$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/XNCDWV3ZVz5RlL3DyJ3nyvPaqhE.roa File: XNCDWV3ZVz5RlL3DyJ3nyvPaqhE.roa (raw, json) Hash identifier: g7890zWfIvd8By3eVMR5MGg0QCsLhv+AyZ02JyKezdI= Subject key identifier: 5C:D0:83:59:5D:D9:57:3E:51:94:BD:C3:C8:9D:E7:CA:F3:DA:AA:11 Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Certificate serial: 0D23 Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/XNCDWV3ZVz5RlL3DyJ3nyvPaqhE.roa Signing time: Mon 10 Feb 2025 14:23:29 +0000 ROA not before: Mon 10 Feb 2025 14:23:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131584 IP address blocks: 111.235.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3363 (0xd23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Validity Not Before: Feb 10 14:23:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5CD083595DD9573E5194BDC3C89DE7CAF3DAAA11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a5:6f:4e:6d:ab:ce:bb:3f:04:bb:56:00:3e: 1d:bb:62:4e:9b:88:d5:f3:3b:98:21:30:a9:ed:c9: 92:84:a3:29:c5:27:74:da:a5:15:c0:b4:85:98:c3: 57:d3:4e:f1:05:6a:31:02:60:c3:de:3e:6d:b6:2e: 5d:92:bd:4e:62:b4:d4:d9:65:65:e7:4d:da:7d:58: 69:fb:59:fd:4c:a3:ff:3b:66:3f:87:aa:49:ed:80: 22:17:3a:c5:36:d9:7c:a4:4c:ad:f9:85:ee:bd:d6: ef:24:a0:42:a5:58:37:10:b8:12:20:6a:cf:df:1a: 51:41:64:4e:be:92:06:f8:9f:31:ee:2c:e3:5b:aa: 5e:af:e9:8a:cc:10:73:15:c1:3d:db:e7:b1:93:79: 7e:71:78:8f:fa:13:e3:fe:04:3a:53:6e:de:b4:4b: 10:43:e7:25:46:e8:d5:fe:a2:29:55:4e:d0:2e:f4: 49:d3:bf:e2:4f:6f:25:49:3f:d1:72:e5:c9:6c:64: fe:a6:fd:1f:9b:b1:b3:54:6b:8f:57:ad:ea:e1:8d: 4d:1a:50:25:30:ae:d5:00:95:61:2c:6d:7e:f1:7f: 91:5d:92:a9:97:c2:d2:45:f2:9f:51:53:47:86:f2: 29:fd:88:af:29:3a:bf:00:f0:01:6b:44:9b:ab:6f: bd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D0:83:59:5D:D9:57:3E:51:94:BD:C3:C8:9D:E7:CA:F3:DA:AA:11 X509v3 Authority Key Identifier: keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/XNCDWV3ZVz5RlL3DyJ3nyvPaqhE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 111.235.192.0/18 Signature Algorithm: sha256WithRSAEncryption 8a:da:f6:63:12:36:ec:6b:d0:5a:dc:25:df:2d:9e:c5:b3:ad: ff:2c:76:73:09:1e:5d:e1:34:4b:8c:1e:cc:b0:86:62:0a:e1: 7a:5c:61:4c:e3:c6:3f:d0:cb:b0:da:95:35:dd:f4:ef:da:45: 28:b1:4c:05:51:3a:e9:68:5f:95:a9:d6:47:0e:d7:64:fa:8d: 8f:97:51:39:d6:3e:17:75:70:3c:5a:31:83:12:fa:fa:8a:27: 68:b7:2f:1b:fc:c9:1a:fe:b6:a4:90:0e:b7:87:73:ec:cb:57: 81:0e:4a:13:4f:f5:33:c6:53:95:2a:25:2d:e9:59:22:5f:3b: 86:e3:0f:bf:77:1f:3f:6c:6c:48:a4:03:f0:c7:11:d0:6a:c3: 9c:94:28:28:13:2d:5e:eb:f3:8c:fc:3c:93:d7:fa:7c:75:c9: 36:b2:3c:f7:31:a9:a0:be:e3:d3:a3:b3:c1:a9:e0:50:af:2d: 1e:43:08:3b:ae:3f:83:36:d8:6a:58:d3:5e:af:96:8f:b2:74: 9b:ea:25:f4:ae:c1:ee:1c:07:7f:a1:2b:69:3f:cf:fd:68:ec: 3b:f3:05:ec:bc:93:10:2f:83:2c:4d:d3:92:74:7b:9f:22:24: 70:ac:47:b4:88:b7:fc:de:9e:7c:88:ca:85:6e:59:01:5f:9d: 41:42:db:cb -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDSMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1 NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yNTAyMTAx NDIzMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVDRDA4MzU5NUREOTU3 M0U1MTk0QkRDM0M4OURFN0NBRjNEQUFBMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDspW9ObavOuz8Eu1YAPh27Yk6biNXzO5ghMKntyZKEoynFJ3Ta pRXAtIWYw1fTTvEFajECYMPePm22Ll2SvU5itNTZZWXnTdp9WGn7Wf1Mo/87Zj+H qkntgCIXOsU22XykTK35he691u8koEKlWDcQuBIgas/fGlFBZE6+kgb4nzHuLONb ql6v6YrMEHMVwT3b57GTeX5xeI/6E+P+BDpTbt60SxBD5yVG6NX+oilVTtAu9EnT v+JPbyVJP9Fy5clsZP6m/R+bsbNUa49XrerhjU0aUCUwrtUAlWEsbX7xf5FdkqmX wtJF8p9RU0eG8in9iK8pOr8A8AFrRJurb70vAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUXNCDWV3ZVz5RlL3DyJ3nyvPaqhEwHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83 NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2L1hOQ0RXVjNaVno1 UmxMM0R5SjNueXZQYXFoRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZv68AwDQYJKoZIhvcNAQELBQADggEBAIra9mMSNuxr0FrcJd8tnsWzrf8s dnMJHl3hNEuMHsywhmIK4XpcYUzjxj/Qy7DalTXd9O/aRSixTAVROuloX5Wp1kcO 12T6jY+XUTnWPhd1cDxaMYMS+vqKJ2i3Lxv8yRr+tqSQDreHc+zLV4EOShNP9TPG U5UqJS3pWSJfO4bjD793Hz9sbEikA/DHEdBqw5yUKCgTLV7r84z8PJPX+nx1yTay PPcxqaC+49Ojs8Gp4FCvLR5DCDuuP4M22GpY016vlo+ydJvqJfSuwe4cB3+hK2k/ z/1o7DvzBey8kxAvgyxN05J0e58iJHCsR7SIt/zennyIyoVuWQFfnUFC28s= -----END CERTIFICATE-----Generated at Mon Apr 7 20:54:11 2025 by rpki-client