$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DOWNWIN/8SXHWoAc2T8psht-LNegHkn-azw.roa File: 8SXHWoAc2T8psht-LNegHkn-azw.roa (raw, json) Hash identifier: iBwKO0asF7WNgWhKCH+VOyP2ISrqt5OlKs06p9N4kLI= Subject key identifier: F1:25:C7:5A:80:1C:D9:3F:29:B2:1B:7E:2C:D7:A0:1E:49:FE:6B:3C Certificate issuer: /CN=93D96B0699BEBA157D50548029BC117929AD20E7 Certificate serial: 01CD Authority key identifier: 93:D9:6B:06:99:BE:BA:15:7D:50:54:80:29:BC:11:79:29:AD:20:E7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/k9lrBpm-uhV9UFSAKbwReSmtIOc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DOWNWIN/8SXHWoAc2T8psht-LNegHkn-azw.roa Signing time: Mon 10 Feb 2025 14:21:49 +0000 ROA not before: Mon 10 Feb 2025 14:21:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131149 IP address blocks: 103.118.148.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DOWNWIN/k9lrBpm-uhV9UFSAKbwReSmtIOc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DOWNWIN/k9lrBpm-uhV9UFSAKbwReSmtIOc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/k9lrBpm-uhV9UFSAKbwReSmtIOc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93D96B0699BEBA157D50548029BC117929AD20E7 Validity Not Before: Feb 10 14:21:49 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F125C75A801CD93F29B21B7E2CD7A01E49FE6B3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f3:0a:c5:1d:58:6b:fb:51:0e:40:c8:cb:55: cd:23:42:08:f9:6b:8a:3c:56:b0:2c:93:a5:37:a1: 0d:ec:8b:8c:94:3c:17:4c:6d:d4:e8:13:00:0a:f4: 9a:99:ef:0f:0a:45:0d:01:4a:c9:c4:d6:c5:a8:12: 57:15:32:91:ce:ba:24:e3:98:ec:f0:db:f3:ac:aa: 8b:f7:74:6a:f3:93:1c:b9:95:55:c3:9f:a7:09:01: 7a:c0:26:c3:a7:d2:27:9f:b4:eb:19:d8:0f:6a:84: 85:99:60:f2:bc:40:af:a5:96:d8:7e:ef:b3:74:d6: d8:db:51:12:f1:77:1f:ab:0e:4b:bf:ac:38:aa:ce: ff:3b:41:c8:86:af:98:ae:d4:b2:6d:3a:80:d3:48: ad:54:19:eb:37:c3:87:db:a7:1a:7e:30:c7:e6:7f: 06:7b:07:3f:bc:66:6f:24:5e:c7:99:6a:d1:99:6f: d8:c4:bd:81:76:30:62:96:df:2e:f9:55:06:10:52: cb:fd:cd:43:94:bf:33:66:25:90:79:fa:f3:96:16: d7:29:67:d9:e0:d7:4e:54:b2:60:55:40:4d:44:96: 0c:f0:a1:ef:ad:62:23:35:f3:79:c9:62:e1:5c:7d: 33:0c:1a:17:56:e9:a2:94:48:89:3b:2d:bb:ec:2a: c7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:25:C7:5A:80:1C:D9:3F:29:B2:1B:7E:2C:D7:A0:1E:49:FE:6B:3C X509v3 Authority Key Identifier: keyid:93:D9:6B:06:99:BE:BA:15:7D:50:54:80:29:BC:11:79:29:AD:20:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOWNWIN/k9lrBpm-uhV9UFSAKbwReSmtIOc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/k9lrBpm-uhV9UFSAKbwReSmtIOc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOWNWIN/8SXHWoAc2T8psht-LNegHkn-azw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.118.148.