$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ISHISH/-KVZdqfw1TN2i3nKOLqdm-ysA2M.roa File: -KVZdqfw1TN2i3nKOLqdm-ysA2M.roa (raw, json) Hash identifier: W3vzqLxl+G2vFqFdjTKRgAjHgXzMOpK0YktXUFQmCa4= Subject key identifier: F8:A5:59:76:A7:F0:D5:33:76:8B:79:CA:38:BA:9D:9B:EC:AC:03:63 Certificate issuer: /CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF Certificate serial: 02F3 Authority key identifier: 7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/-KVZdqfw1TN2i3nKOLqdm-ysA2M.roa Signing time: Mon 10 Feb 2025 13:57:57 +0000 ROA not before: Mon 10 Feb 2025 13:57:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38047 IP address blocks: 103.182.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 22:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 755 (0x2f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF Validity Not Before: Feb 10 13:57:57 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F8A55976A7F0D533768B79CA38BA9D9BECAC0363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f5:a4:f5:22:2a:7c:67:07:6d:ba:ce:03:bf: 76:a0:2b:22:bb:d2:27:35:8b:f7:9c:d4:93:aa:3e: 49:82:5d:c9:9c:05:98:f1:ed:46:f3:d1:c6:d7:4b: 7a:98:93:d2:08:76:23:7e:c8:3f:e2:dd:27:4c:aa: 19:f4:19:4f:19:7a:d8:77:de:98:32:4b:c0:62:dc: 94:8f:e2:74:36:45:1e:a7:81:f0:0e:9f:60:2c:d9: 89:4b:2b:04:2b:09:9f:ea:92:12:37:aa:ae:2d:60: f8:be:0f:44:f0:a1:f2:c6:93:ed:ff:ff:03:0b:72: c6:31:1a:b4:33:33:90:f3:5c:5f:85:a0:83:12:52: d8:76:79:5d:50:9f:7b:c4:63:24:28:24:51:64:e6: 6b:32:ef:74:06:a2:85:79:ca:38:c9:98:49:51:5f: 73:46:a6:d8:33:df:79:20:2d:df:9e:80:fa:66:16: 80:90:32:b1:ca:65:bc:66:4c:65:ac:62:c4:7f:a8: 8e:20:a1:ad:23:3c:18:93:cd:48:cb:f1:55:92:41: 9f:7b:6e:90:ad:d2:1c:a1:97:63:7b:00:7d:1f:e6: 21:f1:a5:50:01:22:0d:53:84:cf:f8:a9:db:8c:f1: 47:c7:6d:f8:b9:f1:80:0c:61:c4:6b:55:63:a4:df: 22:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A5:59:76:A7:F0:D5:33:76:8B:79:CA:38:BA:9D:9B:EC:AC:03:63 X509v3 Authority Key Identifier: keyid:7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/-KVZdqfw1TN2i3nKOLqdm-ysA2M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.182.226.0/24 Signature Algorithm: sha256WithRSAEncryption 94:fb:1f:76:9b:3f:94:b7:f3:12:cc:0d:20:f3:3e:b2:89:4f: 28:64:80:91:f4:87:ac:2e:cf:71:ce:e5:2c:2b:39:01:2c:a2: 88:5e:3c:45:db:73:47:18:d7:de:10:e9:61:e7:60:a5:82:89: 4e:0e:e0:86:2a:bf:bf:d0:34:20:ce:59:91:79:44:05:0b:e7: c0:cb:8b:1c:c5:eb:43:2c:15:d7:ca:f3:e0:62:32:c9:4a:a8: 71:dc:7e:be:81:24:a1:f0:05:ce:25:65:9e:ef:1a:cd:ce:4d: a5:8c:05:23:ee:11:fa:25:cb:a9:b0:f9:84:a4:ea:f4:81:0e: 9e:ad:82:79:c5:26:bb:c2:cd:fb:ed:63:fe:21:ee:10:3b:5e: fb:20:b4:5c:54:e3:c8:bc:4c:e4:2c:d6:c0:1d:b7:e3:d2:da: 73:37:d9:20:0a:b0:d1:1b:04:d2:07:a8:40:15:00:b0:4e:7b: 21:06:ee:b5:67:f2:2f:ed:cf:8a:ac:89:64:6d:37:35:0d:0e: b0:16:11:05:19:4f:c8:86:5e:44:f5:c0:5f:65:76:8f:8c:6f: 8f:eb:34:3b:87:fc:f6:81:3f:a6:b9:48:35:6a:8b:e9:61:a5: 91:d5:71:ad:25:22:f9:f6:86:75:ba:0f:66:ef:7f:3b:54:7b: 8d:f4:8e:d6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAvMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Ux N0Q5MjNBQTBCQzZCMEEwOEI1QTE4N0JFRTlDQURFOEQ1MEVBRjAeFw0yNTAyMTAx MzU3NTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY4QTU1OTc2QTdGMEQ1 MzM3NjhCNzlDQTM4QkE5RDlCRUNBQzAzNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD49aT1Iip8Zwdtus4Dv3agKyK70ic1i/ec1JOqPkmCXcmcBZjx 7Ubz0cbXS3qYk9IIdiN+yD/i3SdMqhn0GU8Zeth33pgyS8Bi3JSP4nQ2RR6ngfAO n2As2YlLKwQrCZ/qkhI3qq4tYPi+D0TwofLGk+3//wMLcsYxGrQzM5DzXF+FoIMS Uth2eV1Qn3vEYyQoJFFk5msy73QGooV5yjjJmElRX3NGptgz33kgLd+egPpmFoCQ MrHKZbxmTGWsYsR/qI4goa0jPBiTzUjL8VWSQZ97bpCt0hyhl2N7AH0f5iHxpVAB Ig1ThM/4qduM8UfHbfi58YAMYcRrVWOk3yIlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+KVZdqfw1TN2i3nKOLqdm+ysA2MwHwYDVR0jBBgwFoAUfhfZI6oLxrCgi1oY e+6crejVDq8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSVNISVNI L2ZoZlpJNm9MeHJDZ2kxb1llLTZjcmVqVkRxOC5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvZmhmWkk2b0x4ckNnaTFvWWUtNmNyZWpWRHE4LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSVNISVNILy1LVlpkcWZ3MVROMmkzbktP THFkbS15c0EyTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn tuIwDQYJKoZIhvcNAQELBQADggEBAJT7H3abP5S38xLMDSDzPrKJTyhkgJH0h6wu z3HO5SwrOQEsoohePEXbc0cY194Q6WHnYKWCiU4O4IYqv7/QNCDOWZF5RAUL58DL ixzF60MsFdfK8+BiMslKqHHcfr6BJKHwBc4lZZ7vGs3OTaWMBSPuEfoly6mw+YSk 6vSBDp6tgnnFJrvCzfvtY/4h7hA7XvsgtFxU48i8TOQs1sAdt+PS2nM32SAKsNEb BNIHqEAVALBOeyEG7rVn8i/tz4qsiWRtNzUNDrAWEQUZT8iGXkT1wF9ldo+Mb4/r NDuH/PaBP6a5SDVqi+lhpZHVca0lIvn2hnW6D2bvfztUe430jtY= -----END CERTIFICATE-----Generated at Sat Apr 12 20:22:31 2025 by rpki-client