$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTUSTCCADM/NwbpcWdaOYruP9i46hSJcjoJk-k.roa File: NwbpcWdaOYruP9i46hSJcjoJk-k.roa (raw, json) Hash identifier: PbQIOk+/pWuEYI8HZPOUi80+Wb1+9XVAKW0ZTYQCre8= Subject key identifier: 37:06:E9:71:67:5A:39:8A:EE:3F:D8:B8:EA:14:89:72:3A:09:93:E9 Certificate issuer: /CN=AEF6D09D9C14A108AA2051743C1379ED8FF25B48 Certificate serial: 023F Authority key identifier: AE:F6:D0:9D:9C:14:A1:08:AA:20:51:74:3C:13:79:ED:8F:F2:5B:48 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rvbQnZwUoQiqIFF0PBN57Y_yW0g.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTUSTCCADM/NwbpcWdaOYruP9i46hSJcjoJk-k.roa Signing time: Mon 10 Feb 2025 14:04:56 +0000 ROA not before: Mon 10 Feb 2025 14:04:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 63899 IP address blocks: 103.191.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTUSTCCADM/rvbQnZwUoQiqIFF0PBN57Y_yW0g.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NTUSTCCADM/rvbQnZwUoQiqIFF0PBN57Y_yW0g.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rvbQnZwUoQiqIFF0PBN57Y_yW0g.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF6D09D9C14A108AA2051743C1379ED8FF25B48 Validity Not Before: Feb 10 14:04:56 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3706E971675A398AEE3FD8B8EA1489723A0993E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:e1:9a:ef:2c:6c:e6:09:dd:49:63:e1:c5: 42:e0:ee:3a:16:c1:54:c7:22:e3:bb:ce:43:98:d0: c6:c6:0a:85:3d:f6:ad:af:5c:8b:f2:7f:91:66:d2: f5:c7:09:c7:6e:40:3f:fa:94:90:bb:c3:de:26:7b: 64:4e:37:d0:2f:a9:a1:6f:37:4a:7d:3b:0a:c3:36: 66:c9:71:5f:fb:bf:c5:39:7b:54:e5:ea:73:b2:af: de:6a:47:19:55:2c:6d:eb:92:a4:0f:8b:35:aa:00: 4e:5f:a4:c7:4d:f1:c0:21:b4:03:5d:f6:18:e2:41: ba:41:15:cb:12:ba:92:12:b8:da:57:ad:40:e0:57: 69:e7:de:c1:e9:a6:54:43:2a:02:32:d3:a3:3f:1b: 1c:0c:55:4c:dd:70:2e:78:e5:ea:72:c9:6d:f4:f1: dd:d9:d4:73:cc:1f:b0:9a:3e:de:73:ab:d1:aa:95: 6d:04:7c:af:c7:80:34:1d:7c:60:03:07:6d:d1:b8: d4:3b:2d:7a:08:0b:00:18:c0:87:31:73:78:fb:b6: 27:bf:34:86:fe:56:63:c6:ea:e9:b2:71:df:ff:53: 08:93:0b:9c:d8:3e:ad:62:0a:f3:c9:42:a7:8b:33: 6e:3a:8c:56:22:ec:2a:09:6a:e1:25:60:16:31:52: a7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:06:E9:71:67:5A:39:8A:EE:3F:D8:B8:EA:14:89:72:3A:09:93:E9 X509v3 Authority Key Identifier: keyid:AE:F6:D0:9D:9C:14:A1:08:AA:20:51:74:3C:13:79:ED:8F:F2:5B:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTUSTCCADM/rvbQnZwUoQiqIFF0PBN57Y_yW0g.