$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/EiyMBeGm0HL1kkgZsiGM76HGOdw.roa File: EiyMBeGm0HL1kkgZsiGM76HGOdw.roa (raw, json) Hash identifier: Tcx3tZX1DWmn4swi2Rq+bOtCwXq/aAsxdKatu3MofLc= Subject key identifier: 12:2C:8C:05:E1:A6:D0:72:F5:92:48:19:B2:21:8C:EF:A1:C6:39:DC Certificate issuer: /CN=3BF441B57C86BD9D193451A005D26CE1A3C6DEE7 Certificate serial: 02A6 Authority key identifier: 3B:F4:41:B5:7C:86:BD:9D:19:34:51:A0:05:D2:6C:E1:A3:C6:DE:E7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/EiyMBeGm0HL1kkgZsiGM76HGOdw.roa Signing time: Mon 10 Feb 2025 14:05:16 +0000 ROA not before: Mon 10 Feb 2025 14:05:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18041 IP address blocks: 103.160.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 22:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 678 (0x2a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BF441B57C86BD9D193451A005D26CE1A3C6DEE7 Validity Not Before: Feb 10 14:05:16 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=122C8C05E1A6D072F5924819B2218CEFA1C639DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8d:e6:a3:65:9e:05:b2:d9:13:83:ff:fa:78: 3f:14:c4:9b:f7:0b:24:3b:43:6a:27:75:47:30:da: 0f:a7:1a:c0:a2:e0:e3:ae:01:d2:c1:fe:2b:91:44: 10:39:20:13:91:86:0d:4a:ee:5a:08:fb:d1:78:30: 3c:a8:ef:66:5b:95:af:1a:3e:0a:7b:b3:3b:4b:61: 85:f2:03:ff:c8:e4:98:cc:f9:ae:12:54:59:4c:1e: d7:0a:3d:3d:85:94:26:8c:7f:ad:5d:56:ec:18:5e: de:d3:7b:20:bf:d5:ee:92:fa:0b:4c:8e:d7:33:d3: c6:1a:b9:f3:26:5a:53:59:4a:aa:73:61:1c:21:df: 61:19:43:fa:4a:38:ad:38:b5:63:f1:4c:b7:11:31: 54:f3:78:58:02:e5:23:f4:fa:84:3d:a3:b9:ff:9b: 7c:36:8f:0d:c8:a7:1b:b4:0f:ee:8c:21:e9:09:2f: ab:09:4d:d5:aa:63:39:47:d1:c1:30:f9:ce:92:e9: 5b:b6:b3:d8:f0:0c:7d:06:76:85:0a:d1:f7:1a:94: ae:0c:52:7f:d7:9b:56:8c:ae:1e:b5:ce:5c:bc:11: 53:fc:5d:fb:71:f5:e1:2a:a5:4c:66:4f:02:99:c5: 0f:9b:0e:16:7a:e8:10:e8:d7:11:9a:f9:82:99:ad: 5b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2C:8C:05:E1:A6:D0:72:F5:92:48:19:B2:21:8C:EF:A1:C6:39:DC X509v3 Authority Key Identifier: keyid:3B:F4:41:B5:7C:86:BD:9D:19:34:51:A0:05:D2:6C:E1:A3:C6:DE:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/EiyMBeGm0HL1kkgZsiGM76HGOdw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.160.180.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:59:ae:80:08:17:bc:1e:fe:03:71:1f:86:7a:42:28:86:ef: f4:59:91:d0:b5:de:e7:d3:17:39:50:70:d7:ac:a4:71:d0:09: ae:e4:ca:74:4e:b9:e4:07:d9:1f:6b:cd:50:5e:f4:e9:a0:c1: 2a:44:57:47:42:70:d2:b7:20:93:9d:df:52:62:43:54:d9:a0: 53:a1:38:54:53:f6:98:9d:85:83:89:e3:31:ad:95:02:b5:e0: c9:0f:e6:61:80:ff:05:7e:9f:b1:dc:d8:e3:b7:5b:a3:13:3c: da:7e:6e:15:bb:d2:5b:35:b9:f3:b6:45:46:55:36:81:fe:11: 28:77:db:d9:9b:d9:31:d4:a2:85:11:85:73:a0:1a:ac:a8:05: 99:e1:bd:b8:89:94:b2:fd:9d:0f:b9:96:2e:5b:61:d1:1d:ad: a3:bd:2c:af:52:7e:34:67:2d:da:47:f6:2e:e6:78:91:49:2b: e4:ee:97:a4:ee:5c:e5:5e:d4:d8:26:b0:ff:83:fa:5e:57:84: 49:81:6e:63:d9:7f:58:52:e1:5c:89:de:5d:4e:b7:2d:42:9b: cf:a6:2b:c0:ad:0e:9b:15:1e:4e:5d:f0:5d:1c:c0:90:ac:ac: 0b:03:f2:ac:dd:14:d2:4a:06:0d:0e:9f:53:93:41:d8:cd:6c: 5f:5e:48:2d -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JG NDQxQjU3Qzg2QkQ5RDE5MzQ1MUEwMDVEMjZDRTFBM0M2REVFNzAeFw0yNTAyMTAx NDA1MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEyMkM4QzA1RTFBNkQw NzJGNTkyNDgxOUIyMjE4Q0VGQTFDNjM5REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgjeajZZ4FstkTg//6eD8UxJv3CyQ7Q2ondUcw2g+nGsCi4OOu AdLB/iuRRBA5IBORhg1K7loI+9F4MDyo72Zbla8aPgp7sztLYYXyA//I5JjM+a4S VFlMHtcKPT2FlCaMf61dVuwYXt7TeyC/1e6S+gtMjtcz08YaufMmWlNZSqpzYRwh 32EZQ/pKOK04tWPxTLcRMVTzeFgC5SP0+oQ9o7n/m3w2jw3Ipxu0D+6MIekJL6sJ TdWqYzlH0cEw+c6S6Vu2s9jwDH0GdoUK0fcalK4MUn/Xm1aMrh61zly8EVP8Xftx 9eEqpUxmTwKZxQ+bDhZ66BDo1xGa+YKZrVvtAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUEiyMBeGm0HL1kkgZsiGM76HGOdwwHwYDVR0jBBgwFoAUO/RBtXyGvZ0ZNFGg BdJs4aPG3ucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRVJBWUlO Rk8vT19SQnRYeUd2WjBaTkZHZ0JkSnM0YVBHM3VjLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9PX1JCdFh5R3ZaMFpORkdnQmRKczRhUEczdWMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9FUkFZSU5GTy9FaXlNQmVHbTBITDFr a2dac2lHTTc2SEdPZHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6C0MA0GCSqGSIb3DQEBCwUAA4IBAQANWa6ACBe8Hv4DcR+GekIohu/0WZHQ td7n0xc5UHDXrKRx0Amu5Mp0TrnkB9kfa81QXvTpoMEqRFdHQnDStyCTnd9SYkNU 2aBToThUU/aYnYWDieMxrZUCteDJD+ZhgP8Ffp+x3Njjt1ujEzzafm4Vu9JbNbnz tkVGVTaB/hEod9vZm9kx1KKFEYVzoBqsqAWZ4b24iZSy/Z0PuZYuW2HRHa2jvSyv Un40Zy3aR/Yu5niRSSvk7pek7lzlXtTYJrD/g/peV4RJgW5j2X9YUuFcid5dTrct QpvPpivArQ6bFR5OXfBdHMCQrKwLA/Ks3RTSSgYNDp9Tk0HYzWxfXkgt -----END CERTIFICATE-----Generated at Wed Feb 19 20:36:23 2025 by rpki-client