$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NETGUARD/1Wuxjv2OAr1eH9RGvnJSVw7gcuI.roa File: 1Wuxjv2OAr1eH9RGvnJSVw7gcuI.roa (raw, json) Hash identifier: cwMK+0fPeo6V7j0tyfLoxzX2b6cCfSyBZsTb6TTstvQ= Subject key identifier: D5:6B:B1:8E:FD:8E:02:BD:5E:1F:D4:46:BE:72:52:57:0E:E0:72:E2 Certificate issuer: /CN=B2C11A2BBD411878ED1B44D79F137D9689C86840 Certificate serial: 01BC Authority key identifier: B2:C1:1A:2B:BD:41:18:78:ED:1B:44:D7:9F:13:7D:96:89:C8:68:40 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ssEaK71BGHjtG0TXnxN9lonIaEA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NETGUARD/1Wuxjv2OAr1eH9RGvnJSVw7gcuI.roa Signing time: Mon 10 Feb 2025 14:20:26 +0000 ROA not before: Mon 10 Feb 2025 14:20:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131659 IP address blocks: 103.160.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NETGUARD/ssEaK71BGHjtG0TXnxN9lonIaEA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NETGUARD/ssEaK71BGHjtG0TXnxN9lonIaEA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ssEaK71BGHjtG0TXnxN9lonIaEA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2C11A2BBD411878ED1B44D79F137D9689C86840 Validity Not Before: Feb 10 14:20:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D56BB18EFD8E02BD5E1FD446BE7252570EE072E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e8:29:27:ad:a0:75:15:04:a4:e3:8a:3d:76: 85:8d:e5:d3:ed:aa:1a:33:23:da:1b:27:20:de:b3: 4e:30:9b:39:89:6f:ab:8c:36:47:84:da:99:4e:e7: f6:b9:f0:f6:bd:26:6e:44:87:f2:5d:97:6b:91:03: 34:65:3e:f2:8f:c7:ab:df:1e:9a:09:76:fa:78:a1: 11:8d:55:8a:50:e5:90:e7:ba:7e:56:80:b7:fc:5b: dc:f6:07:9f:f4:42:6e:ad:d2:0d:88:3d:fa:27:d9: 3c:8c:cd:0e:46:5a:cf:8b:b8:a9:c4:84:3c:81:ff: ac:49:ba:05:27:11:ef:fa:fe:c7:5d:b1:af:a0:c6: 7f:68:08:90:6a:33:8e:67:86:92:09:80:d3:d1:92: 4a:79:e7:a1:69:3b:88:17:43:42:34:d3:b4:bc:da: 3c:5e:e6:ee:0e:e6:fb:45:4b:bc:ee:a6:26:a5:6c: 37:33:06:17:48:44:11:85:6b:21:b9:08:af:39:fe: 3a:3a:45:b3:ca:b1:9b:c4:1c:15:75:0f:56:29:cf: 14:25:2a:10:b9:86:3b:25:83:73:32:a4:92:46:ec: 34:aa:06:b2:c5:eb:10:a9:17:b3:7c:e1:54:9d:06: c9:09:42:ff:2b:7c:10:65:ee:45:41:b1:b2:f7:52: eb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6B:B1:8E:FD:8E:02:BD:5E:1F:D4:46:BE:72:52:57:0E:E0:72:E2 X509v3 Authority Key Identifier: keyid:B2:C1:1A:2B:BD:41:18:78:ED:1B:44:D7:9F:13:7D:96:89:C8:68:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NETGUARD/ssEaK71BGHjtG0TXnxN9lonIaEA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ssEaK71BGHjtG0TXnxN9lonIaEA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NETGUARD/1Wuxjv2OAr1eH9RGvnJSVw7gcuI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.160.224.0/23 