$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/djvANNZbAIWbkl_ut7bQ4InmAvs.roa File: djvANNZbAIWbkl_ut7bQ4InmAvs.roa (raw, json) Hash identifier: Yb4z3vaWo9vfCebZgNZfqNPpy4dJlYM6LyFftgcRoSk= Subject key identifier: 76:3B:C0:34:D6:5B:00:85:9B:92:5F:EE:B7:B6:D0:E0:89:E6:02:FB Certificate issuer: /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D Certificate serial: 037C Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/djvANNZbAIWbkl_ut7bQ4InmAvs.roa Signing time: Mon 10 Feb 2025 13:57:04 +0000 ROA not before: Mon 10 Feb 2025 13:57:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38852 IP address blocks: 2407:a740::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892 (0x37c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D Validity Not Before: Feb 10 13:57:04 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=763BC034D65B00859B925FEEB7B6D0E089E602FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:da:48:f7:4d:e9:d0:75:1b:8d:fb:fd:33:69: 6d:8e:eb:84:cb:d8:08:22:f9:28:82:b2:76:f2:19: bf:5e:bb:28:8c:ed:13:fe:29:f1:ab:7b:43:08:4c: 12:df:83:97:b7:e4:a6:6d:64:66:fd:77:a7:23:89: 56:f9:b7:4c:2a:1f:4d:10:2e:ae:d4:17:a7:89:21: 5d:35:81:7b:13:9c:61:16:db:7f:87:c0:6d:a4:07: 08:e8:30:cd:a6:61:ec:2d:9a:a7:fa:5f:e7:0d:e1: e1:cc:25:47:81:97:56:0d:34:0b:8e:6a:29:13:dd: 63:6e:e7:cc:a0:09:2e:5c:87:c9:eb:e1:a7:1f:7e: cb:dd:d8:68:cc:f2:20:6c:f9:47:c0:80:6e:47:47: 98:db:d3:ed:73:22:05:6a:b2:5a:48:bc:96:cc:01: be:6c:81:7c:1b:b5:0e:12:0a:a5:4f:f9:af:8b:91: cf:fd:7a:99:ab:b3:93:c6:86:f4:4b:73:2e:05:ac: 8a:8a:60:b9:81:90:fd:94:55:90:43:ba:ce:75:81: c7:f4:26:b8:7a:ef:b5:95:af:8d:c6:61:59:97:38: 49:08:07:d7:47:5f:41:af:e4:57:94:3d:22:27:95: 94:cf:5d:02:23:04:4d:de:dc:04:f6:d6:a1:e8:10: 1a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3B:C0:34:D6:5B:00:85:9B:92:5F:EE:B7:B6:D0:E0:89:E6:02:FB X509v3 Authority Key Identifier: keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/djvANNZbAIWbkl_ut7bQ4InmAvs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:a740::/32 Signature Algorithm: sha256WithRSAEncryption 60:59:a5:0f:d7:38:a3:0c:64:2b:ca:5a:8c:95:a3:9a:87:e2: 38:a8:98:b7:ce:4c:12:db:9b:20:b5:31:ad:e4:ad:49:59:d5: c3:18:2a:62:35:6b:0a:fe:39:9e:77:a6:1d:49:04:24:ab:d9: bc:22:f4:c8:54:d3:fd:42:63:b3:30:bb:a7:4b:b3:b8:b3:aa: 63:5d:a8:0e:05:26:55:ee:73:2f:6b:bf:ac:5d:bc:f3:9c:e9: a4:ee:59:4f:01:ce:cb:5e:1e:23:72:0d:bc:a9:31:30:7e:cb: 01:48:48:1b:d9:99:25:fd:97:ef:c8:f2:9c:fb:26:aa:fe:6e: c4:b1:da:de:7d:17:49:6e:57:6e:ef:be:a6:02:56:e9:3d:24: 8d:ba:92:e3:ed:84:92:c7:70:89:f0:60:48:06:08:e1:96:1c: a0:ff:fc:52:0b:c7:c4:4c:fe:e6:88:b8:8d:da:6e:97:95:3a: cd:3d:1d:4f:db:7e:ab:f9:e2:bd:31:9b:32:d7:c6:94:9c:87: 86:9b:a9:8f:e7:5c:ab:b9:15:64:88:39:f0:22:42:93:5c:3f: da:04:64:bc:75:80:42:e0:8f:05:b0:4b:16:ac:6d:b0:53:25: f6:05:b3:b2:d2:2d:20:43:f7:56:b7:f4:14:40:ed:1d:83:c1: 7b:c3:b0:b3 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDBE Q0YwNTBDNENFQUU1MDIxQUE4RDMxMTk1M0YwMkQ2MTIxRkQ4RDAeFw0yNTAyMTAx MzU3MDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc2M0JDMDM0RDY1QjAw ODU5QjkyNUZFRUI3QjZEMEUwODlFNjAyRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/2kj3TenQdRuN+/0zaW2O64TL2Agi+SiCsnbyGb9euyiM7RP+ KfGre0MITBLfg5e35KZtZGb9d6cjiVb5t0wqH00QLq7UF6eJIV01gXsTnGEW23+H wG2kBwjoMM2mYewtmqf6X+cN4eHMJUeBl1YNNAuOaikT3WNu58ygCS5ch8nr4acf fsvd2GjM8iBs+UfAgG5HR5jb0+1zIgVqslpIvJbMAb5sgXwbtQ4SCqVP+a+Lkc/9 epmrs5PGhvRLcy4FrIqKYLmBkP2UVZBDus51gcf0Jrh677WVr43GYVmXOEkIB9dH X0Gv5FeUPSInlZTPXQIjBE3e3AT21qHoEBpDAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUdjvANNZbAIWbkl/ut7bQ4InmAvswHwYDVR0jBBgwFoAUANzwUMTOrlAhqo0x GVPwLWEh/Y0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSEFQUFlN T05FWS9BTnp3VU1UT3JsQWhxbzB4R1ZQd0xXRWhfWTAuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0FOendVTVRPcmxBaHFvMHhHVlB3TFdFaF9ZMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hBUFBZTU9ORVkvZGp2QU5OWmJB SVdia2xfdXQ3YlE0SW5tQXZzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQHp0AwDQYJKoZIhvcNAQELBQADggEBAGBZpQ/XOKMMZCvKWoyVo5qH 4jiomLfOTBLbmyC1Ma3krUlZ1cMYKmI1awr+OZ53ph1JBCSr2bwi9MhU0/1CY7Mw u6dLs7izqmNdqA4FJlXucy9rv6xdvPOc6aTuWU8BzsteHiNyDbypMTB+ywFISBvZ mSX9l+/I8pz7Jqr+bsSx2t59F0luV27vvqYCVuk9JI26kuPthJLHcInwYEgGCOGW HKD//FILx8RM/uaIuI3abpeVOs09HU/bfqv54r0xmzLXxpSch4abqY/nXKu5FWSI OfAiQpNcP9oEZLx1gELgjwWwSxasbbBTJfYFs7LSLSBD91a39BRA7R2DwXvDsLM= -----END CERTIFICATE-----Generated at Fri Apr 18 23:41:18 2025 by rpki-client