$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/RCrOxpT_tuFRAaggi2o6x5EU74U.roa File: RCrOxpT_tuFRAaggi2o6x5EU74U.roa (raw, json) Hash identifier: XyjGW8jT7U602QhLoM4jseJHIQviQ+sdF4Hobd8Yfmw= Subject key identifier: 44:2A:CE:C6:94:FF:B6:E1:51:01:A8:20:8B:6A:3A:C7:91:14:EF:85 Certificate issuer: /CN=F72B8D549DE8BBC6DE02456C670D1B1A05AFE80E Certificate serial: 02EC Authority key identifier: F7:2B:8D:54:9D:E8:BB:C6:DE:02:45:6C:67:0D:1B:1A:05:AF:E8:0E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9yuNVJ3ou8beAkVsZw0bGgWv6A4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/RCrOxpT_tuFRAaggi2o6x5EU74U.roa Signing time: Mon 10 Feb 2025 13:46:28 +0000 ROA not before: Mon 10 Feb 2025 13:46:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 63893 IP address blocks: 2400:50e0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/9yuNVJ3ou8beAkVsZw0bGgWv6A4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/9yuNVJ3ou8beAkVsZw0bGgWv6A4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/9yuNVJ3ou8beAkVsZw0bGgWv6A4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F72B8D549DE8BBC6DE02456C670D1B1A05AFE80E Validity Not Before: Feb 10 13:46:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=442ACEC694FFB6E15101A8208B6A3AC79114EF85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d7:47:3c:f4:df:a2:63:7a:1c:fd:25:a4:e1: ab:65:10:8e:a8:17:ea:ff:f2:f3:76:ad:50:c6:ed: 55:3b:03:34:23:59:9f:19:a2:14:bb:d6:4f:b7:02: 13:b4:b8:78:c3:4c:96:5b:5f:3a:37:98:4f:5f:a0: 8b:a5:ed:39:03:52:15:76:c3:38:fd:48:61:69:fc: 49:ff:54:b7:53:11:7e:25:fd:80:81:38:74:9b:af: 15:55:cf:4f:b6:80:43:03:a5:74:59:e0:33:79:53: 5f:cd:d6:67:31:df:7c:88:16:f9:e7:ac:32:cf:e3: 72:07:18:25:fe:b7:fe:90:3c:77:0c:74:19:64:88: 74:fb:13:04:dd:f1:01:2b:4e:ca:29:a3:6e:f2:f7: 16:74:0f:a4:3e:51:8a:4c:bf:dd:dc:d0:57:30:78: 81:e7:88:98:55:30:59:c3:52:ea:d9:e1:e1:a1:c4: 0a:4a:ba:71:b9:72:57:5b:5e:1e:85:10:9f:08:1b: 9a:fa:5a:1c:fc:7f:6a:f2:42:5f:fd:9f:67:be:33: cb:be:3b:3e:11:ad:0f:57:62:70:55:ff:ff:df:a4: de:15:fb:f7:98:57:00:ec:0d:f8:12:b2:c5:60:3e: 78:fd:90:7a:e7:ea:60:03:ab:20:a4:07:8b:c9:18: 46:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2A:CE:C6:94:FF:B6:E1:51:01:A8:20:8B:6A:3A:C7:91:14:EF:85 X509v3 Authority Key Identifier: keyid:F7:2B:8D:54:9D:E8:BB:C6:DE:02:45:6C:67:0D:1B:1A:05:AF:E8:0E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/9yuNVJ3ou8beAkVsZw0bGgWv6A4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9yuNVJ3ou8beAkVsZw0bGgWv6A4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/RCrOxpT_tuFRAaggi2o6x5EU74U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:50e0::/32 