$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/tvnj3EJpgQ8_jK-Y8_eE75nbZAI.roa File: tvnj3EJpgQ8_jK-Y8_eE75nbZAI.roa (raw, json) Hash identifier: DfPP1gzX9R0g4D4VwZ1EvDbEgoJfMP0e9+REtHu3DyM= Subject key identifier: B6:F9:E3:DC:42:69:81:0F:3F:8C:AF:98:F3:F7:84:EF:99:DB:64:02 Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8 Certificate serial: 0C62 Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/tvnj3EJpgQ8_jK-Y8_eE75nbZAI.roa Signing time: Mon 10 Feb 2025 14:02:16 +0000 ROA not before: Mon 10 Feb 2025 14:02:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131618 IP address blocks: 103.104.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3170 (0xc62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8 Validity Not Before: Feb 10 14:02:16 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B6F9E3DC4269810F3F8CAF98F3F784EF99DB6402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4a:72:d6:dd:f5:c0:85:7b:0c:61:19:b1:ea: 7c:5e:ac:25:dc:cc:ec:42:15:59:ab:92:26:82:5d: 75:c4:26:9b:04:9e:53:e8:39:1c:2a:88:82:3b:b1: cf:07:5c:ae:c2:1c:46:9c:d8:69:b0:1b:6c:c3:65: 87:93:b1:f1:c5:f0:6c:f4:51:d1:03:d2:f6:cc:1b: a2:1f:db:81:33:59:46:48:f1:2b:a7:cb:34:f9:62: 5d:2b:29:51:23:f1:ad:a8:c0:7d:58:4b:57:59:50: 9c:13:bd:04:f6:f7:8d:52:68:b7:e0:7f:fe:68:f9: ac:23:35:bd:72:4b:d7:84:91:6b:9a:07:b4:45:8b: 10:43:68:92:0a:03:75:4d:4f:32:80:84:79:e0:9e: 65:df:f0:78:81:eb:f3:16:37:fb:5b:d6:0d:3c:13: d6:de:fa:81:d9:5c:0a:42:9a:be:cd:f8:23:0e:20: 88:64:06:9f:6d:3e:99:ea:0f:c8:a8:2a:07:1d:08: b3:e3:59:80:61:59:30:88:12:e4:bd:59:bc:cf:f0: fe:29:33:c0:29:56:d9:4b:4f:b1:87:0f:d9:3a:bb: 3b:12:ed:1a:f8:ee:d9:b5:fb:07:4c:d5:02:74:da: d3:f5:96:28:15:fa:b9:e6:5c:e1:b9:5e:7e:c8:ec: c1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F9:E3:DC:42:69:81:0F:3F:8C:AF:98:F3:F7:84:EF:99:DB:64:02 X509v3 Authority Key Identifier: keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/tvnj3EJpgQ8_jK-Y8_eE75nbZAI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.104.151.0/24 Signature Algorithm: sha256WithRSAEncryption 04:ee:9d:da:e6:de:50:3f:d1:10:80:fb:48:0f:43:bb:a8:55: a0:c0:3e:3c:e9:9f:74:ed:e2:5e:a7:de:84:cb:65:38:37:93: a0:49:08:3b:b3:e7:39:ec:dc:c6:c7:39:62:9a:dd:b7:93:43: ca:e8:6d:00:d1:30:26:4a:16:5e:c2:60:f3:9e:9d:6a:51:06: 59:f5:fd:af:3c:df:5b:8e:d2:7e:77:ad:30:9b:5c:66:5d:09: 85:2e:c8:96:48:0d:89:41:32:ad:1b:f8:07:1c:17:93:44:54: 6d:00:d9:b2:7b:87:8c:aa:84:63:cf:a9:eb:55:aa:3d:a0:ea: 76:ae:54:3f:29:9f:23:5a:b3:94:d6:a8:84:22:cb:89:31:98: a0:eb:ba:64:2a:79:c0:f4:8d:b1:d9:0d:26:38:f2:a7:87:18: fa:35:a9:19:99:e1:d6:59:4f:83:f7:f6:9f:10:1c:f5:f2:5e: f5:7e:96:15:eb:e4:5e:92:34:87:14:ce:f5:9e:80:16:e7:1c: ea:9b:1d:b5:9a:df:bb:e3:33:22:12:df:c8:36:08:6f:79:56: cc:33:84:b0:25:81:00:cf:8f:7b:b7:41:24:9c:50:77:b5:e5: 99:3c:0a:04:bb:9a:2b:d9:0c:37:85:3c:08:15:16:55:7d:55: a8:f3:aa:42 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzk1 QTkxRUQ0MEFBQTE1QjlBQkNBMjFDMjA1QjM2RUM3NDk0OUZDODAeFw0yNTAyMTAx NDAyMTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI2RjlFM0RDNDI2OTgx MEYzRjhDQUY5OEYzRjc4NEVGOTlEQjY0MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoSnLW3fXAhXsMYRmx6nxerCXczOxCFVmrkiaCXXXEJpsEnlPo ORwqiII7sc8HXK7CHEac2GmwG2zDZYeTsfHF8Gz0UdED0vbMG6If24EzWUZI8Sun yzT5Yl0rKVEj8a2owH1YS1dZUJwTvQT2941SaLfgf/5o+awjNb1yS9eEkWuaB7RF ixBDaJIKA3VNTzKAhHngnmXf8HiB6/MWN/tb1g08E9be+oHZXApCmr7N+CMOIIhk Bp9tPpnqD8ioKgcdCLPjWYBhWTCIEuS9WbzP8P4pM8ApVtlLT7GHD9k6uzsS7Rr4 7tm1+wdM1QJ02tP1ligV+rnmXOG5Xn7I7MFZAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUtvnj3EJpgQ8/jK+Y8/eE75nbZAIwHwYDVR0jBBgwFoAUeVqR7UCqoVuavKIc IFs27HSUn8gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0VOVFJP SUQvZVZxUjdVQ3FvVnVhdktJY0lGczI3SFNVbjhnLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9lVnFSN1VDcW9WdWF2S0ljSUZzMjdIU1VuOGcuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DRU5UUk9JRC90dm5qM0VKcGdROF9q Sy1ZOF9lRTc1bmJaQUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ2iXMA0GCSqGSIb3DQEBCwUAA4IBAQAE7p3a5t5QP9EQgPtID0O7qFWgwD48 6Z907eJep96Ey2U4N5OgSQg7s+c57NzGxzlimt23k0PK6G0A0TAmShZewmDznp1q UQZZ9f2vPN9bjtJ+d60wm1xmXQmFLsiWSA2JQTKtG/gHHBeTRFRtANmye4eMqoRj z6nrVao9oOp2rlQ/KZ8jWrOU1qiEIsuJMZig67pkKnnA9I2x2Q0mOPKnhxj6NakZ meHWWU+D9/afEBz18l71fpYV6+RekjSHFM71noAW5xzqmx21mt+74zMiEt/INghv eVbMM4SwJYEAz497t0EknFB3teWZPAoEu5or2Qw3hTwIFRZVfVWo86pC -----END CERTIFICATE-----Generated at Wed Feb 19 22:03:15 2025 by rpki-client