$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/251BhXy-Gr_VwFrqL_Ua7S61TKQ.roa File: 251BhXy-Gr_VwFrqL_Ua7S61TKQ.roa (raw, json) Hash identifier: B9bp/o6lj+GnsS5BWST6luQw+t0QrOnGvMbM1++KUOI= Subject key identifier: DB:9D:41:85:7C:BE:1A:BF:D5:C0:5A:EA:2F:F5:1A:ED:2E:B5:4C:A4 Certificate issuer: /CN=ABD4DDB4BF932C5006B704B9828410174AC412AD Certificate serial: 0134 Authority key identifier: AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/251BhXy-Gr_VwFrqL_Ua7S61TKQ.roa Signing time: Mon 10 Feb 2025 14:23:50 +0000 ROA not before: Mon 10 Feb 2025 14:23:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 150766 IP address blocks: 36.50.229.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABD4DDB4BF932C5006B704B9828410174AC412AD Validity Not Before: Feb 10 14:23:50 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DB9D41857CBE1ABFD5C05AEA2FF51AED2EB54CA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:95:63:00:8c:c2:6f:ec:ca:a9:bb:53:57:e9: ba:b7:92:9b:e3:27:51:7e:d2:04:7e:f3:76:1a:92: 10:be:a6:47:52:e3:04:ff:c8:37:76:94:05:9b:db: c2:6a:8c:f1:9f:58:15:3a:6f:3a:1d:21:31:f8:25: 61:9b:98:a9:27:a8:fd:6d:95:dc:79:22:6e:fe:4b: 84:ee:d8:20:06:fd:2b:af:2e:5d:28:80:68:d6:98: 7a:08:2f:46:c0:88:6b:6b:fb:73:c6:b3:1f:16:aa: 22:92:b7:2d:f1:57:fa:1c:b2:62:ea:2d:4e:5b:3a: 92:7d:f2:5a:24:49:12:8c:a2:85:24:fc:3b:23:84: f0:2a:7e:0f:09:ef:10:9d:39:8e:04:96:a9:19:60: 70:ac:23:91:5d:74:5d:61:b6:43:02:a2:7a:24:30: fa:ae:98:ec:66:df:14:5b:5b:86:69:d2:89:48:7c: 2a:37:1d:00:39:72:d5:7a:16:ac:1e:33:bd:5e:d3: d7:8f:ba:22:b9:7f:11:89:26:5c:b0:36:51:49:26: 2a:04:a4:72:4c:c3:c5:39:91:ff:95:15:f8:a2:63: 1d:27:c7:38:0c:78:ff:7f:ab:51:b3:45:20:a7:1f: 62:5c:3b:30:ef:86:07:ff:20:7e:e0:f4:de:16:fd: 62:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9D:41:85:7C:BE:1A:BF:D5:C0:5A:EA:2F:F5:1A:ED:2E:B5:4C:A4 X509v3 Authority Key Identifier: keyid:AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/251BhXy-Gr_VwFrqL_Ua7S61TKQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 36.50.229.0/24 Signature Algorithm: sha256WithRSAEncryption 52:1c:57:e7:98:68:57:d5:23:04:c6:49:10:c7:44:75:4a:a5: 47:9a:ee:dd:52:f0:f7:9f:f1:c8:d3:5e:5b:51:a0:af:bb:f0: 70:87:8c:77:2d:62:5a:78:1e:3d:87:e9:74:55:1b:06:d9:95: fb:d8:6e:a7:f7:f9:9d:0c:7b:a1:ef:9c:d8:88:94:b8:8d:ce: 35:99:5f:fd:96:fa:0c:d4:19:3e:59:f4:85:86:da:9a:c8:06: b7:c1:be:90:f3:3e:76:37:d4:d1:dd:c9:ea:4a:1d:78:c6:de: 67:18:32:ae:3c:2c:69:4c:a8:e4:e7:86:cf:d6:74:84:47:5a: 94:87:12:ad:9b:5c:bb:8b:04:7c:50:f7:80:9a:90:3b:99:3e: b1:f7:df:ed:c8:70:d5:e6:bc:0f:37:e0:10:3b:52:09:14:3d: e1:8a:cc:d2:94:8c:14:82:bd:6b:32:eb:b5:cd:77:d9:7c:a3: e8:d1:01:bd:e8:b3:f4:39:3b:08:c9:f6:cf:fb:66:3e:ea:79: f4:c9:0c:fb:f7:ff:5f:09:fe:dc:5b:95:99:b7:2a:5e:4b:70: 83:bc:57:63:84:43:c4:ea:54:f5:8d:39:fd:14:c1:4f:0a:2a: 72:35:26:e6:22:e1:ee:5a:7e:9b:4d:19:b2:8b:7c:22:1d:6c: 35:b7:05:6c -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICATQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJE NEREQjRCRjkzMkM1MDA2QjcwNEI5ODI4NDEwMTc0QUM0MTJBRDAeFw0yNTAyMTAx NDIzNTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERCOUQ0MTg1N0NCRTFB QkZENUMwNUFFQTJGRjUxQUVEMkVCNTRDQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCclWMAjMJv7Mqpu1NX6bq3kpvjJ1F+0gR+83YakhC+pkdS4wT/ yDd2lAWb28JqjPGfWBU6bzodITH4JWGbmKknqP1tldx5Im7+S4Tu2CAG/SuvLl0o gGjWmHoIL0bAiGtr+3PGsx8WqiKSty3xV/ocsmLqLU5bOpJ98lokSRKMooUk/Dsj hPAqfg8J7xCdOY4ElqkZYHCsI5FddF1htkMConokMPqumOxm3xRbW4Zp0olIfCo3 HQA5ctV6FqweM71e09ePuiK5fxGJJlywNlFJJioEpHJMw8U5kf+VFfiiYx0nxzgM eP9/q1GzRSCnH2JcOzDvhgf/IH7g9N4W/WJ1AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU251BhXy+Gr/VwFrqL/Ua7S61TKQwHwYDVR0jBBgwFoAUq9TdtL+TLFAGtwS5 goQQF0rEEq0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DT0RJ R0lUL3E5VGR0TC1UTEZBR3R3UzVnb1FRRjByRUVxMC5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcTlUZHRMLVRMRkFHdHdTNWdvUVFGMHJFRXEwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DT0RJR0lULzI1MUJoWHktR3Jf VndGcnFMX1VhN1M2MVRLUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAkMuUwDQYJKoZIhvcNAQELBQADggEBAFIcV+eYaFfVIwTGSRDHRHVKpUea 7t1S8Pef8cjTXltRoK+78HCHjHctYlp4Hj2H6XRVGwbZlfvYbqf3+Z0Me6HvnNiI lLiNzjWZX/2W+gzUGT5Z9IWG2prIBrfBvpDzPnY31NHdyepKHXjG3mcYMq48LGlM qOTnhs/WdIRHWpSHEq2bXLuLBHxQ94CakDuZPrH33+3IcNXmvA834BA7UgkUPeGK zNKUjBSCvWsy67XNd9l8o+jRAb3os/Q5OwjJ9s/7Zj7qefTJDPv3/18J/txblZm3 Kl5LcIO8V2OEQ8TqVPWNOf0UwU8KKnI1JuYi4e5afptNGbKLfCIdbDW3BWw= -----END CERTIFICATE-----Generated at Fri Apr 18 17:47:30 2025 by rpki-client