$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASNET/jXDPeJq12ggj_MB4JIPiVa-V8ZU.roa File: jXDPeJq12ggj_MB4JIPiVa-V8ZU.roa (raw, json) Hash identifier: nIHOOuv3XT3n0mjrT4eEruvLbkstdVLcvYWH7R8pMW4= Subject key identifier: 8D:70:CF:78:9A:B5:DA:08:23:FC:C0:78:24:83:E2:55:AF:95:F1:95 Certificate issuer: /CN=70984F008CA28F6475DB426353BFD1C433D8BC1A Certificate serial: 0CC0 Authority key identifier: 70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/jXDPeJq12ggj_MB4JIPiVa-V8ZU.roa Signing time: Mon 10 Feb 2025 14:29:49 +0000 ROA not before: Mon 10 Feb 2025 14:29:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9264 IP address blocks: 202.169.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3264 (0xcc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70984F008CA28F6475DB426353BFD1C433D8BC1A Validity Not Before: Feb 10 14:29:49 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8D70CF789AB5DA0823FCC0782483E255AF95F195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5a:98:a7:51:bb:d5:e5:9c:eb:5f:a5:3f:9a: 6a:6b:01:90:a1:14:24:db:2a:4f:30:b9:56:d7:f8: ad:8a:cc:8f:86:63:66:59:7f:63:d8:f6:a3:7b:48: eb:00:b7:18:e4:3c:67:37:66:32:cc:98:6f:2f:2f: b1:a5:1e:af:79:b1:41:d6:0e:11:0e:ee:ad:09:51: 79:71:8b:49:4e:11:68:81:64:8d:f7:78:bc:9f:ef: 0f:8b:20:63:ce:09:f8:2e:97:df:e7:3e:a5:4c:2a: a5:5d:e6:92:ba:e0:36:a3:ff:8e:df:94:cf:61:b7: 0c:fb:ff:a1:36:61:50:86:e5:be:4e:94:fa:06:dc: ab:86:93:8d:f1:f4:97:47:6d:14:f4:38:3b:e5:9a: c4:35:95:93:d2:0e:63:c2:bd:cd:bd:cd:03:66:d3: 21:a8:27:57:45:b3:aa:f8:96:4d:53:04:70:ba:d9: 44:93:c3:a9:d9:62:27:e7:86:98:73:81:bb:65:48: 9e:29:2d:99:d8:34:c6:18:50:8c:92:0c:d9:7f:0d: 27:d9:4c:4f:d4:05:f8:f4:2a:7b:b4:08:4c:c6:b4: 32:42:61:33:4d:61:5a:ab:73:5c:c8:c1:0a:ec:3d: 71:8b:17:a2:41:02:32:64:d2:3a:06:33:85:d8:01: 32:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:70:CF:78:9A:B5:DA:08:23:FC:C0:78:24:83:E2:55:AF:95:F1:95 X509v3 Authority Key Identifier: keyid:70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/jXDPeJq12ggj_MB4JIPiVa-V8ZU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.169.160.0/20 Signature Algorithm: sha256WithRSAEncryption 4a:a7:28:a4:e1:19:aa:e6:8a:4e:19:32:e4:2e:a0:21:b0:b6: 75:8d:46:2b:97:20:4b:a6:bb:a1:9d:19:a9:47:53:71:b9:6f: 08:97:b6:c3:c2:6f:b9:3a:11:26:39:c7:60:3a:a8:05:f2:63: 0d:f4:a8:9a:ee:ca:72:02:07:c2:32:0e:bf:30:7c:80:01:20: 9e:6f:40:8f:bb:79:64:f1:c4:10:cc:c8:c6:c6:83:d3:68:47: 24:dd:09:8b:dd:5e:12:0d:df:4d:71:39:9b:a6:b1:0a:c8:41: 55:a8:e2:fa:46:e0:7e:a4:d1:cf:b6:f2:88:d0:9b:6f:ff:04: 62:39:30:c3:9e:7c:b6:ca:d5:04:02:3b:06:bd:6a:19:30:c9: 0c:74:0b:bd:e7:b7:a2:ba:81:52:31:78:f0:33:90:a9:4f:34: 5d:96:03:12:88:a6:5d:d1:50:61:44:3d:3a:1d:7e:85:87:9a: 62:fd:71:b9:09:77:ff:2f:5e:53:e4:92:2b:35:08:d2:32:4d: 60:f0:91:f2:c8:fc:03:86:52:dc:9e:17:1b:02:9b:80:15:d0: d2:2d:ce:b5:36:08:8b:02:3b:a7:de:97:1a:1f:61:43:34:30: d4:00:4e:1f:d2:c6:07:06:29:d2:de:4f:07:a9:1c:cf:f8:27: 7b:9e:8e:f4 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzA5 ODRGMDA4Q0EyOEY2NDc1REI0MjYzNTNCRkQxQzQzM0Q4QkMxQTAeFw0yNTAyMTAx NDI5NDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhENzBDRjc4OUFCNURB MDgyM0ZDQzA3ODI0ODNFMjU1QUY5NUYxOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeWpinUbvV5ZzrX6U/mmprAZChFCTbKk8wuVbX+K2KzI+GY2ZZ f2PY9qN7SOsAtxjkPGc3ZjLMmG8vL7GlHq95sUHWDhEO7q0JUXlxi0lOEWiBZI33 eLyf7w+LIGPOCfgul9/nPqVMKqVd5pK64Daj/47flM9htwz7/6E2YVCG5b5OlPoG 3KuGk43x9JdHbRT0ODvlmsQ1lZPSDmPCvc29zQNm0yGoJ1dFs6r4lk1TBHC62UST w6nZYifnhphzgbtlSJ4pLZnYNMYYUIySDNl/DSfZTE/UBfj0Knu0CEzGtDJCYTNN YVqrc1zIwQrsPXGLF6JBAjJk0joGM4XYATKnAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUjXDPeJq12ggj/MB4JIPiVa+V8ZUwHwYDVR0jBBgwFoAUcJhPAIyij2R120Jj U7/RxDPYvBowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNORVQv Y0poUEFJeWlqMlIxMjBKalU3X1J4RFBZdkJvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9jSmhQQUl5aWoyUjEyMEpqVTdfUnhEUFl2Qm8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BU05FVC9qWERQZUpxMTJnZ2pfTUI0SklQ aVZhLVY4WlUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEyqmg MA0GCSqGSIb3DQEBCwUAA4IBAQBKpyik4Rmq5opOGTLkLqAhsLZ1jUYrlyBLpruh nRmpR1NxuW8Il7bDwm+5OhEmOcdgOqgF8mMN9Kia7spyAgfCMg6/MHyAASCeb0CP u3lk8cQQzMjGxoPTaEck3QmL3V4SDd9NcTmbprEKyEFVqOL6RuB+pNHPtvKI0Jtv /wRiOTDDnny2ytUEAjsGvWoZMMkMdAu957eiuoFSMXjwM5CpTzRdlgMSiKZd0VBh RD06HX6Fh5pi/XG5CXf/L15T5JIrNQjSMk1g8JHyyPwDhlLcnhcbApuAFdDSLc61 NgiLAjun3pcaH2FDNDDUAE4f0sYHBinS3k8HqRzP+Cd7no70 -----END CERTIFICATE-----Generated at Fri Apr 18 15:34:11 2025 by rpki-client