$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/Hs2sFasMeLqHyVSP-l7sjTbT9Sk.roa File: Hs2sFasMeLqHyVSP-l7sjTbT9Sk.roa (raw, json) Hash identifier: 9RAexxuUZYsSnrt87JeD/sSElMma3hNBdbr1i8dpymU= Subject key identifier: 1E:CD:AC:15:AB:0C:78:BA:87:C9:54:8F:FA:5E:EC:8D:36:D3:F5:29 Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Certificate serial: 0D19 Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/Hs2sFasMeLqHyVSP-l7sjTbT9Sk.roa Signing time: Mon 10 Feb 2025 14:23:27 +0000 ROA not before: Mon 10 Feb 2025 14:23:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 101.3.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 02:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3353 (0xd19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Validity Not Before: Feb 10 14:23:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1ECDAC15AB0C78BA87C9548FFA5EEC8D36D3F529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fd:fd:2e:34:d4:d3:ae:af:2f:cd:44:6c:6d: 93:c2:21:e1:f0:34:18:e8:c8:3c:b7:dd:4f:f4:0b: 87:fd:b1:90:7b:4c:8a:bb:55:9a:51:e3:e8:1c:70: 03:16:61:e7:cf:2b:ab:d4:a3:63:bc:10:93:fa:74: 4b:31:4e:2e:20:5b:f3:92:57:2c:47:56:a9:56:c3: 1a:a2:ba:7d:9a:6d:f4:c6:ab:97:0e:b6:98:8b:3c: ba:fb:a8:42:26:2d:de:de:36:4f:db:fb:68:54:14: 11:bf:0e:b7:9f:90:d0:62:d8:04:37:1f:17:38:2b: 0f:cd:94:05:91:06:df:3d:5b:f3:37:13:38:76:f5: 03:e9:e4:8b:ce:4d:16:61:3b:89:7a:a2:fc:df:ec: 3e:06:ae:15:ee:83:27:c4:5b:8f:ff:ca:64:49:3e: 98:5a:36:c1:64:61:62:18:52:2f:28:f9:1f:75:71: f6:54:58:a1:b7:33:d9:fe:8c:52:bb:aa:7a:de:9f: c4:ef:d0:f7:7c:fa:22:52:d7:0d:d8:4d:6c:5f:83: 79:2e:15:ca:65:b5:f8:63:bd:52:30:0a:80:8d:90: 08:f6:1c:c6:8e:f7:7d:39:d0:27:67:3c:d5:25:be: 9f:10:61:44:33:8c:85:d3:c0:0c:ea:16:85:75:da: 6d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CD:AC:15:AB:0C:78:BA:87:C9:54:8F:FA:5E:EC:8D:36:D3:F5:29 X509v3 Authority Key Identifier: keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/Hs2sFasMeLqHyVSP-l7sjTbT9Sk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.3.112.0/20 Signature Algorithm: sha256WithRSAEncryption ae:0f:8b:a9:f4:c8:49:77:6b:f4:e2:a4:d9:08:8d:11:b7:fd: ae:de:ba:5e:8b:6f:24:49:34:38:c6:fc:d2:ff:33:8f:1b:79: e1:26:3e:58:e8:ea:e0:87:4f:cc:fa:1b:fd:45:61:20:04:45: 76:cb:b0:d9:2e:5d:ab:d2:b3:de:92:70:b5:36:46:92:ac:0d: e1:d0:7e:2b:69:0e:43:af:6a:d3:a8:9f:55:2c:bb:ee:36:14: 1a:50:06:75:f3:9d:89:3f:04:c4:4a:fa:45:a1:bc:df:12:59: bb:3c:78:a8:23:1c:e5:fe:d1:df:62:aa:2d:59:1c:d1:49:5a: 1c:9c:7a:ce:18:77:4d:16:1f:0b:af:e5:d7:5d:04:15:7f:e2: b6:59:29:cb:b2:ba:3d:32:7b:35:87:ee:ee:b5:89:33:a1:66: 1c:be:25:2e:fa:3a:f9:74:4c:74:9c:e7:8c:ad:f9:c3:5a:f6: 62:6e:67:fc:05:74:9f:37:fa:41:9a:ef:02:3b:c1:e6:2f:ef: a5:7e:19:55:be:f4:ab:98:11:ae:fc:56:e6:18:42:fb:f5:b4: 0d:93:74:9d:d3:af:d1:56:11:a3:f5:d3:cd:3f:2e:52:1e:54: 25:3a:f8:e0:e0:ff:2c:cd:b8:40:91:52:fe:80:ea:e3:51:bf: 81:8f:1e:ea -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDRkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1 NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yNTAyMTAx NDIzMjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFFQ0RBQzE1QUIwQzc4 QkE4N0M5NTQ4RkZBNUVFQzhEMzZEM0Y1MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7/f0uNNTTrq8vzURsbZPCIeHwNBjoyDy33U/0C4f9sZB7TIq7 VZpR4+gccAMWYefPK6vUo2O8EJP6dEsxTi4gW/OSVyxHVqlWwxqiun2abfTGq5cO tpiLPLr7qEImLd7eNk/b+2hUFBG/DrefkNBi2AQ3Hxc4Kw/NlAWRBt89W/M3Ezh2 9QPp5IvOTRZhO4l6ovzf7D4GrhXugyfEW4//ymRJPphaNsFkYWIYUi8o+R91cfZU WKG3M9n+jFK7qnren8Tv0Pd8+iJS1w3YTWxfg3kuFcpltfhjvVIwCoCNkAj2HMaO 93050CdnPNUlvp8QYUQzjIXTwAzqFoV12m3BAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUHs2sFasMeLqHyVSP+l7sjTbT9SkwHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83 NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2L0hzMnNGYXNNZUxx SHlWU1AtbDdzalRiVDlTay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARlA3AwDQYJKoZIhvcNAQELBQADggEBAK4Pi6n0yEl3a/TipNkIjRG3/a7e ul6LbyRJNDjG/NL/M48beeEmPljo6uCHT8z6G/1FYSAERXbLsNkuXavSs96ScLU2 RpKsDeHQfitpDkOvatOon1Usu+42FBpQBnXznYk/BMRK+kWhvN8SWbs8eKgjHOX+ 0d9iqi1ZHNFJWhyces4Yd00WHwuv5dddBBV/4rZZKcuyuj0yezWH7u61iTOhZhy+ JS76Ovl0THSc54yt+cNa9mJuZ/wFdJ83+kGa7wI7weYv76V+GVW+9KuYEa78VuYY Qvv1tA2TdJ3Tr9FWEaP1080/LlIeVCU6+ODg/yzNuECRUv6A6uNRv4GPHuo= -----END CERTIFICATE-----Generated at Sat Apr 5 23:06:38 2025 by rpki-client