$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSNET/TmtOrpS7o28ER7oLjnOBZLdWcgM.roa File: TmtOrpS7o28ER7oLjnOBZLdWcgM.roa (raw, json) Hash identifier: mQz/hV7i4zdeNwzhSThQr7qIHt69JvQ2KxLsJS+vAxM= Subject key identifier: 4E:6B:4E:AE:94:BB:A3:6F:04:47:BA:0B:8E:73:81:64:B7:56:72:03 Certificate issuer: /CN=4C47DF748EC0FF16912283CEC10EC10ED32D244F Certificate serial: 0C87 Authority key identifier: 4C:47:DF:74:8E:C0:FF:16:91:22:83:CE:C1:0E:C1:0E:D3:2D:24:4F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TEffdI7A_xaRIoPOwQ7BDtMtJE8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TmtOrpS7o28ER7oLjnOBZLdWcgM.roa Signing time: Mon 10 Feb 2025 14:31:25 +0000 ROA not before: Mon 10 Feb 2025 14:31:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38837 IP address blocks: 211.78.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TEffdI7A_xaRIoPOwQ7BDtMtJE8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TEffdI7A_xaRIoPOwQ7BDtMtJE8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/TEffdI7A_xaRIoPOwQ7BDtMtJE8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3207 (0xc87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C47DF748EC0FF16912283CEC10EC10ED32D244F Validity Not Before: Feb 10 14:31:25 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4E6B4EAE94BBA36F0447BA0B8E738164B7567203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:55:9e:68:39:a0:72:74:cf:29:a9:3e:9b:d1: d2:d5:2f:5f:15:8b:4f:c9:4f:17:25:9c:16:b4:a7: fa:19:18:84:36:b2:b9:0d:5e:10:11:a3:0e:75:68: 79:4e:2f:3c:37:9d:dd:a2:25:ea:ef:01:df:fe:39: a2:ad:bf:af:c9:17:f8:fd:6d:e8:4e:91:f2:8c:6d: 77:7e:80:f9:1c:24:43:36:91:0f:42:a8:93:8a:60: d8:59:d3:ed:20:75:7b:50:20:85:b5:67:b7:81:3c: 54:90:6d:e3:4d:c7:7c:70:74:9d:5f:0a:fe:49:3a: 7b:8f:a6:ac:c1:f9:8f:30:b1:1e:ce:71:84:38:f6: 9c:a6:19:bf:96:6a:c1:3a:63:94:47:ad:3d:04:31: 22:b9:50:4b:b3:dc:5d:21:4d:8f:83:a1:f2:1d:33: d5:7b:99:48:ba:0d:a8:cc:bb:52:22:14:34:f0:00: 4f:5b:c6:94:d1:9a:91:d0:20:c9:ab:2a:21:b1:ca: d1:c6:9c:4f:fc:67:b2:5d:a4:28:e8:ee:34:11:17: f5:16:a9:8c:c5:39:20:06:a7:f7:9d:30:b7:55:a7: 97:ce:7d:d4:c3:d7:24:07:21:bb:d7:78:66:b6:85: 7e:24:49:12:11:4f:af:a8:82:db:bf:a9:49:4e:0e: 1d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6B:4E:AE:94:BB:A3:6F:04:47:BA:0B:8E:73:81:64:B7:56:72:03 X509v3 Authority Key Identifier: keyid:4C:47:DF:74:8E:C0:FF:16:91:22:83:CE:C1:0E:C1:0E:D3:2D:24:4F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TEffdI7A_xaRIoPOwQ7BDtMtJE8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TEffdI7A_xaRIoPOwQ7BDtMtJE8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TmtOrpS7o28ER7oLjnOBZLdWcgM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.64.0/20 