$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/8_ywIYQLxOvx1YEVqRWZw9kTwPA.roa File: 8_ywIYQLxOvx1YEVqRWZw9kTwPA.roa (raw, json) Hash identifier: g7JLEcvK42GFuRUq/WYsXFNxj5HwuAJMzc6Bf+2R/a8= Subject key identifier: F3:FC:B0:21:84:0B:C4:EB:F1:D5:81:15:A9:15:99:C3:D9:13:C0:F0 Certificate issuer: /CN=1C7073A6066C765842FDF07169E43518A0BB0235 Certificate serial: 0140 Authority key identifier: 1C:70:73:A6:06:6C:76:58:42:FD:F0:71:69:E4:35:18:A0:BB:02:35 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/8_ywIYQLxOvx1YEVqRWZw9kTwPA.roa Signing time: Mon 10 Feb 2025 13:44:28 +0000 ROA not before: Mon 10 Feb 2025 13:44:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 150755 IP address blocks: 2401:4e60::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 01:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C7073A6066C765842FDF07169E43518A0BB0235 Validity Not Before: Feb 10 13:44:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F3FCB021840BC4EBF1D58115A91599C3D913C0F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a6:f3:d3:22:5a:1b:03:8c:e6:e3:1c:e4:b0: 92:8a:9a:90:82:90:a8:f0:8c:5d:75:9b:88:cd:94: 62:3a:64:43:af:72:ee:e2:1f:4a:ae:5a:ec:66:34: 59:4b:b5:9b:2b:86:d9:98:89:fd:75:1e:8e:4a:50: 77:a4:9e:50:fd:6a:60:d6:dd:76:fc:3f:8d:97:ff: 49:11:c8:f5:64:5a:60:78:39:31:54:24:30:b7:32: 08:14:e2:0e:e0:e9:d1:b1:e3:3d:b0:c6:a9:50:bb: bb:71:75:36:51:a5:ab:0f:11:f1:48:8b:77:4b:a2: 68:8f:50:e8:1f:d0:85:07:44:b4:27:f1:30:35:22: 8b:30:83:81:e4:e0:f8:00:89:a5:0d:c6:e4:4c:a8: 92:d2:e1:61:11:39:65:5c:75:d7:f7:23:1f:2d:75: a8:d4:94:15:c9:77:0f:b2:37:b7:c9:41:c7:c9:3b: 3b:e5:ae:b3:e6:3a:d9:a1:1a:d5:3e:e9:b6:72:46: f3:fb:08:3d:32:e4:57:7f:d8:75:78:30:8a:94:70: d5:d8:15:e3:b3:33:e2:0b:35:37:25:0c:d3:61:fe: 92:06:2f:dd:02:12:1e:bd:54:7a:ab:54:a3:47:67: 07:84:9e:e7:50:19:83:c5:28:ac:8e:81:8c:37:bd: 55:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FC:B0:21:84:0B:C4:EB:F1:D5:81:15:A9:15:99:C3:D9:13:C0:F0 X509v3 Authority Key Identifier: keyid:1C:70:73:A6:06:6C:76:58:42:FD:F0:71:69:E4:35:18:A0:BB:02:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/8_ywIYQLxOvx1YEVqRWZw9kTwPA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:4e60::/32 Signature Algorithm: sha256WithRSAEncryption 20:b2:d5:75:23:82:26:c2:fb:35:1f:f5:ad:0c:50:bb:cf:16: bb:dc:6a:0b:a7:6c:3e:59:39:d7:bc:a9:76:38:d3:bc:c4:67: fb:b8:7f:39:97:d0:8d:a5:23:27:e4:7a:f8:15:bf:c5:05:18: 03:ac:75:fe:07:a5:88:93:8a:cd:49:64:96:f4:12:69:05:1f: df:02:b0:4c:44:81:66:2e:e1:b5:58:e7:7b:fc:45:5e:c8:3f: de:e0:55:1f:56:3f:e8:9b:8a:83:0e:6c:aa:8f:f3:05:2c:19: 6e:cb:f8:44:47:2a:5c:9e:25:55:29:5b:d9:a0:e4:64:1c:89: 18:8c:24:3f:f5:97:9d:4c:e4:8e:e5:9a:d8:68:20:f1:aa:da: 51:ea:32:d9:ef:62:4c:be:67:12:cc:32:ef:ba:7c:2a:89:e3: 35:13:f1:96:0b:45:23:2e:38:fb:43:73:a6:31:d2:6f:7a:17: d3:51:69:0a:9f:f4:7d:bc:cc:33:b2:81:57:b7:c6:a4:5b:47: 35:4c:9a:95:8d:45:67:c6:ce:03:4f:63:a0:4e:10:1c:e5:b5: 2d:08:aa:14:7a:f2:ef:14:8e:cf:f8:59:7d:ba:89:ba:e5:70: ae:fb:a8:49:b5:93:76:a0:74:4d:bb:90:fb:12:33:6e:fc:48: 9f:3e:a5:75 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUM3 MDczQTYwNjZDNzY1ODQyRkRGMDcxNjlFNDM1MThBMEJCMDIzNTAeFw0yNTAyMTAx MzQ0MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYzRkNCMDIxODQwQkM0 RUJGMUQ1ODExNUE5MTU5OUMzRDkxM0MwRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWpvPTIlobA4zm4xzksJKKmpCCkKjwjF11m4jNlGI6ZEOvcu7i H0quWuxmNFlLtZsrhtmYif11Ho5KUHeknlD9amDW3Xb8P42X/0kRyPVkWmB4OTFU JDC3MggU4g7g6dGx4z2wxqlQu7txdTZRpasPEfFIi3dLomiPUOgf0IUHRLQn8TA1 Ioswg4Hk4PgAiaUNxuRMqJLS4WEROWVcddf3Ix8tdajUlBXJdw+yN7fJQcfJOzvl rrPmOtmhGtU+6bZyRvP7CD0y5Fd/2HV4MIqUcNXYFeOzM+ILNTclDNNh/pIGL90C Eh69VHqrVKNHZweEnudQGYPFKKyOgYw3vVXtAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU8/ywIYQLxOvx1YEVqRWZw9kTwPAwHwYDVR0jBBgwFoAUHHBzpgZsdlhC/fBx aeQ1GKC7AjUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlVOTElO RS9ISEJ6cGdac2RsaENfZkJ4YWVRMUdLQzdBalUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0hIQnpwZ1pzZGxoQ19mQnhhZVExR0tDN0FqVS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05VTkxJTkUvOF95d0lZUUx4T3Z4MVlF VnFSV1p3OWtUd1BBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACQBTmAwDQYJKoZIhvcNAQELBQADggEBACCy1XUjgibC+zUf9a0MULvPFrvcagun bD5ZOde8qXY407zEZ/u4fzmX0I2lIyfkevgVv8UFGAOsdf4HpYiTis1JZJb0EmkF H98CsExEgWYu4bVY53v8RV7IP97gVR9WP+ibioMObKqP8wUsGW7L+ERHKlyeJVUp W9mg5GQciRiMJD/1l51M5I7lmthoIPGq2lHqMtnvYky+ZxLMMu+6fCqJ4zUT8ZYL RSMuOPtDc6Yx0m96F9NRaQqf9H28zDOygVe3xqRbRzVMmpWNRWfGzgNPY6BOEBzl tS0IqhR68u8Ujs/4WX26ibrlcK77qEm1k3agdE27kPsSM278SJ8+pXU= -----END CERTIFICATE-----Generated at Wed Apr 23 00:37:34 2025 by rpki-client