$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/Ph3LXUUCHNzQbx8ZF3Xp2jGIrao.roa File: Ph3LXUUCHNzQbx8ZF3Xp2jGIrao.roa (raw, json) Hash identifier: zMMaRyMSxfpE19/h+9HVfhEWN4zmgzH1mVw/R7zMJ6k= Subject key identifier: 3E:1D:CB:5D:45:02:1C:DC:D0:6F:1F:19:17:75:E9:DA:31:88:AD:AA Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Certificate serial: 0F91 Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/Ph3LXUUCHNzQbx8ZF3Xp2jGIrao.roa Signing time: Mon 10 Feb 2025 14:30:52 +0000 ROA not before: Mon 10 Feb 2025 14:30:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18424 IP address blocks: 103.136.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3985 (0xf91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Validity Not Before: Feb 10 14:30:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3E1DCB5D45021CDCD06F1F191775E9DA3188ADAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5b:41:b3:15:10:a2:fa:62:d6:19:8f:97:23: a1:1e:cd:1b:fa:06:cb:9d:a0:bb:de:b0:57:23:07: ea:6f:ac:4a:b7:5b:ba:fe:90:14:33:6b:73:5a:06: 5b:f7:e7:61:a3:c3:15:38:44:09:d3:1a:cf:68:c8: c0:f4:89:30:f1:f4:e4:30:78:23:b3:36:95:3b:45: b7:37:f2:51:71:1d:ae:1e:03:bc:e3:2f:c3:1b:15: ed:b0:a2:31:8b:fb:5c:8b:fb:55:c4:e5:ab:51:95: 5d:24:c0:b7:c1:ff:b8:e2:5c:c6:c7:93:f8:b1:e2: 45:06:64:ce:6a:ad:b2:ee:5a:fa:ab:d9:c6:50:62: e6:fa:8f:6a:63:b7:e7:d9:c4:3d:7b:a5:dd:2e:9a: 6e:e1:76:0e:19:5e:0d:12:81:58:4f:81:25:48:70: e6:8e:05:e3:85:0b:1e:99:37:ed:57:19:f7:9f:86: 27:be:74:60:74:9a:98:ff:88:79:3d:34:e4:23:07: 91:d1:d7:51:01:c9:4c:b5:c1:68:2d:c2:a1:67:85: e6:34:c8:16:bb:d9:03:f5:b7:6a:66:1c:3f:1b:54: e1:cd:c3:02:89:3e:4d:5d:25:21:5b:f2:c8:34:91: 5e:44:67:89:e8:b6:2d:e1:4c:39:44:44:21:bc:42: 65:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1D:CB:5D:45:02:1C:DC:D0:6F:1F:19:17:75:E9:DA:31:88:AD:AA X509v3 Authority Key Identifier: keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/Ph3LXUUCHNzQbx8ZF3Xp2jGIrao.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.136.60.0/23 Signature Algorithm: sha256WithRSAEncryption 75:71:c7:90:0d:5e:a3:98:ed:45:11:25:91:fb:78:0f:a2:d9: e5:48:b2:72:44:2c:98:f2:6d:9a:e7:c3:2e:0e:66:44:92:dd: db:3d:dc:d5:c2:00:55:5b:44:4f:6c:d5:7b:5a:02:0f:cf:28: db:7c:8d:9a:de:bb:72:53:12:a7:75:3d:a7:77:fd:6a:61:47: f9:97:63:8f:22:f5:c4:f0:93:a9:7c:8e:1d:52:17:6a:84:e5: 4d:53:59:ce:0d:63:ed:9b:36:64:e6:62:2f:93:06:b4:07:2e: 97:cb:6c:1c:f7:23:3b:00:d2:4a:46:99:c4:b2:84:53:3f:6e: 9c:df:91:44:7f:97:fa:f8:75:e8:39:66:11:c8:55:ba:89:e2: 1b:15:ca:99:0e:21:47:4e:52:3f:5b:c3:40:87:3f:a5:a6:5b: 65:13:82:27:1c:a1:94:e1:a3:50:fa:0c:7b:89:d2:0a:4c:ee: 05:00:7e:06:b2:f0:f0:5d:fa:4f:68:fb:5d:0a:92:d1:b9:df: 38:38:af:b0:c7:e1:02:3d:c2:27:8b:14:4f:29:fb:95:ed:74: 3e:73:9a:7e:64:02:eb:04:4b:0e:e3:98:1e:d6:15:1c:79:ce: 68:78:e0:fd:db:c2:ce:d3:d5:96:b8:82:97:34:ac:71:0a:b4: 20:0f:c8:4e -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICD5EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDRG MEREMEY0RkI4MDEwMjVENTg2RUY5OTlDNUVFRTAyRDdDMjA1OTAeFw0yNTAyMTAx NDMwNTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNFMURDQjVENDUwMjFD RENEMDZGMUYxOTE3NzVFOURBMzE4OEFEQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyW0GzFRCi+mLWGY+XI6EezRv6BsudoLvesFcjB+pvrEq3W7r+ kBQza3NaBlv352GjwxU4RAnTGs9oyMD0iTDx9OQweCOzNpU7Rbc38lFxHa4eA7zj L8MbFe2wojGL+1yL+1XE5atRlV0kwLfB/7jiXMbHk/ix4kUGZM5qrbLuWvqr2cZQ Yub6j2pjt+fZxD17pd0umm7hdg4ZXg0SgVhPgSVIcOaOBeOFCx6ZN+1XGfefhie+ dGB0mpj/iHk9NOQjB5HR11EByUy1wWgtwqFnheY0yBa72QP1t2pmHD8bVOHNwwKJ Pk1dJSFb8sg0kV5EZ4noti3hTDlERCG8QmXDAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUPh3LXUUCHNzQbx8ZF3Xp2jGIraowHwYDVR0jBBgwFoAU1PDdD0+4AQJdWG75 mcXu4C18IFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdULzFQ RGREMC00QVFKZFdHNzVtY1h1NEMxOElGay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev MVBEZEQwLTRBUUpkV0c3NW1jWHU0QzE4SUZrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRFdUL1BoM0xYVVVDSE56UWJ4OFpGM1hwMmpH SXJhby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFniDwwDQYJ KoZIhvcNAQELBQADggEBAHVxx5ANXqOY7UURJZH7eA+i2eVIsnJELJjybZrnwy4O ZkSS3ds93NXCAFVbRE9s1XtaAg/PKNt8jZreu3JTEqd1Pad3/WphR/mXY48i9cTw k6l8jh1SF2qE5U1TWc4NY+2bNmTmYi+TBrQHLpfLbBz3IzsA0kpGmcSyhFM/bpzf kUR/l/r4deg5ZhHIVbqJ4hsVypkOIUdOUj9bw0CHP6WmW2UTgiccoZTho1D6DHuJ 0gpM7gUAfgay8PBd+k9o+10KktG53zg4r7DH4QI9wieLFE8p+5XtdD5zmn5kAusE Sw7jmB7WFRx5zmh44P3bws7T1Za4gpc0rHEKtCAPyE4= -----END CERTIFICATE-----Generated at Wed Feb 19 22:10:11 2025 by rpki-client