$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCETECH/VRx72pdtTHFMiqN9RD6G7x7eSYo.roa File: VRx72pdtTHFMiqN9RD6G7x7eSYo.roa (raw, json) Hash identifier: nWRuke5cNs4w9hWijKV4rkTrE3Ajcy5FghoTH7TFyis= Subject key identifier: 55:1C:7B:DA:97:6D:4C:71:4C:8A:A3:7D:44:3E:86:EF:1E:DE:49:8A Certificate issuer: /CN=7E9CEF27C8DED13506B3399D992ECFF626B57951 Certificate serial: 0482 Authority key identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/VRx72pdtTHFMiqN9RD6G7x7eSYo.roa Signing time: Mon 10 Feb 2025 13:57:45 +0000 ROA not before: Mon 10 Feb 2025 13:57:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 208223 IP address blocks: 160.25.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 22:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1154 (0x482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E9CEF27C8DED13506B3399D992ECFF626B57951 Validity Not Before: Feb 10 13:57:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=551C7BDA976D4C714C8AA37D443E86EF1EDE498A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:bb:b0:0f:8a:aa:e6:6a:b0:89:83:68:92:77: 2b:ea:3e:93:18:b2:05:91:a1:33:e6:48:92:39:3c: 8d:0e:12:7e:a1:e6:8a:86:f0:00:6e:d7:4d:3c:f1: 7c:72:96:f8:2b:e1:ac:16:dd:11:e6:cd:91:22:5e: f2:c7:5e:c1:48:1f:20:e2:8c:bc:c2:b0:39:bd:78: 58:f0:e0:9f:1b:d3:24:c4:24:3f:de:f9:f1:bd:1c: a6:ef:ef:50:71:30:14:0b:8b:62:ae:e1:4f:32:39: 2c:4d:74:5f:d3:18:33:70:13:10:c9:0c:c5:86:c7: 6d:7a:1b:0c:af:67:5e:be:33:b3:1a:1f:7f:3a:75: a8:c5:48:d5:3b:a4:83:04:0c:3d:c7:d2:d4:ca:f3: 10:ce:f5:6a:53:77:e2:f1:be:b3:39:62:34:19:11: 45:73:5e:7d:b0:cd:ff:31:bc:14:8a:6b:54:90:2a: 15:45:6a:6f:19:a3:3f:27:5a:f4:49:82:b7:bd:67: a7:3d:78:ac:1c:a5:cb:10:eb:58:ae:f8:31:eb:75: b0:44:8e:7d:eb:59:77:9e:6f:a9:cf:c8:3c:70:0b: 86:9e:8d:3f:31:d8:f2:01:29:1b:dd:9d:ad:eb:30: d9:30:e4:70:62:62:9f:0d:d2:9d:df:3e:6c:2c:3c: 65:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1C:7B:DA:97:6D:4C:71:4C:8A:A3:7D:44:3E:86:EF:1E:DE:49:8A X509v3 Authority Key Identifier: keyid:7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/VRx72pdtTHFMiqN9RD6G7x7eSYo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.25.104.0/23 Signature Algorithm: sha256WithRSAEncryption a4:94:96:5f:65:f9:c0:dc:57:85:c2:9e:58:87:5b:c2:af:c9: 8f:1a:b7:c9:8a:3c:63:72:15:e2:24:30:29:41:2c:91:09:f0: c3:a5:2f:7b:50:6e:f7:51:b5:b5:13:fe:41:77:d1:1b:e5:64: 61:53:5a:ef:12:25:21:c1:c2:a2:0e:49:05:d1:14:a0:37:46: 31:43:94:de:8d:aa:10:d4:18:91:60:c2:1a:93:f7:90:46:30: 29:3d:8b:f8:12:93:3a:37:80:62:7e:30:90:8d:28:66:90:5f: 31:b2:a7:6b:25:b9:38:8c:02:c2:1a:07:cd:1b:b5:5f:25:1f: 55:71:2c:1f:fb:74:6e:11:b2:22:60:5d:ca:b3:ce:2f:05:6b: 2c:c4:70:12:be:d6:71:f4:b2:f3:bf:6e:40:21:29:c4:40:03: f8:9d:ab:95:42:d4:75:68:2d:9d:a1:f2:f2:30:95:31:56:9e: 65:19:3f:d3:b7:f0:c8:34:22:1b:87:40:e2:84:16:52:63:25: 6d:23:5a:fe:b7:00:c9:6e:3b:51:89:ab:75:76:e6:9f:e5:b3: 9a:54:a5:44:4c:01:4a:c6:97:96:fc:a1:9b:0a:e4:45:b9:ac: e9:a4:1a:c2:23:ad:97:b0:00:16:14:83:56:32:a4:51:47:c4: 74:3f:58:af -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0U5 Q0VGMjdDOERFRDEzNTA2QjMzOTlEOTkyRUNGRjYyNkI1Nzk1MTAeFw0yNTAyMTAx MzU3NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU1MUM3QkRBOTc2RDRD NzE0QzhBQTM3RDQ0M0U4NkVGMUVERTQ5OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwu7APiqrmarCJg2iSdyvqPpMYsgWRoTPmSJI5PI0OEn6h5oqG 8ABu10088Xxylvgr4awW3RHmzZEiXvLHXsFIHyDijLzCsDm9eFjw4J8b0yTEJD/e +fG9HKbv71BxMBQLi2Ku4U8yOSxNdF/TGDNwExDJDMWGx216GwyvZ16+M7MaH386 dajFSNU7pIMEDD3H0tTK8xDO9WpTd+LxvrM5YjQZEUVzXn2wzf8xvBSKa1SQKhVF am8Zoz8nWvRJgre9Z6c9eKwcpcsQ61iu+DHrdbBEjn3rWXeeb6nPyDxwC4aejT8x 2PIBKRvdna3rMNkw5HBiYp8N0p3fPmwsPGWTAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUVRx72pdtTHFMiqN9RD6G7x7eSYowHwYDVR0jBBgwFoAUfpzvJ8je0TUGszmd mS7P9ia1eVEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NFVEVD SC9mcHp2SjhqZTBUVUdzem1kbVM3UDlpYTFlVkUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2ZwenZKOGplMFRVR3N6bWRtUzdQOWlhMWVWRS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDRVRFQ0gvVlJ4NzJwZHRUSEZNaXFO OVJENkc3eDdlU1lvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AaAZaDANBgkqhkiG9w0BAQsFAAOCAQEApJSWX2X5wNxXhcKeWIdbwq/Jjxq3yYo8 Y3IV4iQwKUEskQnww6Uve1Bu91G1tRP+QXfRG+VkYVNa7xIlIcHCog5JBdEUoDdG MUOU3o2qENQYkWDCGpP3kEYwKT2L+BKTOjeAYn4wkI0oZpBfMbKnayW5OIwCwhoH zRu1XyUfVXEsH/t0bhGyImBdyrPOLwVrLMRwEr7WcfSy879uQCEpxEAD+J2rlULU dWgtnaHy8jCVMVaeZRk/07fwyDQiG4dA4oQWUmMlbSNa/rcAyW47UYmrdXbmn+Wz mlSlREwBSsaXlvyhmwrkRbms6aQawiOtl7AAFhSDVjKkUUfEdD9Yrw== -----END CERTIFICATE-----Generated at Wed Feb 19 22:08:03 2025 by rpki-client