$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLARK/BfQBfL9LSprNl9EZAXrAIboGiKY.roa File: BfQBfL9LSprNl9EZAXrAIboGiKY.roa (raw, json) Hash identifier: mEpCP3OGvwRJ3bwOX9vtt5WWbJ/elSaSHS5mHsk1Aks= Subject key identifier: 05:F4:01:7C:BF:4B:4A:9A:CD:97:D1:19:01:7A:C0:21:BA:06:88:A6 Certificate issuer: /CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C Certificate serial: 01DC Authority key identifier: 74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/BfQBfL9LSprNl9EZAXrAIboGiKY.roa Signing time: Mon 10 Feb 2025 14:22:38 +0000 ROA not before: Mon 10 Feb 2025 14:22:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 63910 IP address blocks: 103.130.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C Validity Not Before: Feb 10 14:22:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=05F4017CBF4B4A9ACD97D119017AC021BA0688A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:7a:dd:8a:1d:29:7f:77:db:31:8c:4f:02: 5c:9e:9d:10:93:45:f9:70:a6:fd:f6:d2:45:27:99: 1b:d2:ca:c4:be:32:a4:ad:9d:af:5f:8e:b1:ac:19: 4d:66:fd:b4:0c:74:b5:a6:3c:cb:e4:7f:37:13:a7: 22:05:b0:b6:72:62:be:d3:89:58:77:f7:86:26:c4: c3:ce:d7:30:21:d9:1b:f1:e7:73:a2:45:11:54:0b: 2f:55:6a:19:6c:4d:6b:05:d5:2f:d6:3b:79:54:7a: 7e:ca:6d:6a:ae:9c:f9:e3:f3:01:dd:81:17:48:7b: 2f:82:a7:fc:76:39:6e:f7:f0:13:a1:e2:4a:34:be: 7e:28:6f:a9:e4:ba:51:bd:0b:9a:65:67:78:9e:25: e8:c2:90:7a:23:20:bf:0a:fa:bd:fb:d5:87:e0:4e: e2:ab:c4:87:8b:0a:5b:98:f5:f7:ea:2a:4a:ff:97: 6f:36:35:f9:6d:8e:38:5e:a2:7f:87:bb:31:62:61: b2:b8:a3:51:a2:1c:88:2e:7a:33:54:e3:38:06:6c: 8b:fb:24:b3:cf:3d:32:a5:69:77:b4:08:35:52:09: 2f:a0:f1:86:c9:68:76:f1:ca:8d:87:23:9f:24:27: bf:9d:16:5c:b8:c6:1e:a7:8f:39:aa:be:6f:e1:d4: 8d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F4:01:7C:BF:4B:4A:9A:CD:97:D1:19:01:7A:C0:21:BA:06:88:A6 X509v3 Authority Key Identifier: keyid:74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/BfQBfL9LSprNl9EZAXrAIboGiKY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.236.0/23 Signature Algorithm: sha256WithRSAEncryption 34:52:6c:c3:7b:93:40:01:2a:59:d4:ea:66:d2:c2:54:c3:12: 84:e6:54:27:c0:dd:c0:e7:39:d2:bb:41:1d:09:77:a2:c3:43: 8d:0f:5a:f7:b2:aa:be:e1:a8:7f:9b:9b:d8:fd:01:9e:8e:3f: aa:df:2c:fe:d4:d5:fa:a8:0a:df:5b:1c:4e:dc:71:4e:62:83: 03:a1:6e:16:77:c7:23:17:e8:b5:5a:d2:62:e0:a2:5f:b2:63: d9:7c:6a:58:3f:e6:c1:94:52:a6:ee:fc:7c:e3:3e:c6:7e:a5: 6f:fa:f9:63:20:69:35:b4:42:7b:91:45:47:d5:54:66:94:94: 7b:3e:65:35:ed:36:01:ea:8e:ce:4c:50:1a:60:f5:f3:22:fd: 76:89:4a:3a:77:0b:61:f4:a1:29:37:df:ab:83:72:03:1a:a9: 81:90:9b:a2:74:10:f8:ac:07:3f:77:63:78:de:1a:69:d2:a8: f7:c8:97:f0:9e:60:cd:c0:52:93:dc:26:1a:11:b2:19:5b:5e: 65:ae:80:67:f9:36:a7:fd:da:8f:82:56:64:ff:ee:89:ab:9a: b6:f2:53:1b:06:60:df:1c:28:e2:d5:fa:07:30:f0:f6:3e:13: 3a:53:29:35:44:26:fb:8e:08:c1:e4:58:9f:ce:d1:36:4a:d0: 93:9a:c6:51 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzRB RjA0MDJGRUY1NkMzNEExOTJEMUQyMTg1RTZGQjU0NkFBNzAyQzAeFw0yNTAyMTAx NDIyMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA1RjQwMTdDQkY0QjRB OUFDRDk3RDExOTAxN0FDMDIxQkEwNjg4QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOUnrdih0pf3fbMYxPAlyenRCTRflwpv320kUnmRvSysS+MqSt na9fjrGsGU1m/bQMdLWmPMvkfzcTpyIFsLZyYr7TiVh394YmxMPO1zAh2Rvx53Oi RRFUCy9VahlsTWsF1S/WO3lUen7KbWqunPnj8wHdgRdIey+Cp/x2OW738BOh4ko0 vn4ob6nkulG9C5plZ3ieJejCkHojIL8K+r371YfgTuKrxIeLCluY9ffqKkr/l282 Nfltjjheon+HuzFiYbK4o1GiHIguejNU4zgGbIv7JLPPPTKlaXe0CDVSCS+g8YbJ aHbxyo2HI58kJ7+dFly4xh6njzmqvm/h1I3jAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUBfQBfL9LSprNl9EZAXrAIboGiKYwHwYDVR0jBBgwFoAUdK8EAv71bDShktHS GF5vtUaqcCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0xBUksv ZEs4RUF2NzFiRFNoa3RIU0dGNXZ0VWFxY0N3LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9kSzhFQXY3MWJEU2hrdEhTR0Y1dnRVYXFjQ3cuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DTEFSSy9CZlFCZkw5TFNwck5sOUVaQVhy QUlib0dpS1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4Ls MA0GCSqGSIb3DQEBCwUAA4IBAQA0UmzDe5NAASpZ1Opm0sJUwxKE5lQnwN3A5znS u0EdCXeiw0OND1r3sqq+4ah/m5vY/QGejj+q3yz+1NX6qArfWxxO3HFOYoMDoW4W d8cjF+i1WtJi4KJfsmPZfGpYP+bBlFKm7vx84z7GfqVv+vljIGk1tEJ7kUVH1VRm lJR7PmU17TYB6o7OTFAaYPXzIv12iUo6dwth9KEpN9+rg3IDGqmBkJuidBD4rAc/ d2N43hpp0qj3yJfwnmDNwFKT3CYaEbIZW15lroBn+Tan/dqPglZk/+6Jq5q28lMb BmDfHCji1foHMPD2PhM6Uyk1RCb7jgjB5FifztE2StCTmsZR -----END CERTIFICATE-----Generated at Fri Apr 18 23:44:03 2025 by rpki-client