$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JFT/c4LoAVmfNvmmHmA5v26pvti8j0Y.roa File: c4LoAVmfNvmmHmA5v26pvti8j0Y.roa (raw, json) Hash identifier: F3QCsAdSCr76uq3OirACN7UfXUUV4dvPsA+GMj9iouk= Subject key identifier: 73:82:E8:01:59:9F:36:F9:A6:1E:60:39:BF:6E:A9:BE:D8:BC:8F:46 Certificate issuer: /CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595 Certificate serial: 0187 Authority key identifier: 62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/c4LoAVmfNvmmHmA5v26pvti8j0Y.roa Signing time: Mon 10 Feb 2025 13:42:19 +0000 ROA not before: Mon 10 Feb 2025 13:42:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18041 IP address blocks: 103.236.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 10:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595 Validity Not Before: Feb 10 13:42:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7382E801599F36F9A61E6039BF6EA9BED8BC8F46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bb:36:71:71:23:47:4a:54:f0:5d:af:a8:43: cb:18:e8:52:da:ba:2a:2f:26:ad:21:8a:45:21:90: 89:37:42:77:6f:dd:9d:2a:53:f1:94:bc:4a:03:b9: b9:1b:2e:e8:22:13:97:29:e6:89:9c:a9:1f:d7:c4: 26:87:09:d9:ff:87:50:67:3d:71:0a:14:b8:bc:47: 5c:5f:08:1d:a5:cb:7d:ca:35:4e:43:a9:50:99:d0: fd:3a:fd:f9:a3:39:17:bb:d7:f9:fa:b4:b9:2d:5d: fb:66:c8:bc:bc:7c:52:19:88:71:5a:cc:f8:00:82: 2d:54:17:3c:cc:75:aa:d6:63:14:e7:8b:11:21:6c: 9f:b1:0e:13:93:2b:ec:45:53:8c:40:da:01:ca:fe: 55:bd:18:a3:54:bb:f8:9a:67:f0:03:66:05:02:4d: 52:81:62:af:23:00:32:72:b4:e9:fe:6e:19:3a:de: 99:28:19:53:fa:3d:75:be:75:89:2c:9c:1d:eb:ba: 49:a1:38:e3:2d:ee:12:c1:52:41:81:ec:36:b9:dd: d1:a4:17:8d:49:88:6b:e5:c1:94:96:c7:5e:89:6d: 17:bf:6d:11:2b:4d:be:70:a1:fe:17:56:86:64:86: 26:f9:ee:3e:78:ce:85:a9:a4:11:6e:36:1f:7b:dd: e8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:82:E8:01:59:9F:36:F9:A6:1E:60:39:BF:6E:A9:BE:D8:BC:8F:46 X509v3 Authority Key Identifier: keyid:62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/c4LoAVmfNvmmHmA5v26pvti8j0Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.226.0/23 Signature Algorithm: sha256WithRSAEncryption ad:d5:b7:46:99:a4:df:f4:b6:f9:c6:68:c0:ee:f6:28:f6:7c: 6f:26:95:62:72:ab:bf:b3:bf:6b:61:de:1c:f6:61:43:87:a1: 60:59:a6:52:e8:38:2d:12:e5:64:f8:e4:9f:1c:82:57:b1:5f: e9:be:8d:b9:2e:69:72:24:6e:47:84:ec:bd:d6:79:96:a5:