$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/tdkYnDh4vwODT5EMGd-S21gtdzg.roa File: tdkYnDh4vwODT5EMGd-S21gtdzg.roa (raw, json) Hash identifier: rQx7QyKNuDkKMETxOqWkwFkZ8VSDv7pJ3ku9aDuFa1A= Subject key identifier: B5:D9:18:9C:38:78:BF:03:83:4F:91:0C:19:DF:92:DB:58:2D:77:38 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0D87 Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/tdkYnDh4vwODT5EMGd-S21gtdzg.roa Signing time: Mon 10 Feb 2025 13:50:06 +0000 ROA not before: Mon 10 Feb 2025 13:50:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9244 IP address blocks: 61.56.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3463 (0xd87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Feb 10 13:50:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B5D9189C3878BF03834F910C19DF92DB582D7738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:1b:f0:95:e9:de:52:97:1f:9b:a0:cd:cf: 03:3b:22:2b:f9:94:dd:b5:b8:61:5e:7f:c0:57:e2: b7:de:2d:0b:35:89:9a:52:b6:ca:f4:cd:c0:b4:89: d6:33:3c:93:60:e6:c6:0c:46:ca:fe:fd:bb:da:c9: 78:b9:d9:96:af:39:db:45:98:63:18:49:7c:c4:e4: d8:81:fc:f2:01:04:ae:74:ce:e8:7f:1e:ca:59:e8: b4:3a:7e:0c:1b:61:75:b5:9c:f9:04:66:7a:84:f6: 55:33:30:33:4a:a4:b7:86:a1:e6:ba:62:43:69:b7: 84:fd:6a:25:5d:2a:13:34:55:1f:06:49:32:20:c6: 31:e5:bd:1d:a6:3b:15:b1:20:17:08:f1:64:84:6c: 5a:77:31:fd:cb:4d:7c:4e:7b:b2:be:5e:17:05:b4: 6a:fd:55:2e:54:28:dd:cd:7f:66:cc:50:53:ee:1d: fd:9e:1d:f8:ad:18:82:18:d9:72:ef:9e:74:ad:22: a0:49:43:24:35:53:30:8d:68:56:b1:42:25:85:21: 75:37:2a:72:b6:c4:b3:5b:92:9b:e3:ce:b2:92:86: 8c:2f:e9:f3:4f:0d:d3:98:b4:9b:3c:c5:de:64:43: aa:36:bd:82:3c:b8:da:d4:98:18:f4:30:e8:de:c4: e0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D9:18:9C:38:78:BF:03:83:4F:91:0C:19:DF:92:DB:58:2D:77:38 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/tdkYnDh4vwODT5EMGd-S21gtdzg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.88.0/21 Signature Algorithm: sha256WithRSAEncryption 51:fb:2c:0f:bd:07:5e:b9:6a:2c:2b:a2:ee:32:c1:61:c8:b8: f4:2d:8e:48:a5:bb:3b:28:0e:4d:f9:aa:1b:df:9a:13:fd:d8: df:94:06:84:55:e1:11:4c:a9:3b:fb:1b:5a:0e:81:58:1f:bf: 44:99:3d:5d:1c:49:95:63:ff:01:c3:83:9d:00:d5:1f:9f:69: dd:13:ef:0e:d7:c6:e2:24:88:ab:71:c7:36:f9:5a:dd:20:8e: 08:94:f9:89:9f:18:a1:a6:c9:b5:94:df:29:1c:3b:17:f0:d1: 37:b3:8b:e6:65:e6:20:1f:f8:92:e4:fa:5e:7c:c5:60:0a:30: 1a:97:5a:4d:9e:78:e7:07:c3:84:91:32:8a:ae:f0:ec:75:e6: 2f:2f:34:df:5b:12:49:98:15:a4:7e:cc:67:de:10:c8:5e:1c: c1:1a:80:9c:4b:b5:86:27:40:c7:1b:af:89:66:84:25:7c:3d: bb:42:63:8a:95:b8:48:b6:d3:1c:b4:4e:b4:2f:9e:c0:f3:23: d1:a0:90:83:33:28:54:5d:e3:9a:b2:27:f4:34:dc:24:d9:35: 3a:45:3e:a3:be:dd:bf:5d:7d:05:04:7c:4a:17:84:5b:df:dd: 6c:9f:0d:d8:05:98:ff:0d:f7:71:a7:46:84:64:78:7d:1e:0f: 32:18:66:dd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNTAyMTAx MzUwMDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI1RDkxODlDMzg3OEJG MDM4MzRGOTEwQzE5REY5MkRCNTgyRDc3MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4ahvwleneUpcfm6DNzwM7Iiv5lN21uGFef8BX4rfeLQs1iZpS tsr0zcC0idYzPJNg5sYMRsr+/bvayXi52ZavOdtFmGMYSXzE5NiB/PIBBK50zuh/ HspZ6LQ6fgwbYXW1nPkEZnqE9lUzMDNKpLeGoea6YkNpt4T9aiVdKhM0VR8GSTIg xjHlvR2mOxWxIBcI8WSEbFp3Mf3LTXxOe7K+XhcFtGr9VS5UKN3Nf2bMUFPuHf2e HfitGIIY2XLvnnStIqBJQyQ1UzCNaFaxQiWFIXU3KnK2xLNbkpvjzrKShowv6fNP DdOYtJs8xd5kQ6o2vYI8uNrUmBj0MOjexOAvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtdkYnDh4vwODT5EMGd+S21gtdzgwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL3Rka1luRGg0dndPRFQ1RU1H ZC1TMjFndGR6Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9 OFgwDQYJKoZIhvcNAQELBQADggEBAFH7LA+9B165aiwrou4ywWHIuPQtjkiluzso Dk35qhvfmhP92N+UBoRV4RFMqTv7G1oOgVgfv0SZPV0cSZVj/wHDg50A1R+fad0T 7w7XxuIkiKtxxzb5Wt0gjgiU+YmfGKGmybWU3ykcOxfw0Tezi+Zl5iAf+JLk+l58 xWAKMBqXWk2eeOcHw4SRMoqu8Ox15i8vNN9bEkmYFaR+zGfeEMheHMEagJxLtYYn QMcbr4lmhCV8PbtCY4qVuEi20xy0TrQvnsDzI9GgkIMzKFRd45qyJ/Q03CTZNTpF PqO+3b9dfQUEfEoXhFvf3WyfDdgFmP8N93GnRoRkeH0eDzIYZt0= -----END CERTIFICATE-----Generated at Fri Apr 18 19:41:00 2025 by rpki-client