$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HYA/rN4be_mOKz3Yvexhpx5daCdTpZk.roa File: rN4be_mOKz3Yvexhpx5daCdTpZk.roa (raw, json) Hash identifier: zgI/OYcpzXgj84LHhC7E28OxKEfPS7ny+4u1kf0NncU= Subject key identifier: AC:DE:1B:7B:F9:8E:2B:3D:D8:BD:EC:61:A7:1E:5D:68:27:53:A5:99 Certificate issuer: /CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4 Certificate serial: 0CA2 Authority key identifier: 0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/rN4be_mOKz3Yvexhpx5daCdTpZk.roa Signing time: Mon 10 Feb 2025 14:06:25 +0000 ROA not before: Mon 10 Feb 2025 14:06:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 103.252.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 13:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3234 (0xca2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4 Validity Not Before: Feb 10 14:06:25 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=ACDE1B7BF98E2B3DD8BDEC61A71E5D682753A599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b8:67:15:90:e8:5f:f0:67:41:da:04:69:cb: 8d:94:18:ef:5a:db:08:e3:17:21:88:ff:1b:b6:f5: e2:ed:4c:bd:31:e9:a2:8e:13:6f:f6:db:d0:8b:4c: de:c7:c5:e3:f8:63:71:71:4e:bc:70:e5:ed:81:c6: 38:01:e8:67:61:b7:31:a0:58:bd:e7:58:c9:d7:49: b7:58:29:d6:4e:61:6d:8c:aa:4c:58:67:aa:ab:ec: 5e:92:7c:43:cc:9b:cd:71:e5:0a:80:8b:1d:9a:66: 60:81:65:6e:44:45:f7:dc:12:cb:bc:47:42:84:2d: a4:28:c6:9b:dc:b0:32:5f:26:00:10:9a:d5:fa:4b: 12:56:8f:ec:d1:64:41:3b:61:e5:fa:13:66:16:ef: 24:7b:5a:69:d7:5b:98:4f:7e:62:5b:1e:27:a6:6c: 00:de:57:95:79:d4:cf:d3:b6:f7:f1:9b:3e:62:a9: 09:47:7a:6d:2e:a6:86:6f:7f:3f:b5:71:51:24:15: fd:52:2c:18:73:d6:cf:cf:41:c7:19:9d:6c:5a:9f: b8:78:c0:f0:a2:a3:a5:a7:e0:29:1f:4e:12:20:57: af:0a:ac:3a:b1:a7:1a:5d:41:9f:6d:f1:cf:54:99: db:e7:ed:97:09:55:06:e8:b8:34:4c:2e:53:51:5b: a7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DE:1B:7B:F9:8E:2B:3D:D8:BD:EC:61:A7:1E:5D:68:27:53:A5:99 X509v3 Authority Key Identifier: keyid:0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/rN4be_mOKz3Yvexhpx5daCdTpZk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.252.128.0/22 Signature Algorithm: sha256WithRSAEncryption 25:1e:c6:e9:0b:20:60:e7:e4:4c:84:16:71:6b:cf:b8:cf:ae: 23:5b:b7:7e:97:51:30:3e:00:20:bb:2d:dc:ba:da:be:1d:48: 7e:8f:9f:2c:94:97:c3:a5:18:9b:0d:69:d9:ec:ca:d8:3e:7d: ad:48:f0:86:27:88:76:a4:8a:d2:f0:f0:7c:6f:ef:53:97:ed: af:c3:e8:0a:a7:83:66:33:df:72:4c:5d:44:dd:35:ac:0a:a9: 37:49:e6:79:e4:ad:2e:af:d0:6c:33:f1:22:5a:f1:65:05:cf: 6e:9d:09:d6:e7:cb:3d:3e:b6:8d:7e:69:c7:26:b2:ba:a6:9f: 83:f5:3e:71:63:65:d2:67:51:23:ab:da:75:2a:21:7d:60:43: 07:da:c0:ad:7d:47:6d:b0:9b:e5:62:a6:ea:bb:1f:87:40:e1: 67:58:22:51:ee:95:4c:92:22:06:72:0d:fc:93:de:c2:8a:36: 8e:e4:25:46:73:57:53:0c:ef:89:69:4b:c8:de:ca:3f:41:3e: 0a:0c:1e:4f:a7:c3:f9:07:33:79:15:d8:e5:60:4d:b0:18:df: 2a:2a:18:8f:ba:cd:39:d2:52:9c:cd:6f:02:8b:89:c5:e7:48: d9:33:ff:aa:e8:55:22:0c:18:53:0e:c9:21:24:db:4a:26:46: c8:3c:c9:d4 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEVB RTJEMzMxRjJDNDI4MEMxNkFBOEJBRkUxNkZERENDRTM3MTVCNDAeFw0yNTAyMTAx NDA2MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFDREUxQjdCRjk4RTJC M0REOEJERUM2MUE3MUU1RDY4Mjc1M0E1OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPuGcVkOhf8GdB2gRpy42UGO9a2wjjFyGI/xu29eLtTL0x6aKO E2/229CLTN7HxeP4Y3FxTrxw5e2BxjgB6GdhtzGgWL3nWMnXSbdYKdZOYW2MqkxY Z6qr7F6SfEPMm81x5QqAix2aZmCBZW5ERffcEsu8R0KELaQoxpvcsDJfJgAQmtX6 SxJWj+zRZEE7YeX6E2YW7yR7WmnXW5hPfmJbHiembADeV5V51M/Ttvfxmz5iqQlH em0upoZvfz+1cVEkFf1SLBhz1s/PQccZnWxan7h4wPCio6Wn4CkfThIgV68KrDqx pxpdQZ9t8c9Umdvn7ZcJVQbouDRMLlNRW6eLAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUrN4be/mOKz3Yvexhpx5daCdTpZkwHwYDVR0jBBgwFoAUDq4tMx8sQoDBaqi6 /hb93M43FbQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFlBL0Rx NHRNeDhzUW9EQmFxaTZfaGI5M000M0ZiUS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev RHE0dE14OHNRb0RCYXFpNl9oYjkzTTQzRmJRLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSFlBL3JONGJlX21PS3ozWXZleGhweDVkYUNk VHBaay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn/IAwDQYJ KoZIhvcNAQELBQADggEBACUexukLIGDn5EyEFnFrz7jPriNbt36XUTA+ACC7Ldy6 2r4dSH6PnyyUl8OlGJsNadnsytg+fa1I8IYniHakitLw8Hxv71OX7a/D6Aqng2Yz 33JMXUTdNawKqTdJ5nnkrS6v0Gwz8SJa8WUFz26dCdbnyz0+to1+accmsrqmn4P1 PnFjZdJnUSOr2nUqIX1gQwfawK19R22wm+Vipuq7H4dA4WdYIlHulUySIgZyDfyT 3sKKNo7kJUZzV1MM74lpS8jeyj9BPgoMHk+nw/kHM3kV2OVgTbAY3yoqGI+6zTnS UpzNbwKLicXnSNkz/6roVSIMGFMOySEk20omRsg8ydQ= -----END CERTIFICATE-----Generated at Mon Apr 7 11:38:21 2025 by rpki-client