$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DNSNET/n7GJ7oiWFjOzmXGewyodmkm9ffc.roa File: n7GJ7oiWFjOzmXGewyodmkm9ffc.roa (raw, json) Hash identifier: JD8KpqBpzzPUycUp2gX3DP8l09jv0/hLNB27TZH8dRw= Subject key identifier: 9F:B1:89:EE:88:96:16:33:B3:99:71:9E:C3:2A:1D:9A:49:BD:7D:F7 Certificate issuer: /CN=277895E64BE41B7182664E1345CD57E5D36A1AF2 Certificate serial: 01C2 Authority key identifier: 27:78:95:E6:4B:E4:1B:71:82:66:4E:13:45:CD:57:E5:D3:6A:1A:F2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/J3iV5kvkG3GCZk4TRc1X5dNqGvI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DNSNET/n7GJ7oiWFjOzmXGewyodmkm9ffc.roa Signing time: Mon 10 Feb 2025 14:21:24 +0000 ROA not before: Mon 10 Feb 2025 14:21:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131659 IP address blocks: 103.160.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DNSNET/J3iV5kvkG3GCZk4TRc1X5dNqGvI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DNSNET/J3iV5kvkG3GCZk4TRc1X5dNqGvI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/J3iV5kvkG3GCZk4TRc1X5dNqGvI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=277895E64BE41B7182664E1345CD57E5D36A1AF2 Validity Not Before: Feb 10 14:21:24 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9FB189EE88961633B399719EC32A1D9A49BD7DF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b2:10:52:68:f1:d4:1d:d5:bd:4d:aa:20:fe: a0:18:a3:2f:6b:78:70:93:03:88:43:12:91:e5:b1: 73:4a:06:00:dd:0d:bd:d3:db:b9:b0:bb:30:76:10: 86:9f:58:26:09:8e:54:4d:93:ce:77:42:da:87:7d: 48:fa:98:1e:20:09:0f:8c:4b:96:f4:ab:6e:34:cd: 83:0e:05:9a:4c:36:66:9e:26:21:07:fc:bb:95:fe: 59:dd:cf:15:d8:a9:65:03:ab:a9:7b:8d:f5:6a:a3: 59:9e:8a:7a:de:27:4c:be:64:dd:5e:ba:7c:b6:64: 13:ad:c5:16:81:fd:d5:d9:23:72:8e:07:e6:b2:8d: 03:c8:37:69:b1:0b:bf:46:27:c7:68:93:95:da:ca: e8:1b:9c:90:e0:32:c1:5d:85:fc:ff:1a:26:eb:2f: e8:c4:a5:54:f8:27:4d:d2:81:23:ec:99:10:f0:64: 48:ef:d2:88:fc:45:b0:8a:f6:c2:1a:15:98:08:85: ba:ae:bf:56:e3:44:bf:92:14:f3:d9:31:34:f9:db: c7:72:06:2a:b7:e1:00:a2:7b:83:45:44:60:41:f0: a0:5d:15:94:74:53:a0:95:ba:77:8b:f4:cc:98:52: 14:22:05:a4:07:bb:07:1d:78:71:5f:6d:b5:67:1d: 5f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B1:89:EE:88:96:16:33:B3:99:71:9E:C3:2A:1D:9A:49:BD:7D:F7 X509v3 Authority Key Identifier: keyid:27:78:95:E6:4B:E4:1B:71:82:66:4E:13:45:CD:57:E5:D3:6A:1A:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DNSNET/J3iV5kvkG3GCZk4TRc1X5dNqGvI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/J3iV5kvkG3GCZk4TRc1X5dNqGvI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DNSNET/n7GJ7oiWFjOzmXGewyodmkm9ffc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.160.226.0/23 