$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/YPdc360PEFbWhqVvEyvpCKka3nA.roa File: YPdc360PEFbWhqVvEyvpCKka3nA.roa (raw, json) Hash identifier: 10K5Gw/UVEhmWYYssZijTApkxWDVY4Mqc0Kk1pUWEXU= Subject key identifier: 60:F7:5C:DF:AD:0F:10:56:D6:86:A5:6F:13:2B:E9:08:A9:1A:DE:70 Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Certificate serial: 0F99 Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/YPdc360PEFbWhqVvEyvpCKka3nA.roa Signing time: Mon 10 Feb 2025 14:30:54 +0000 ROA not before: Mon 10 Feb 2025 14:30:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24168 IP address blocks: 103.136.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3993 (0xf99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Validity Not Before: Feb 10 14:30:54 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=60F75CDFAD0F1056D686A56F132BE908A91ADE70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d3:68:df:8c:cc:6c:66:46:30:2e:b4:15:f1: 98:14:6b:8c:1d:24:1d:cb:c4:a5:47:cd:5c:ab:29: 75:d4:80:d7:9f:09:85:71:21:ca:7c:04:a5:f1:0a: da:c1:d0:51:d5:d4:15:c2:2a:f8:e1:04:fc:a2:e8: d5:9a:fb:bb:37:e5:ea:f7:61:7c:bc:f9:b9:de:d2: 9a:fe:91:e7:6c:dc:19:04:71:8c:7b:d7:85:b9:41: 82:7b:ab:9a:93:e8:28:ca:61:1b:48:de:b8:cf:9f: c0:1c:6c:b0:77:6d:58:f3:1a:7e:bf:6c:99:0f:99: b7:0b:cc:ad:ad:ce:4b:dd:c6:66:e0:ac:97:04:38: de:41:5e:9a:e2:3f:a9:dd:3e:1a:92:7d:85:af:b9: ba:27:5b:2b:9e:0c:39:79:81:6b:a0:5c:81:1f:b0: 1c:7d:86:ae:04:8f:2d:95:be:6b:14:3d:16:56:e8: 20:6a:46:8d:ac:4e:e2:9a:a9:34:50:51:72:cb:6d: c0:cc:fe:c7:f3:3d:a2:f1:17:6e:52:09:80:fb:44: 3c:b9:fe:35:af:01:7c:c0:aa:08:eb:fa:7d:c5:83: 35:24:1e:4d:c9:ce:da:c9:92:22:42:cd:68:32:b1: 51:9c:7e:53:e5:34:a2:d3:bf:9b:5c:89:9b:78:16: 61:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F7:5C:DF:AD:0F:10:56:D6:86:A5:6F:13:2B:E9:08:A9:1A:DE:70 X509v3 Authority Key Identifier: keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/YPdc360PEFbWhqVvEyvpCKka3nA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.136.61.0/24 Signature Algorithm: sha256WithRSAEncryption a8:b7:9b:1f:da:b5:e0:79:42:93:dc:95:56:59:31:bd:99:15: f4:e0:a6:c9:81:d4:47:e5:da:7c:7f:df:f9:d0:0e:6f:ae:89: 3c:42:a5:8c:99:7a:2d:92:3a:c7:d2:57:6d:5a:1a:71:e5:48: 13:24:42:6e:49:51:e2:ab:c3:58:c5:54:50:67:63:b3:bd:3b: 4f:cc:52:3d:eb:af:97:d3:f1:71:18:81:13:2d:d6:a8:ed:85: a0:91:46:af:c8:82:c7:07:a5:a5:9d:82:4b:73:30:b6:d1:80: 5b:b6:0f:d4:3f:b7:5b:8e:aa:79:03:58:12:ff:99:1f:e9:ce: 59:65:ab:31:e5:0a:69:94:cf:73:02:67:a5:99:74:4e:95:f1: 05:ae:b5:c9:a1:f3:44:6c:f2:04:70:1e:42:26:c1:72:f3:75: ad:ee:f0:85:1b:c3:fb:f2:51:3a:07:3e:13:23:10:19:15:ed: 47:33:c4:d1:60:35:1d:8a:43:f7:d2:7e:84:a4:59:bd:e7:7c: ac:9b:d4:e9:3d:e6:21:2e:64:78:3c:8f:d8:a4:de:14:d5:d9: e1:26:17:28:68:f5:36:e4:34:31:78:27:eb:e7:72:65:ef:7a: 1f:9a:72:50:83:bc:51:d7:7a:52:84:e7:07:cd:b6:55:01:fe: 42:18:65:81 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICD5kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDRG MEREMEY0RkI4MDEwMjVENTg2RUY5OTlDNUVFRTAyRDdDMjA1OTAeFw0yNTAyMTAx NDMwNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYwRjc1Q0RGQUQwRjEw NTZENjg2QTU2RjEzMkJFOTA4QTkxQURFNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDX02jfjMxsZkYwLrQV8ZgUa4wdJB3LxKVHzVyrKXXUgNefCYVx Icp8BKXxCtrB0FHV1BXCKvjhBPyi6NWa+7s35er3YXy8+bne0pr+keds3BkEcYx7 14W5QYJ7q5qT6CjKYRtI3rjPn8AcbLB3bVjzGn6/bJkPmbcLzK2tzkvdxmbgrJcE ON5BXpriP6ndPhqSfYWvubonWyueDDl5gWugXIEfsBx9hq4Ejy2VvmsUPRZW6CBq Ro2sTuKaqTRQUXLLbcDM/sfzPaLxF25SCYD7RDy5/jWvAXzAqgjr+n3FgzUkHk3J ztrJkiJCzWgysVGcflPlNKLTv5tciZt4FmE5AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUYPdc360PEFbWhqVvEyvpCKka3nAwHwYDVR0jBBgwFoAU1PDdD0+4AQJdWG75 mcXu4C18IFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdULzFQ RGREMC00QVFKZFdHNzVtY1h1NEMxOElGay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev MVBEZEQwLTRBUUpkV0c3NW1jWHU0QzE4SUZrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRFdUL1lQZGMzNjBQRUZiV2hxVnZFeXZwQ0tr YTNuQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABniD0wDQYJ KoZIhvcNAQELBQADggEBAKi3mx/ateB5QpPclVZZMb2ZFfTgpsmB1Efl2nx/3/nQ Dm+uiTxCpYyZei2SOsfSV21aGnHlSBMkQm5JUeKrw1jFVFBnY7O9O0/MUj3rr5fT 8XEYgRMt1qjthaCRRq/IgscHpaWdgktzMLbRgFu2D9Q/t1uOqnkDWBL/mR/pzlll qzHlCmmUz3MCZ6WZdE6V8QWutcmh80Rs8gRwHkImwXLzda3u8IUbw/vyUToHPhMj EBkV7UczxNFgNR2KQ/fSfoSkWb3nfKyb1Ok95iEuZHg8j9ik3hTV2eEmFyho9Tbk NDF4J+vncmXveh+aclCDvFHXelKE5wfNtlUB/kIYZYE= -----END CERTIFICATE-----Generated at Fri Apr 18 23:57:33 2025 by rpki-client