$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CROWN/_WKMvY8hJG1qY9tdEsh01WRAOBM.roa File: _WKMvY8hJG1qY9tdEsh01WRAOBM.roa (raw, json) Hash identifier: +JotHMltkyGZR8vZEuoO40BPk/EIlQZykqDMHOLOwQM= Subject key identifier: FD:62:8C:BD:8F:21:24:6D:6A:63:DB:5D:12:C8:74:D5:64:40:38:13 Certificate issuer: /CN=4A7B5FFF97B89C87BDBFD46164EE924A87D696E9 Certificate serial: 017E Authority key identifier: 4A:7B:5F:FF:97:B8:9C:87:BD:BF:D4:61:64:EE:92:4A:87:D6:96:E9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Sntf_5e4nIe9v9RhZO6SSofWluk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CROWN/_WKMvY8hJG1qY9tdEsh01WRAOBM.roa Signing time: Mon 10 Feb 2025 13:43:00 +0000 ROA not before: Mon 10 Feb 2025 13:43:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 103.255.210.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CROWN/Sntf_5e4nIe9v9RhZO6SSofWluk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CROWN/Sntf_5e4nIe9v9RhZO6SSofWluk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Sntf_5e4nIe9v9RhZO6SSofWluk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 13:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A7B5FFF97B89C87BDBFD46164EE924A87D696E9 Validity Not Before: Feb 10 13:43:00 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FD628CBD8F21246D6A63DB5D12C874D564403813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b9:19:a8:82:4f:c3:43:a8:9b:3e:64:3c:84: e9:4a:de:fd:56:74:14:d3:ec:12:30:41:f2:42:78: 15:a5:9a:34:9c:ed:15:97:9a:f0:fd:d3:90:c2:21: 88:dc:01:64:76:24:c5:84:87:69:58:a4:b0:f0:15: 1f:43:e1:92:ca:f0:ab:d0:43:1c:92:d2:d0:7c:d2: 6b:3b:61:ca:28:e3:e0:8b:c9:68:bc:07:9b:a8:72: 18:d2:9b:58:6c:47:37:49:f3:63:44:01:60:4d:75: 73:7d:8d:0a:d5:ae:d4:21:d1:9a:05:ff:99:f3:9e: fe:02:16:54:c6:23:c6:f4:1e:79:4c:bc:7e:81:e1: cd:34:0f:a4:57:c6:0f:00:75:75:d3:29:d8:43:c7: 7f:c7:ab:15:8d:e6:7a:8b:15:fa:f2:c7:e1:8f:3c: 12:a6:29:b4:ae:d1:fd:a8:ef:2e:73:4e:21:a7:1a: 5a:34:fa:86:80:33:3c:5e:0a:e2:c7:30:5d:ab:60: 02:1d:06:af:91:14:5e:57:45:f8:02:62:43:15:02: 0e:2a:12:1e:70:68:a6:6f:50:d3:d8:1e:16:81:6b: 9f:dd:e5:34:62:99:68:35:34:0f:75:96:2a:c7:12: 6e:84:d4:b8:1e:2d:89:c5:d4:35:54:8e:b3:a2:05: 74:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:62:8C:BD:8F:21:24:6D:6A:63:DB:5D:12:C8:74:D5:64:40:38:13 X509v3 Authority Key Identifier: keyid:4A:7B:5F:FF:97:B8:9C:87:BD:BF:D4:61:64:EE:92:4A:87:D6:96:E9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CROWN/Sntf_5e4nIe9v9RhZO6SSofWluk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Sntf_5e4nIe9v9RhZO6SSofWluk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CROWN/_WKMvY8hJG1qY9tdEsh01WRAOBM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.255.210.0/23 