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:62:44:0c:bb:96:ee:21:4b:88:30:ea:26:a3:09:1a:5a:f7: 88:73:56:26:58:e6:f5:73:5b:63:5c:16:60:8c:d7:79:c0:7a: 7c:ea:87:c3:2e:61:44:cb:02:8e:27:ff:39:97:f6:68:e2:05: b1:cb:ef:c2:fe:dd:68:9f:9c:ee:52:47:74:42:b0:0b:da:db: 8a:d6:7a:a0:ec:43:33:ae:f7:79:33:9d:f7:a4:d7:3c:c1:91: 83:96:b3:5b:26:f3:81:2c:06:d7:e6:2d:b0:c2:53:b1:81:56: 9a:e8:02:ca:cd:ba:08:5e:ee:95:a1:8c:af:57:01:c2:8c:5c: 3d:21:24:a7:23:6a:47:b9:de:c6:5e:29:57:83:cc:5c:74:eb: 42:5d:71:0b:74:a9:c7:f1:9f:06:0c:cd:f1:a8:a0:1b:9c:98: ec:00:82:6c:bc:1d:17:2c:82:33:32:d7:8a:a0:cd:3b:55:e6: 6a:86:4c:32:b7:fc:a6:44:40:07:7f:21:ab:27:89:b4:8b:8f: 9c:7a:4d:b4:a6:35:19:6c:ac:95:ad:3d:9d:8d:92:a9:1e:64: e1:fc:44:ed:ab:25:37:00:50:13:74:87:f1:00:3a:58:66:6d: 54:c9:28:81:9a:05:c6:9f:32:7d:04:10:e0:03:8c:57:ce:60: 12:29:a7:a6 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTNE OTZCMDY5OUJFQkExNTdENTA1NDgwMjlCQzExNzkyOUFEMjBFNzAeFw0yNTAyMTAx NDIxNDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYxMjVDNzVBODAxQ0Q5 M0YyOUIyMUI3RTJDRDdBMDFFNDlGRTZCM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC18wrFHVhr+1EOQMjLVc0jQgj5a4o8VrAsk6U3oQ3si4yUPBdM bdToEwAK9JqZ7w8KRQ0BSsnE1sWoElcVMpHOuiTjmOzw2/Osqov3dGrzkxy5lVXD n6cJAXrAJsOn0ieftOsZ2A9qhIWZYPK8QK+llth+77N01tjbURLxdx+rDku/rDiq zv87QciGr5iu1LJtOoDTSK1UGes3w4fbpxp+MMfmfwZ7Bz+8Zm8kXseZatGZb9jE vYF2MGKW3y75VQYQUsv9zUOUvzNmJZB5+vOWFtcpZ9ng105UsmBVQE1Elgzwoe+t YiM183nJYuFcfTMMGhdW6aKUSIk7LbvsKsf5AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU8SXHWoAc2T8psht+LNegHkn+azwwHwYDVR0jBBgwFoAUk9lrBpm+uhV9UFSA KbwReSmtIOcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9XTldJ Ti9rOWxyQnBtLXVoVjlVRlNBS2J3UmVTbXRJT2MuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2s5bHJCcG0tdWhWOVVGU0FLYndSZVNtdElPYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RPV05XSU4vOFNYSFdvQWMyVDhwc2h0 LUxOZWdIa24tYXp3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWd2lDANBgkqhkiG9w0BAQsFAAOCAQEAXGJEDLuW7iFLiDDqJqMJGlr3iHNWJljm 9XNbY1wWYIzXecB6fOqHwy5hRMsCjif/OZf2aOIFscvvwv7daJ+c7lJHdEKwC9rb itZ6oOxDM673eTOd96TXPMGRg5azWybzgSwG1+YtsMJTsYFWmugCys26CF7ulaGM r1cBwoxcPSEkpyNqR7nexl4pV4PMXHTrQl1xC3Spx/GfBgzN8aigG5yY7ACCbLwd FyyCMzLXiqDNO1XmaoZMMrf8pkRAB38hqyeJtIuPnHpNtKY1GWysla09nY2SqR5k 4fxE7aslNwBQE3SH8QA6WGZtVMkogZoFxp8yfQQQ4AOMV85gEimnpg== -----END CERTIFICATE-----Generated at Fri Apr 18 23:44:44 2025 by rpki-client