$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HST/wEw5bgRybzjslXiNgIdS2x-kVUE.roa File: wEw5bgRybzjslXiNgIdS2x-kVUE.roa (raw, json) Hash identifier: v3+RL5G1nIIQDupG+P+TgqtIZdBpKdsTDb4+QZvdHwM= Subject key identifier: C0:4C:39:6E:04:72:6F:38:EC:95:78:8D:80:87:52:DB:1F:A4:55:41 Certificate issuer: /CN=833D5BF79B45C730ED141CB539A508D01AA30908 Certificate serial: 09FB Authority key identifier: 83:3D:5B:F7:9B:45:C7:30:ED:14:1C:B5:39:A5:08:D0:1A:A3:09:08 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gz1b95tFxzDtFBy1OaUI0BqjCQg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/wEw5bgRybzjslXiNgIdS2x-kVUE.roa Signing time: Mon 10 Feb 2025 14:16:42 +0000 ROA not before: Mon 10 Feb 2025 14:16:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131666 IP address blocks: 103.144.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/gz1b95tFxzDtFBy1OaUI0BqjCQg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/gz1b95tFxzDtFBy1OaUI0BqjCQg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gz1b95tFxzDtFBy1OaUI0BqjCQg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2555 (0x9fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833D5BF79B45C730ED141CB539A508D01AA30908 Validity Not Before: Feb 10 14:16:42 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C04C396E04726F38EC95788D808752DB1FA45541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a1:34:77:3c:9d:ed:96:c4:1a:0b:a2:4b:20: 7a:eb:31:34:ab:e9:53:31:9b:ef:48:93:2c:34:22: 05:df:32:14:61:c0:75:33:cb:36:0f:78:2e:b3:8a: fc:e8:31:f9:7d:dd:04:19:f0:fa:2c:01:ff:3a:cb: 6b:40:e2:2f:c5:5f:6c:6c:f6:7d:37:a4:a4:36:2a: 63:9e:f0:ff:e0:0c:3f:77:78:57:96:4c:74:cb:cc: 8c:f4:16:74:74:85:34:8f:cb:40:e3:fe:2d:c0:a8: 0c:f9:3e:0d:aa:ef:48:e8:a7:e4:a4:9e:c9:10:67: 15:30:8a:cf:81:35:82:58:54:01:a9:6e:94:51:c4: 76:a1:a2:0b:42:9b:e1:ed:bf:7e:08:22:d7:46:07: d7:4d:16:f0:52:16:93:7e:fa:82:bd:fa:08:71:4d: 03:2b:b2:f5:e4:50:ca:fb:9c:6b:1d:24:d6:15:01: eb:45:7c:01:54:62:31:24:28:a8:01:35:21:a5:2f: 80:03:49:34:8a:17:91:95:66:25:39:8e:54:64:f3: 33:8e:fd:68:b6:79:d8:c1:60:3a:2e:9d:55:5d:18: b6:89:26:87:e4:b1:e5:d1:9e:bf:ef:61:0f:0a:94: 82:9b:d5:44:9f:dd:9e:c4:61:18:bf:10:a5:02:19: ea:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4C:39:6E:04:72:6F:38:EC:95:78:8D:80:87:52:DB:1F:A4:55:41 X509v3 Authority Key Identifier: keyid:83:3D:5B:F7:9B:45:C7:30:ED:14:1C:B5:39:A5:08:D0:1A:A3:09:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/gz1b95tFxzDtFBy1OaUI0BqjCQg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gz1b95tFxzDtFBy1OaUI0BqjCQg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/wEw5bgRybzjslXiNgIdS2x-kVUE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.144.34.0/23 