Signature Algorithm: sha256WithRSAEncryption a0:e5:c3:98:35:d5:eb:ef:f0:19:bd:5b:ac:02:44:c1:4e:3e: 38:3c:96:b0:85:57:81:49:04:77:7d:df:bb:79:65:f7:b7:fb: 05:32:d3:16:98:7c:71:e0:5d:1a:b8:57:9c:19:d2:37:19:50: 85:f5:9d:14:70:97:84:9f:e8:d9:70:71:61:f8:01:b5:43:8c: 4b:53:9e:3a:0f:0e:66:bb:43:b3:dc:b6:92:7d:20:90:a2:84: 39:06:8b:b2:14:21:c2:32:9d:76:be:4e:98:b0:e0:ac:5d:58: 05:d2:ea:d7:15:30:7e:ed:9b:6e:55:2f:84:6f:6c:3a:22:42: c3:57:4a:87:14:11:f4:8f:97:af:bd:01:ee:cd:cd:3a:36:35: 6e:5e:ff:48:33:b9:dd:02:ca:a0:3f:c6:a4:5b:ff:93:c4:d2: 39:71:97:ba:81:90:8c:3e:f6:d0:e2:07:ee:f2:b9:69:24:ff: 5d:fe:a4:2a:4e:73:01:dd:d5:66:80:06:26:8f:44:c9:bc:d6: c2:74:4a:e1:bb:b9:fb:60:0a:30:d1:d0:cd:e9:c8:b6:2f:32: ba:e5:99:6b:03:25:bc:80:76:29:ac:f3:cf:6d:cb:7e:0a:5f: fe:60:10:a4:26:94:7e:8f:58:9e:55:66:a6:28:32:82:62:7a: 00:bb:fa:bd -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEM0 N0RGNzQ4RUMwRkYxNjkxMjI4M0NFQzEwRUMxMEVEMzJEMjQ0RjAeFw0yNTAyMTAx NDMxMjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRFNkI0RUFFOTRCQkEz NkYwNDQ3QkEwQjhFNzM4MTY0Qjc1NjcyMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCUVZ5oOaBydM8pqT6b0dLVL18Vi0/JTxclnBa0p/oZGIQ2srkN XhARow51aHlOLzw3nd2iJervAd/+OaKtv6/JF/j9behOkfKMbXd+gPkcJEM2kQ9C qJOKYNhZ0+0gdXtQIIW1Z7eBPFSQbeNNx3xwdJ1fCv5JOnuPpqzB+Y8wsR7OcYQ4 9pymGb+WasE6Y5RHrT0EMSK5UEuz3F0hTY+DofIdM9V7mUi6DajMu1IiFDTwAE9b xpTRmpHQIMmrKiGxytHGnE/8Z7JdpCjo7jQRF/UWqYzFOSAGp/edMLdVp5fOfdTD 1yQHIbvXeGa2hX4kSRIRT6+ogtu/qUlODh3NAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUTmtOrpS7o28ER7oLjnOBZLdWcgMwHwYDVR0jBBgwFoAUTEffdI7A/xaRIoPO wQ7BDtMtJE8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NORVQv VEVmZmRJN0FfeGFSSW9QT3dRN0JEdE10SkU4LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9URWZmZEk3QV94YVJJb1BPd1E3QkR0TXRKRTguY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HU05FVC9UbXRPcnBTN28yOEVSN29Mam5P QlpMZFdjZ00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE005A MA0GCSqGSIb3DQEBCwUAA4IBAQCg5cOYNdXr7/AZvVusAkTBTj44PJawhVeBSQR3 fd+7eWX3t/sFMtMWmHxx4F0auFecGdI3GVCF9Z0UcJeEn+jZcHFh+AG1Q4xLU546 Dw5mu0Oz3LaSfSCQooQ5BouyFCHCMp12vk6YsOCsXVgF0urXFTB+7ZtuVS+Eb2w6 IkLDV0qHFBH0j5evvQHuzc06NjVuXv9IM7ndAsqgP8akW/+TxNI5cZe6gZCMPvbQ 4gfu8rlpJP9d/qQqTnMB3dVmgAYmj0TJvNbCdErhu7n7YAow0dDN6ci2LzK65Zlr AyW8gHYprPPPbct+Cl/+YBCkJpR+j1ieVWamKDKCYnoAu/q9 -----END CERTIFICATE-----Generated at Fri Apr 18 22:23:39 2025 by rpki-client