$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATVISP/LffH-WpKvi9XJinz2aE4VouiZvA.roa File: LffH-WpKvi9XJinz2aE4VouiZvA.roa (raw, json) Hash identifier: +immBejONVbvGXOv0AuvPFoJNCQVrwob046TeyWavU0= Subject key identifier: 2D:F7:C7:F9:6A:4A:BE:2F:57:26:29:F3:D9:A1:38:56:8B:A2:66:F0 Certificate issuer: /CN=BD822D992B0F68B61E6E0A2E6143F2BF8915BB61 Certificate serial: 0C3F Authority key identifier: BD:82:2D:99:2B:0F:68:B6:1E:6E:0A:2E:61:43:F2:BF:89:15:BB:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/vYItmSsPaLYebgouYUPyv4kVu2E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/LffH-WpKvi9XJinz2aE4VouiZvA.roa Signing time: Mon 10 Feb 2025 14:19:35 +0000 ROA not before: Mon 10 Feb 2025 14:19:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18046 IP address blocks: 103.233.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/vYItmSsPaLYebgouYUPyv4kVu2E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/vYItmSsPaLYebgouYUPyv4kVu2E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/vYItmSsPaLYebgouYUPyv4kVu2E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 21:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3135 (0xc3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD822D992B0F68B61E6E0A2E6143F2BF8915BB61 Validity Not Before: Feb 10 14:19:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2DF7C7F96A4ABE2F572629F3D9A138568BA266F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:54:2d:5a:24:18:b4:ad:ec:a3:cb:ca:6b:75: 19:6e:7a:ca:0c:c2:13:fb:95:63:2d:31:36:10:c6: cd:ae:39:f6:3b:d6:9e:b5:b0:06:eb:57:48:32:0f: c1:10:29:51:25:34:02:89:89:24:e4:d8:bd:3d:c3: 17:90:66:26:52:e6:fe:a4:8e:8d:6c:76:66:ca:c3: fa:08:c7:01:be:c1:10:b0:a0:e5:81:82:cb:60:63: 16:a2:a1:70:af:42:19:f3:75:80:d1:0f:17:f5:87: 70:d4:57:7d:db:5e:5f:f1:cc:fc:97:84:bf:da:9a: 3d:95:e0:a9:d9:51:22:59:cc:2d:f6:ef:22:0f:ee: 2e:d9:7d:4f:45:35:dc:56:60:e9:7c:26:14:71:35: 49:82:fc:ff:7e:cc:d8:28:13:48:19:b2:d0:97:52: cb:97:3c:f9:d3:33:45:bc:0b:68:db:e8:3d:2d:d4: 54:62:32:97:b9:32:95:53:cb:d0:5e:c3:60:76:98: c1:04:7d:b4:37:37:1f:aa:9a:55:40:48:ee:ee:f5: 90:b9:81:5a:5e:8b:76:9f:3d:98:6a:bf:63:04:02: a6:b8:9b:72:42:c4:d1:67:5c:6c:33:63:6b:ba:f6: c4:de:29:38:69:ec:fc:7b:65:43:f1:b2:5b:85:29: e0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F7:C7:F9:6A:4A:BE:2F:57:26:29:F3:D9:A1:38:56:8B:A2:66:F0 X509v3 Authority Key Identifier: keyid:BD:82:2D:99:2B:0F:68:B6:1E:6E:0A:2E:61:43:F2:BF:89:15:BB:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/vYItmSsPaLYebgouYUPyv4kVu2E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/vYItmSsPaLYebgouYUPyv4kVu2E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/LffH-WpKvi9XJinz2aE4VouiZvA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.233.68.0/22 