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rvbQnZwUoQiqIFF0PBN57Y_yW0g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTUSTCCADM/NwbpcWdaOYruP9i46hSJcjoJk-k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.191.22.0/23 Signature Algorithm: sha256WithRSAEncryption ac:0a:1e:3b:88:e3:b2:3e:40:67:01:1c:0b:5c:d9:56:2b:08: 8d:d9:b6:9d:4c:ea:b2:2d:44:e3:11:bf:70:8f:cf:38:db:08: c7:be:a8:fc:eb:c9:00:42:1a:6f:50:f9:85:75:47:84:46:00: 45:d1:44:d1:b7:6a:55:a1:df:f3:74:50:19:08:45:1a:56:17: c2:87:ae:bf:65:11:30:08:67:45:21:28:3f:b8:6e:73:6e:98: 78:42:b5:0e:ee:92:0f:94:6a:ac:c8:ce:43:15:7f:72:df:05: a0:9b:bb:81:f2:ce:a3:45:49:4f:d0:d8:db:7e:25:9d:97:bf: ef:81:09:d9:8c:64:ab:45:54:83:55:fb:e6:2a:cf:e2:ee:dc: 0d:62:62:8e:10:2b:e2:3b:7d:61:3a:52:3e:44:e8:46:81:7c: e5:d4:34:3b:9a:9f:31:2e:13:1e:ec:59:fe:0f:53:60:ca:0b: 36:47:9a:1b:a6:55:c2:43:4b:a1:1b:5f:5f:0e:47:2a:7f:63: 8a:e7:58:31:9d:38:6c:7c:77:9e:4f:10:6b:30:a6:57:41:1f: bd:49:5d:5d:06:f9:c6:2f:cf:38:f1:1e:07:11:41:5f:ea:db: 68:30:88:62:3f:7d:49:da:e2:bd:63:03:ca:1c:ff:33:e4:97: aa:3c:68:22 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUVG NkQwOUQ5QzE0QTEwOEFBMjA1MTc0M0MxMzc5RUQ4RkYyNUI0ODAeFw0yNTAyMTAx NDA0NTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM3MDZFOTcxNjc1QTM5 OEFFRTNGRDhCOEVBMTQ4OTcyM0EwOTkzRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyI+Ga7yxs5gndSWPhxULg7joWwVTHIuO7zkOY0MbGCoU99q2v XIvyf5Fm0vXHCcduQD/6lJC7w94me2RON9AvqaFvN0p9OwrDNmbJcV/7v8U5e1Tl 6nOyr95qRxlVLG3rkqQPizWqAE5fpMdN8cAhtANd9hjiQbpBFcsSupISuNpXrUDg V2nn3sHpplRDKgIy06M/GxwMVUzdcC545epyyW308d3Z1HPMH7CaPt5zq9GqlW0E fK/HgDQdfGADB23RuNQ7LXoICwAYwIcxc3j7tie/NIb+VmPG6umycd//UwiTC5zY Pq1iCvPJQqeLM246jFYi7CoJauElYBYxUqeJAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUNwbpcWdaOYruP9i46hSJcjoJk+kwHwYDVR0jBBgwFoAUrvbQnZwUoQiqIFF0 PBN57Y/yW0gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlRVU1RD Q0FETS9ydmJRblp3VW9RaXFJRkYwUEJONTdZX3lXMGcuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL3J2YlFuWndVb1FpcUlGRjBQQk41N1lfeVcwZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL05UVVNUQ0NBRE0vTndicGNXZGFP WXJ1UDlpNDZoU0pjam9Kay1rLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWe/FjANBgkqhkiG9w0BAQsFAAOCAQEArAoeO4jjsj5AZwEcC1zZVisI jdm2nUzqsi1E4xG/cI/PONsIx76o/OvJAEIab1D5hXVHhEYARdFE0bdqVaHf83RQ GQhFGlYXwoeuv2URMAhnRSEoP7huc26YeEK1Du6SD5RqrMjOQxV/ct8FoJu7gfLO o0VJT9DY234lnZe/74EJ2Yxkq0VUg1X75irP4u7cDWJijhAr4jt9YTpSPkToRoF8 5dQ0O5qfMS4THuxZ/g9TYMoLNkeaG6ZVwkNLoRtfXw5HKn9jiudYMZ04bHx3nk8Q azCmV0EfvUldXQb5xi/POPEeBxFBX+rbaDCIYj99SdrivWMDyhz/M+SXqjxoIg== -----END CERTIFICATE-----Generated at Fri Apr 18 21:36:09 2025 by rpki-client