$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/JLqpo-JO2qKLUyN8fO9dQXnCpw4.roa File: JLqpo-JO2qKLUyN8fO9dQXnCpw4.roa (raw, json) Hash identifier: ur/3v/H4FQMVJ1xFf+8IloTMZ+P5TknWGs3MAK+xu+M= Subject key identifier: 24:BA:A9:A3:E2:4E:DA:A2:8B:53:23:7C:7C:EF:5D:41:79:C2:A7:0E Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Certificate serial: 0CBF Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/JLqpo-JO2qKLUyN8fO9dQXnCpw4.roa Signing time: Mon 10 Feb 2025 13:58:25 +0000 ROA not before: Mon 10 Feb 2025 13:58:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4781 IP address blocks: 210.63.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3263 (0xcbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Validity Not Before: Feb 10 13:58:25 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=24BAA9A3E24EDAA28B53237C7CEF5D4179C2A70E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:08:32:c4:66:96:13:7d:aa:35:a2:23:0b: 5a:74:2e:d3:13:bc:4e:14:81:ec:ca:f5:2f:5a:95: a8:bb:5b:d4:89:4e:78:aa:60:03:60:7c:9d:d0:bd: 04:f6:74:80:ac:f3:26:7a:05:0d:54:09:b3:83:73: a9:cf:40:fa:01:91:67:50:c6:22:a5:ef:d7:3f:8b: e6:c4:69:03:cd:d8:60:1d:f3:c3:4a:de:68:ed:a3: 64:4a:80:91:07:fc:5a:bf:5f:6d:86:f0:ce:65:96: 31:d5:8f:7f:44:75:a3:bf:c9:6a:b9:21:88:ea:1b: 76:7d:f0:b9:3b:55:c8:4c:ef:db:e1:31:54:08:d5: 3d:a4:41:e0:ea:4a:4c:3f:98:c1:fd:69:56:cd:42: df:e6:6c:31:1a:02:d2:68:d1:fa:00:4e:2c:3f:02: be:8c:91:62:db:2d:9e:ea:22:5b:73:1a:59:1b:f2: 46:d4:51:9e:f2:87:93:6d:bf:67:64:3d:cb:31:18: d7:9a:23:5a:e4:14:ea:c9:ad:fe:a3:e8:54:19:04: 08:21:8b:0c:bf:a3:5a:1d:52:f7:c8:60:96:ce:86: 66:cb:1c:e1:15:67:b2:26:fd:e8:ef:30:9a:ad:e0: 3c:61:14:f6:76:ae:bf:c8:d0:2f:c5:6a:b1:b7:10: 10:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BA:A9:A3:E2:4E:DA:A2:8B:53:23:7C:7C:EF:5D:41:79:C2:A7:0E X509v3 Authority Key Identifier: keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/JLqpo-JO2qKLUyN8fO9dQXnCpw4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.97.0/24 Signature Algorithm: sha256WithRSAEncryption 15:77:5f:1d:7c:90:12:e1:41:b3:19:09:ef:90:c9:35:ce:49: 2d:0f:cf:d3:20:85:cf:e6:f7:91:0d:16:f3:1d:8b:ee:a9:a8: 0b:86:05:c1:bb:33:83:88:ec:a7:2e:d6:d2:bb:a6:a2:67:af: 64:c8:b0:53:07:fd:fc:08:b3:fb:8a:41:4e:ad:5c:9f:89:96: f5:86:16:35:78:ee:45:fd:e8:09:50:01:6a:97:cb:92:01:e5: 0e:14:ae:e5:b1:b6:8c:9a:35:f0:e6:cd:6a:91:b4:71:90:5f: 1a:bc:99:51:cd:b0:13:c5:e8:41:8c:c9:3c:2e:07:a3:f3:e2: 15:b9:79:85:99:30:be:b5:d4:06:6b:da:fc:b5:61:1b:49:eb: f3:ed:5c:86:c5:fb:03:75:2d:83:ba:7d:d5:0f:52:c4:23:12: 3e:0a:5b:05:e3:ce:70:d1:0d:b5:9e:11:a8:e7:d3:aa:3c:ff: ed:ef:ad:e2:18:4b:ec:0f:ba:16:fa:33:b3:dc:74:d4:7c:2b: f1:7a:f0:4c:c4:be:8c:c9:44:1b:82:5b:07:90:ab:f9:66:ee: c7:a0:27:34:0d:11:91:59:ea:29:8e:49:84:ff:14:f9:cb:ed: 75:19:ff:d4:c4:6a:fa:f3:8e:88:37:22:15:d1:34:b1:41:20: 90:d5:c2:e2 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDL8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTI5 QjYwNkRCODYyODNCRDRBMDhBRjdFQjMzRUYzOEEyNTY2MzFCQjAeFw0yNTAyMTAx MzU4MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI0QkFBOUEzRTI0RURB QTI4QjUzMjM3QzdDRUY1RDQxNzlDMkE3MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8eggyxGaWE32qNaIjC1p0LtMTvE4UgezK9S9alai7W9SJTniq YANgfJ3QvQT2dICs8yZ6BQ1UCbODc6nPQPoBkWdQxiKl79c/i+bEaQPN2GAd88NK 3mjto2RKgJEH/Fq/X22G8M5lljHVj39EdaO/yWq5IYjqG3Z98Lk7VchM79vhMVQI 1T2kQeDqSkw/mMH9aVbNQt/mbDEaAtJo0foATiw/Ar6MkWLbLZ7qIltzGlkb8kbU UZ7yh5Ntv2dkPcsxGNeaI1rkFOrJrf6j6FQZBAghiwy/o1odUvfIYJbOhmbLHOEV Z7Im/ejvMJqt4DxhFPZ2rr/I0C/FarG3EBDLAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUJLqpo+JO2qKLUyN8fO9dQXnCpw4wHwYDVR0jBBgwFoAUUptgbbhig71KCK9+ sz7ziiVmMbswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFHSUMv VXB0Z2JiaGlnNzFLQ0s5LXN6N3ppaVZtTWJzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9VcHRnYmJoaWc3MUtDSzktc3o3emlpVm1NYnMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQUdJQy9KTHFwby1KTzJxS0xVeU44Zk85 ZFFYbkNwdzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j9h MA0GCSqGSIb3DQEBCwUAA4IBAQAVd18dfJAS4UGzGQnvkMk1zkktD8/TIIXP5veR DRbzHYvuqagLhgXBuzODiOynLtbSu6aiZ69kyLBTB/38CLP7ikFOrVyfiZb1hhY1 eO5F/egJUAFql8uSAeUOFK7lsbaMmjXw5s1qkbRxkF8avJlRzbATxehBjMk8Lgej 8+IVuXmFmTC+tdQGa9r8tWEbSevz7VyGxfsDdS2Dun3VD1LEIxI+ClsF485w0Q21 nhGo59OqPP/t763iGEvsD7oW+jOz3HTUfCvxevBMxL6MyUQbglsHkKv5Zu7HoCc0 DRGRWeopjkmE/xT5y+11Gf/UxGr6846INyIV0TSxQSCQ1cLi -----END CERTIFICATE-----Generated at Fri Apr 18 23:48:00 2025 by rpki-client