$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/d5D7Go8q4Qdx06VdURVyEc4HzNY.roa File: d5D7Go8q4Qdx06VdURVyEc4HzNY.roa (raw, json) Hash identifier: aNWAuC/temxMq1rcVcjBYJRVf8Dac3Yf21kE7mXKYuM= Subject key identifier: 77:90:FB:1A:8F:2A:E1:07:71:D3:A5:5D:51:15:72:11:CE:07:CC:D6 Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Certificate serial: 0D0F Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/d5D7Go8q4Qdx06VdURVyEc4HzNY.roa Signing time: Mon 10 Feb 2025 14:08:18 +0000 ROA not before: Mon 10 Feb 2025 14:08:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4782 IP address blocks: 61.57.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3343 (0xd0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Validity Not Before: Feb 10 14:08:18 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7790FB1A8F2AE10771D3A55D51157211CE07CCD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9e:46:c1:6f:75:37:70:2c:0c:04:e8:f1:3d: 38:37:eb:c4:c6:d4:64:44:e9:d1:8b:ac:e3:30:8e: 9b:00:96:aa:3f:f4:a3:94:ec:8e:29:37:eb:d1:3c: 2a:5b:5b:88:b1:f9:47:f5:28:f4:d1:36:a3:91:58: 9e:bf:0c:84:9c:ba:45:50:78:5b:1e:b9:41:f8:7d: 08:e2:35:ca:15:8b:3e:b4:a8:a3:90:a4:65:a0:cf: fd:00:35:e8:ec:40:1d:37:34:5c:2d:8f:39:80:86: 05:f4:21:9b:92:98:00:40:e6:3d:99:be:c0:0a:54: 77:98:5e:cc:5a:c7:81:e7:36:29:01:96:b8:e4:5a: ef:4e:d6:05:b3:2e:e7:6c:9f:4f:f3:f5:90:4d:27: b7:f6:35:f1:a3:a6:21:52:88:ab:1c:58:13:ce:4e: 4b:b3:44:89:eb:e9:18:ee:28:6f:6b:39:cd:2d:3e: 73:f8:6e:6f:5f:23:1e:8c:d9:32:5b:c5:4c:d8:9d: b5:82:12:b7:86:88:81:be:4f:3c:3a:b0:82:b5:31: 57:a1:d2:a9:0b:49:31:d1:ac:ae:06:04:17:06:1f: 22:aa:ad:10:b8:6e:6d:c0:a9:94:66:31:fe:25:10: 4b:0c:c4:88:da:f7:5e:c3:51:66:c6:da:bc:7b:d3: 18:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:90:FB:1A:8F:2A:E1:07:71:D3:A5:5D:51:15:72:11:CE:07:CC:D6 X509v3 Authority Key Identifier: keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/d5D7Go8q4Qdx06VdURVyEc4HzNY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.57.32.0/19 Signature Algorithm: sha256WithRSAEncryption 0c:41:d0:eb:4b:6f:45:27:1e:79:13:8a:50:92:c6:61:ff:ed: a0:73:f0:c0:91:f3:98:c5:46:b8:ab:2e:89:dc:32:ca:bb:1b: a4:d2:94:38:3b:b5:32:1f:04:84:94:f3:2e:f7:4f:59:a8:44: 3a:c0:78:f3:db:dd:d9:4c:2a:d6:26:08:c3:9c:f5:e5:73:e8: 6f:bc:20:b9:d8:53:d3:ca:99:c8:59:79:bf:d2:a2:a6:03:98: 52:0f:53:68:b7:fe:83:88:b6:ac:2b:f1:ec:f3:c2:ed:2d:1f: 98:60:31:dc:e4:02:49:d5:01:04:b6:94:66:55:2f:26:9a:39: 4f:0f:94:ad:bf:25:be:5e:fc:d8:2b:88:dc:80:66:68:4f:e0: 32:aa:81:25:74:86:4b:32:13:d2:1e:fa:9d:a7:55:2a:80:d1: eb:86:26:1a:42:75:8c:70:a1:be:08:9e:24:80:7f:b3:bd:27: 47:81:04:7e:fe:5e:79:1f:8a:fa:6c:55:02:cb:48:d0:c8:10: 64:45:e7:79:c4:a3:73:70:f5:ca:82:11:e0:1b:1a:74:33:42: 44:51:94:f2:77:06:a3:af:bb:7f:78:1f:a9:b4:de:27:d3:68: 16:21:7c:09:78:e2:c8:f8:84:a5:b8:85:38:f7:1f:56:a7:a9: 60:27:71:4f -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDQ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yNTAyMTAx NDA4MThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc3OTBGQjFBOEYyQUUx MDc3MUQzQTU1RDUxMTU3MjExQ0UwN0NDRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2nkbBb3U3cCwMBOjxPTg368TG1GRE6dGLrOMwjpsAlqo/9KOU 7I4pN+vRPCpbW4ix+Uf1KPTRNqORWJ6/DIScukVQeFseuUH4fQjiNcoViz60qKOQ pGWgz/0ANejsQB03NFwtjzmAhgX0IZuSmABA5j2ZvsAKVHeYXsxax4HnNikBlrjk Wu9O1gWzLudsn0/z9ZBNJ7f2NfGjpiFSiKscWBPOTkuzRInr6RjuKG9rOc0tPnP4 bm9fIx6M2TJbxUzYnbWCEreGiIG+Tzw6sIK1MVeh0qkLSTHRrK4GBBcGHyKqrRC4 bm3AqZRmMf4lEEsMxIja917DUWbG2rx70xgTAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUd5D7Go8q4Qdx06VdURVyEc4HzNYwHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ 7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Q1RDdHbzhxNFFkeDA2VmRVUlZ5RWM0 SHpOWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9OSAwDQYJ KoZIhvcNAQELBQADggEBAAxB0OtLb0UnHnkTilCSxmH/7aBz8MCR85jFRrirLonc Msq7G6TSlDg7tTIfBISU8y73T1moRDrAePPb3dlMKtYmCMOc9eVz6G+8ILnYU9PK mchZeb/SoqYDmFIPU2i3/oOItqwr8ezzwu0tH5hgMdzkAknVAQS2lGZVLyaaOU8P lK2/Jb5e/NgriNyAZmhP4DKqgSV0hksyE9Ie+p2nVSqA0euGJhpCdYxwob4IniSA f7O9J0eBBH7+XnkfivpsVQLLSNDIEGRF53nEo3Nw9cqCEeAbGnQzQkRRlPJ3BqOv u394H6m03ifTaBYhfAl44sj4hKW4hTj3H1anqWAncU8= -----END CERTIFICATE-----Generated at Fri Apr 18 22:34:29 2025 by rpki-client