$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Xsg_5RtNccXZ48x2H8qKP9vyYO4.roa File: Xsg_5RtNccXZ48x2H8qKP9vyYO4.roa (raw, json) Hash identifier: IP6HzmhYxApdpkPrP4bbH0ByZ+UApIAMMvsXrH7d+eI= Subject key identifier: 5E:C8:3F:E5:1B:4D:71:C5:D9:E3:CC:76:1F:CA:8A:3F:DB:F2:60:EE Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0D7E Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Xsg_5RtNccXZ48x2H8qKP9vyYO4.roa Signing time: Mon 10 Feb 2025 13:50:04 +0000 ROA not before: Mon 10 Feb 2025 13:50:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9244 IP address blocks: 61.56.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 16:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3454 (0xd7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Feb 10 13:50:04 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5EC83FE51B4D71C5D9E3CC761FCA8A3FDBF260EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e4:78:6a:df:1f:9c:2f:43:39:b9:e5:93:a2: 76:28:a6:98:b3:f3:36:ca:a6:b4:07:f2:45:e1:6e: 84:2a:9f:74:a4:99:26:9a:b7:c1:10:23:af:9b:32: 22:81:d9:a3:8b:0b:1c:a8:3d:59:d9:e2:63:3c:44: 16:46:f8:88:93:f3:24:c3:30:00:44:81:de:93:a7: 95:6c:5a:f8:d5:06:1b:a3:fb:2e:a3:95:9b:28:e2: 74:91:71:9f:42:4e:86:c0:e1:67:b7:4d:a8:48:8a: ea:8a:8d:8f:d3:5c:9a:16:40:da:44:38:87:e7:fc: 5e:8d:2d:c4:33:43:13:04:a0:fb:4c:6c:41:cf:76: 83:ee:e2:05:52:30:ce:3b:15:e8:ab:40:0a:d4:9b: b1:b3:26:64:95:87:b1:de:0e:ac:7f:47:cf:13:44: 9b:36:20:f8:f8:62:02:71:c2:e9:78:ef:40:fa:95: af:0c:43:2c:73:fc:f5:af:d6:6d:54:ef:4a:d5:1c: 18:4b:7b:af:ea:3b:20:21:62:ec:cb:ff:ef:84:8a: be:df:25:da:c7:13:9f:7d:96:e3:ce:fc:a9:6a:84: aa:52:2a:f8:38:ef:08:df:e7:18:a4:6f:23:8c:18: 28:38:f1:16:25:14:ea:16:d9:ac:dd:53:b2:94:3f: ff:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C8:3F:E5:1B:4D:71:C5:D9:E3:CC:76:1F:CA:8A:3F:DB:F2:60:EE X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Xsg_5RtNccXZ48x2H8qKP9vyYO4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.80.0/20 Signature Algorithm: sha256WithRSAEncryption 99:e6:27:2e:fd:93:6a:7a:ae:9a:c6:d2:2f:10:6f:d7:e6:19: 11:fe:10:46:ab:87:a3:e7:41:e7:75:00:7f:fa:19:81:50:76: a8:d9:1c:1f:3c:31:f0:3b:62:25:3f:cc:33:33:5e:62:15:a2: 91:a3:52:95:2c:e6:5b:12:54:72:71:15:70:eb:59:c4:3a:37: d1:03:0d:01:2e:97:6b:79:72:03:be:9a:42:ba:3c:d6:de:f4: 8b:6d:5b:76:d7:88:b8:7b:e2:c5:80:5d:a5:44:a6:b3:3b:b8: 89:b8:de:ed:f8:27:65:13:5f:1b:4c:c0:56:1e:27:46:8b:fd: 6a:42:3b:ff:98:a8:ed:a0:11:9f:b3:79:33:ee:f6:f4:50:fa: de:df:98:2c:a2:16:d1:05:05:4f:16:fe:fa:45:44:b3:f0:63: 42:75:cf:c9:ad:89:55:96:db:08:10:c2:c8:39:17:a4:98:a2: 2c:4c:57:68:0b:8b:b8:2f:29:6c:64:47:f1:cc:a0:05:51:1b: 4e:99:a3:0e:a9:92:fb:f5:14:19:a0:a8:67:bf:61:76:a2:88: 7a:ec:00:7f:26:a0:c7:5b:88:a5:13:f4:f7:93:f1:7d:f4:b6: fe:99:96:8f:5c:89:05:ab:d4:c6:c8:08:f6:76:47:ea:ac:77: 0b:e1:c7:fd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDX4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNTAyMTAx MzUwMDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVFQzgzRkU1MUI0RDcx QzVEOUUzQ0M3NjFGQ0E4QTNGREJGMjYwRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDe5Hhq3x+cL0M5ueWTonYoppiz8zbKprQH8kXhboQqn3SkmSaa t8EQI6+bMiKB2aOLCxyoPVnZ4mM8RBZG+IiT8yTDMABEgd6Tp5VsWvjVBhuj+y6j lZso4nSRcZ9CTobA4We3TahIiuqKjY/TXJoWQNpEOIfn/F6NLcQzQxMEoPtMbEHP doPu4gVSMM47FeirQArUm7GzJmSVh7HeDqx/R88TRJs2IPj4YgJxwul470D6la8M Qyxz/PWv1m1U70rVHBhLe6/qOyAhYuzL/++Eir7fJdrHE599luPO/KlqhKpSKvg4 7wjf5xikbyOMGCg48RYlFOoW2azdU7KUP/+FAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUXsg/5RtNccXZ48x2H8qKP9vyYO4wHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL1hzZ181UnROY2NYWjQ4eDJI OHFLUDl2eVlPNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 OFAwDQYJKoZIhvcNAQELBQADggEBAJnmJy79k2p6rprG0i8Qb9fmGRH+EEarh6Pn Qed1AH/6GYFQdqjZHB88MfA7YiU/zDMzXmIVopGjUpUs5lsSVHJxFXDrWcQ6N9ED DQEul2t5cgO+mkK6PNbe9IttW3bXiLh74sWAXaVEprM7uIm43u34J2UTXxtMwFYe J0aL/WpCO/+YqO2gEZ+zeTPu9vRQ+t7fmCyiFtEFBU8W/vpFRLPwY0J1z8mtiVWW 2wgQwsg5F6SYoixMV2gLi7gvKWxkR/HMoAVRG06Zow6pkvv1FBmgqGe/YXaiiHrs AH8moMdbiKUT9PeT8X30tv6Zlo9ciQWr1MbICPZ2R+qsdwvhx/0= -----END CERTIFICATE-----Generated at Tue Apr 22 13:49:27 2025 by rpki-client