$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/sGPtGlpFcIsz7r3UaPXra1bbjtQ.roa File: sGPtGlpFcIsz7r3UaPXra1bbjtQ.roa (raw, json) Hash identifier: yIkE4iASlrLz5lfiq7zJuU62fUSiKIkuZFwNHrYjH1E= Subject key identifier: B0:63:ED:1A:5A:45:70:8B:33:EE:BD:D4:68:F5:EB:6B:56:DB:8E:D4 Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Certificate serial: 0CC4 Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/sGPtGlpFcIsz7r3UaPXra1bbjtQ.roa Signing time: Mon 10 Feb 2025 13:58:26 +0000 ROA not before: Mon 10 Feb 2025 13:58:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17420 IP address blocks: 210.241.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3268 (0xcc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Validity Not Before: Feb 10 13:58:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B063ED1A5A45708B33EEBDD468F5EB6B56DB8ED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8f:8a:07:fa:88:70:ee:1e:a7:06:00:55:6e: 3c:76:fa:d9:ee:1a:cf:28:96:b6:9d:ec:13:00:91: ea:e0:23:3c:d5:1a:01:db:16:c8:a4:7e:a2:0b:b3: 8d:04:b4:cd:ce:21:94:33:72:fa:0b:3f:0a:bc:4b: eb:f4:92:c8:fc:99:11:70:45:d7:b4:51:e3:5f:fc: 07:8b:93:ba:4d:a4:08:ea:00:b6:b3:cc:ca:a6:26: ab:08:aa:46:51:59:6f:1f:24:ac:b4:b2:37:a7:64: eb:7f:85:bf:c1:8d:0f:73:0b:9d:45:26:f9:e3:c5: 95:2a:ac:2c:a9:c5:da:20:97:ba:d2:d8:6e:b6:dd: 56:fd:02:fa:de:ba:4f:d2:5e:f3:fb:ea:df:9f:01: 93:7f:aa:2f:2f:9e:d2:19:33:8d:31:7b:d1:32:33: 9c:84:8b:b4:24:93:96:74:ff:88:31:5a:d1:39:37: 54:06:68:59:0e:f1:0e:7c:28:2d:90:7e:75:c3:30: f3:2c:bb:d1:3a:da:23:0f:ba:de:25:bc:30:f7:49: ee:35:b4:c5:86:69:ee:a3:ab:ce:a9:68:e3:70:1c: d6:0e:ec:04:39:43:d6:94:68:5b:5a:9a:c5:d0:ba: e7:c2:06:f2:32:3d:e8:d9:fc:78:06:60:fd:0f:5b: 70:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:63:ED:1A:5A:45:70:8B:33:EE:BD:D4:68:F5:EB:6B:56:DB:8E:D4 X509v3 Authority Key Identifier: keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/sGPtGlpFcIsz7r3UaPXra1bbjtQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.241.128.0/19 Signature Algorithm: sha256WithRSAEncryption 74:65:d5:ea:14:fb:2e:3f:34:99:4b:5d:4f:23:d5:a2:9b:53: 53:36:84:46:66:1e:a8:7c:90:6a:45:1f:2e:df:a2:69:2d:5d: db:aa:07:9e:fd:49:19:ef:36:38:ad:6a:dd:95:84:ec:2e:0e: 36:2c:e5:8f:12:39:a2:64:9f:f7:c8:cf:da:41:66:12:9f:fe: fa:1e:5b:50:e0:95:76:86:87:f0:f2:e0:51:41:4b:cb:91:b6: e2:f9:9c:38:dc:b7:6e:26:dd:39:c4:4e:47:12:21:98:a9:8d: af:8b:fd:5b:fa:ca:f0:fc:2d:44:5b:12:a2:70:d5:68:2e:7b: 63:1a:91:5d:81:b3:37:02:dc:6c:fc:77:46:4b:06:57:8f:a4: 8e:02:01:e5:8a:df:70:ce:b1:c6:14:f8:da:81:39:59:6c:1e: 97:fa:7e:43:13:cd:bf:ed:a5:ed:f3:73:9b:95:2e:ad:01:75: 1a:64:df:9e:4b:74:94:47:10:a0:95:44:8f:38:df:50:b2:08: 9b:74:56:7a:92:d1:3a:47:89:25:c8:c7:15:5b:6f:4c:94:e8: 3c:fe:f3:64:bb:31:f1:f8:f9:06:c0:50:5a:dd:77:fd:1d:c2: c9:af:1e:d5:c1:61:c6:51:79:a5:2e:a7:03:c7:df:53:db:2f: 30:d9:51:19 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTI5 QjYwNkRCODYyODNCRDRBMDhBRjdFQjMzRUYzOEEyNTY2MzFCQjAeFw0yNTAyMTAx MzU4MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIwNjNFRDFBNUE0NTcw OEIzM0VFQkRENDY4RjVFQjZCNTZEQjhFRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdj4oH+ohw7h6nBgBVbjx2+tnuGs8olrad7BMAkergIzzVGgHb FsikfqILs40EtM3OIZQzcvoLPwq8S+v0ksj8mRFwRde0UeNf/AeLk7pNpAjqALaz zMqmJqsIqkZRWW8fJKy0sjenZOt/hb/BjQ9zC51FJvnjxZUqrCypxdogl7rS2G62 3Vb9Avreuk/SXvP76t+fAZN/qi8vntIZM40xe9EyM5yEi7Qkk5Z0/4gxWtE5N1QG aFkO8Q58KC2QfnXDMPMsu9E62iMPut4lvDD3Se41tMWGae6jq86paONwHNYO7AQ5 Q9aUaFtamsXQuufCBvIyPejZ/HgGYP0PW3C9AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUsGPtGlpFcIsz7r3UaPXra1bbjtQwHwYDVR0jBBgwFoAUUptgbbhig71KCK9+ sz7ziiVmMbswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFHSUMv VXB0Z2JiaGlnNzFLQ0s5LXN6N3ppaVZtTWJzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9VcHRnYmJoaWc3MUtDSzktc3o3emlpVm1NYnMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQUdJQy9zR1B0R2xwRmNJc3o3cjNVYVBY cmExYmJqdFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0vGA MA0GCSqGSIb3DQEBCwUAA4IBAQB0ZdXqFPsuPzSZS11PI9Wim1NTNoRGZh6ofJBq RR8u36JpLV3bqgee/UkZ7zY4rWrdlYTsLg42LOWPEjmiZJ/3yM/aQWYSn/76HltQ 4JV2hofw8uBRQUvLkbbi+Zw43LduJt05xE5HEiGYqY2vi/1b+srw/C1EWxKicNVo LntjGpFdgbM3Atxs/HdGSwZXj6SOAgHlit9wzrHGFPjagTlZbB6X+n5DE82/7aXt 83OblS6tAXUaZN+eS3SURxCglUSPON9QsgibdFZ6ktE6R4klyMcVW29MlOg8/vNk uzHx+PkGwFBa3Xf9HcLJrx7VwWHGUXmlLqcDx99T2y8w2VEZ -----END CERTIFICATE-----Generated at Fri Apr 18 23:58:42 2025 by rpki-client