$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/Dh1Q-mCi6rVOEQacifIZfxW3g0w.roa File: Dh1Q-mCi6rVOEQacifIZfxW3g0w.roa (raw, json) Hash identifier: gTD6usTiIP8l1Xlw+iXZdWMh/Dvh0Vy0TRM60Yq3MIU= Subject key identifier: 0E:1D:50:FA:60:A2:EA:B5:4E:11:06:9C:89:F2:19:7F:15:B7:83:4C Certificate issuer: /CN=7B8257FFDC7CD1CB4196129CD40493352BC83BB9 Certificate serial: 0386 Authority key identifier: 7B:82:57:FF:DC:7C:D1:CB:41:96:12:9C:D4:04:93:35:2B:C8:3B:B9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/Dh1Q-mCi6rVOEQacifIZfxW3g0w.roa Signing time: Mon 10 Feb 2025 14:17:07 +0000 ROA not before: Mon 10 Feb 2025 14:17:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38853 IP address blocks: 103.169.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 902 (0x386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B8257FFDC7CD1CB4196129CD40493352BC83BB9 Validity Not Before: Feb 10 14:17:07 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0E1D50FA60A2EAB54E11069C89F2197F15B7834C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1c:9b:b3:a9:11:6d:c2:a0:ee:4a:3a:05:54: d3:b5:a2:26:0f:6b:03:ba:3e:0c:4e:af:03:fd:86: d5:97:7d:59:56:28:54:2a:9a:ea:fe:0f:2f:eb:29: 58:65:39:9a:2a:55:6e:72:6a:f6:f5:6f:b0:d7:d1: b0:f8:7c:75:33:0b:9c:3e:63:98:3b:3c:6e:bb:92: 23:71:00:62:14:f4:bb:fd:08:59:99:53:75:04:89: 20:65:e5:b2:02:1b:db:34:a8:ef:78:0d:4b:9c:5e: 97:4c:d0:11:08:d6:e7:56:dc:ab:d1:7c:19:72:76: 9d:70:d3:52:e2:34:91:c4:d2:67:a1:f3:f2:a9:6a: ac:b7:1f:12:fc:05:02:a6:75:0b:16:26:5e:d9:7f: f6:7d:ae:79:f4:86:96:50:63:18:75:8d:6f:4e:0f: b5:77:c0:51:31:e7:db:13:1e:97:d3:ca:f3:49:c6: ef:10:f6:a3:3c:c8:23:f2:49:4a:0f:e9:c6:c4:7b: c6:8d:85:53:49:f5:b8:17:8e:5e:68:88:00:2f:88: d0:7e:3a:89:f2:90:4c:b2:ec:58:c5:f7:25:5e:5a: 76:74:a6:d4:e0:ab:01:cf:33:3f:f8:2d:10:5b:cb: d1:34:af:a1:52:ea:06:8d:40:58:a0:c5:b2:20:b5: d8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1D:50:FA:60:A2:EA:B5:4E:11:06:9C:89:F2:19:7F:15:B7:83:4C X509v3 Authority Key Identifier: keyid:7B:82:57:FF:DC:7C:D1:CB:41:96:12:9C:D4:04:93:35:2B:C8:3B:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/Dh1Q-mCi6rVOEQacifIZfxW3g0w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.169.46.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:a3:3b:ef:b9:8a:47:e2:7a:e1:68:3a:da:ad:c9:62:de:af: 7c:cd:30:23:7c:2f:f3:4a:12:32:9e:c0:f3:9d:0c:ec:ad:77: 90:98:e8:0e:4b:40:7f:15:ac:9b:be:d2:07:4b:bb:db:23:bd: 8d:d7:d5:dd:23:cd:f7:e3:ce:38:51:02:0b:4e:99:9b:76:f8: 84:fe:e2:26:a7:8c:2c:2d:9b:03:0b:13:ce:6f:d5:f7:fb:9d: a9:a9:30:8e:67:a1:6b:a0:25:d5:77:f0:80:66:17:64:bd:94: ed:3c:08:18:22:b3:32:fe:f4:a3:c4:db:50:31:b0:d9:ad:10: 6e:cc:3b:c9:dd:78:96:08:bc:70:c1:da:24:cc:74:e7:05:bb: aa:b4:84:d4:c9:d8:7c:3e:fa:52:9b:20:66:60:1b:a6:dd:1f: c4:8d:5e:dc:6e:52:82:38:4f:f2:da:d8:b5:45:65:c4:c9:93: c4:46:e5:90:2e:c3:4b:18:84:15:5d:c2:e3:d6:41:3c:52:02: 6a:c2:58:80:dc:90:1f:e9:36:3e:ed:42:21:41:30:aa:ce:dd: d6:ff:dc:ba:e1:e2:47:c0:38:cb:0a:62:e3:f6:7a:de:25:62: 47:19:c5:a4:b2:42:4d:d2:81:7c:9c:6e:9b:7f:e1:e4:a9:b4: 64:22:dc:1e -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICA4YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0I4 MjU3RkZEQzdDRDFDQjQxOTYxMjlDRDQwNDkzMzUyQkM4M0JCOTAeFw0yNTAyMTAx NDE3MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBFMUQ1MEZBNjBBMkVB QjU0RTExMDY5Qzg5RjIxOTdGMTVCNzgzNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjHJuzqRFtwqDuSjoFVNO1oiYPawO6PgxOrwP9htWXfVlWKFQq mur+Dy/rKVhlOZoqVW5yavb1b7DX0bD4fHUzC5w+Y5g7PG67kiNxAGIU9Lv9CFmZ U3UEiSBl5bICG9s0qO94DUucXpdM0BEI1udW3KvRfBlydp1w01LiNJHE0meh8/Kp aqy3HxL8BQKmdQsWJl7Zf/Z9rnn0hpZQYxh1jW9OD7V3wFEx59sTHpfTyvNJxu8Q 9qM8yCPySUoP6cbEe8aNhVNJ9bgXjl5oiAAviNB+OonykEyy7FjF9yVeWnZ0ptTg qwHPMz/4LRBby9E0r6FS6gaNQFigxbIgtdjfAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUDh1Q+mCi6rVOEQacifIZfxW3g0wwHwYDVR0jBBgwFoAUe4JX/9x80ctBlhKc 1ASTNSvIO7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFSQU1J VEEvZTRKWF85eDgwY3RCbGhLYzFBU1ROU3ZJTzdrLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9lNEpYXzl4ODBjdEJsaEtjMUFTVE5TdklPN2suY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQVJBTUlUQS9EaDFRLW1DaTZyVk9F UWFjaWZJWmZ4VzNnMHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6kuMA0GCSqGSIb3DQEBCwUAA4IBAQBrozvvuYpH4nrhaDrarcli3q98zTAj fC/zShIynsDznQzsrXeQmOgOS0B/FaybvtIHS7vbI72N19XdI8334844UQILTpmb dviE/uImp4wsLZsDCxPOb9X3+52pqTCOZ6FroCXVd/CAZhdkvZTtPAgYIrMy/vSj xNtQMbDZrRBuzDvJ3XiWCLxwwdokzHTnBbuqtITUydh8PvpSmyBmYBum3R/EjV7c blKCOE/y2ti1RWXEyZPERuWQLsNLGIQVXcLj1kE8UgJqwliA3JAf6TY+7UIhQTCq zt3W/9y64eJHwDjLCmLj9nreJWJHGcWkskJN0oF8nG6bf+HkqbRkItwe -----END CERTIFICATE-----Generated at Fri Apr 18 23:50:46 2025 by rpki-client