$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SECUNET/X66ROOvcU3Tt17lyAN_Xbuwpfk4.roa File: X66ROOvcU3Tt17lyAN_Xbuwpfk4.roa (raw, json) Hash identifier: fUTJRlvKCNq/1cka42QFBc8Vvj3ayCJQBcWw412diEk= Subject key identifier: 5F:AE:91:38:EB:DC:53:74:ED:D7:B9:72:00:DF:D7:6E:EC:29:7E:4E Certificate issuer: /CN=3F4E063886AD351FF822805AF8D569944B8DE517 Certificate serial: 01A1 Authority key identifier: 3F:4E:06:38:86:AD:35:1F:F8:22:80:5A:F8:D5:69:94:4B:8D:E5:17 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/X66ROOvcU3Tt17lyAN_Xbuwpfk4.roa Signing time: Mon 10 Feb 2025 14:30:30 +0000 ROA not before: Mon 10 Feb 2025 14:30:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7538 IP address blocks: 103.198.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F4E063886AD351FF822805AF8D569944B8DE517 Validity Not Before: Feb 10 14:30:30 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5FAE9138EBDC5374EDD7B97200DFD76EEC297E4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:1e:75:0a:58:61:89:0e:ba:55:78:b0:e3: 63:ac:9a:7a:3e:1a:3b:b0:ff:df:d1:d8:98:32:5d: 13:1a:bd:4e:b2:6e:12:58:59:1a:d5:09:60:f3:f7: 94:85:ac:bf:15:bb:0d:e7:49:78:43:da:22:ab:f1: 1c:f4:7a:96:17:e4:74:9a:e8:a7:62:49:a6:7a:da: 4d:bf:d8:97:63:25:4b:b0:0b:63:96:f1:47:94:3b: 7c:72:99:af:74:8e:4d:aa:1d:42:aa:01:38:41:8f: 39:f1:bf:2d:a4:d4:57:cd:21:d5:5f:7e:60:f7:31: 79:61:88:c1:df:25:5d:fb:aa:83:d1:69:f3:69:db: 68:4f:2b:79:d4:44:a1:a2:34:96:c8:d8:a4:9a:03: a8:fa:d7:6a:83:f1:e8:6d:2e:07:b8:f2:97:38:13: ca:8f:75:b0:5d:f3:75:dc:4c:eb:6b:f8:8d:dd:0b: fb:4c:44:74:50:74:31:27:de:63:7f:77:20:28:21: 15:63:9e:d2:eb:0b:3c:84:ea:36:fa:c6:fa:70:5e: 2d:00:44:ff:50:14:13:41:c3:3b:c6:37:a9:22:cb: 1c:21:9e:e9:e5:79:2e:c3:61:df:78:5e:80:01:3e: 4a:37:db:7e:2a:b2:7b:b9:9d:99:a0:98:03:e0:2b: 1d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AE:91:38:EB:DC:53:74:ED:D7:B9:72:00:DF:D7:6E:EC:29:7E:4E X509v3 Authority Key Identifier: keyid:3F:4E:06:38:86:AD:35:1F:F8:22:80:5A:F8:D5:69:94:4B:8D:E5:17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/X66ROOvcU3Tt17lyAN_Xbuwpfk4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.198.152.0/23 Signature Algorithm: sha256WithRSAEncryption b5:c0:21:17:d6:47:ec:15:a4:1b:c1:33:b0:c9:91:e8:cd:7a: b2:7d:97:ef:0b:49:b9:f8:74:c9:ec:76:27:a2:6f:ac:c6:ae: 1b:85:64:13:ad:8f:14:a0:d3:93:73:f6:2c:7c:e9:e3:d5:e9: 08:20:a1:3b:3f:77:a7:4a:6e:36:25:a5:da:c8:bf:6b:5c:b0: fa:49:7b:b2:e5:c8:42:6c:7b:44:5e:b7:1c:a7:9a:f1:f7:ed: c4:d2:74:ca:88:46:ab:32:46:0e:da:40:e6:d9:db:69:05:f4: 30:f3:c1:ba:58:ac:ed:7b:3e:ec:66:e5:11:00:a7:fc:ed:1b: 37:88:e1:72:2c:4e:a4:d1:f6:36:08:76:0d:a3:6a:81:70:fb: 4b:10:d9:5f:52:2a:7a:f1:8c:ea:0b:69:fa:1c:f7:4a:17:2a: 1e:60:9f:60:6d:2d:93:61:c4:2e:da:93:9d:d8:da:d5:b0:56: 48:6e:0d:82:43:51:09:33:b6:59:54:62:d2:00:6e:0f:0d:bb: 3b:ab:a2:f7:ab:f1:49:db:9a:cc:44:00:3d:d0:23:67:e2:a7: 3b:5f:65:6f:6d:2c:03:42:da:b2:93:59:d7:8d:84:98:76:87: 64:4f:8e:df:0b:c2:0f:cb:e8:f9:6a:2a:e3:02:ca:8c:66:ba: 40:fc:81:d8 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0Y0 RTA2Mzg4NkFEMzUxRkY4MjI4MDVBRjhENTY5OTQ0QjhERTUxNzAeFw0yNTAyMTAx NDMwMzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVGQUU5MTM4RUJEQzUz NzRFREQ3Qjk3MjAwREZENzZFRUMyOTdFNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJGh51ClhhiQ66VXiw42Osmno+Gjuw/9/R2JgyXRMavU6ybhJY WRrVCWDz95SFrL8Vuw3nSXhD2iKr8Rz0epYX5HSa6KdiSaZ62k2/2JdjJUuwC2OW 8UeUO3xyma90jk2qHUKqAThBjznxvy2k1FfNIdVffmD3MXlhiMHfJV37qoPRafNp 22hPK3nURKGiNJbI2KSaA6j612qD8ehtLge48pc4E8qPdbBd83XcTOtr+I3dC/tM RHRQdDEn3mN/dyAoIRVjntLrCzyE6jb6xvpwXi0ARP9QFBNBwzvGN6kiyxwhnunl eS7DYd94XoABPko3234qsnu5nZmgmAPgKx1vAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUX66ROOvcU3Tt17lyAN/Xbuwpfk4wHwYDVR0jBBgwFoAUP04GOIatNR/4IoBa +NVplEuN5RcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0VDVU5F VC9QMDRHT0lhdE5SXzRJb0JhLU5WcGxFdU41UmMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1AwNEdPSWF0TlJfNElvQmEtTlZwbEV1TjVSYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NFQ1VORVQvWDY2Uk9PdmNVM1R0MTds eUFOX1hidXdwZms0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWfGmDANBgkqhkiG9w0BAQsFAAOCAQEAtcAhF9ZH7BWkG8EzsMmR6M16sn2X7wtJ ufh0yex2J6JvrMauG4VkE62PFKDTk3P2LHzp49XpCCChOz93p0puNiWl2si/a1yw +kl7suXIQmx7RF63HKea8fftxNJ0yohGqzJGDtpA5tnbaQX0MPPBulis7Xs+7Gbl EQCn/O0bN4jhcixOpNH2Ngh2DaNqgXD7SxDZX1IqevGM6gtp+hz3ShcqHmCfYG0t k2HELtqTndja1bBWSG4NgkNRCTO2WVRi0gBuDw27O6ui96vxSduazEQAPdAjZ+Kn O19lb20sA0LaspNZ142EmHaHZE+O3wvCD8vo+Woq4wLKjGa6QPyB2A== -----END CERTIFICATE-----Generated at Fri Apr 18 23:47:02 2025 by rpki-client