$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIINET/cXMgc-WBOp1ajyP9qpUXgxqvdD0.roa File: cXMgc-WBOp1ajyP9qpUXgxqvdD0.roa (raw, json) Hash identifier: OZ+zNJxTdthZcFlFU6ipzU8RTU8qIUPcYmi5ur+y4sE= Subject key identifier: 71:73:20:73:E5:81:3A:9D:5A:8F:23:FD:AA:95:17:83:1A:AF:74:3D Certificate issuer: /CN=69797BDE8D0581FA299D8E1420ED2957C4208A07 Certificate serial: 0C80 Authority key identifier: 69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/cXMgc-WBOp1ajyP9qpUXgxqvdD0.roa Signing time: Mon 10 Feb 2025 13:49:50 +0000 ROA not before: Mon 10 Feb 2025 13:49:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17710 IP address blocks: 103.234.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3200 (0xc80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69797BDE8D0581FA299D8E1420ED2957C4208A07 Validity Not Before: Feb 10 13:49:50 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=71732073E5813A9D5A8F23FDAA9517831AAF743D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8d:d6:20:fe:db:55:5d:53:c1:d2:44:ba:38: 05:98:4c:72:3e:79:a2:ea:ae:91:f1:b4:25:49:2c: 69:af:40:47:01:3b:25:09:ee:c4:f1:12:ca:b8:56: e9:13:b3:33:07:89:c7:1a:aa:b5:a7:75:7f:82:19: e4:76:31:b2:36:28:76:e9:6e:05:98:09:64:89:ee: 3c:ef:69:5d:e9:b4:56:b8:37:48:03:ca:d4:b9:5e: 1d:a7:12:00:77:8b:3a:1c:58:92:07:e6:73:78:15: 3b:c0:24:36:89:37:78:ae:b5:6c:79:25:29:37:00: e4:4e:cb:b2:24:c5:27:45:a1:96:a4:5a:7d:c0:77: 16:6e:a3:d5:70:23:98:07:d1:7f:54:92:06:2b:c4: 98:c8:ac:d1:73:e3:19:69:60:5d:40:19:5d:64:bf: 66:ab:a9:4c:41:22:cd:68:0e:9e:15:68:ff:11:3e: 09:53:eb:8f:a6:21:85:11:0d:b6:32:23:11:06:ae: 44:a4:ed:46:a6:44:cd:b8:4e:74:10:86:11:68:6b: 7d:a1:6a:0b:5e:99:79:4f:cd:b7:0c:ae:5d:a7:6f: 1f:ea:65:66:a5:2e:4f:a4:cf:3c:0c:25:ec:c5:8e: 59:42:98:18:12:63:7c:2d:7c:09:18:8b:d2:d5:35: 0b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:73:20:73:E5:81:3A:9D:5A:8F:23:FD:AA:95:17:83:1A:AF:74:3D X509v3 Authority Key Identifier: keyid:69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/cXMgc-WBOp1ajyP9qpUXgxqvdD0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.234.80.0/22 Signature Algorithm: sha256WithRSAEncryption 70:d7:08:38:17:02:e2:dc:79:bc:37:aa:2d:ab:a5:9a:35:c3: 95:78:a4:8e:9a:8b:2a:59:06:d6:56:e6:a6:0b:6f:56:2f:3a: 66:e0:ec:fd:e0:98:02:04:fb:c2:a3:5f:48:27:74:ec:b7:0d: 34:7d:16:5e:2c:aa:f3:03:b7:b6:2c:02:0b:eb:19:bd:05:11: 66:cd:45:90:6d:87:d8:4e:e0:7a:cf:ad:35:63:d6:4b:fd:51: 23:2a:8f:7a:37:e4:a2:f0:b8:73:4b:7a:81:e5:e4:55:cc:46: 75:4d:b0:84:42:3c:39:66:d9:a2:a1:8f:97:97:65:23:4e:7e: 22:50:12:8b:28:7a:41:3a:ab:0b:f2:a4:91:d2:3f:32:e3:a9: a2:d4:54:d4:0e:8e:ec:2d:30:cb:ec:ef:f2:b0:a1:1c:a1:60: 24:f3:ce:bb:0f:56:33:c0:75:8e:5c:e8:f7:47:ed:d0:03:7b: 7a:b4:2b:80:d6:79:c7:1f:d2:fc:36:1a:a6:0e:74:a4:5a:bf: 17:9e:31:31:13:55:14:16:dc:23:3e:4f:ce:1a:79:ec:08:3d: 31:2b:4b:9d:5d:93:66:ad:a8:a3:11:b4:0e:de:20:a3:88:22: 65:5d:f8:ba:70:a4:08:0e:37:84:9b:da:ec:f7:cb:7f:3e:11: ba:4d:ca:c5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDIAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk3 OTdCREU4RDA1ODFGQTI5OUQ4RTE0MjBFRDI5NTdDNDIwOEEwNzAeFw0yNTAyMTAx MzQ5NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcxNzMyMDczRTU4MTNB OUQ1QThGMjNGREFBOTUxNzgzMUFBRjc0M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDjdYg/ttVXVPB0kS6OAWYTHI+eaLqrpHxtCVJLGmvQEcBOyUJ 7sTxEsq4VukTszMHiccaqrWndX+CGeR2MbI2KHbpbgWYCWSJ7jzvaV3ptFa4N0gD ytS5Xh2nEgB3izocWJIH5nN4FTvAJDaJN3iutWx5JSk3AOROy7IkxSdFoZakWn3A dxZuo9VwI5gH0X9UkgYrxJjIrNFz4xlpYF1AGV1kv2arqUxBIs1oDp4VaP8RPglT 64+mIYURDbYyIxEGrkSk7UamRM24TnQQhhFoa32hagtemXlPzbcMrl2nbx/qZWal Lk+kzzwMJezFjllCmBgSY3wtfAkYi9LVNQsPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcXMgc+WBOp1ajyP9qpUXgxqvdD0wHwYDVR0jBBgwFoAUaXl73o0FgfopnY4U IO0pV8QgigcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUElJTkVU L2FYbDczbzBGZ2ZvcG5ZNFVJTzBwVjhRZ2lnYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvYVhsNzNvMEZnZm9wblk0VUlPMHBWOFFnaWdjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvUElJTkVUL2NYTWdjLVdCT3AxYWp5UDlx cFVYZ3hxdmREMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn 6lAwDQYJKoZIhvcNAQELBQADggEBAHDXCDgXAuLcebw3qi2rpZo1w5V4pI6aiypZ BtZW5qYLb1YvOmbg7P3gmAIE+8KjX0gndOy3DTR9Fl4sqvMDt7YsAgvrGb0FEWbN RZBth9hO4HrPrTVj1kv9USMqj3o35KLwuHNLeoHl5FXMRnVNsIRCPDlm2aKhj5eX ZSNOfiJQEosoekE6qwvypJHSPzLjqaLUVNQOjuwtMMvs7/KwoRyhYCTzzrsPVjPA dY5c6PdH7dADe3q0K4DWeccf0vw2GqYOdKRavxeeMTETVRQW3CM+T84aeewIPTEr S51dk2atqKMRtA7eIKOIImVd+LpwpAgON4Sb2uz3y38+EbpNysU= -----END CERTIFICATE-----Generated at Fri Apr 18 22:28:24 2025 by rpki-client