvUDVkcEtEendGUnZ0dXdteTlFakw1ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDUDExMzg0NzAvbkI5RFBhU0Fs NFdXQVJWTW5vMElGdjRWTDBvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQAUGAwDQYJKoZIhvcNAQELBQADggEBAAm58BmFvs4ARaFEL7hsJPwG zVCPGkRWmcJbpW/YB7Bq+QwWUmtxtOva0VdDK6JxlxBPibdwhEr+1O+ADmy59FtQ FqGSNkRpv+6gP3Wol48GbkIequH9/4gMifksBbKbFNfbZkqS2JdCalhBcNYVcMgJ 1GzQqKi9DC5JPVFN/3bbBlpAq5qEyaZCpKUQYKWXk8V72EB68phsFmtviJkGvvZR pQMo9isc4L3s6OMKCXV434UHbgmcr0PNcagF8e9yCwORxO2DVQiSE/NgHYjT7Ra6 n5cSvPRvU+hb9gr5J8Ja2OXC7h4csgaoWeXmCck/DUQ1ZIhXmphwjDHbazylGDk= -----END CERTIFICATE-----Generated at Fri Apr 18 22:23:47 2025 by rpki-client