Signature Algorithm: sha256WithRSAEncryption 24:de:66:4c:e3:5e:49:f3:c5:d8:86:c1:69:17:9c:f5:84:2a: fb:60:a4:0d:23:c0:e9:d0:f5:96:5a:d1:99:a4:60:9b:4c:85: 10:94:c4:72:9d:8d:8f:2d:67:c0:59:ef:ce:76:f2:e0:04:ef: 33:be:55:14:d0:2d:3c:ef:1a:96:bf:a6:06:8f:30:de:55:8f: d6:50:2b:0e:d9:43:ef:67:df:e9:2a:50:94:dd:f3:73:c5:da: 82:1d:9b:a1:ae:3d:3d:7e:88:55:9a:5b:f8:16:73:41:67:83: 5e:52:fd:05:5d:95:f1:51:13:d8:af:85:52:50:32:7b:c2:2f: 93:4e:4e:75:8f:7a:e4:ec:0d:f3:b9:11:cc:e2:4c:57:69:d6: e6:f9:a8:59:da:bb:b5:65:51:49:bf:c4:45:a8:1c:7f:ba:e4: fd:88:49:77:b1:1b:e1:15:12:46:64:bc:e1:28:f2:ef:46:1e: 46:0d:0d:3e:57:9e:ce:b0:05:9e:40:78:2d:14:b1:45:ca:7a: af:cd:44:02:67:97:da:99:13:b7:bb:60:b3:aa:c2:35:38:96: 61:3e:0c:74:fc:a6:a8:55:aa:7f:c7:8a:40:37:68:5e:10:8c: b8:80:5f:b6:96:2b:40:2e:ab:76:8b:96:75:0d:73:cf:47:f4: 13:ba:67:f8 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEE3 QjVGRkY5N0I4OUM4N0JEQkZENDYxNjRFRTkyNEE4N0Q2OTZFOTAeFw0yNTAyMTAx MzQzMDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZENjI4Q0JEOEYyMTI0 NkQ2QTYzREI1RDEyQzg3NEQ1NjQ0MDM4MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXuRmogk/DQ6ibPmQ8hOlK3v1WdBTT7BIwQfJCeBWlmjSc7RWX mvD905DCIYjcAWR2JMWEh2lYpLDwFR9D4ZLK8KvQQxyS0tB80ms7Ycoo4+CLyWi8 B5uochjSm1hsRzdJ82NEAWBNdXN9jQrVrtQh0ZoF/5nznv4CFlTGI8b0HnlMvH6B 4c00D6RXxg8AdXXTKdhDx3/HqxWN5nqLFfryx+GPPBKmKbSu0f2o7y5zTiGnGlo0 +oaAMzxeCuLHMF2rYAIdBq+RFF5XRfgCYkMVAg4qEh5waKZvUNPYHhaBa5/d5TRi mWg1NA91lirHEm6E1LgeLYnF1DVUjrOiBXRNAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU/WKMvY8hJG1qY9tdEsh01WRAOBMwHwYDVR0jBBgwFoAUSntf/5e4nIe9v9Rh ZO6SSofWlukwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1JPV04v U250Zl81ZTRuSWU5djlSaFpPNlNTb2ZXbHVrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9TbnRmXzVlNG5JZTl2OVJoWk82U1NvZldsdWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DUk9XTi9fV0tNdlk4aEpHMXFZOXRkRXNo MDFXUkFPQk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ//S MA0GCSqGSIb3DQEBCwUAA4IBAQAk3mZM415J88XYhsFpF5z1hCr7YKQNI8Dp0PWW WtGZpGCbTIUQlMRynY2PLWfAWe/OdvLgBO8zvlUU0C087xqWv6YGjzDeVY/WUCsO 2UPvZ9/pKlCU3fNzxdqCHZuhrj09fohVmlv4FnNBZ4NeUv0FXZXxURPYr4VSUDJ7 wi+TTk51j3rk7A3zuRHM4kxXadbm+ahZ2ru1ZVFJv8RFqBx/uuT9iEl3sRvhFRJG ZLzhKPLvRh5GDQ0+V57OsAWeQHgtFLFFynqvzUQCZ5famRO3u2CzqsI1OJZhPgx0 /KaoVap/x4pAN2heEIy4gF+2litALqt2i5Z1DXPPR/QTumf4 -----END CERTIFICATE-----Generated at Thu Apr 17 13:05:38 2025 by rpki-client