Signature Algorithm: sha256WithRSAEncryption 57:16:7a:76:91:fa:b7:9a:83:bf:2c:14:83:56:86:be:32:b1: b1:b7:e8:fe:a0:c2:7d:3f:c3:be:21:37:af:6d:43:96:61:1b: 3b:ed:dc:11:30:e4:20:ce:ff:9d:0d:04:eb:8d:8c:e8:96:16: bf:f4:81:eb:ca:78:01:d1:68:33:8f:19:8b:54:f8:46:bb:03: 0a:d5:31:3f:ae:df:26:d6:8e:54:ad:5c:99:13:2a:61:33:a6: 2b:5d:08:8d:da:26:63:71:68:33:8f:5b:10:ee:d4:d6:75:c4: b3:3e:85:31:29:d2:7d:3a:ce:c5:14:1f:26:69:81:e4:ef:35: ca:fc:56:b5:b5:d4:22:83:ce:e6:a6:49:01:12:93:55:3b:3e: 93:4f:49:6c:cc:f7:d2:a5:c5:6e:35:63:33:6f:b6:36:c2:ed: 21:92:82:dd:f5:48:3e:9d:9a:a7:18:19:1f:0c:ac:db:45:75: 38:61:25:a4:d9:1c:16:8e:30:13:cb:a7:4d:ef:b6:71:fa:b9: 1a:7f:1d:3a:7a:ed:44:91:8c:18:7d:49:77:c7:3e:3b:84:aa: 9b:0a:f7:34:9f:5d:94:d8:63:07:97:de:6c:40:2f:18:6c:60: 17:7a:49:db:62:fe:82:51:2b:b9:b2:4c:07:80:b6:98:a7:0e: 97:6f:89:b6 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDD8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkQ4 MjJEOTkyQjBGNjhCNjFFNkUwQTJFNjE0M0YyQkY4OTE1QkI2MTAeFw0yNTAyMTAx NDE5MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJERjdDN0Y5NkE0QUJF MkY1NzI2MjlGM0Q5QTEzODU2OEJBMjY2RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxVC1aJBi0reyjy8prdRluesoMwhP7lWMtMTYQxs2uOfY71p61 sAbrV0gyD8EQKVElNAKJiSTk2L09wxeQZiZS5v6kjo1sdmbKw/oIxwG+wRCwoOWB gstgYxaioXCvQhnzdYDRDxf1h3DUV33bXl/xzPyXhL/amj2V4KnZUSJZzC327yIP 7i7ZfU9FNdxWYOl8JhRxNUmC/P9+zNgoE0gZstCXUsuXPPnTM0W8C2jb6D0t1FRi Mpe5MpVTy9Bew2B2mMEEfbQ3Nx+qmlVASO7u9ZC5gVpei3afPZhqv2MEAqa4m3JC xNFnXGwzY2u69sTeKThp7Px7ZUPxsluFKeBzAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQULffH+WpKvi9XJinz2aE4VouiZvAwHwYDVR0jBBgwFoAUvYItmSsPaLYebgou YUPyv4kVu2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FUVklT UC92WUl0bVNzUGFMWWViZ291WVVQeXY0a1Z1MkUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3ZZSXRtU3NQYUxZZWJnb3VZVVB5djRrVnUyRS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NBVFZJU1AvTGZmSC1XcEt2aTlYSmlu ejJhRTRWb3VpWnZBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AmfpRDANBgkqhkiG9w0BAQsFAAOCAQEAVxZ6dpH6t5qDvywUg1aGvjKxsbfo/qDC fT/DviE3r21DlmEbO+3cETDkIM7/nQ0E642M6JYWv/SB68p4AdFoM48Zi1T4RrsD CtUxP67fJtaOVK1cmRMqYTOmK10IjdomY3FoM49bEO7U1nXEsz6FMSnSfTrOxRQf JmmB5O81yvxWtbXUIoPO5qZJARKTVTs+k09JbMz30qXFbjVjM2+2NsLtIZKC3fVI Pp2apxgZHwys20V1OGElpNkcFo4wE8unTe+2cfq5Gn8dOnrtRJGMGH1Jd8c+O4Sq mwr3NJ9dlNhjB5febEAvGGxgF3pJ22L+glErubJMB4C2mKcOl2+Jtg== -----END CERTIFICATE-----Generated at Sun Apr 6 19:49:55 2025 by rpki-client