$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/ClVAqEr4nXrhr21al1Crsp_6WFc.roa File: ClVAqEr4nXrhr21al1Crsp_6WFc.roa (raw, json) Hash identifier: veU/R8f2ss4O9BvMtJ1QtMPS9fpXw2vgmdgY2tWn5cE= Subject key identifier: 0A:55:40:A8:4A:F8:9D:7A:E1:AF:6D:5A:97:50:AB:B2:9F:FA:58:57 Certificate issuer: /CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26 Certificate serial: 0CA2 Authority key identifier: 6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/ClVAqEr4nXrhr21al1Crsp_6WFc.roa Signing time: Mon 10 Feb 2025 13:50:35 +0000 ROA not before: Mon 10 Feb 2025 13:50:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18179 IP address blocks: 103.16.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3234 (0xca2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26 Validity Not Before: Feb 10 13:50:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0A5540A84AF89D7AE1AF6D5A9750ABB29FFA5857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:83:bf:4b:cb:e8:bc:32:2c:ef:2d:bd:25:a9: 5c:8b:4e:53:54:9c:89:b4:6a:25:e0:0f:fc:82:2b: fe:0c:ab:eb:24:94:b5:e1:f5:35:0b:df:37:53:23: a0:bf:63:0e:fa:49:18:a7:13:41:fe:25:05:df:ed: f3:65:73:ed:e9:88:bc:77:04:af:08:f3:9d:ac:57: 50:91:da:0b:26:74:1b:b4:86:71:c9:02:39:2e:af: 39:5f:be:f8:32:4a:86:de:f4:5d:39:3f:f6:57:1b: 73:37:55:9e:47:01:66:23:b0:a5:c1:da:ca:8d:d4: c7:74:bf:2a:b3:05:42:77:84:5e:92:19:45:e8:66: 14:cc:47:43:bb:1e:ea:d2:45:02:28:b9:28:36:a8: 1c:b8:37:a2:bc:08:1b:6c:05:27:7e:40:d6:a4:75: 70:d9:d4:d5:00:ce:f9:63:64:5d:65:bb:83:fc:83: 31:d0:0e:e2:0c:eb:bb:bc:44:0e:87:ff:67:7c:4d: b4:a3:7c:bc:17:63:36:d5:29:e8:29:fb:c1:d1:f6: 1b:d1:ad:18:62:90:0d:37:78:ec:f7:82:9f:c3:a6: 34:32:50:62:8e:14:f8:66:d8:21:cd:77:8c:b4:f9: b3:e5:8f:25:7b:91:93:7b:43:ae:fe:57:a5:54:51: 04:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:55:40:A8:4A:F8:9D:7A:E1:AF:6D:5A:97:50:AB:B2:9F:FA:58:57 X509v3 Authority Key Identifier: keyid:6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/ClVAqEr4nXrhr21al1Crsp_6WFc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.16.244.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:1e:97:4e:6b:4a:b7:ba:32:f0:0c:2a:bd:c9:54:cc:01:f3: e0:a1:a8:5e:0a:7c:1b:66:c9:50:80:62:42:46:74:e4:8d:b2: fc:e0:70:36:78:88:14:42:c6:0b:6b:84:60:df:bc:94:02:38: 7a:97:16:07:41:9a:94:c0:11:d6:01:82:ff:5d:3d:d2:3e:38: d9:e0:a1:ba:40:f0:97:a6:c8:2e:24:6c:5f:1f:5c:0c:f0:8b: 33:56:1c:ae:a6:97:f8:a0:e5:f5:97:f1:bf:a5:6f:62:45:3c: cd:00:36:b2:a0:24:72:fb:33:34:c1:f6:8a:73:86:bd:a5:78: 3e:a1:0e:01:19:c0:86:d6:2b:0c:23:b4:c7:8a:74:38:34:d3: c3:04:ee:5c:27:05:64:f0:5c:2f:ed:9a:cd:8d:01:a3:64:e5: 43:a5:1c:3b:b7:04:28:03:c4:53:6a:e9:21:dc:1f:d9:b4:45: 18:53:24:4b:47:b2:71:b8:2d:b9:96:a3:a0:db:9b:ea:ad:dc: 9a:a4:7d:91:62:f3:59:e7:11:ce:bb:7b:be:d7:e6:4f:b5:90: 66:f3:fd:ca:fc:3a:be:41:45:e9:e8:91:1e:43:6f:8a:25:ed: d7:b0:16:dd:54:be:4f:e8:41:81:f2:b2:17:11:a5:be:c2:aa: b2:cd:b6:c9 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkQ2 QzVDQkZDRUNCQTc5ODc5NTExMTJEQUExODdGRkNCNjIwNEUyNjAeFw0yNTAyMTAx MzUwMzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBBNTU0MEE4NEFGODlE N0FFMUFGNkQ1QTk3NTBBQkIyOUZGQTU4NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDog79Ly+i8MizvLb0lqVyLTlNUnIm0aiXgD/yCK/4Mq+sklLXh 9TUL3zdTI6C/Yw76SRinE0H+JQXf7fNlc+3piLx3BK8I852sV1CR2gsmdBu0hnHJ AjkurzlfvvgySobe9F05P/ZXG3M3VZ5HAWYjsKXB2sqN1Md0vyqzBUJ3hF6SGUXo ZhTMR0O7HurSRQIouSg2qBy4N6K8CBtsBSd+QNakdXDZ1NUAzvljZF1lu4P8gzHQ DuIM67u8RA6H/2d8TbSjfLwXYzbVKegp+8HR9hvRrRhikA03eOz3gp/DpjQyUGKO FPhm2CHNd4y0+bPljyV7kZN7Q67+V6VUUQSVAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUClVAqEr4nXrhr21al1Crsp/6WFcwHwYDVR0jBBgwFoAUbWxcv87Lp5h5UREt qhh//LYgTiYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlUQUNN REMvYld4Y3Y4N0xwNWg1VVJFdHFoaF9fTFlnVGlZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9iV3hjdjg3THA1aDVVUkV0cWhoX19MWWdUaVkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSVRBQ01EQy9DbFZBcUVyNG5Ycmhy MjFhbDFDcnNwXzZXRmMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZxD0MA0GCSqGSIb3DQEBCwUAA4IBAQAaHpdOa0q3ujLwDCq9yVTMAfPgoahe CnwbZslQgGJCRnTkjbL84HA2eIgUQsYLa4Rg37yUAjh6lxYHQZqUwBHWAYL/XT3S PjjZ4KG6QPCXpsguJGxfH1wM8IszVhyuppf4oOX1l/G/pW9iRTzNADayoCRy+zM0 wfaKc4a9pXg+oQ4BGcCG1isMI7THinQ4NNPDBO5cJwVk8Fwv7ZrNjQGjZOVDpRw7 twQoA8RTaukh3B/ZtEUYUyRLR7JxuC25lqOg25vqrdyapH2RYvNZ5xHOu3u+1+ZP tZBm8/3K/Dq+QUXp6JEeQ2+KJe3XsBbdVL5P6EGB8rIXEaW+wqqyzbbJ -----END CERTIFICATE-----Generated at Fri Apr 18 22:34:27 2025 by rpki-client