$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/QcCxdJyftByGkMf4HeCa3CPb1-4.roa File: QcCxdJyftByGkMf4HeCa3CPb1-4.roa (raw, json) Hash identifier: FU6MkROKrhQrMux+2FwcnjKG8i+EK4FWs+mijgAdosM= Subject key identifier: 41:C0:B1:74:9C:9F:B4:1C:86:90:C7:F8:1D:E0:9A:DC:23:DB:D7:EE Certificate issuer: /CN=2855973672B1EED71760C0942C27FD5F7569019C Certificate serial: 0CF2 Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/QcCxdJyftByGkMf4HeCa3CPb1-4.roa Signing time: Mon 10 Feb 2025 14:10:19 +0000 ROA not before: Mon 10 Feb 2025 14:10:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18046 IP address blocks: 150.129.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 21:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3314 (0xcf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C Validity Not Before: Feb 10 14:10:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=41C0B1749C9FB41C8690C7F81DE09ADC23DBD7EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9b:c6:9d:b1:88:f1:a5:e6:a4:08:d8:04:1c: f4:a9:44:18:2b:6a:15:b1:26:f6:b5:5d:f9:f0:9e: 46:f9:d8:a2:47:5c:e1:a3:5d:43:d0:db:90:52:80: ec:f3:28:d5:b1:6f:52:41:44:d4:93:50:48:e4:7e: 4f:b9:30:c7:3c:82:f7:d3:ce:e3:2a:06:ad:3c:28: cc:16:b0:89:18:8b:04:0c:85:7a:22:94:86:d1:29: 9c:dc:d5:f1:11:d5:7e:15:9a:3e:5f:20:61:3a:77: 49:86:61:32:08:5b:94:b5:90:9c:8c:50:ec:cf:84: ae:52:c0:d2:fc:59:ea:f7:7d:c4:ae:cb:b4:72:ba: 0f:67:8b:3e:a6:a0:24:f9:3a:bb:e6:4b:50:25:1d: 3e:18:df:eb:de:1d:4d:dd:cc:88:fa:ad:49:55:89: 53:d4:d7:d2:37:2e:6e:43:3c:90:57:9d:13:16:7b: e7:e9:aa:f4:f3:c7:45:46:dd:9b:bb:34:da:4c:d4: aa:81:0b:33:d6:21:d4:50:05:e0:a4:49:cb:e7:11: c7:a2:41:8a:76:98:bb:f8:63:d3:bd:81:1e:ae:c0: ee:b3:db:97:35:b5:58:c1:59:b5:f0:a0:05:78:f3: f1:f8:c2:8c:b9:fd:4e:ea:a5:8c:f1:b4:7d:36:d8: d1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C0:B1:74:9C:9F:B4:1C:86:90:C7:F8:1D:E0:9A:DC:23:DB:D7:EE X509v3 Authority Key Identifier: keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/QcCxdJyftByGkMf4HeCa3CPb1-4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.129.36.0/22 Signature Algorithm: sha256WithRSAEncryption 85:91:fb:be:57:52:10:bc:58:be:7e:7a:fa:bb:3d:24:6f:da: 55:d2:33:5a:30:0b:ba:e2:0c:02:81:00:74:8c:a9:e8:f9:b6: d0:b3:66:67:be:21:f4:bf:aa:de:97:ad:ab:ed:5f:75:5d:b4: 83:4d:77:e9:4d:99:9a:10:db:1c:0c:bb:32:b6:43:83:4e:8f: a7:5e:28:79:ba:29:fd:74:f5:0f:9c:a7:86:ae:3a:83:0f:25: 07:90:0e:d3:fb:4a:c8:31:e8:12:12:b3:8e:0c:93:28:6c:bc: 33:04:6f:94:36:a4:89:49:8d:ab:db:a3:16:fd:ba:20:24:f4: e9:95:36:51:8f:68:f9:15:25:e1:fc:04:88:79:10:50:70:c9: e1:5d:63:96:4b:d6:93:8f:75:8f:4f:aa:4a:aa:17:04:4e:da: 17:33:f7:e6:1a:67:84:f0:84:44:ba:5e:b6:ea:51:3a:80:f7: 36:0f:1d:e3:b3:74:04:8d:78:2f:b9:c7:78:40:27:c8:43:2f: 2d:e8:35:3d:0f:94:7c:7a:7f:a2:6b:a2:7b:96:9f:c4:60:ef: 45:5e:93:c3:79:33:53:09:a5:1b:32:63:06:ed:6d:cb:ba:74: 9f:f5:03:16:50:1a:d3:05:46:c2:f4:1f:6c:c7:8e:b8:c4:ca: 72:a1:2a:85 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDPIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjg1 NTk3MzY3MkIxRUVENzE3NjBDMDk0MkMyN0ZENUY3NTY5MDE5QzAeFw0yNTAyMTAx NDEwMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQxQzBCMTc0OUM5RkI0 MUM4NjkwQzdGODFERTA5QURDMjNEQkQ3RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjm8adsYjxpeakCNgEHPSpRBgrahWxJva1Xfnwnkb52KJHXOGj XUPQ25BSgOzzKNWxb1JBRNSTUEjkfk+5MMc8gvfTzuMqBq08KMwWsIkYiwQMhXoi lIbRKZzc1fER1X4Vmj5fIGE6d0mGYTIIW5S1kJyMUOzPhK5SwNL8Wer3fcSuy7Ry ug9niz6moCT5OrvmS1AlHT4Y3+veHU3dzIj6rUlViVPU19I3Lm5DPJBXnRMWe+fp qvTzx0VG3Zu7NNpM1KqBCzPWIdRQBeCkScvnEceiQYp2mLv4Y9O9gR6uwO6z25c1 tVjBWbXwoAV48/H4woy5/U7qpYzxtH022NHBAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUQcCxdJyftByGkMf4HeCa3CPb1+4wHwYDVR0jBBgwFoAUKFWXNnKx7tcXYMCU LCf9X3VpAZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVQU4t Q0hBTi9LRldYTm5LeDd0Y1hZTUNVTENmOVgzVnBBWncuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0tGV1hObkt4N3RjWFlNQ1VMQ2Y5WDNWcEFady5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIVUFOLUNIQU4vUWNDeGRKeWZ0 QnlHa01mNEhlQ2EzQ1BiMS00LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEApaBJDANBgkqhkiG9w0BAQsFAAOCAQEAhZH7vldSELxYvn56+rs9JG/a VdIzWjALuuIMAoEAdIyp6Pm20LNmZ74h9L+q3petq+1fdV20g0136U2ZmhDbHAy7 MrZDg06Pp14oebop/XT1D5ynhq46gw8lB5AO0/tKyDHoEhKzjgyTKGy8MwRvlDak iUmNq9ujFv26ICT06ZU2UY9o+RUl4fwEiHkQUHDJ4V1jlkvWk491j0+qSqoXBE7a FzP35hpnhPCERLpetupROoD3Ng8d47N0BI14L7nHeEAnyEMvLeg1PQ+UfHp/omui e5afxGDvRV6Tw3kzUwmlGzJjBu1ty7p0n/UDFlAa0wVGwvQfbMeOuMTKcqEqhQ== -----END CERTIFICATE-----Generated at Sun Apr 6 19:59:17 2025 by rpki-client