$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEICITY260/l46Aiyu5k_P22ls9YvpPewX7LIE.roa File: l46Aiyu5k_P22ls9YvpPewX7LIE.roa (raw, json) Hash identifier: zC0cIQVwRKrf5FBYcxRWt2N3mU8BELyllwbixYF/jYc= Subject key identifier: 97:8E:80:8B:2B:B9:93:F3:F6:DA:5B:3D:62:FA:4F:7B:05:FB:2C:81 Certificate issuer: /CN=8477B4B9FE729925D912C66D00B681DDA10A2A01 Certificate serial: 0C91 Authority key identifier: 84:77:B4:B9:FE:72:99:25:D9:12:C6:6D:00:B6:81:DD:A1:0A:2A:01 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hHe0uf5ymSXZEsZtALaB3aEKKgE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICITY260/l46Aiyu5k_P22ls9YvpPewX7LIE.roa Signing time: Mon 10 Feb 2025 14:15:56 +0000 ROA not before: Mon 10 Feb 2025 14:15:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 103.117.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICITY260/hHe0uf5ymSXZEsZtALaB3aEKKgE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICITY260/hHe0uf5ymSXZEsZtALaB3aEKKgE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/hHe0uf5ymSXZEsZtALaB3aEKKgE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 17:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3217 (0xc91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8477B4B9FE729925D912C66D00B681DDA10A2A01 Validity Not Before: Feb 10 14:15:56 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=978E808B2BB993F3F6DA5B3D62FA4F7B05FB2C81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0e:cf:c1:de:fd:d0:39:a0:41:19:ff:af:02: 6a:9c:f4:86:6c:42:a8:1d:9e:19:f9:7f:ec:77:dd: 49:e6:b1:74:82:57:b7:08:fa:61:fd:a4:2e:b2:69: b5:f6:52:d9:a6:30:8b:7c:36:b7:6c:26:b2:f3:c0: 8d:33:d2:ff:bb:c1:03:1a:e2:91:ca:af:c6:2c:2b: 37:41:b8:73:ba:56:93:86:4f:56:27:b4:c0:0f:98: df:c6:e0:32:7c:ae:a2:a2:64:ca:d2:2c:50:eb:4b: 85:44:88:7e:a2:e5:1e:f2:07:02:05:66:77:4f:85: b5:ce:55:47:80:85:1c:7f:bd:a6:4c:06:db:fc:49: 12:7b:d3:c4:c7:80:a8:20:32:03:b7:ef:9c:3c:4d: e0:b1:c9:5f:e7:ca:b3:2a:67:bd:06:5d:d3:86:f5: 72:38:49:52:79:62:8a:f4:e6:9d:ba:45:e0:ea:a8: 10:1f:de:ae:d8:d5:d3:72:97:80:80:e5:e4:6e:ad: 92:f0:f3:4f:29:b1:34:ae:f5:b6:53:4e:30:8b:f7: a9:c7:95:30:23:55:10:4e:c2:cd:64:a9:37:22:cd: df:c8:7a:a9:83:e4:d7:e5:14:ee:b7:c8:c5:83:82: ac:52:61:ff:bf:3c:73:3c:5a:d8:1d:d6:b0:71:c1: 1e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8E:80:8B:2B:B9:93:F3:F6:DA:5B:3D:62:FA:4F:7B:05:FB:2C:81 X509v3 Authority Key Identifier: keyid:84:77:B4:B9:FE:72:99:25:D9:12:C6:6D:00:B6:81:DD:A1:0A:2A:01 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICITY260/hHe0uf5ymSXZEsZtALaB3aEKKgE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hHe0uf5ymSXZEsZtALaB3aEKKgE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICITY260/l46Aiyu5k_P22ls9YvpPewX7LIE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.117.224.