$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/dFTtev5Idn8LC8nYqbUK8MMYlk0.roa File: dFTtev5Idn8LC8nYqbUK8MMYlk0.roa (raw, json) Hash identifier: DOc+fJk+WM567C3cfQu1GR7hbns/RTu3qGz6kAhXJUw= Subject key identifier: 74:54:ED:7A:FE:48:76:7F:0B:0B:C9:D8:A9:B5:0A:F0:C3:18:96:4D Certificate issuer: /CN=2855973672B1EED71760C0942C27FD5F7569019C Certificate serial: 0CF5 Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/dFTtev5Idn8LC8nYqbUK8MMYlk0.roa Signing time: Mon 10 Feb 2025 14:10:19 +0000 ROA not before: Mon 10 Feb 2025 14:10:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24172 IP address blocks: 103.234.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 08:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3317 (0xcf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C Validity Not Before: Feb 10 14:10:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7454ED7AFE48767F0B0BC9D8A9B50AF0C318964D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a7:39:55:cd:ac:b9:2b:e3:d3:2a:dd:78:99: 31:a8:10:e1:6d:73:56:c7:da:d0:5d:7b:a4:01:bc: 8b:a6:5e:63:33:6d:49:b2:af:92:cb:2a:df:3e:b5: aa:27:f3:65:d7:7a:13:91:7c:13:cc:b6:99:2d:03: e0:35:2c:cd:9d:c3:09:e7:14:8a:6f:12:b9:d7:6a: e0:7c:d9:a3:ef:9d:f9:9c:2b:f0:63:a7:f4:54:e6: 61:9c:1c:4c:bf:72:cd:09:1e:e2:cd:73:70:45:5a: b0:00:2e:e0:42:7c:9e:5f:7b:ef:98:aa:eb:37:5c: 42:f9:17:16:77:30:9f:75:c7:14:78:b4:82:43:5f: 14:4c:e9:0d:d5:7e:5f:bf:85:ea:8b:98:e8:bc:33: 40:b7:89:90:62:7a:69:7e:82:5a:c6:71:6f:ae:76: f4:12:61:13:a2:0f:5d:df:97:a3:1f:ff:6a:02:21: 56:16:94:a5:03:4d:6f:bc:d3:f3:38:0f:2b:34:18: e6:26:a8:28:0a:20:21:7b:16:34:6e:74:9e:6a:76: 89:67:d4:1c:48:2e:80:0f:5d:1e:d8:fe:f8:98:2b: d4:9b:8c:20:52:fd:fb:03:c3:3b:35:13:80:3d:f5: 69:7e:06:b2:01:5f:2e:69:2d:78:37:44:8e:f4:23: ba:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:54:ED:7A:FE:48:76:7F:0B:0B:C9:D8:A9:B5:0A:F0:C3:18:96:4D X509v3 Authority Key Identifier: keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/dFTtev5Idn8LC8nYqbUK8MMYlk0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.234.224.0/24 Signature Algorithm: sha256WithRSAEncryption 89:e6:d9:6b:fb:96:7b:83:b9:6c:39:8f:ce:57:aa:df:70:82: 51:11:1f:17:0c:6c:82:45:ec:d9:c8:e4:4c:d6:86:4e:0d:f1: f0:24:77:e0:e3:22:de:65:0a:e8:96:cd:e4:35:93:1d:a9:84: c9:a2:d6:62:9f:1a:65:99:61:d7:0e:ec:0f:ae:ec:94:fb:80: 76:a3:10:df:ad:73:87:06:88:dc:f8:64:9a:2b:6a:9e:b6:57: 24:40:fb:04:65:9b:1f:a0:e3:3a:62:d9:d6:cc:c0:4f:70:9e: 71:80:18:dc:43:c4:c7:0b:3c:c0:40:6b:2d:98:74:45:14:28: 90:33:cb:9f:51:03:55:e1:ad:2b:f2:bb:98:ef:29:cb:4a:fa: fb:3c:67:d2:c2:b2:ec:9f:9d:bb:8b:be:bd:f2:7d:96:9f:1f: fb:5f:a2:d2:84:ad:14:ec:18:c6:75:1a:40:e7:9a:3b:16:71: 2a:0b:28:6f:62:da:75:b9:6b:eb:d0:23:87:21:78:a9:2c:5f: b0:92:70:df:7c:29:b5:31:aa:84:8f:a5:98:97:94:5e:eb:9f: ce:6c:92:a0:00:4a:e4:17:3a:fc:77:76:17:4b:02:9a:bc:16: cb:a2:0e:22:e0:cc:d9:26:04:f6:32:50:bb:bb:9c:9c:e5:8c: 21:1d:67:6a -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDPUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjg1 NTk3MzY3MkIxRUVENzE3NjBDMDk0MkMyN0ZENUY3NTY5MDE5QzAeFw0yNTAyMTAx NDEwMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc0NTRFRDdBRkU0ODc2 N0YwQjBCQzlEOEE5QjUwQUYwQzMxODk2NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5pzlVzay5K+PTKt14mTGoEOFtc1bH2tBde6QBvIumXmMzbUmy r5LLKt8+taon82XXehORfBPMtpktA+A1LM2dwwnnFIpvErnXauB82aPvnfmcK/Bj p/RU5mGcHEy/cs0JHuLNc3BFWrAALuBCfJ5fe++Yqus3XEL5FxZ3MJ91xxR4tIJD XxRM6Q3Vfl+/heqLmOi8M0C3iZBieml+glrGcW+udvQSYROiD13fl6Mf/2oCIVYW lKUDTW+80/M4Dys0GOYmqCgKICF7FjRudJ5qdoln1BxILoAPXR7Y/viYK9SbjCBS /fsDwzs1E4A99Wl+BrIBXy5pLXg3RI70I7rTAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUdFTtev5Idn8LC8nYqbUK8MMYlk0wHwYDVR0jBBgwFoAUKFWXNnKx7tcXYMCU LCf9X3VpAZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVQU4t Q0hBTi9LRldYTm5LeDd0Y1hZTUNVTENmOVgzVnBBWncuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0tGV1hObkt4N3RjWFlNQ1VMQ2Y5WDNWcEFady5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIVUFOLUNIQU4vZEZUdGV2NUlk bjhMQzhuWXFiVUs4TU1ZbGswLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGfq4DANBgkqhkiG9w0BAQsFAAOCAQEAiebZa/uWe4O5bDmPzleq33CC UREfFwxsgkXs2cjkTNaGTg3x8CR34OMi3mUK6JbN5DWTHamEyaLWYp8aZZlh1w7s D67slPuAdqMQ361zhwaI3PhkmitqnrZXJED7BGWbH6DjOmLZ1szAT3CecYAY3EPE xws8wEBrLZh0RRQokDPLn1EDVeGtK/K7mO8py0r6+zxn0sKy7J+du4u+vfJ9lp8f +1+i0oStFOwYxnUaQOeaOxZxKgsob2Ladblr69AjhyF4qSxfsJJw33wptTGqhI+l mJeUXuufzmySoABK5Bc6/Hd2F0sCmrwWy6IOIuDM2SYE9jJQu7ucnOWMIR1nag== -----END CERTIFICATE-----Generated at Thu Apr 17 05:03:40 2025 by rpki-client