$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LEEMON/3IPXO0Uwk_IveGOSDc68OJlJv4g.roa File: 3IPXO0Uwk_IveGOSDc68OJlJv4g.roa (raw, json) Hash identifier: RiKoikzIoTKHlrKHKzfC5BEKNoVw1AO7y2Px6Ysbnlg= Subject key identifier: DC:83:D7:3B:45:30:93:F2:2F:78:63:92:0D:CE:BC:38:99:49:BF:88 Certificate issuer: /CN=0486F1D511D2C22EC95994B123B3A24962C1E327 Certificate serial: 020B Authority key identifier: 04:86:F1:D5:11:D2:C2:2E:C9:59:94:B1:23:B3:A2:49:62:C1:E3:27 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/3IPXO0Uwk_IveGOSDc68OJlJv4g.roa Signing time: Mon 10 Feb 2025 14:02:22 +0000 ROA not before: Mon 10 Feb 2025 14:02:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9915 IP address blocks: 103.67.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0486F1D511D2C22EC95994B123B3A24962C1E327 Validity Not Before: Feb 10 14:02:22 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DC83D73B453093F22F7863920DCEBC389949BF88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8e:6c:57:65:ec:81:dc:9a:dc:a5:fb:5c:2e: 47:9a:cb:75:c3:cb:d7:8f:77:da:00:41:36:1b:ca: ab:fa:97:4d:43:42:46:f7:af:18:8f:75:d3:7e:78: c2:d1:7a:02:3b:3a:4d:f4:e3:fe:23:29:5f:77:22: b8:a1:d0:81:94:96:52:30:03:35:8a:fd:38:53:91: a6:5b:0a:b8:c0:9d:42:a5:69:c8:6d:9f:b2:63:6b: f8:09:b4:83:ad:9d:f2:1a:d8:1e:32:3c:f0:fb:a7: eb:2c:2e:0e:95:8c:a2:a3:f3:10:30:15:a3:9c:e8: 47:b3:11:eb:a9:76:ca:ef:42:e7:f3:74:dc:f6:54: cc:cc:e7:dc:8d:04:7b:9a:75:ff:d6:5c:92:83:7c: 32:ed:ea:3a:a6:8d:32:d2:f8:84:c3:29:60:ba:a7: e4:26:63:cb:d7:2c:7a:a5:18:b1:26:ff:53:e5:43: 2b:b1:66:58:93:8b:19:cb:31:30:4a:5b:27:f3:96: 69:d3:5c:c0:d0:8f:ce:b4:c4:4e:12:69:5a:a1:4f: 9d:2f:7e:66:c0:e3:3c:c9:0a:79:f9:30:9b:e8:2d: ab:57:dd:b8:f6:b2:19:95:47:8b:c3:98:b6:b5:cd: 00:00:9f:06:03:db:29:67:5e:22:c4:fc:10:ab:c7: 61:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:83:D7:3B:45:30:93:F2:2F:78:63:92:0D:CE:BC:38:99:49:BF:88 X509v3 Authority Key Identifier: keyid:04:86:F1:D5:11:D2:C2:2E:C9:59:94:B1:23:B3:A2:49:62:C1:E3:27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/3IPXO0Uwk_IveGOSDc68OJlJv4g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.67.160.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:2b:86:17:40:ad:87:7f:1a:e1:85:e1:60:0e:0e:c6:ac:9a: 3a:3b:80:ba:7d:cf:c9:c8:f7:09:80:8d:56:dc:f4:ea:9d:6e: ad:62:6d:84:a9:5b:78:5d:8b:8f:95:9f:df:77:8c:b0:ee:fa: 8c:75:8d:67:1f:d1:ef:f4:10:9e:1d:45:e6:fc:3b:7a:21:25: 3c:1d:f4:d8:de:d0:0d:d4:4a:7c:b6:32:0f:84:f0:b5:aa:fc: 25:48:1f:50:69:e1:81:bc:c7:e4:db:e3:ed:e7:d6:83:88:22: ac:23:8c:79:75:3f:b9:dc:db:45:b0:fd:1b:cc:1a:61:40:2a: c2:86:93:97:6f:7f:8c:84:26:c7:bb:76:1a:f8:e1:c3:5e:e5: d4:93:5e:74:59:e5:18:bd:79:4d:8b:45:86:d0:eb:a0:cb:20: 45:b8:f7:c9:e5:8d:f9:93:a9:4b:d9:a8:d8:a7:98:bd:20:0a: 34:ba:4d:4e:23:c0:aa:f0:cb:8d:7b:20:1a:48:07:75:e7:8d: 47:5b:c2:0d:3d:a6:b6:88:24:0e:fb:d9:d9:98:31:20:19:fd: 1e:43:ec:75:a3:f5:51:42:09:fe:1c:10:29:98:59:32:18:e6: aa:91:2e:5a:95:ea:f1:28:cb:dd:2e:b6:9d:03:af:ca:fc:9f: 33:8d:fd:d1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAgswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDQ4 NkYxRDUxMUQyQzIyRUM5NTk5NEIxMjNCM0EyNDk2MkMxRTMyNzAeFw0yNTAyMTAx NDAyMjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERDODNENzNCNDUzMDkz RjIyRjc4NjM5MjBEQ0VCQzM4OTk0OUJGODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCjmxXZeyB3JrcpftcLkeay3XDy9ePd9oAQTYbyqv6l01DQkb3 rxiPddN+eMLRegI7Ok304/4jKV93Irih0IGUllIwAzWK/ThTkaZbCrjAnUKlacht n7Jja/gJtIOtnfIa2B4yPPD7p+ssLg6VjKKj8xAwFaOc6EezEeupdsrvQufzdNz2 VMzM59yNBHuadf/WXJKDfDLt6jqmjTLS+ITDKWC6p+QmY8vXLHqlGLEm/1PlQyux ZliTixnLMTBKWyfzlmnTXMDQj860xE4SaVqhT50vfmbA4zzJCnn5MJvoLatX3bj2 shmVR4vDmLa1zQAAnwYD2ylnXiLE/BCrx2HVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU3IPXO0Uwk/IveGOSDc68OJlJv4gwHwYDVR0jBBgwFoAUBIbx1RHSwi7JWZSx I7OiSWLB4ycwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVFTU9O L0JJYngxUkhTd2k3SldaU3hJN09pU1dMQjR5Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQklieDFSSFN3aTdKV1pTeEk3T2lTV0xCNHljLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVFTU9OLzNJUFhPMFV3a19JdmVHT1NE YzY4T0psSnY0Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn Q6AwDQYJKoZIhvcNAQELBQADggEBAA4rhhdArYd/GuGF4WAODsasmjo7gLp9z8nI 9wmAjVbc9Oqdbq1ibYSpW3hdi4+Vn993jLDu+ox1jWcf0e/0EJ4dReb8O3ohJTwd 9Nje0A3USny2Mg+E8LWq/CVIH1Bp4YG8x+Tb4+3n1oOIIqwjjHl1P7nc20Ww/RvM GmFAKsKGk5dvf4yEJse7dhr44cNe5dSTXnRZ5Ri9eU2LRYbQ66DLIEW498nljfmT qUvZqNinmL0gCjS6TU4jwKrwy417IBpIB3XnjUdbwg09praIJA772dmYMSAZ/R5D 7HWj9VFCCf4cECmYWTIY5qqRLlqV6vEoy90utp0Dr8r8nzON/dE= -----END CERTIFICATE-----Generated at Fri Apr 18 23:40:17 2025 by rpki-client