$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ZcEyt7POWpLLhxNCadCuMa7RW0A.roa File: ZcEyt7POWpLLhxNCadCuMa7RW0A.roa (raw, json) Hash identifier: wkzICePu+HD8MbTqvejskzS5MPbC3UNpBefpnku0S4w= Subject key identifier: 65:C1:32:B7:B3:CE:5A:92:CB:87:13:42:69:D0:AE:31:AE:D1:5B:40 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 125C Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ZcEyt7POWpLLhxNCadCuMa7RW0A.roa Signing time: Mon 10 Feb 2025 14:14:45 +0000 ROA not before: Mon 10 Feb 2025 14:14:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 118.150.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 21:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4700 (0x125c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:14:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=65C132B7B3CE5A92CB87134269D0AE31AED15B40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bc:9d:7f:11:0b:f1:95:84:29:d8:7c:cb:db: 3c:9a:81:d1:8b:70:46:60:43:25:50:18:64:22:72: 37:f6:8a:f0:e6:61:f5:24:ab:b8:27:c9:55:d7:e9: 8f:df:b3:01:45:17:03:d6:db:82:71:63:f0:e8:bc: 44:77:6a:db:6f:b2:65:fb:0d:98:48:d6:04:c0:65: 4c:1a:93:fb:28:98:1c:b9:53:71:dc:e3:af:df:f3: c1:98:f1:00:9c:ac:98:bd:d3:1f:63:6b:a7:f0:19: 35:64:6c:49:0a:76:c3:2d:ca:83:8f:3a:2f:17:63: 57:93:22:07:cb:54:18:24:5d:d6:8c:45:cd:21:ee: 05:88:4c:26:40:98:93:f0:b4:1d:7a:3f:3d:54:12: 84:71:e0:3c:46:50:2f:00:c1:b4:55:40:ab:a3:1d: 69:8b:43:22:73:ca:64:2f:52:ab:96:7c:d7:e4:fc: c1:67:de:55:bd:34:e2:65:b8:e1:2c:0d:08:eb:61: 1b:ec:a9:80:9c:b1:e5:d8:14:ba:9f:d9:90:d8:ab: 94:fa:1e:11:98:8b:83:3b:11:75:99:c5:d9:14:bb: a9:97:ac:b6:91:d4:86:a0:60:c2:60:b2:06:e9:fc: 6c:57:93:ed:1d:96:b7:b6:6d:b4:14:d0:a5:0b:0a: 38:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C1:32:B7:B3:CE:5A:92:CB:87:13:42:69:D0:AE:31:AE:D1:5B:40 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ZcEyt7POWpLLhxNCadCuMa7RW0A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.150.248.0/22 Signature Algorithm: sha256WithRSAEncryption 74:ac:73:ad:a3:ea:f5:63:e8:fe:f4:7c:a7:75:ff:29:de:1b: 64:55:c6:72:53:2f:59:d4:49:73:34:f3:4f:91:ef:fc:1a:2b: 6c:4a:74:3f:6c:b7:5c:c4:6e:86:32:5d:21:be:30:40:5c:51: 30:fb:fb:69:35:ba:67:2b:ba:f3:8c:30:96:70:d1:64:96:d2: be:f1:df:85:65:d4:8d:ae:8b:d8:1a:90:b3:e1:a3:a1:ec:e7: 93:a3:67:6c:3b:3b:ee:03:6b:ab:a2:50:82:41:38:0d:cd:06: cc:66:8b:67:0b:da:11:e3:60:a1:5b:35:d5:e8:f4:ee:1b:aa: 97:e5:18:56:1c:16:2d:e0:1b:d2:6c:1e:91:2c:52:cc:c8:0d: c9:97:b8:0a:8a:f0:54:7a:33:13:35:33:f2:1e:c7:9c:3b:ef: ea:98:36:44:e5:dd:b8:96:74:b7:ed:46:c3:9a:76:bc:ed:83: 3e:7a:5c:06:d8:9c:a7:9d:a3:77:98:11:c7:5a:13:42:65:20: 28:f1:a8:7e:6e:99:1b:53:36:39:3e:7e:ac:cc:74:bc:c5:76: d8:4c:1c:32:96:5b:c7:be:40:35:45:48:fc:cd:8f:51:87:b7: 4d:83:5d:18:36:bf:ae:50:65:bb:56:01:08:c5:c1:00:df:cf: c2:ef:5f:d1 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICElwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE0NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY1QzEzMkI3QjNDRTVB OTJDQjg3MTM0MjY5RDBBRTMxQUVEMTVCNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPvJ1/EQvxlYQp2HzL2zyagdGLcEZgQyVQGGQicjf2ivDmYfUk q7gnyVXX6Y/fswFFFwPW24JxY/DovER3attvsmX7DZhI1gTAZUwak/somBy5U3Hc 46/f88GY8QCcrJi90x9ja6fwGTVkbEkKdsMtyoOPOi8XY1eTIgfLVBgkXdaMRc0h 7gWITCZAmJPwtB16Pz1UEoRx4DxGUC8AwbRVQKujHWmLQyJzymQvUquWfNfk/MFn 3lW9NOJluOEsDQjrYRvsqYCcseXYFLqf2ZDYq5T6HhGYi4M7EXWZxdkUu6mXrLaR 1IagYMJgsgbp/GxXk+0dlre2bbQU0KULCjirAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUZcEyt7POWpLLhxNCadCuMa7RW0AwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9aY0V5dDdQT1dwTExo eE5DYWRDdU1hN1JXMEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCdpb4MA0GCSqGSIb3DQEBCwUAA4IBAQB0rHOto+r1Y+j+9Hyndf8p3htkVcZy Uy9Z1ElzNPNPke/8GitsSnQ/bLdcxG6GMl0hvjBAXFEw+/tpNbpnK7rzjDCWcNFk ltK+8d+FZdSNrovYGpCz4aOh7OeTo2dsOzvuA2urolCCQTgNzQbMZotnC9oR42Ch WzXV6PTuG6qX5RhWHBYt4BvSbB6RLFLMyA3Jl7gKivBUejMTNTPyHsecO+/qmDZE 5d24lnS37UbDmna87YM+elwG2JynnaN3mBHHWhNCZSAo8ah+bpkbUzY5Pn6szHS8 xXbYTBwyllvHvkA1RUj8zY9Rh7dNg10YNr+uUGW7VgEIxcEA38/C71/R -----END CERTIFICATE-----Generated at Sun Apr 6 20:02:31 2025 by rpki-client