$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/IJ0fdfIahz8RRXRgFRNezMFhOWU.roa File: IJ0fdfIahz8RRXRgFRNezMFhOWU.roa (raw, json) Hash identifier: IfDGAtat00NuP+CRP2jhUJFR7T4+iItPPPDf78q51No= Subject key identifier: 20:9D:1F:75:F2:1A:87:3F:11:45:74:60:15:13:5E:CC:C1:61:39:65 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1274 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/IJ0fdfIahz8RRXRgFRNezMFhOWU.roa Signing time: Mon 10 Feb 2025 14:14:52 +0000 ROA not before: Mon 10 Feb 2025 14:14:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 10085 IP address blocks: 203.163.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 21:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4724 (0x1274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:14:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=209D1F75F21A873F1145746015135ECCC1613965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d8:72:85:2a:4c:ed:5b:66:9f:c6:fb:ff:c2: 45:bb:59:55:8e:e8:fd:2e:8b:17:65:84:3f:ff:28: c9:41:01:1e:9d:56:1c:33:c5:4c:76:7b:00:b8:6b: 80:e9:1a:62:dd:79:a8:00:97:1d:1f:86:bc:f3:50: e9:8e:d3:b8:54:a3:ae:14:5e:0f:84:67:34:8a:6c: 9b:3b:02:59:07:38:6d:ff:e2:ea:6d:8c:65:21:c7: 45:cd:f0:13:97:e1:6c:b3:4d:fe:ba:91:e7:ed:6d: 21:50:8f:e8:be:14:6a:87:b7:49:cd:17:36:7a:4c: a5:a3:bf:8d:cf:c0:82:9d:6f:2c:3b:5f:8a:74:a6: 72:40:ed:80:aa:ac:c7:09:d9:06:64:72:96:80:d2: 4f:71:1c:09:40:ea:eb:ff:26:ad:e7:e5:50:6f:7f: 77:97:cb:ba:b0:c0:a1:ba:c8:70:a8:a6:ab:df:35: f5:bd:0a:84:9e:0c:2a:39:d2:2b:de:d7:5b:64:bc: 80:dc:fb:32:26:6b:0a:de:5e:6a:39:b3:9d:ca:a1: 38:c6:0e:c4:00:91:b3:19:8d:a7:99:78:b8:67:bf: e8:7d:e0:b9:92:1b:f2:22:95:5c:4e:5e:3d:fd:00: a9:45:d4:36:35:60:de:f8:c9:b6:74:66:f2:65:44: 9c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9D:1F:75:F2:1A:87:3F:11:45:74:60:15:13:5E:CC:C1:61:39:65 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/IJ0fdfIahz8RRXRgFRNezMFhOWU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.163.214.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:c9:f9:bd:ea:eb:68:b6:1a:7d:a4:b7:16:bd:4b:1f:b3:57: c1:4f:e2:8e:aa:1e:19:5a:8a:a7:77:0a:99:aa:0d:17:46:bc: 10:15:54:2a:07:86:30:82:4b:0e:04:6e:97:fe:e4:96:07:8e: 1f:59:10:26:78:29:ee:94:51:fb:c7:7a:d4:23:7d:76:97:a0: f5:ed:94:3f:7c:e4:98:68:c2:71:0d:63:52:4a:71:fb:d9:7a: 46:2a:18:df:0f:60:1d:b2:44:39:35:54:00:eb:9f:06:48:29: 39:6e:83:9a:6a:13:90:f4:74:ce:0e:a9:f9:2f:2e:27:af:f3: 98:ae:37:f8:98:48:fb:1b:26:14:b0:73:06:e0:58:f9:e0:ab: b4:4b:f3:8f:9d:96:43:e0:47:72:92:96:c2:0f:11:5d:0a:b5: 6e:01:be:30:64:27:7b:cc:88:e9:99:47:29:2c:d0:31:9b:97: 1d:3d:71:f1:34:a8:80:b2:9f:3a:15:98:7b:84:d2:89:90:83: c7:d8:bb:ea:c7:be:af:76:4e:d7:a8:d2:cc:9a:5d:e5:4d:42: 47:a2:8f:71:54:93:cc:a1:0a:31:ee:d6:8c:74:c2:85:be:06: 45:da:56:f3:42:33:dd:f4:04:82:45:ec:be:12:da:a5:b2:1f: 62:d4:89:f5 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEnQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE0NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIwOUQxRjc1RjIxQTg3 M0YxMTQ1NzQ2MDE1MTM1RUNDQzE2MTM5NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDD2HKFKkztW2afxvv/wkW7WVWO6P0uixdlhD//KMlBAR6dVhwz xUx2ewC4a4DpGmLdeagAlx0fhrzzUOmO07hUo64UXg+EZzSKbJs7AlkHOG3/4upt jGUhx0XN8BOX4WyzTf66keftbSFQj+i+FGqHt0nNFzZ6TKWjv43PwIKdbyw7X4p0 pnJA7YCqrMcJ2QZkcpaA0k9xHAlA6uv/Jq3n5VBvf3eXy7qwwKG6yHCopqvfNfW9 CoSeDCo50ive11tkvIDc+zImawreXmo5s53KoTjGDsQAkbMZjaeZeLhnv+h94LmS G/IilVxOXj39AKlF1DY1YN74ybZ0ZvJlRJw1AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUIJ0fdfIahz8RRXRgFRNezMFhOWUwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9JSjBmZGZJYWh6OFJS WFJnRlJOZXpNRmhPV1Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAy6PWMA0GCSqGSIb3DQEBCwUAA4IBAQCfyfm96utothp9pLcWvUsfs1fBT+KO qh4ZWoqndwqZqg0XRrwQFVQqB4YwgksOBG6X/uSWB44fWRAmeCnulFH7x3rUI312 l6D17ZQ/fOSYaMJxDWNSSnH72XpGKhjfD2AdskQ5NVQA658GSCk5boOaahOQ9HTO Dqn5Ly4nr/OYrjf4mEj7GyYUsHMG4Fj54Ku0S/OPnZZD4EdykpbCDxFdCrVuAb4w ZCd7zIjpmUcpLNAxm5cdPXHxNKiAsp86FZh7hNKJkIPH2Lvqx76vdk7XqNLMml3l TUJHoo9xVJPMoQox7taMdMKFvgZF2lbzQjPd9ASCRey+Etqlsh9i1In1 -----END CERTIFICATE-----Generated at Sun Apr 6 19:57:04 2025 by rpki-client