Signature Algorithm: sha256WithRSAEncryption a7:78:6e:ca:3c:f0:05:27:99:9d:9f:6a:1b:d2:08:a5:06:85: 9e:a7:b5:60:f4:fc:45:76:d4:10:f7:59:6f:bc:64:ac:8d:78: 10:b8:84:7d:ec:aa:e2:5a:28:98:46:de:57:ba:40:94:6d:e8: cb:b0:06:af:89:90:08:c6:61:5a:40:fb:7d:f8:d4:8e:c0:2d: 2d:d7:bb:0e:14:d5:24:56:c1:87:c7:6e:36:bb:eb:09:65:0d: d5:b1:49:94:94:ff:d8:29:b5:b4:9c:a5:95:78:9b:b3:f4:8e: 13:4e:a3:aa:2c:17:52:5a:b0:bd:b2:ac:76:c7:ac:02:0a:46: 36:94:78:37:3e:60:dd:25:e5:c5:2e:4f:da:48:1f:09:01:ac: 37:a2:0a:ce:09:5e:f3:bc:3a:7d:23:08:65:12:a3:f7:ea:83: 4e:74:dc:ac:21:28:cb:93:89:57:be:61:4e:a7:8c:5c:20:b7: 36:0b:a8:49:80:15:d2:26:97:93:f0:a0:6f:81:71:61:34:4d: c9:d5:8b:57:e2:7c:af:b8:a9:60:17:53:1e:aa:ce:b4:63:8b: 4d:e6:98:51:75:c7:1b:8a:b0:54:2a:d3:5a:b4:98:0f:91:37: 52:ab:28:cd:e7:bc:a0:bb:0a:4d:74:20:c2:f7:ef:cd:72:e7: 40:1e:94:84 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD MTFBMkJCRDQxMTg3OEVEMUI0NEQ3OUYxMzdEOTY4OUM4Njg0MDAeFw0yNTAyMTAx NDIwMjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ1NkJCMThFRkQ4RTAy QkQ1RTFGRDQ0NkJFNzI1MjU3MEVFMDcyRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDi6CknraB1FQSk44o9doWN5dPtqhozI9obJyDes04wmzmJb6uM NkeE2plO5/a58Pa9Jm5Eh/Jdl2uRAzRlPvKPx6vfHpoJdvp4oRGNVYpQ5ZDnun5W gLf8W9z2B5/0Qm6t0g2IPfon2TyMzQ5GWs+LuKnEhDyB/6xJugUnEe/6/sddsa+g xn9oCJBqM45nhpIJgNPRkkp556FpO4gXQ0I007S82jxe5u4O5vtFS7zupialbDcz BhdIRBGFayG5CK85/jo6RbPKsZvEHBV1D1YpzxQlKhC5hjslg3MypJJG7DSqBrLF 6xCpF7N84VSdBskJQv8rfBBl7kVBsbL3UuuVAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU1Wuxjv2OAr1eH9RGvnJSVw7gcuIwHwYDVR0jBBgwFoAUssEaK71BGHjtG0TX nxN9lonIaEAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkVUR1VB UkQvc3NFYUs3MUJHSGp0RzBUWG54Tjlsb25JYUVBLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9zc0VhSzcxQkdIanRHMFRYbnhOOWxvbklhRUEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ORVRHVUFSRC8xV3V4anYyT0FyMWVI OVJHdm5KU1Z3N2djdUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6DgMA0GCSqGSIb3DQEBCwUAA4IBAQCneG7KPPAFJ5mdn2ob0gilBoWep7Vg 9PxFdtQQ91lvvGSsjXgQuIR97KriWiiYRt5XukCUbejLsAaviZAIxmFaQPt9+NSO wC0t17sOFNUkVsGHx242u+sJZQ3VsUmUlP/YKbW0nKWVeJuz9I4TTqOqLBdSWrC9 sqx2x6wCCkY2lHg3PmDdJeXFLk/aSB8JAaw3ogrOCV7zvDp9IwhlEqP36oNOdNys ISjLk4lXvmFOp4xcILc2C6hJgBXSJpeT8KBvgXFhNE3J1YtX4nyvuKlgF1Meqs60 Y4tN5phRdccbirBUKtNatJgPkTdSqyjN57yguwpNdCDC9+/NcudAHpSE -----END CERTIFICATE-----Generated at Fri Apr 18 22:21:22 2025 by rpki-client