$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/C3_XjrbY3eZQ89fvuegKAf5JCAI.roa File: C3_XjrbY3eZQ89fvuegKAf5JCAI.roa (raw, json) Hash identifier: ttl0lgbAhc6alBKFZpJYvSsQaJwxBwdkEBjhViqGr3s= Subject key identifier: 0B:7F:D7:8E:B6:D8:DD:E6:50:F3:D7:EF:B9:E8:0A:01:FE:49:08:02 Certificate issuer: /CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148 Certificate serial: 089D Authority key identifier: 8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/C3_XjrbY3eZQ89fvuegKAf5JCAI.roa Signing time: Mon 10 Feb 2025 14:11:51 +0000 ROA not before: Mon 10 Feb 2025 14:11:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7483 IP address blocks: 103.148.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2205 (0x89d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148 Validity Not Before: Feb 10 14:11:51 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0B7FD78EB6D8DDE650F3D7EFB9E80A01FE490802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e8:b9:19:d7:1e:dc:99:af:51:91:7b:a5:92: af:d6:63:78:46:12:6c:bd:8e:68:2f:ba:7e:b8:9f: 38:57:c3:a9:ea:08:f4:c3:f1:03:21:53:ec:f5:fd: 3e:00:4b:62:b9:15:de:d2:95:d8:53:ef:38:81:b2: e6:9d:94:ab:0b:81:70:ec:15:0e:06:04:eb:6f:6c: 3d:b5:38:db:50:93:99:56:b2:25:50:bf:f4:e3:2a: 03:cf:53:2b:fe:cf:75:37:8a:ab:7f:ea:6b:49:bb: 50:41:3c:95:88:f7:ae:fc:6e:5f:60:08:9f:f0:87: e4:0e:37:92:19:fd:17:4e:da:e3:29:6f:bc:a9:3f: 03:33:b8:b0:77:7a:fa:52:26:24:dd:81:59:79:28: c3:f9:fa:32:05:ae:1a:c6:24:59:7a:a3:99:e9:ac: 10:59:6e:8e:1d:2d:29:d2:e1:98:c9:a7:b6:5e:dc: 09:b1:7c:d5:3d:f8:3e:2a:11:02:07:42:94:06:43: 1b:49:c2:b5:9d:74:3f:4a:fe:b4:e6:38:6b:90:4e: bf:82:4a:52:ee:bf:75:cb:9f:15:ce:f3:81:e8:a4: f9:fe:b2:f9:73:de:57:3f:c0:ac:c6:51:64:0e:4d: 40:14:03:02:39:5c:fd:d0:28:78:54:cc:84:f7:8a: fd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7F:D7:8E:B6:D8:DD:E6:50:F3:D7:EF:B9:E8:0A:01:FE:49:08:02 X509v3 Authority Key Identifier: keyid:8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/C3_XjrbY3eZQ89fvuegKAf5JCAI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.148.146.0/23 Signature Algorithm: sha256WithRSAEncryption bf:0f:53:79:e2:a8:d8:10:13:c7:28:25:ba:56:47:10:c8:01: 01:47:9e:9f:31:ba:39:53:fa:96:cf:3a:47:8b:17:0b:73:08: 16:c4:df:31:6a:97:4e:a7:a3:ce:ff:2d:ad:65:69:a6:11:0b: 0d:27:f9:d6:0c:c5:51:09:67:49:5a:a7:97:78:59:db:03:a7: 24:e0:ae:9b:ba:ac:05:86:82:8c:ef:52:8f:a1:1f:13:a0:7e: a8:68:91:76:05:74:08:86:eb:e2:6c:e6:9e:82:b0:cd:c1:01: c8:4c:0d:32:63:e7:86:21:7d:77:09:90:60:60:4f:be:66:c8: e1:af:7d:30:2c:7a:b1:1b:2e:e6:e0:01:57:94:d1:a4:ad:96: b2:3a:4e:b2:d1:59:46:42:72:b7:0c:b7:6d:66:c8:6a:65:42: 54:b8:48:3a:59:70:71:26:6e:92:d6:7a:7d:41:dc:94:00:25: 0d:85:04:49:76:b1:a0:e8:ea:a8:88:e7:b3:ec:4a:a5:1c:49: cb:fc:56:28:a8:27:20:03:b4:54:1b:bc:fb:9a:64:00:5f:a3: 92:d5:7d:4e:6e:6e:02:dc:e6:9b:b7:f7:8a:43:ee:01:49:80: c3:85:c4:12:95:18:97:26:52:6e:a4:76:99:59:0f:ba:58:59: 7b:b4:ac:ef -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICCJ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEEz RkQ4OUNFNzBBMTRGMTNFRDBBODY0NTkyMjREMDA3REQwQTE0ODAeFw0yNTAyMTAx NDExNTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBCN0ZENzhFQjZEOERE RTY1MEYzRDdFRkI5RTgwQTAxRkU0OTA4MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV6LkZ1x7cma9RkXulkq/WY3hGEmy9jmgvun64nzhXw6nqCPTD 8QMhU+z1/T4AS2K5Fd7SldhT7ziBsuadlKsLgXDsFQ4GBOtvbD21ONtQk5lWsiVQ v/TjKgPPUyv+z3U3iqt/6mtJu1BBPJWI9678bl9gCJ/wh+QON5IZ/RdO2uMpb7yp PwMzuLB3evpSJiTdgVl5KMP5+jIFrhrGJFl6o5nprBBZbo4dLSnS4ZjJp7Ze3Amx fNU9+D4qEQIHQpQGQxtJwrWddD9K/rTmOGuQTr+CSlLuv3XLnxXO84HopPn+svlz 3lc/wKzGUWQOTUAUAwI5XP3QKHhUzIT3iv3fAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUC3/XjrbY3eZQ89fvuegKAf5JCAIwHwYDVR0jBBgwFoAUij/YnOcKFPE+0Khk WSJNAH3QoUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJQU9D SElBTy9pal9Zbk9jS0ZQRS0wS2hrV1NKTkFIM1FvVWcuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL2lqX1luT2NLRlBFLTBLaGtXU0pOQUgzUW9VZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NISUFPQ0hJQU8vQzNfWGpyYlkz ZVpRODlmdnVlZ0tBZjVKQ0FJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWeUkjANBgkqhkiG9w0BAQsFAAOCAQEAvw9TeeKo2BATxyglulZHEMgB AUeenzG6OVP6ls86R4sXC3MIFsTfMWqXTqejzv8trWVpphELDSf51gzFUQlnSVqn l3hZ2wOnJOCum7qsBYaCjO9Sj6EfE6B+qGiRdgV0CIbr4mzmnoKwzcEByEwNMmPn hiF9dwmQYGBPvmbI4a99MCx6sRsu5uABV5TRpK2WsjpOstFZRkJytwy3bWbIamVC VLhIOllwcSZuktZ6fUHclAAlDYUESXaxoOjqqIjns+xKpRxJy/xWKKgnIAO0VBu8 +5pkAF+jktV9Tm5uAtzmm7f3ikPuAUmAw4XEEpUYlyZSbqR2mVkPulhZe7Ss7w== -----END CERTIFICATE-----Generated at Fri Apr 18 22:21:35 2025 by rpki-client