Signature Algorithm: sha256WithRSAEncryption 7e:25:3e:79:05:49:b1:06:a9:e7:8d:19:56:e8:e0:5c:fe:34: bb:ed:55:8c:ee:fd:c1:67:1b:d8:78:c1:b7:d9:86:7c:90:32: 80:93:e7:5a:4d:57:92:da:6b:59:e0:91:1c:93:dd:8f:bf:0b: 3f:59:dd:79:ae:c2:42:6b:14:03:2a:0b:d4:62:77:f6:64:97: 18:e3:8e:be:6f:8a:ae:d3:db:e6:b6:a2:35:54:6d:c5:47:63: e7:6c:78:77:9a:0d:dd:a0:5d:ca:2b:9f:97:db:03:d8:be:b9: fd:eb:a8:6a:34:9a:c5:ac:d0:b4:13:34:ea:e5:68:fe:e6:d5: 7e:1a:71:e7:fa:59:42:a0:b0:5e:e0:6f:95:86:c9:64:3b:53: ed:fa:0b:cc:4e:ce:c3:d6:20:28:8a:69:f3:1b:4b:ef:a1:7e: 8d:52:d2:4d:16:0d:47:24:66:9f:d7:52:b6:8f:b1:4b:b9:f0: dd:9e:df:ad:f9:ab:5f:b0:b5:e7:3a:9e:cc:9c:7c:af:77:cd: 0d:a2:0e:e9:cc:99:2e:37:58:81:4d:fc:1d:af:0d:e2:d1:9d: 4f:f3:da:9a:8c:43:c4:3f:40:fb:55:bc:a2:d7:e2:30:05:3a: 26:40:03:e5:0b:7d:84:67:56:61:c5:e5:8c:ba:18:38:38:96: 45:78:62:04 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjcy QjhENTQ5REU4QkJDNkRFMDI0NTZDNjcwRDFCMUEwNUFGRTgwRTAeFw0yNTAyMTAx MzQ2MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ0MkFDRUM2OTRGRkI2 RTE1MTAxQTgyMDhCNkEzQUM3OTExNEVGODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ10c89N+iY3oc/SWk4atlEI6oF+r/8vN2rVDG7VU7AzQjWZ8Z ohS71k+3AhO0uHjDTJZbXzo3mE9foIul7TkDUhV2wzj9SGFp/En/VLdTEX4l/YCB OHSbrxVVz0+2gEMDpXRZ4DN5U1/N1mcx33yIFvnnrDLP43IHGCX+t/6QPHcMdBlk iHT7EwTd8QErTsopo27y9xZ0D6Q+UYpMv93c0FcweIHniJhVMFnDUurZ4eGhxApK unG5cldbXh6FEJ8IG5r6Whz8f2ryQl/9n2e+M8u+Oz4RrQ9XYnBV///fpN4V+/eY VwDsDfgSssVgPnj9kHrn6mADqyCkB4vJGEbdAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQURCrOxpT/tuFRAaggi2o6x5EU74UwHwYDVR0jBBgwFoAU9yuNVJ3ou8beAkVs Zw0bGgWv6A4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRENDMTIy MzM0Mi85eXVOVkozb3U4YmVBa1ZzWncwYkdnV3Y2QTQuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBLzl5dU5WSjNvdThiZUFrVnNadzBiR2dXdjZBNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RDQzEyMjMzNDIvUkNyT3hwVF90 dUZSQWFnZ2kybzZ4NUVVNzRVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQAUOAwDQYJKoZIhvcNAQELBQADggEBAH4lPnkFSbEGqeeNGVbo4Fz+ NLvtVYzu/cFnG9h4wbfZhnyQMoCT51pNV5Laa1ngkRyT3Y+/Cz9Z3XmuwkJrFAMq C9Rid/Zklxjjjr5viq7T2+a2ojVUbcVHY+dseHeaDd2gXcorn5fbA9i+uf3rqGo0 msWs0LQTNOrlaP7m1X4acef6WUKgsF7gb5WGyWQ7U+36C8xOzsPWICiKafMbS++h fo1S0k0WDUckZp/XUraPsUu58N2e3635q1+wtec6nsycfK93zQ2iDunMmS43WIFN /B2vDeLRnU/z2pqMQ8Q/QPtVvKLX4jAFOiZAA+ULfYRnVmHF5Yy6GDg4lkV4YgQ= -----END CERTIFICATE-----Generated at Fri Apr 18 23:53:50 2025 by rpki-client