$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/ukR1D0IgkNl1Q_9NAVNYOkpDz5c.roa File: ukR1D0IgkNl1Q_9NAVNYOkpDz5c.roa (raw, json) Hash identifier: XE7XTPA3sPkv8Ttq28s3ydIeVYtPKJneCnmRSxFy8ZA= Subject key identifier: BA:44:75:0F:42:20:90:D9:75:43:FF:4D:01:53:58:3A:4A:43:CF:97 Certificate issuer: /CN=ABD4DDB4BF932C5006B704B9828410174AC412AD Certificate serial: 0135 Authority key identifier: AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/ukR1D0IgkNl1Q_9NAVNYOkpDz5c.roa Signing time: Mon 10 Feb 2025 14:23:51 +0000 ROA not before: Mon 10 Feb 2025 14:23:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 150766 IP address blocks: 36.50.228.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABD4DDB4BF932C5006B704B9828410174AC412AD Validity Not Before: Feb 10 14:23:51 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BA44750F422090D97543FF4D0153583A4A43CF97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:9e:0e:97:a2:b2:e9:20:5c:29:fc:fd:da: 0c:80:2a:68:45:0c:3d:35:51:b1:84:0c:fa:ac:f0: a4:0d:fd:ef:b2:b1:47:cb:97:50:93:bf:6b:79:64: 0e:3f:58:ac:f8:92:dc:1b:19:18:91:ea:92:b2:bd: 67:0d:e1:a1:92:08:26:eb:ce:b0:3e:66:fa:1a:f6: 26:32:c3:3f:94:a9:89:d0:cc:70:7c:33:1a:13:45: dd:f1:04:a8:de:51:39:d9:88:1d:99:51:84:0c:59: 6f:6b:fe:c0:a5:96:f2:5b:a5:60:65:85:ce:24:4c: bc:85:e2:12:8a:f3:d0:03:42:e8:ac:62:0e:1c:8e: 4d:56:34:47:b1:41:a8:4f:8a:6f:7b:c7:ae:99:a2: 21:a9:63:93:84:9e:52:86:2f:8a:20:96:cf:d9:7e: 7c:3c:55:b1:e4:8d:c2:f7:ab:89:69:86:3a:fa:7c: 83:d2:98:b6:e6:20:7d:60:2d:fb:05:97:d5:20:6d: 36:26:a6:64:2b:cd:42:66:7d:b9:ae:29:30:ab:ea: 4c:9e:dc:2b:50:2b:cc:d3:67:65:45:c1:c2:2a:09: 6a:3a:4e:23:a1:c3:96:87:82:11:a1:ba:38:0c:b3: 10:a5:42:86:d5:ee:2d:dc:e8:9a:09:54:ec:7f:06: 02:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:44:75:0F:42:20:90:D9:75:43:FF:4D:01:53:58:3A:4A:43:CF:97 X509v3 Authority Key Identifier: keyid:AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/ukR1D0IgkNl1Q_9NAVNYOkpDz5c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 36.50.228.0/24 Signature Algorithm: sha256WithRSAEncryption 71:2a:8b:39:f2:9d:b0:10:92:ad:9c:59:39:51:1f:33:88:c7: 7b:7a:a7:ea:b8:19:88:5a:f6:91:76:21:b9:57:6c:0b:56:74: 9d:e7:e2:f4:3d:11:cf:dc:a5:db:4d:d8:1d:e4:2e:f2:48:d8: 6c:5c:49:3c:a4:51:8d:c4:f2:74:d5:3a:6c:2f:48:40:fa:24: bb:a9:e8:32:13:46:bf:81:c7:ab:be:29:5c:6f:1d:f3:09:19: e3:96:5b:17:f9:20:43:19:ee:9f:c3:dc:15:4c:7f:2c:2b:02: f8:2e:bb:9b:2f:b4:25:8a:81:de:af:55:90:a0:4e:c3:bc:8b: 46:1b:f8:85:62:5e:11:4b:32:14:11:f8:63:f9:f9:ba:ab:92: 50:90:bf:7d:97:b4:1d:e2:16:1b:e7:c7:f9:f9:bc:1a:9f:81: 12:7a:cc:79:62:da:8e:a2:53:e5:24:91:11:18:c6:d2:cf:85: 41:79:26:ac:98:38:e3:c8:0a:5b:b3:74:ea:ad:d4:86:42:9a: 5a:96:9a:ed:cc:8e:e8:7d:99:37:ba:1a:d7:06:0b:f2:94:b0: fe:c0:06:e2:46:10:1c:1d:f1:13:2b:f1:04:98:87:d7:38:74: 98:c5:e3:00:dd:b6:05:86:ea:a3:30:50:8c:75:b6:aa:21:46: 8c:9c:ab:de -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICATUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJE NEREQjRCRjkzMkM1MDA2QjcwNEI5ODI4NDEwMTc0QUM0MTJBRDAeFw0yNTAyMTAx NDIzNTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJBNDQ3NTBGNDIyMDkw RDk3NTQzRkY0RDAxNTM1ODNBNEE0M0NGOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+tJ4Ol6Ky6SBcKfz92gyAKmhFDD01UbGEDPqs8KQN/e+ysUfL l1CTv2t5ZA4/WKz4ktwbGRiR6pKyvWcN4aGSCCbrzrA+Zvoa9iYywz+UqYnQzHB8 MxoTRd3xBKjeUTnZiB2ZUYQMWW9r/sCllvJbpWBlhc4kTLyF4hKK89ADQuisYg4c jk1WNEexQahPim97x66ZoiGpY5OEnlKGL4ogls/Zfnw8VbHkjcL3q4lphjr6fIPS mLbmIH1gLfsFl9UgbTYmpmQrzUJmfbmuKTCr6kye3CtQK8zTZ2VFwcIqCWo6TiOh w5aHghGhujgMsxClQobV7i3c6JoJVOx/BgKJAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUukR1D0IgkNl1Q/9NAVNYOkpDz5cwHwYDVR0jBBgwFoAUq9TdtL+TLFAGtwS5 goQQF0rEEq0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DT0RJ R0lUL3E5VGR0TC1UTEZBR3R3UzVnb1FRRjByRUVxMC5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcTlUZHRMLVRMRkFHdHdTNWdvUVFGMHJFRXEwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DT0RJR0lUL3VrUjFEMElna05s MVFfOU5BVk5ZT2twRHo1Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAkMuQwDQYJKoZIhvcNAQELBQADggEBAHEqiznynbAQkq2cWTlRHzOIx3t6 p+q4GYha9pF2IblXbAtWdJ3n4vQ9Ec/cpdtN2B3kLvJI2GxcSTykUY3E8nTVOmwv SED6JLup6DITRr+Bx6u+KVxvHfMJGeOWWxf5IEMZ7p/D3BVMfywrAvguu5svtCWK gd6vVZCgTsO8i0Yb+IViXhFLMhQR+GP5+bqrklCQv32XtB3iFhvnx/n5vBqfgRJ6 zHli2o6iU+UkkREYxtLPhUF5JqyYOOPICluzdOqt1IZCmlqWmu3Mjuh9mTe6GtcG C/KUsP7ABuJGEBwd8RMr8QSYh9c4dJjF4wDdtgWG6qMwUIx1tqohRoycq94= -----END CERTIFICATE-----Generated at Fri Apr 18 17:56:59 2025 by rpki-client