$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/NQAwKbOGOfF-viYzKOADjvYySDA.roa File: NQAwKbOGOfF-viYzKOADjvYySDA.roa (raw, json) Hash identifier: uKV7BLo+tg/YHoWlkKO2iipSiVEc7NiY0k7zgrEjY90= Subject key identifier: 35:00:30:29:B3:86:39:F1:7E:BE:26:33:28:E0:03:8E:F6:32:48:30 Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Certificate serial: 0D1A Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/NQAwKbOGOfF-viYzKOADjvYySDA.roa Signing time: Mon 10 Feb 2025 14:23:27 +0000 ROA not before: Mon 10 Feb 2025 14:23:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 101.3.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 17:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3354 (0xd1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Validity Not Before: Feb 10 14:23:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=35003029B38639F17EBE263328E0038EF6324830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b0:ac:f0:82:3a:12:70:d0:3c:58:82:d8:7d: d3:cc:7f:51:ac:9d:ae:60:7f:b5:73:06:14:a4:c5: d4:ce:cf:5b:d1:b0:5e:94:40:3c:f3:d2:0a:af:a7: 0c:9d:d2:aa:68:37:a8:fa:03:e4:55:6d:67:b7:56: 9c:04:94:ac:48:51:7b:e4:b1:ed:47:24:b4:33:50: 49:fd:77:fd:f0:0e:57:6e:45:1d:57:2b:8b:df:9c: 43:0d:a0:5a:10:71:2c:63:01:18:98:c9:4f:c6:07: 6e:f4:15:85:0a:34:52:68:16:ff:49:00:cc:16:13: 6f:da:ff:3a:5d:e1:2a:8a:b0:51:ea:3c:f5:82:c3: ff:a7:22:34:de:8a:b5:27:95:a6:e5:54:1f:c0:d9: 71:e0:8f:cb:70:36:89:fa:96:c8:41:f7:5f:8e:58: 79:d8:80:fe:11:8b:7c:11:cf:f4:1e:99:2c:48:a2: 22:5b:18:60:7e:e1:8b:12:a0:12:d1:57:25:92:f7: c6:24:2e:8c:aa:69:2b:72:e6:81:68:52:b9:1e:c5: 79:5f:cf:f6:f3:3c:7d:15:54:45:45:34:88:0a:ab: a1:a4:29:3f:03:4a:8f:20:2b:b2:93:20:9c:11:4c: 1e:c4:3b:62:71:05:9a:7b:61:2b:1d:50:be:02:1b: 6a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:00:30:29:B3:86:39:F1:7E:BE:26:33:28:E0:03:8E:F6:32:48:30 X509v3 Authority Key Identifier: keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/NQAwKbOGOfF-viYzKOADjvYySDA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.3.108.0/22 Signature Algorithm: sha256WithRSAEncryption 87:5b:94:33:de:fe:a7:8a:e5:12:6d:51:dd:c9:2d:3b:4b:bf: e1:e5:82:6a:b5:36:ff:c9:2a:70:92:65:70:4c:22:ac:27:aa: 2c:c7:53:59:da:b0:8a:93:a4:57:2f:bf:ad:e9:2b:56:a9:94: 72:56:e4:a9:8c:b4:08:1c:7a:99:7b:3f:a7:1b:85:6c:21:71: a1:4c:a9:19:cb:d2:e0:f6:50:25:74:1c:ee:ea:42:78:4f:81: 80:c3:6d:80:27:ba:d5:71:5b:54:08:da:bf:41:08:f4:65:bc: 1d:4b:a0:78:f1:85:64:fd:83:f9:fb:f5:e9:d4:93:1a:80:10: e3:4c:75:87:41:61:9d:27:5f:00:0c:e1:09:ab:86:32:96:8b: fd:61:4f:9f:79:db:85:38:95:bb:05:59:15:9c:08:31:cf:e0: 28:43:a5:8c:c8:54:01:2e:2e:7b:14:1b:b8:8d:45:92:3c:ab: d3:92:0f:c4:a0:83:94:4c:13:a9:b9:59:2e:47:9d:a6:57:a0: 40:90:84:95:0d:1a:4d:94:10:4b:4e:95:a9:9b:a4:b3:03:62: 61:f5:44:85:0d:03:30:65:f5:dc:a8:83:9f:ab:31:6a:4c:5d: 99:c4:52:e7:0e:eb:be:05:10:95:e2:e5:5f:1f:de:85:af:33: 1b:d0:9a:3e -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDRowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1 NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yNTAyMTAx NDIzMjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM1MDAzMDI5QjM4NjM5 RjE3RUJFMjYzMzI4RTAwMzhFRjYzMjQ4MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnsKzwgjoScNA8WILYfdPMf1Gsna5gf7VzBhSkxdTOz1vRsF6U QDzz0gqvpwyd0qpoN6j6A+RVbWe3VpwElKxIUXvkse1HJLQzUEn9d/3wDlduRR1X K4vfnEMNoFoQcSxjARiYyU/GB270FYUKNFJoFv9JAMwWE2/a/zpd4SqKsFHqPPWC w/+nIjTeirUnlablVB/A2XHgj8twNon6lshB91+OWHnYgP4Ri3wRz/QemSxIoiJb GGB+4YsSoBLRVyWS98YkLoyqaSty5oFoUrkexXlfz/bzPH0VVEVFNIgKq6GkKT8D So8gK7KTIJwRTB7EO2JxBZp7YSsdUL4CG2o3AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUNQAwKbOGOfF+viYzKOADjvYySDAwHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83 NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2L05RQXdLYk9HT2ZG LXZpWXpLT0FEanZZeVNEQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJlA2wwDQYJKoZIhvcNAQELBQADggEBAIdblDPe/qeK5RJtUd3JLTtLv+Hl gmq1Nv/JKnCSZXBMIqwnqizHU1nasIqTpFcvv63pK1aplHJW5KmMtAgcepl7P6cb hWwhcaFMqRnL0uD2UCV0HO7qQnhPgYDDbYAnutVxW1QI2r9BCPRlvB1LoHjxhWT9 g/n79enUkxqAEONMdYdBYZ0nXwAM4QmrhjKWi/1hT59524U4lbsFWRWcCDHP4ChD pYzIVAEuLnsUG7iNRZI8q9OSD8Sgg5RME6m5WS5HnaZXoECQhJUNGk2UEEtOlamb pLMDYmH1RIUNAzBl9dyog5+rMWpMXZnEUucO674FEJXi5V8f3oWvMxvQmj4= -----END CERTIFICATE-----Generated at Sat Apr 5 16:28:50 2025 by rpki-client