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:27:a4:57:97:82:08:cc:45:ea:9c:32:29:47:25:95:39:72: d9:6d:19:d4:a3:f8:45:32:68:fd:a9:39:be:e3:76:dc:89:6b: 38:51:ed:69:a3:3f:af:d1:b6:a5:c9:a8:45:e6:1f:5d:ef:15: a7:3f:c8:d2:02:ee:55:17:52:3c:c0:2e:0a:53:49:5e:7b:96: ce:48:57:19:1c:9f:1e:8f:cb:de:45:c8:f9:9d:39:a2:58:cf: de:72:95:92:0c:6b:5b:aa:58:00:ed:8b:45:cf:f9:f5:7d:ab: 63:61:ab:d7:6c:80:87:49:18:89:e3:c8:be:c1:45:4e:c3:69: 6e:10:8c:7b:fd:77:9e:54:ad:0c:9e:75:66:2a:64:93:a8:c7: a1:9c:68:76:1f:e0:a8:47:96:28:13:44:6d:68:6d:67:a8:74: 6a:24:6a:9a:e6:6c:31:a3:db:bd:c6:47:bf:70:04:a4:ff:0c: f3:0f:47:27:10:5f:c4:f1:ee:4e:5e:9b:78:9c:a6:1b:22:4c: 20:c0:f4:90:d4:10:c7:a5:f3:df:50:b0:93:1a:9f:5a:c2:f8: 02:ab:eb:2f:4c:65:a9:ab:af:fc:9d:96:59:7c:a6:37:56:8b: 52:60:4e:24:58:0c:ea:9b:6a:a1:f6:91:27:90:c2:43:0c:f7: 9d:45:fe:d9 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDJEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODQ3 N0I0QjlGRTcyOTkyNUQ5MTJDNjZEMDBCNjgxRERBMTBBMkEwMTAeFw0yNTAyMTAx NDE1NTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk3OEU4MDhCMkJCOTkz RjNGNkRBNUIzRDYyRkE0RjdCMDVGQjJDODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzDs/B3v3QOaBBGf+vAmqc9IZsQqgdnhn5f+x33UnmsXSCV7cI +mH9pC6yabX2UtmmMIt8NrdsJrLzwI0z0v+7wQMa4pHKr8YsKzdBuHO6VpOGT1Yn tMAPmN/G4DJ8rqKiZMrSLFDrS4VEiH6i5R7yBwIFZndPhbXOVUeAhRx/vaZMBtv8 SRJ708THgKggMgO375w8TeCxyV/nyrMqZ70GXdOG9XI4SVJ5Yor05p26ReDqqBAf 3q7Y1dNyl4CA5eRurZLw808psTSu9bZTTjCL96nHlTAjVRBOws1kqTcizd/IeqmD 5NflFO63yMWDgqxSYf+/PHM8Wtgd1rBxwR5NAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUl46Aiyu5k/P22ls9YvpPewX7LIEwHwYDVR0jBBgwFoAUhHe0uf5ymSXZEsZt ALaB3aEKKgEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEVJQ0lU WTI2MC9oSGUwdWY1eW1TWFpFc1p0QUxhQjNhRUtLZ0UuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL2hIZTB1ZjV5bVNYWkVzWnRBTGFCM2FFS0tnRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BFSUNJVFkyNjAvbDQ2QWl5dTVr X1AyMmxzOVl2cFBld1g3TElFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmd14DANBgkqhkiG9w0BAQsFAAOCAQEAHCekV5eCCMxF6pwyKUcllTly 2W0Z1KP4RTJo/ak5vuN23IlrOFHtaaM/r9G2pcmoReYfXe8Vpz/I0gLuVRdSPMAu ClNJXnuWzkhXGRyfHo/L3kXI+Z05oljP3nKVkgxrW6pYAO2LRc/59X2rY2Gr12yA h0kYiePIvsFFTsNpbhCMe/13nlStDJ51Zipkk6jHoZxodh/gqEeWKBNEbWhtZ6h0 aiRqmuZsMaPbvcZHv3AEpP8M8w9HJxBfxPHuTl6beJymGyJMIMD0kNQQx6Xz31Cw kxqfWsL4AqvrL0xlqauv/J2WWXymN1aLUmBOJFgM6ptqofaRJ5DCQwz3nUX+2Q== -----END CERTIFICATE-----Generated at Sat Apr 5 16:36:22 2025 by rpki-client