$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/B9M25b-vBa_-1HAIQWWegNkVjIg.roa File: B9M25b-vBa_-1HAIQWWegNkVjIg.roa (raw, json) Hash identifier: 8+Crmbe/Mv9Ia8EZr4BXvo6dceoO908d4JqOOFWOI5s= Subject key identifier: 07:D3:36:E5:BF:AF:05:AF:FE:D4:70:08:41:65:9E:80:D9:15:8C:88 Certificate issuer: /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Certificate serial: 0CC5 Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/B9M25b-vBa_-1HAIQWWegNkVjIg.roa Signing time: Mon 10 Feb 2025 14:10:57 +0000 ROA not before: Mon 10 Feb 2025 14:10:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18411 IP address blocks: 61.56.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3269 (0xcc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Validity Not Before: Feb 10 14:10:57 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=07D336E5BFAF05AFFED4700841659E80D9158C88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:11:08:65:cf:43:60:fc:f7:3e:2e:20:09:17: 71:16:43:1b:8f:d9:a7:5d:4c:f3:49:77:0a:4a:71: ad:07:95:b5:a4:ba:43:20:cc:16:b9:3c:65:16:21: 1b:25:b4:c4:60:68:4d:b9:35:3e:50:03:f6:f3:07: 62:04:57:7a:8b:fb:3f:4f:5a:6b:8f:b9:7e:ea:bc: 48:7f:3f:cf:d1:e7:89:3d:eb:4a:eb:22:be:08:50: 43:5e:8e:cc:c2:db:33:96:3e:ec:44:b7:eb:fb:8d: 4e:0a:d8:a7:ca:2a:4c:3f:65:7a:8b:ed:c4:f9:3e: 29:88:61:c4:96:03:5c:ff:a8:4f:e2:c2:44:ba:4f: 69:94:c2:00:ae:94:f3:ae:0b:75:0f:d9:db:62:3b: 1e:0a:6d:70:f6:7d:e9:ec:c0:0d:e7:2e:a7:cb:4e: bc:45:f6:2d:c1:12:7b:32:7c:0e:c7:40:16:8d:38: 0f:60:8b:28:e4:a7:19:24:a5:45:3b:2f:95:30:b0: dd:4e:ed:e8:cf:72:be:d1:a7:a2:1b:52:65:0a:8f: 30:3f:fb:d3:98:19:91:78:11:17:4f:6a:c8:f1:d7: 7d:cf:2e:8e:9d:1c:f2:8c:16:20:0a:e2:56:4f:d8: 84:39:82:6c:13:dd:5f:b3:df:ec:8a:a8:61:13:b0: 45:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D3:36:E5:BF:AF:05:AF:FE:D4:70:08:41:65:9E:80:D9:15:8C:88 X509v3 Authority Key Identifier: keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/B9M25b-vBa_-1HAIQWWegNkVjIg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.24.0/24 Signature Algorithm: sha256WithRSAEncryption 14:ff:78:a3:91:fe:a4:aa:34:f8:1f:dc:bd:53:55:31:35:0a: 35:d6:06:7d:2b:e7:41:ff:c7:57:4e:97:3e:06:ce:4f:0e:fb: 7b:09:6e:de:af:5a:e1:f1:56:db:62:8a:44:92:85:ff:0e:e5: 72:11:3f:16:8d:c4:91:61:6d:62:70:58:ba:99:f4:db:68:47: ce:9f:d6:8b:53:fe:e9:79:41:dc:18:5b:ff:a7:d4:c0:ab:b3: 0a:40:3b:c7:f0:5a:f3:56:6e:f7:5c:93:76:33:56:37:4d:02: 6b:6b:06:dd:c5:91:fb:89:82:8e:45:e7:05:91:ef:d7:d6:a6: e9:85:80:0d:7b:be:59:73:e5:f4:78:28:17:3b:51:f8:ad:30: 8f:2e:c0:c5:81:cd:19:8a:65:1f:84:0b:a6:3a:f8:8a:ab:cf: 56:6b:04:87:2f:1a:af:9b:41:59:73:47:43:7a:85:f9:a9:ac: 9a:8b:f9:7b:8f:be:f0:91:db:53:7d:13:1d:a7:93:de:48:34: 2a:26:af:42:42:96:5a:99:ec:b1:65:86:8c:35:87:fc:95:0f: 32:c9:e7:a5:b0:16:ff:3b:8a:06:c0:c7:a2:b2:c2:d1:47:3b: 53:2c:42:68:f7:bf:8e:02:05:df:33:62:54:09:0e:11:3a:ee: 44:a1:bf:e9 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDMUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRD NkRERkRENEJBQTUwNDAwRjNBMTE5QTU4MzNDRTAwMjFCREIyRTAeFw0yNTAyMTAx NDEwNTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA3RDMzNkU1QkZBRjA1 QUZGRUQ0NzAwODQxNjU5RTgwRDkxNThDODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpEQhlz0Ng/Pc+LiAJF3EWQxuP2addTPNJdwpKca0HlbWkukMg zBa5PGUWIRsltMRgaE25NT5QA/bzB2IEV3qL+z9PWmuPuX7qvEh/P8/R54k960rr Ir4IUENejszC2zOWPuxEt+v7jU4K2KfKKkw/ZXqL7cT5PimIYcSWA1z/qE/iwkS6 T2mUwgCulPOuC3UP2dtiOx4KbXD2fenswA3nLqfLTrxF9i3BEnsyfA7HQBaNOA9g iyjkpxkkpUU7L5UwsN1O7ejPcr7Rp6IbUmUKjzA/+9OYGZF4ERdPasjx133PLo6d HPKMFiAK4lZP2IQ5gmwT3V+z3+yKqGETsEXFAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUB9M25b+vBa/+1HAIQWWegNkVjIgwHwYDVR0jBBgwFoAUlMbd/dS6pQQA86EZ pYM84AIb2y4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRURUTlMv bE1iZF9kUzZwUVFBODZFWnBZTTg0QUliMnk0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9sTWJkX2RTNnBRUUE4NkVacFlNODRBSWIyeTQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9FRFROUy9COU0yNWItdkJhXy0xSEFJUVdX ZWdOa1ZqSWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPTgY MA0GCSqGSIb3DQEBCwUAA4IBAQAU/3ijkf6kqjT4H9y9U1UxNQo11gZ9K+dB/8dX Tpc+Bs5PDvt7CW7er1rh8VbbYopEkoX/DuVyET8WjcSRYW1icFi6mfTbaEfOn9aL U/7peUHcGFv/p9TAq7MKQDvH8FrzVm73XJN2M1Y3TQJrawbdxZH7iYKORecFke/X 1qbphYANe75Zc+X0eCgXO1H4rTCPLsDFgc0ZimUfhAumOviKq89WawSHLxqvm0FZ c0dDeoX5qayai/l7j77wkdtTfRMdp5PeSDQqJq9CQpZameyxZYaMNYf8lQ8yyeel sBb/O4oGwMeissLRRztTLEJo97+OAgXfM2JUCQ4ROu5Eob/p -----END CERTIFICATE-----Generated at Fri Apr 18 23:48:41 2025 by rpki-client