$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/uraxH9xjm7jxTO_7nX8dTBAwZfo.roa File: uraxH9xjm7jxTO_7nX8dTBAwZfo.roa (raw, json) Hash identifier: upqsyOY/01e7DyP3vBaEyIGHhjzN69Ce+LIajMVTzWU= Subject key identifier: BA:B6:B1:1F:DC:63:9B:B8:F1:4C:EF:FB:9D:7F:1D:4C:10:30:65:FA Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Certificate serial: 0CCA Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/uraxH9xjm7jxTO_7nX8dTBAwZfo.roa Signing time: Mon 10 Feb 2025 13:58:29 +0000 ROA not before: Mon 10 Feb 2025 13:58:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17420 IP address blocks: 203.65.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3274 (0xcca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Validity Not Before: Feb 10 13:58:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BAB6B11FDC639BB8F14CEFFB9D7F1D4C103065FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:86:7b:0a:81:b5:af:9c:00:05:d2:98:5c:49: ff:e2:62:1e:3d:7a:44:56:4b:c2:db:63:a9:d6:65: d2:d3:af:51:f0:3f:0b:33:88:a3:e4:90:89:64:f9: 57:88:eb:76:8f:f6:c1:5f:f2:b0:f0:f9:42:52:2b: d4:be:95:b3:d0:a0:5a:7f:95:49:f7:40:6a:00:9e: ea:2f:a5:96:92:3d:28:46:23:40:74:fc:4c:cb:c6: 83:1b:df:cf:02:99:e1:27:ca:e2:ad:c3:01:c1:50: b5:82:13:b8:7a:70:15:4b:81:af:c1:2f:0f:76:fc: f2:3d:fb:ff:1c:c6:6d:24:42:31:e9:b8:08:10:70: 9a:43:ba:ab:a6:cc:d3:e9:d0:7e:9e:8b:35:bd:f7: 9c:80:94:5e:11:e2:9c:c8:cd:22:34:b9:72:d8:fc: 24:c4:9e:c1:6c:8f:95:7c:4b:6f:11:bf:35:f7:b1: f8:1e:fd:bf:44:e1:0f:20:b8:66:17:ff:0b:1b:73: 0f:54:ad:19:43:41:5b:be:3f:d0:66:73:e9:96:32: c6:52:e9:11:b9:b4:57:24:e0:ef:e5:5e:ba:8e:7f: 3d:69:74:c6:d5:20:9d:14:08:f0:ca:b6:ac:59:1f: a3:e0:b0:c5:ed:0c:c0:90:6c:fe:f3:fc:7c:4b:12: 5d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B6:B1:1F:DC:63:9B:B8:F1:4C:EF:FB:9D:7F:1D:4C:10:30:65:FA X509v3 Authority Key Identifier: keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/uraxH9xjm7jxTO_7nX8dTBAwZfo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.65.192.0/19 Signature Algorithm: sha256WithRSAEncryption 1e:6f:f7:a4:ba:0d:28:83:0a:30:cd:02:08:40:bf:8d:ab:aa: 48:57:29:b3:6f:63:e7:00:2f:5c:ac:6f:51:bd:31:11:04:74: 78:dd:08:09:ed:76:bf:00:60:26:3a:6e:c0:a6:05:73:d1:5b: 39:c2:56:49:88:38:18:4b:5d:05:ff:04:e2:06:69:14:b9:48: bc:28:cf:08:c8:1f:d3:43:a3:37:93:48:bd:20:8b:67:17:8e: d0:85:a2:0b:62:d6:f9:9f:cc:c3:f6:1f:f5:53:a6:0e:34:a6: 05:db:b4:67:c0:dd:81:3d:d3:ac:28:7f:20:e5:73:26:90:1d: 2f:11:f3:f1:45:3c:db:d0:46:d2:ea:f7:e7:d8:cd:b0:b5:65: 95:a7:88:e5:c2:ec:6c:21:f0:e5:1d:23:f4:c4:c4:19:b9:b4: 16:a9:c9:70:ba:72:80:7b:9e:dd:a6:eb:7b:15:14:90:e8:6c: d1:6e:1a:56:04:16:f0:2c:2e:54:69:c3:af:74:fd:11:2f:a2: ad:5c:e7:e9:2e:f9:94:cd:8e:b4:a8:83:65:b9:47:fe:de:0e: 8f:15:6f:79:6f:c7:1e:12:a0:ae:96:c8:7e:13:ca:7e:93:af: 13:4f:1b:c8:d4:b9:4d:ea:13:e4:34:08:97:9f:96:6a:85:60: da:75:0e:cc -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDMowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTI5 QjYwNkRCODYyODNCRDRBMDhBRjdFQjMzRUYzOEEyNTY2MzFCQjAeFw0yNTAyMTAx MzU4MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJBQjZCMTFGREM2MzlC QjhGMTRDRUZGQjlEN0YxRDRDMTAzMDY1RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkhnsKgbWvnAAF0phcSf/iYh49ekRWS8LbY6nWZdLTr1HwPwsz iKPkkIlk+VeI63aP9sFf8rDw+UJSK9S+lbPQoFp/lUn3QGoAnuovpZaSPShGI0B0 /EzLxoMb388CmeEnyuKtwwHBULWCE7h6cBVLga/BLw92/PI9+/8cxm0kQjHpuAgQ cJpDuqumzNPp0H6eizW995yAlF4R4pzIzSI0uXLY/CTEnsFsj5V8S28RvzX3sfge /b9E4Q8guGYX/wsbcw9UrRlDQVu+P9Bmc+mWMsZS6RG5tFck4O/lXrqOfz1pdMbV IJ0UCPDKtqxZH6PgsMXtDMCQbP7z/HxLEl1JAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUuraxH9xjm7jxTO/7nX8dTBAwZfowHwYDVR0jBBgwFoAUUptgbbhig71KCK9+ sz7ziiVmMbswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFHSUMv VXB0Z2JiaGlnNzFLQ0s5LXN6N3ppaVZtTWJzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9VcHRnYmJoaWc3MUtDSzktc3o3emlpVm1NYnMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQUdJQy91cmF4SDl4am03anhUT183blg4 ZFRCQXdaZm8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFy0HA MA0GCSqGSIb3DQEBCwUAA4IBAQAeb/ekug0ogwowzQIIQL+Nq6pIVymzb2PnAC9c rG9RvTERBHR43QgJ7Xa/AGAmOm7ApgVz0Vs5wlZJiDgYS10F/wTiBmkUuUi8KM8I yB/TQ6M3k0i9IItnF47QhaILYtb5n8zD9h/1U6YONKYF27RnwN2BPdOsKH8g5XMm kB0vEfPxRTzb0EbS6vfn2M2wtWWVp4jlwuxsIfDlHSP0xMQZubQWqclwunKAe57d put7FRSQ6GzRbhpWBBbwLC5UacOvdP0RL6KtXOfpLvmUzY60qINluUf+3g6PFW95 b8ceEqCulsh+E8p+k68TTxvI1LlN6hPkNAiXn5ZqhWDadQ7M -----END CERTIFICATE-----Generated at Fri Apr 18 23:57:32 2025 by rpki-client