Signature Algorithm: sha256WithRSAEncryption a4:74:65:da:85:47:1f:ee:09:ac:bb:1d:ae:14:84:37:76:23: 64:ed:17:ab:5d:21:54:e6:c0:2b:38:01:c5:b4:ae:f2:84:99: 90:90:5e:db:16:d3:5c:c4:3d:36:4c:5b:99:2f:8d:30:86:b8: 9e:57:37:8c:c7:b6:0b:0f:67:60:69:fa:99:27:51:89:19:83: ed:60:fa:1c:c5:6f:89:c5:b0:d0:ad:6e:9d:90:4c:36:2b:2f: 21:ee:c2:ce:4b:f0:1c:8c:f3:7f:b2:81:a7:45:c5:66:bc:b2: 36:e6:b9:4f:ac:86:fa:f2:f4:1e:b7:78:b5:d3:a1:c8:79:42: c9:84:9c:6f:ac:94:ea:7f:ac:13:7d:e2:62:67:c8:a4:56:7d: 89:c7:30:08:9b:14:38:bc:fe:f2:75:22:7e:ff:5e:d0:bf:3a: 39:23:a5:56:63:cb:25:f7:6a:bf:79:d2:1e:c9:bd:6d:b5:bd: 2d:e5:37:45:f9:7d:a7:07:32:a5:08:e9:b2:6f:76:95:f6:23: e8:07:c0:15:18:86:92:ad:0a:3d:71:8a:9e:9e:52:d7:d2:b2: 25:f5:d8:ae:a8:80:42:c6:0a:60:79:db:25:44:fd:86:8f:73: 18:43:23:db:56:0c:4f:95:f9:e1:54:4e:34:08:fc:e1:7b:20: 51:27:f0:bd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjc3 ODk1RTY0QkU0MUI3MTgyNjY0RTEzNDVDRDU3RTVEMzZBMUFGMjAeFw0yNTAyMTAx NDIxMjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlGQjE4OUVFODg5NjE2 MzNCMzk5NzE5RUMzMkExRDlBNDlCRDdERjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvshBSaPHUHdW9Taog/qAYoy9reHCTA4hDEpHlsXNKBgDdDb3T 27mwuzB2EIafWCYJjlRNk853QtqHfUj6mB4gCQ+MS5b0q240zYMOBZpMNmaeJiEH /LuV/lndzxXYqWUDq6l7jfVqo1meinreJ0y+ZN1euny2ZBOtxRaB/dXZI3KOB+ay jQPIN2mxC79GJ8dok5XayugbnJDgMsFdhfz/GibrL+jEpVT4J03SgSPsmRDwZEjv 0oj8RbCK9sIaFZgIhbquv1bjRL+SFPPZMTT528dyBiq34QCie4NFRGBB8KBdFZR0 U6CVuneL9MyYUhQiBaQHuwcdeHFfbbVnHV+XAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUn7GJ7oiWFjOzmXGewyodmkm9ffcwHwYDVR0jBBgwFoAUJ3iV5kvkG3GCZk4T Rc1X5dNqGvIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE5TTkVU L0ozaVY1a3ZrRzNHQ1prNFRSYzFYNWROcUd2SS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSjNpVjVrdmtHM0dDWms0VFJjMVg1ZE5xR3ZJLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE5TTkVUL243R0o3b2lXRmpPem1YR2V3 eW9kbWttOWZmYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn oOIwDQYJKoZIhvcNAQELBQADggEBAKR0ZdqFRx/uCay7Ha4UhDd2I2TtF6tdIVTm wCs4AcW0rvKEmZCQXtsW01zEPTZMW5kvjTCGuJ5XN4zHtgsPZ2Bp+pknUYkZg+1g +hzFb4nFsNCtbp2QTDYrLyHuws5L8ByM83+ygadFxWa8sjbmuU+shvry9B63eLXT och5QsmEnG+slOp/rBN94mJnyKRWfYnHMAibFDi8/vJ1In7/XtC/OjkjpVZjyyX3 ar950h7JvW21vS3lN0X5facHMqUI6bJvdpX2I+gHwBUYhpKtCj1xip6eUtfSsiX1 2K6ogELGCmB52yVE/YaPcxhDI9tWDE+V+eFUTjQI/OF7IFEn8L0= -----END CERTIFICATE-----Generated at Fri Apr 18 21:00:33 2025 by rpki-client