$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/-Rd4V0z7RlwN07cKvn6NEOfdjwc.roa File: -Rd4V0z7RlwN07cKvn6NEOfdjwc.roa (raw, json) Hash identifier: 4Epb75+fuR5FXLC+ZcDjsj6KQf48N2Gl2xjwF+PDGK0= Subject key identifier: F9:17:78:57:4C:FB:46:5C:0D:D3:B7:0A:BE:7E:8D:10:E7:DD:8F:07 Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0D1B Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/-Rd4V0z7RlwN07cKvn6NEOfdjwc.roa Signing time: Mon 10 Feb 2025 14:02:32 +0000 ROA not before: Mon 10 Feb 2025 14:02:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18182 IP address blocks: 27.105.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 01:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3355 (0xd1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Feb 10 14:02:32 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F91778574CFB465C0DD3B70ABE7E8D10E7DD8F07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:34:51:0c:82:4d:72:80:1a:60:97:64:be:2d: 1a:86:52:ea:7c:38:49:d5:f6:7e:cc:f7:46:b6:59: fe:62:a0:d1:89:ac:87:38:fd:0c:ac:32:61:77:66: c6:96:e7:be:df:7c:45:63:90:24:52:46:57:9c:25: 25:66:c9:30:88:85:92:4a:36:95:c2:dd:96:9e:fd: 75:f2:77:60:3c:c5:7e:a5:89:3c:26:04:8b:17:14: ca:77:38:06:dc:e5:22:fa:50:d6:41:5e:62:37:50: 04:61:5b:ca:b4:cf:fc:e3:af:63:ca:04:fa:dc:d1: dd:50:ab:52:3b:33:1e:66:29:8c:1a:d1:00:cf:b2: 60:21:e9:13:3e:53:7b:b8:00:bf:f7:82:79:4f:55: 19:22:d0:f4:bf:f6:48:e1:af:48:63:95:51:fc:24: 91:4c:62:ee:70:ec:12:96:b3:33:9c:45:af:ef:22: 69:f3:7f:81:b4:6c:9a:0b:f0:e8:7a:a0:35:eb:f0: 7a:bc:08:74:23:8e:ea:fe:c8:f2:a8:2e:6d:70:68: ab:9f:3a:7c:4e:74:e5:49:e0:bf:ad:14:f7:2b:e4: ee:16:bb:de:e9:c0:4b:25:c7:5f:61:4d:ee:56:bd: 6c:a8:e2:ce:18:2d:d5:6c:9f:0c:7b:11:ad:9a:3a: 97:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:17:78:57:4C:FB:46:5C:0D:D3:B7:0A:BE:7E:8D:10:E7:DD:8F:07 X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/-Rd4V0z7RlwN07cKvn6NEOfdjwc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.105.0.0/16 Signature Algorithm: sha256WithRSAEncryption 65:a9:e1:ce:e8:8b:2a:5a:5b:9a:39:40:32:9e:22:c1:74:f4: 5d:c3:ca:30:47:69:b4:2c:fe:a6:b1:24:05:2d:26:e5:f5:20: 82:28:1a:e5:1c:d0:7b:45:0b:fd:e6:5e:28:20:08:33:2f:85: 8e:92:09:55:d4:76:26:40:b3:ca:24:f6:64:91:8f:b8:6e:1e: 6e:47:26:8a:0a:89:b8:98:c2:bd:15:e1:3b:aa:16:04:5f:f9: d4:b1:2c:e3:de:2f:be:e7:70:17:de:15:89:b0:36:2d:c1:dc: 14:1d:be:9f:ee:9b:e6:51:9e:4f:83:68:82:e6:72:a9:bc:52: 2d:57:9d:6e:57:88:93:ba:c2:e2:d2:ea:79:ee:80:d1:e8:37: 83:3f:ad:19:ff:81:bc:a6:e9:ca:5e:44:0f:32:7e:3c:2f:6d: c1:2e:c2:31:9f:25:8f:00:0b:bc:06:56:77:a7:93:c7:e0:13: 7d:0e:f1:04:b7:a7:2b:01:49:64:dd:4c:81:09:d3:ef:a0:24: 25:a8:cc:41:da:de:88:58:6b:28:dd:f6:1a:8f:bc:2d:cf:65: d1:f6:aa:05:16:e7:a4:17:66:46:c9:d6:2d:18:2a:33:69:6e: 66:3f:1e:0f:b1:67:99:36:e4:b9:a9:a6:2e:28:26:0d:bb:b0: ac:13:ec:c8 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDRswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNTAyMTAx NDAyMzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY5MTc3ODU3NENGQjQ2 NUMwREQzQjcwQUJFN0U4RDEwRTdERDhGMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGNFEMgk1ygBpgl2S+LRqGUup8OEnV9n7M90a2Wf5ioNGJrIc4 /QysMmF3ZsaW577ffEVjkCRSRlecJSVmyTCIhZJKNpXC3Zae/XXyd2A8xX6liTwm BIsXFMp3OAbc5SL6UNZBXmI3UARhW8q0z/zjr2PKBPrc0d1Qq1I7Mx5mKYwa0QDP smAh6RM+U3u4AL/3gnlPVRki0PS/9kjhr0hjlVH8JJFMYu5w7BKWszOcRa/vImnz f4G0bJoL8Oh6oDXr8Hq8CHQjjur+yPKoLm1waKufOnxOdOVJ4L+tFPcr5O4Wu97p wEslx19hTe5WvWyo4s4YLdVsnwx7Ea2aOpfzAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU+Rd4V0z7RlwN07cKvn6NEOfdjwcwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC8tUmQ0VjB6N1Jsd04wN2NLdm42 TkVPZmRqd2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAG2kw DQYJKoZIhvcNAQELBQADggEBAGWp4c7oiypaW5o5QDKeIsF09F3DyjBHabQs/qax JAUtJuX1IIIoGuUc0HtFC/3mXiggCDMvhY6SCVXUdiZAs8ok9mSRj7huHm5HJooK ibiYwr0V4TuqFgRf+dSxLOPeL77ncBfeFYmwNi3B3BQdvp/um+ZRnk+DaILmcqm8 Ui1XnW5XiJO6wuLS6nnugNHoN4M/rRn/gbym6cpeRA8yfjwvbcEuwjGfJY8AC7wG Vnenk8fgE30O8QS3pysBSWTdTIEJ0++gJCWozEHa3ohYayjd9hqPvC3PZdH2qgUW 56QXZkbJ1i0YKjNpbmY/Hg+xZ5k25Lmppi4oJg27sKwT7Mg= -----END CERTIFICATE-----Generated at Wed Apr 23 00:25:03 2025 by rpki-client