$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/zLXLV99tppdJRoLBf7o4YLOdH1w.roa File: zLXLV99tppdJRoLBf7o4YLOdH1w.roa (raw, json) Hash identifier: gO5KCs2zXqemKJUWT4wKdtSFKq9A+2bSvDiCLMP+RgI= Subject key identifier: CC:B5:CB:57:DF:6D:A6:97:49:46:82:C1:7F:BA:38:60:B3:9D:1F:5C Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 12A3 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/zLXLV99tppdJRoLBf7o4YLOdH1w.roa Signing time: Mon 10 Feb 2025 14:15:05 +0000 ROA not before: Mon 10 Feb 2025 14:15:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 118.150.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 21:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4771 (0x12a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:15:05 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CCB5CB57DF6DA697494682C17FBA3860B39D1F5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:df:d6:9f:f7:b8:2b:cd:78:0a:66:a8:8c:20: 80:9a:49:a3:66:41:8a:1c:a7:2c:4a:6e:8b:3a:f3: 49:df:fa:cd:58:d2:81:46:15:83:96:e4:7d:f4:36: cf:37:fa:5f:17:fc:99:ae:9b:99:62:1e:0f:e9:94: bc:b1:ff:f3:7f:6e:25:28:ec:11:de:95:11:29:f8: 71:4c:e2:f4:8d:ef:34:4d:63:68:19:ee:69:95:92: b2:83:d2:72:8c:15:5a:02:bb:2c:28:1f:c2:a0:0b: c2:c3:20:05:c8:eb:24:a6:9e:b4:98:11:7f:07:e0: 32:c6:9f:f2:ce:b7:8d:89:3e:c3:bf:e1:9f:1c:8e: e0:c1:17:b0:dc:f1:9e:47:cb:c6:8b:84:cc:b1:48: 1c:25:1e:25:6c:78:4a:08:72:f6:7e:ff:42:74:2d: 53:68:4a:34:b6:3b:e3:dd:28:5b:07:52:f0:25:f5: 6b:4c:d8:28:b5:a4:e2:94:0b:d8:cd:6d:04:2e:99: dc:52:b2:ff:d2:62:33:80:63:57:af:df:3b:07:08: 97:4a:ca:59:b0:7f:1f:97:2d:13:a4:d3:e9:11:b9: e9:2a:36:bb:b9:49:e5:1b:df:2c:cd:9f:76:0e:59: 0b:c9:96:c9:5a:98:c7:a2:b7:12:6c:44:6d:f0:42: 65:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B5:CB:57:DF:6D:A6:97:49:46:82:C1:7F:BA:38:60:B3:9D:1F:5C X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/zLXLV99tppdJRoLBf7o4YLOdH1w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.150.252.0/22 Signature Algorithm: sha256WithRSAEncryption 87:3b:17:41:e5:c4:53:d6:70:02:9a:0a:6e:99:19:60:79:02: c7:b5:fe:e5:b4:5d:a5:a7:1d:95:c5:39:b8:d7:21:2a:5a:14: 31:67:1b:10:2c:bd:fe:93:cb:37:e7:c0:9c:75:46:7d:93:aa: b6:e1:81:0a:2c:65:b4:2e:0c:c3:ba:8f:d9:ac:42:16:e8:8d: 29:e0:68:9f:a0:b4:48:4f:a3:cb:15:bb:34:c3:c5:62:f3:7f: 38:d2:b3:9a:db:ed:60:fb:93:c3:12:03:34:72:cc:72:a1:aa: 30:da:b0:28:e2:ec:5c:0f:57:5d:b7:2e:5a:29:fc:9b:e2:e7: 1e:d5:34:5d:ec:1e:ae:ed:a4:c0:97:4f:df:0f:91:98:05:e1: e8:48:00:80:5a:7c:f9:4a:11:dc:25:90:2e:86:09:70:c8:e3: be:46:da:f7:f0:51:14:10:6f:96:fc:0b:67:73:f6:57:62:95: 24:e4:d1:b1:99:33:35:9a:11:08:ec:21:46:ca:73:60:a0:5f: bc:40:b4:25:58:4f:e0:8b:71:24:3c:61:78:4f:3d:fb:58:8c: 42:1d:e7:c1:ce:01:15:38:0c:d5:2d:a5:6f:4b:d7:41:a2:56: 54:02:a5:11:5a:ff:c1:3a:f3:09:e1:04:70:bb:d1:f0:2e:a9: 2d:b9:0c:28 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEqMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE1MDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENDQjVDQjU3REY2REE2 OTc0OTQ2ODJDMTdGQkEzODYwQjM5RDFGNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDz39af97grzXgKZqiMIICaSaNmQYocpyxKbos680nf+s1Y0oFG FYOW5H30Ns83+l8X/Jmum5liHg/plLyx//N/biUo7BHelREp+HFM4vSN7zRNY2gZ 7mmVkrKD0nKMFVoCuywoH8KgC8LDIAXI6ySmnrSYEX8H4DLGn/LOt42JPsO/4Z8c juDBF7Dc8Z5Hy8aLhMyxSBwlHiVseEoIcvZ+/0J0LVNoSjS2O+PdKFsHUvAl9WtM 2Ci1pOKUC9jNbQQumdxSsv/SYjOAY1ev3zsHCJdKylmwfx+XLROk0+kRuekqNru5 SeUb3yzNn3YOWQvJlslamMeitxJsRG3wQmVJAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUzLXLV99tppdJRoLBf7o4YLOdH1wwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy96TFhMVjk5dHBwZEpS b0xCZjdvNFlMT2RIMXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCdpb8MA0GCSqGSIb3DQEBCwUAA4IBAQCHOxdB5cRT1nACmgpumRlgeQLHtf7l tF2lpx2VxTm41yEqWhQxZxsQLL3+k8s358CcdUZ9k6q24YEKLGW0LgzDuo/ZrEIW 6I0p4GifoLRIT6PLFbs0w8Vi83840rOa2+1g+5PDEgM0csxyoaow2rAo4uxcD1dd ty5aKfyb4uce1TRd7B6u7aTAl0/fD5GYBeHoSACAWnz5ShHcJZAuhglwyOO+Rtr3 8FEUEG+W/Atnc/ZXYpUk5NGxmTM1mhEI7CFGynNgoF+8QLQlWE/gi3EkPGF4Tz37 WIxCHefBzgEVOAzVLaVvS9dBolZUAqURWv/BOvMJ4QRwu9HwLqktuQwo -----END CERTIFICATE-----Generated at Sun Apr 6 19:56:48 2025 by rpki-client