Signature Algorithm: sha256WithRSAEncryption a4:e4:5c:55:1a:09:c4:9d:fd:40:93:3c:d3:61:1b:09:94:e1: a6:ef:fa:82:3b:71:b3:01:ba:78:2d:c4:78:51:1f:cc:43:80: ed:6f:7c:92:4d:73:f6:1c:aa:40:be:8f:b6:29:3d:da:2f:32: 16:ab:84:05:76:df:b7:9d:7d:06:02:82:37:cf:18:9a:75:6e: 26:98:2e:ab:36:7e:43:3c:f1:10:f0:e9:7e:af:ad:dc:c9:56: aa:f8:f4:04:05:5d:6b:93:b0:4c:fc:f7:97:05:d4:70:74:47: 84:d9:83:d2:37:eb:16:da:a8:d9:6e:e2:62:3b:57:fd:8e:8e: 0d:83:ab:fb:a7:94:c3:58:ec:a0:d2:6b:db:55:21:cd:93:a2: 3c:fd:85:a7:ed:69:d5:e5:4b:6a:fe:36:94:37:37:e9:eb:64: ac:71:3b:74:56:6d:4a:a6:e2:4f:ec:a4:d4:82:45:59:ac:b4: b6:d4:2c:6b:53:84:96:e7:db:bd:49:d6:1e:83:0c:2c:84:22: 9d:81:63:9f:70:a2:b2:8f:d3:76:94:53:3d:2f:0c:b5:3e:31: 37:82:3d:3b:22:7a:61:66:fe:58:9b:f0:6d:2b:6e:10:c3:38: 38:30:19:7f:d1:5d:8b:a4:36:33:18:4b:3e:a9:90:e8:26:3b: 91:f8:b1:fc -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICCfswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMz RDVCRjc5QjQ1QzczMEVEMTQxQ0I1MzlBNTA4RDAxQUEzMDkwODAeFw0yNTAyMTAx NDE2NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMwNEMzOTZFMDQ3MjZG MzhFQzk1Nzg4RDgwODc1MkRCMUZBNDU1NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZoTR3PJ3tlsQaC6JLIHrrMTSr6VMxm+9Ikyw0IgXfMhRhwHUz yzYPeC6zivzoMfl93QQZ8PosAf86y2tA4i/FX2xs9n03pKQ2KmOe8P/gDD93eFeW THTLzIz0FnR0hTSPy0Dj/i3AqAz5Pg2q70jop+SknskQZxUwis+BNYJYVAGpbpRR xHahogtCm+Htv34IItdGB9dNFvBSFpN++oK9+ghxTQMrsvXkUMr7nGsdJNYVAetF fAFUYjEkKKgBNSGlL4ADSTSKF5GVZiU5jlRk8zOO/Wi2edjBYDounVVdGLaJJofk seXRnr/vYQ8KlIKb1USf3Z7EYRi/EKUCGeopAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUwEw5bgRybzjslXiNgIdS2x+kVUEwHwYDVR0jBBgwFoAUgz1b95tFxzDtFBy1 OaUI0BqjCQgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFNUL2d6 MWI5NXRGeHpEdEZCeTFPYVVJMEJxakNRZy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev Z3oxYjk1dEZ4ekR0RkJ5MU9hVUkwQnFqQ1FnLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSFNUL3dFdzViZ1J5Ynpqc2xYaU5nSWRTMngt a1ZVRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnkCIwDQYJ KoZIhvcNAQELBQADggEBAKTkXFUaCcSd/UCTPNNhGwmU4abv+oI7cbMBungtxHhR H8xDgO1vfJJNc/YcqkC+j7YpPdovMharhAV237edfQYCgjfPGJp1biaYLqs2fkM8 8RDw6X6vrdzJVqr49AQFXWuTsEz895cF1HB0R4TZg9I36xbaqNlu4mI7V/2Ojg2D q/unlMNY7KDSa9tVIc2Tojz9haftadXlS2r+NpQ3N+nrZKxxO3RWbUqm4k/spNSC RVmstLbULGtThJbn271J1h6DDCyEIp2BY59worKP03aUUz0vDLU+MTeCPTsiemFm /lib8G0rbhDDODgwGX/RXYukNjMYSz6pkOgmO5H4sfw= -----END CERTIFICATE-----Generated at Fri Apr 18 23:53:46 2025 by rpki-client