$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/LxShM65YsKI6YAY-9DhUumzzqVY.roa File: LxShM65YsKI6YAY-9DhUumzzqVY.roa (raw, json) Hash identifier: l+FCXvpqE6MDaQWzTjhe4yJE8WswCGs7Kx/Nqhd+NO0= Subject key identifier: 2F:14:A1:33:AE:58:B0:A2:3A:60:06:3E:F4:38:54:BA:6C:F3:A9:56 Certificate issuer: /CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477 Certificate serial: 0CD0 Authority key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/LxShM65YsKI6YAY-9DhUumzzqVY.roa Signing time: Mon 10 Feb 2025 13:49:56 +0000 ROA not before: Mon 10 Feb 2025 13:49:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 138145 IP address blocks: 103.135.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 13:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3280 (0xcd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477 Validity Not Before: Feb 10 13:49:56 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2F14A133AE58B0A23A60063EF43854BA6CF3A956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ef:09:a4:80:2e:93:d4:fb:30:e2:7d:67:94: 39:45:8c:4d:a5:fd:ff:84:a6:91:a6:88:e0:76:83: 08:86:8d:b3:d9:5c:a7:d3:fc:4b:31:33:09:b5:6d: 71:ca:1a:3a:b7:31:b5:ed:12:f8:da:cd:0b:77:1a: 24:f2:03:f3:2c:e4:4c:1f:fc:e9:4f:8c:a3:ac:83: 86:4a:9a:5b:f0:7b:33:63:b5:32:19:04:a4:22:0a: 04:27:7f:50:51:0a:77:37:3c:74:97:b3:61:b6:43: 90:5d:e0:64:90:92:70:f5:ee:7f:ff:f8:3d:a7:4a: c7:55:18:c4:55:85:cb:2b:13:8f:a0:c3:19:5e:b6: 30:07:a8:30:98:fc:9f:ba:e4:67:84:03:fd:c4:74: b7:d7:b4:c9:78:38:06:24:63:17:4e:22:7b:f2:b7: 4f:df:70:a2:07:37:8b:d6:df:88:6a:52:db:f0:72: 86:be:42:e5:78:61:d8:74:67:c4:44:97:c3:c6:cf: 32:bf:63:f1:0a:cd:9b:f9:ab:0b:e2:55:4e:1c:aa: 20:29:8a:d8:27:2b:dd:6d:4d:58:73:ed:6e:55:a3: 73:01:a0:ea:29:77:1f:62:9e:a9:3c:71:7a:11:6f: c8:a9:a7:b0:94:e8:cc:fd:b2:6b:a7:cf:39:4f:04: 28:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:14:A1:33:AE:58:B0:A2:3A:60:06:3E:F4:38:54:BA:6C:F3:A9:56 X509v3 Authority Key Identifier: keyid:A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/LxShM65YsKI6YAY-9DhUumzzqVY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.135.19.0/24 Signature Algorithm: sha256WithRSAEncryption d7:9e:0c:5f:4e:3c:d6:2d:0b:a8:15:d4:6c:fb:09:37:8e:05: 16:c7:3f:a7:d5:01:ca:5a:f3:bb:63:81:16:fc:f9:52:78:98: dc:53:43:89:87:8c:e6:69:4c:b1:d6:c5:58:a1:b9:de:f4:2e: dd:1d:63:e5:cc:14:bb:f7:6f:9c:15:d9:43:49:b4:9d:78:9d: f1:59:22:69:8f:b0:f8:90:71:ed:55:fe:78:64:3b:65:df:8d: 7a:e7:ae:ee:4c:61:e3:d3:b9:d2:c2:e8:40:46:9a:20:75:3c: d3:ef:e1:bc:ac:9d:d4:1c:f1:cb:f4:4f:16:55:f2:a3:b9:3d: 77:8f:18:da:5f:c6:f5:6a:7d:59:3f:ed:d9:c6:14:fa:32:33: fe:34:b2:0e:7b:86:2e:c5:b7:4c:11:d6:b8:da:3a:be:f7:cb: 41:b2:b0:be:06:f6:0a:64:27:2d:8d:c2:38:03:e4:c4:c5:7e: e7:73:fe:ff:61:0c:19:ee:97:95:2a:19:dd:9b:76:a9:8b:55: 12:2d:38:5d:77:a5:4c:ef:13:42:89:a4:57:1a:97:bb:d1:5b: 47:be:b6:44:f4:9d:82:19:c0:8b:16:77:45:78:2c:20:26:15: 9d:c4:61:ea:35:6d:c8:14:72:fa:ce:9f:2e:2e:ed:9c:4a:7a: 60:90:b5:22 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDNAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTZF RDE0REIxMjEwMUExMjVEMzExMkRDNENDNTYwMkQzMEQ4QjQ3NzAeFw0yNTAyMTAx MzQ5NTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJGMTRBMTMzQUU1OEIw QTIzQTYwMDYzRUY0Mzg1NEJBNkNGM0E5NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCq7wmkgC6T1Psw4n1nlDlFjE2l/f+EppGmiOB2gwiGjbPZXKfT /EsxMwm1bXHKGjq3MbXtEvjazQt3GiTyA/Ms5Ewf/OlPjKOsg4ZKmlvwezNjtTIZ BKQiCgQnf1BRCnc3PHSXs2G2Q5Bd4GSQknD17n//+D2nSsdVGMRVhcsrE4+gwxle tjAHqDCY/J+65GeEA/3EdLfXtMl4OAYkYxdOInvyt0/fcKIHN4vW34hqUtvwcoa+ QuV4Ydh0Z8REl8PGzzK/Y/EKzZv5qwviVU4cqiApitgnK91tTVhz7W5Vo3MBoOop dx9inqk8cXoRb8ipp7CU6Mz9smunzzlPBChVAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQULxShM65YsKI6YAY+9DhUumzzqVYwHwYDVR0jBBgwFoAUpu0U2xIQGhJdMRLc TMVgLTDYtHcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvREVOUEFJ Ty9wdTBVMnhJUUdoSmRNUkxjVE1WZ0xURFl0SGMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3B1MFUyeElRR2hKZE1STGNUTVZnTFREWXRIYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RFTlBBSU8vTHhTaE02NVlzS0k2WUFZ LTlEaFV1bXp6cVZZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGeHEzANBgkqhkiG9w0BAQsFAAOCAQEA154MX0481i0LqBXUbPsJN44FFsc/p9UB ylrzu2OBFvz5UniY3FNDiYeM5mlMsdbFWKG53vQu3R1j5cwUu/dvnBXZQ0m0nXid 8VkiaY+w+JBx7VX+eGQ7Zd+Neueu7kxh49O50sLoQEaaIHU80+/hvKyd1Bzxy/RP FlXyo7k9d48Y2l/G9Wp9WT/t2cYU+jIz/jSyDnuGLsW3TBHWuNo6vvfLQbKwvgb2 CmQnLY3COAPkxMV+53P+/2EMGe6XlSoZ3Zt2qYtVEi04XXelTO8TQomkVxqXu9Fb R762RPSdghnAixZ3RXgsICYVncRh6jVtyBRy+s6fLi7tnEp6YJC1Ig== -----END CERTIFICATE-----Generated at Sat Apr 5 11:26:42 2025 by rpki-client