$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATHDD/DjePpG3eCyLdVrbITDGQfT4lTp0.roa File: DjePpG3eCyLdVrbITDGQfT4lTp0.roa (raw, json) Hash identifier: 4m5WHBeitZvTyTvv3fFULPLp8Tma7o0qY69KWJcsimc= Subject key identifier: 0E:37:8F:A4:6D:DE:0B:22:DD:56:B6:C8:4C:31:90:7D:3E:25:4E:9D Certificate issuer: /CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE Certificate serial: 027A Authority key identifier: 20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/DjePpG3eCyLdVrbITDGQfT4lTp0.roa Signing time: Mon 10 Feb 2025 14:05:30 +0000 ROA not before: Mon 10 Feb 2025 14:05:30 +0000 ROA not after: Wed 15 Oct 2025 15:30:20 +0000 asID: 150766 IP address blocks: 160.191.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 634 (0x27a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE Validity Not Before: Feb 10 14:05:30 2025 GMT Not After : Oct 15 15:30:20 2025 GMT Subject: CN=0E378FA46DDE0B22DD56B6C84C31907D3E254E9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:45:8a:d0:90:d9:1c:18:7c:78:1e:4b:c0:cc: 4b:a5:cb:30:c3:84:c9:a7:58:40:d9:a5:4d:26:bb: 8d:9a:61:db:b8:ce:0e:de:f4:db:71:04:46:6c:b0: 4c:ec:9f:33:29:ad:14:b6:87:34:b9:9c:bd:36:ad: 14:5f:8c:84:77:3c:cf:50:26:04:52:3c:5e:4e:8f: 84:45:1c:2e:7e:c9:38:c6:d5:c3:fb:ca:54:2d:4d: 35:3f:5b:53:65:d7:8b:aa:2b:96:e8:b4:91:77:b9: 35:ac:ad:07:a3:57:d6:e0:7b:d8:d4:32:19:86:d6: 69:c7:50:cb:0d:ea:6c:54:d3:fa:e8:85:9d:ad:04: 5c:05:47:43:de:17:59:88:fe:42:33:01:9f:66:7e: 2e:1b:0d:4d:81:67:b6:83:ef:45:32:5d:c3:9b:eb: 42:6a:f0:36:6b:df:a7:35:71:c6:f6:03:c8:7f:64: 54:bd:dc:a9:da:ca:46:93:f8:2c:e0:46:46:b2:a7: d0:e6:21:f3:ad:61:82:cd:9e:6b:ac:c8:0a:a8:72: 47:e3:a6:25:03:74:90:b4:27:55:be:39:49:32:d6: 01:d3:19:01:9e:20:fe:89:48:10:60:ea:a3:64:3e: fc:d1:df:3b:59:64:64:18:9d:fc:0a:18:7a:3a:cf: 33:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:37:8F:A4:6D:DE:0B:22:DD:56:B6:C8:4C:31:90:7D:3E:25:4E:9D X509v3 Authority Key Identifier: keyid:20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/DjePpG3eCyLdVrbITDGQfT4lTp0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.9.0/24 Signature Algorithm: sha256WithRSAEncryption 58:44:33:3b:fa:f7:58:c7:9d:2a:b5:7c:cc:95:dc:e1:5e:c0: 65:c9:61:7a:1f:23:1a:03:3f:89:3d:ad:fc:e9:af:f8:37:6b: dd:34:0a:9e:77:45:ce:63:89:38:e1:9a:ab:58:84:31:81:34: a3:11:af:6e:79:a3:e2:3a:ed:08:67:f0:68:8b:fc:96:9b:33: 94:9f:bf:bb:7b:00:b1:44:ad:b3:02:51:cb:3f:54:02:5f:36: ec:8f:0a:84:7a:60:2e:d1:fe:ce:a5:35:65:41:3e:18:10:e8: 7b:d1:30:ec:7a:39:60:aa:19:17:dc:fb:4b:0c:d8:bb:e2:33: ca:fa:b1:80:7b:87:9d:f8:7c:6c:ec:f6:90:1e:c1:75:6e:82: a8:86:c9:a8:1b:5a:09:ec:b8:7a:58:f6:a3:12:09:48:a6:e1: ac:04:26:52:b0:87:ac:f2:b6:57:af:7e:8c:b4:d6:81:6e:33: 58:06:81:dc:4b:70:17:73:83:69:b8:72:46:c3:7f:58:88:dc: b8:1b:c1:f7:b1:20:94:6d:16:87:a0:12:8f:73:59:91:32:f3: 2c:35:1b:ac:04:53:ec:b4:04:8f:a2:8b:25:68:3d:8e:a0:38: b3:2c:2b:a9:6e:92:c5:dd:3b:3c:5b:29:ce:5c:58:82:20:b7: f7:26:d1:68 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAnowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjBB Q0NBODcxODUwMDM3M0FGRjc3QjQxNEIyM0RDNkE1RjE0NzRFRTAeFw0yNTAyMTAx NDA1MzBaFw0yNTEwMTUxNTMwMjBaMDMxMTAvBgNVBAMTKDBFMzc4RkE0NkRERTBC MjJERDU2QjZDODRDMzE5MDdEM0UyNTRFOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDORYrQkNkcGHx4HkvAzEulyzDDhMmnWEDZpU0mu42aYdu4zg7e 9NtxBEZssEzsnzMprRS2hzS5nL02rRRfjIR3PM9QJgRSPF5Oj4RFHC5+yTjG1cP7 ylQtTTU/W1Nl14uqK5botJF3uTWsrQejV9bge9jUMhmG1mnHUMsN6mxU0/rohZ2t BFwFR0PeF1mI/kIzAZ9mfi4bDU2BZ7aD70UyXcOb60Jq8DZr36c1ccb2A8h/ZFS9 3KnaykaT+CzgRkayp9DmIfOtYYLNnmusyAqockfjpiUDdJC0J1W+OUky1gHTGQGe IP6JSBBg6qNkPvzR3ztZZGQYnfwKGHo6zzOhAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUDjePpG3eCyLdVrbITDGQfT4lTp0wHwYDVR0jBBgwFoAUIKzKhxhQA3Ov93tB SyPcal8UdO4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FUSERE L0lLektoeGhRQTNPdjkzdEJTeVBjYWw4VWRPNC5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSUt6S2h4aFFBM092OTN0QlN5UGNhbDhVZE80LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FUSEREL0RqZVBwRzNlQ3lMZFZyYklU REdRZlQ0bFRwMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACg vwkwDQYJKoZIhvcNAQELBQADggEBAFhEMzv691jHnSq1fMyV3OFewGXJYXofIxoD P4k9rfzpr/g3a900Cp53Rc5jiTjhmqtYhDGBNKMRr255o+I67Qhn8GiL/JabM5Sf v7t7ALFErbMCUcs/VAJfNuyPCoR6YC7R/s6lNWVBPhgQ6HvRMOx6OWCqGRfc+0sM 2LviM8r6sYB7h534fGzs9pAewXVugqiGyagbWgnsuHpY9qMSCUim4awEJlKwh6zy tlevfoy01oFuM1gGgdxLcBdzg2m4ckbDf1iI3LgbwfexIJRtFoegEo9zWZEy8yw1 G6wEU+y0BI+iiyVoPY6gOLMsK6luksXdOzxbKc5cWIIgt/cm0Wg= -----END CERTIFICATE-----Generated at Wed Feb 19 21:55:59 2025 by rpki-client