$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/pRzbxBfjLMjcs1MwSDVGiAMVMyk.roa File: pRzbxBfjLMjcs1MwSDVGiAMVMyk.roa (raw, json) Hash identifier: J6hXIXFz8nEqq1MKQ7z2MnOjT2yjCfpGFKOxegpeS1U= Subject key identifier: A5:1C:DB:C4:17:E3:2C:C8:DC:B3:53:30:48:35:46:88:03:15:33:29 Certificate issuer: /CN=2855973672B1EED71760C0942C27FD5F7569019C Certificate serial: 0CEF Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/pRzbxBfjLMjcs1MwSDVGiAMVMyk.roa Signing time: Mon 10 Feb 2025 14:10:18 +0000 ROA not before: Mon 10 Feb 2025 14:10:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18046 IP address blocks: 121.50.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 21:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3311 (0xcef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C Validity Not Before: Feb 10 14:10:18 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A51CDBC417E32CC8DCB353304835468803153329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:39:a2:5d:b0:9c:c0:fc:5a:93:35:a9:22:34: 6e:73:09:cd:25:fb:53:e9:7f:fb:66:0e:b1:80:f4: 1c:25:50:a5:3e:b7:d7:0e:46:5f:e7:f2:02:fd:d2: 71:3c:d7:4d:6e:38:bb:8b:55:c1:6c:72:ed:3b:04: 19:1a:82:97:a3:16:18:f6:5a:80:d3:d9:7f:45:34: 44:21:bb:7e:63:96:4c:c4:40:6e:dc:77:82:ac:31: ca:dd:f2:6d:18:23:96:06:70:94:eb:bb:68:68:ff: 65:58:75:ac:9c:2e:74:09:c3:ea:9a:0b:10:1c:a4: cf:37:75:70:9f:ae:45:9f:3d:a7:e4:33:c6:70:a4: 2a:16:49:48:9b:53:ed:9c:2b:04:8d:ed:60:d4:ca: f3:8e:84:69:61:42:10:3e:ff:3a:a9:40:fa:a0:6e: 7f:f7:12:57:02:f7:f5:f9:77:06:af:90:b3:36:c1: 6c:0a:c4:45:38:eb:0b:e7:78:62:60:db:fd:50:a8: 0e:bb:4f:aa:a8:6f:90:9b:ca:1c:0d:e2:16:2c:6d: 16:91:68:b7:ee:49:3c:57:0a:a4:7d:6e:ca:ec:32: 44:95:12:93:8e:fd:40:4b:4a:6b:02:8f:0d:b2:9f: ef:0a:c5:ff:ce:b0:75:d4:98:ac:b3:a6:c6:b0:66: 5c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1C:DB:C4:17:E3:2C:C8:DC:B3:53:30:48:35:46:88:03:15:33:29 X509v3 Authority Key Identifier: keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/pRzbxBfjLMjcs1MwSDVGiAMVMyk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.50.176.0/20 Signature Algorithm: sha256WithRSAEncryption 80:2d:6a:fc:ea:4d:ff:aa:a9:46:e3:63:1b:0f:94:8a:16:15: 65:d3:05:d0:38:1c:51:f6:06:06:35:9c:53:8b:24:75:db:5b: c7:42:83:c2:99:2e:84:69:17:39:4d:a7:af:ac:df:1c:89:e9: cf:98:85:79:35:c7:6a:ed:d9:1e:27:c3:89:00:f3:84:eb:7d: e3:0f:e8:49:84:7d:03:ea:b7:72:c9:e9:c5:c0:5e:fd:ca:48: 57:00:ed:15:91:ff:4d:93:c4:13:ab:b2:c1:e6:9b:69:5d:f2: 82:82:2a:ba:06:a4:fd:f3:b3:c7:f7:7c:05:b5:f0:a6:46:0f: 24:8f:4c:d9:c4:2a:da:45:64:56:ec:40:38:51:5d:d7:a3:a7: 24:e1:09:d1:91:c7:82:66:a3:43:e1:1a:55:90:fd:87:bf:24: 12:ad:62:fa:f6:89:f3:db:53:be:f6:cb:a9:30:49:ac:e5:ce: 4b:5c:3c:4a:d5:70:f2:20:40:7b:02:ee:cf:9d:83:b4:6e:0b: 45:b6:8b:e8:b4:ba:8c:c6:8c:e2:2a:fb:6d:cb:bf:9d:7a:eb: b9:42:55:c6:c2:0d:de:ec:5b:c1:bc:77:54:44:29:12:d1:1d: 02:d2:68:10:de:19:95:6d:39:c4:96:ed:43:95:68:48:f2:fe: 3c:69:9b:87 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDO8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjg1 NTk3MzY3MkIxRUVENzE3NjBDMDk0MkMyN0ZENUY3NTY5MDE5QzAeFw0yNTAyMTAx NDEwMThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE1MUNEQkM0MTdFMzJD QzhEQ0IzNTMzMDQ4MzU0Njg4MDMxNTMzMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfOaJdsJzA/FqTNakiNG5zCc0l+1Ppf/tmDrGA9BwlUKU+t9cO Rl/n8gL90nE8101uOLuLVcFscu07BBkagpejFhj2WoDT2X9FNEQhu35jlkzEQG7c d4KsMcrd8m0YI5YGcJTru2ho/2VYdaycLnQJw+qaCxAcpM83dXCfrkWfPafkM8Zw pCoWSUibU+2cKwSN7WDUyvOOhGlhQhA+/zqpQPqgbn/3ElcC9/X5dwavkLM2wWwK xEU46wvneGJg2/1QqA67T6qob5CbyhwN4hYsbRaRaLfuSTxXCqR9bsrsMkSVEpOO /UBLSmsCjw2yn+8Kxf/OsHXUmKyzpsawZlxLAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUpRzbxBfjLMjcs1MwSDVGiAMVMykwHwYDVR0jBBgwFoAUKFWXNnKx7tcXYMCU LCf9X3VpAZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVQU4t Q0hBTi9LRldYTm5LeDd0Y1hZTUNVTENmOVgzVnBBWncuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0tGV1hObkt4N3RjWFlNQ1VMQ2Y5WDNWcEFady5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIVUFOLUNIQU4vcFJ6YnhCZmpM TWpjczFNd1NEVkdpQU1WTXlrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBHkysDANBgkqhkiG9w0BAQsFAAOCAQEAgC1q/OpN/6qpRuNjGw+UihYV ZdMF0DgcUfYGBjWcU4skddtbx0KDwpkuhGkXOU2nr6zfHInpz5iFeTXHau3ZHifD iQDzhOt94w/oSYR9A+q3csnpxcBe/cpIVwDtFZH/TZPEE6uyweabaV3ygoIqugak /fOzx/d8BbXwpkYPJI9M2cQq2kVkVuxAOFFd16OnJOEJ0ZHHgmajQ+EaVZD9h78k Eq1i+vaJ89tTvvbLqTBJrOXOS1w8StVw8iBAewLuz52DtG4LRbaL6LS6jMaM4ir7 bcu/nXrruUJVxsIN3uxbwbx3VEQpEtEdAtJoEN4ZlW05xJbtQ5VoSPL+PGmbhw== -----END CERTIFICATE-----Generated at Thu Jun 5 19:59:27 2025 by rpki-client