$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIINET/m3zZ7TCte8HxyGwmNBo0U3gF--A.roa File: m3zZ7TCte8HxyGwmNBo0U3gF--A.roa (raw, json) Hash identifier: K3YSU2FwDaNLCqHoPkfmnWZ7iwdRRyx5mPYxpDWBAt0= Subject key identifier: 9B:7C:D9:ED:30:AD:7B:C1:F1:C8:6C:26:34:1A:34:53:78:05:FB:E0 Certificate issuer: /CN=69797BDE8D0581FA299D8E1420ED2957C4208A07 Certificate serial: 0C81 Authority key identifier: 69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/m3zZ7TCte8HxyGwmNBo0U3gF--A.roa Signing time: Mon 10 Feb 2025 13:49:51 +0000 ROA not before: Mon 10 Feb 2025 13:49:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17710 IP address blocks: 61.57.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3201 (0xc81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69797BDE8D0581FA299D8E1420ED2957C4208A07 Validity Not Before: Feb 10 13:49:51 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9B7CD9ED30AD7BC1F1C86C26341A34537805FBE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:47:38:8f:42:c5:79:48:17:5e:3a:f9:3b:9b: 68:d4:bd:9c:c4:cd:a2:76:89:5b:1a:6b:58:3d:4e: eb:10:b5:af:e4:87:9a:93:0a:14:bd:4e:28:c6:2e: 9d:16:75:46:0e:40:86:89:5a:cc:0c:82:13:5b:17: 85:b9:14:98:cd:15:5d:58:c7:08:d7:c8:61:cf:c3: 76:98:2c:88:46:17:6f:3d:32:7d:91:12:82:46:6b: ff:32:1a:eb:25:5f:df:d5:39:d9:53:60:9d:90:e7: 5e:d8:72:0e:b9:65:c4:b8:19:1f:1a:35:04:bd:99: ff:d9:cc:a9:1c:16:09:46:d1:52:c1:3d:7f:ca:17: 67:83:19:a6:52:2a:25:58:30:cd:fb:dd:03:75:3b: 05:62:be:87:86:60:51:f1:9d:df:80:82:f4:71:2d: 33:67:17:9a:d7:ac:5f:71:34:7d:00:51:55:82:2f: b9:cb:e0:aa:28:f5:bb:97:c5:b6:57:de:e5:14:dc: 2b:9b:38:05:d5:2a:01:13:a0:1f:d7:ff:30:05:8b: e9:8b:7b:cc:39:d4:ac:36:56:9c:91:e3:2e:72:53: 3d:3e:54:da:1b:12:ec:b8:0c:6c:7a:b0:ce:58:e3: 3b:66:f0:52:8d:1a:60:84:18:4b:67:f0:d7:50:d4: 5c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7C:D9:ED:30:AD:7B:C1:F1:C8:6C:26:34:1A:34:53:78:05:FB:E0 X509v3 Authority Key Identifier: keyid:69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/m3zZ7TCte8HxyGwmNBo0U3gF--A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.57.224.0/20 Signature Algorithm: sha256WithRSAEncryption 09:c7:68:9d:e2:72:89:ae:58:43:6f:d7:5c:01:cb:de:ca:40: 3e:c2:bc:98:16:6d:86:bf:4c:fb:27:32:29:05:df:ae:72:72: 7e:41:f7:7f:46:63:86:fb:6d:a9:d0:e5:d1:7c:51:a0:03:50: b6:98:0f:1e:b4:91:08:fa:4e:70:d1:2c:b4:f7:df:0e:79:19: ff:77:43:ef:8e:67:85:5f:b5:2d:77:b1:fb:3e:e2:95:83:8f: 7e:3c:57:b1:23:dd:d9:b3:a8:95:ab:44:eb:98:c1:de:e1:af: 56:35:73:cd:4a:fe:fd:9d:cc:fe:34:bf:8c:1a:1d:e3:87:b2: f6:a4:7b:cf:ad:7a:b8:07:a1:56:64:ce:dd:02:86:bb:9f:d7: 13:9e:50:bf:7d:35:28:d0:a1:d2:35:0e:0f:03:dc:25:f4:ec: 8d:7f:d0:ef:51:89:a1:e5:b6:37:a0:76:c1:e5:54:b0:c9:4c: 04:17:22:78:f5:f1:8d:d2:3c:bc:1a:73:e3:04:58:76:ea:37: 3a:a5:9a:20:83:55:d6:e5:37:fd:9b:03:ec:b5:6e:55:68:48: 79:99:9c:d5:c6:5d:86:31:e9:04:ce:15:76:bb:b5:7b:b4:07: 04:4b:13:5c:48:17:ec:bb:84:3b:84:42:d1:6d:47:92:0c:12: 58:1a:e1:3c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk3 OTdCREU4RDA1ODFGQTI5OUQ4RTE0MjBFRDI5NTdDNDIwOEEwNzAeFw0yNTAyMTAx MzQ5NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlCN0NEOUVEMzBBRDdC QzFGMUM4NkMyNjM0MUEzNDUzNzgwNUZCRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChRziPQsV5SBdeOvk7m2jUvZzEzaJ2iVsaa1g9TusQta/kh5qT ChS9TijGLp0WdUYOQIaJWswMghNbF4W5FJjNFV1YxwjXyGHPw3aYLIhGF289Mn2R EoJGa/8yGuslX9/VOdlTYJ2Q517Ycg65ZcS4GR8aNQS9mf/ZzKkcFglG0VLBPX/K F2eDGaZSKiVYMM373QN1OwVivoeGYFHxnd+AgvRxLTNnF5rXrF9xNH0AUVWCL7nL 4Koo9buXxbZX3uUU3CubOAXVKgEToB/X/zAFi+mLe8w51Kw2VpyR4y5yUz0+VNob Euy4DGx6sM5Y4ztm8FKNGmCEGEtn8NdQ1FxDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUm3zZ7TCte8HxyGwmNBo0U3gF++AwHwYDVR0jBBgwFoAUaXl73o0FgfopnY4U IO0pV8QgigcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUElJTkVU L2FYbDczbzBGZ2ZvcG5ZNFVJTzBwVjhRZ2lnYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvYVhsNzNvMEZnZm9wblk0VUlPMHBWOFFnaWdjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvUElJTkVUL20zelo3VEN0ZThIeHlHd21O Qm8wVTNnRi0tQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 OeAwDQYJKoZIhvcNAQELBQADggEBAAnHaJ3icomuWENv11wBy97KQD7CvJgWbYa/ TPsnMikF365ycn5B939GY4b7banQ5dF8UaADULaYDx60kQj6TnDRLLT33w55Gf93 Q++OZ4VftS13sfs+4pWDj348V7Ej3dmzqJWrROuYwd7hr1Y1c81K/v2dzP40v4wa HeOHsvake8+tergHoVZkzt0Chruf1xOeUL99NSjQodI1Dg8D3CX07I1/0O9RiaHl tjegdsHlVLDJTAQXInj18Y3SPLwac+MEWHbqNzqlmiCDVdblN/2bA+y1blVoSHmZ nNXGXYYx6QTOFXa7tXu0BwRLE1xIF+y7hDuEQtFtR5IMElga4Tw= -----END CERTIFICATE-----Generated at Fri Apr 18 22:39:07 2025 by rpki-client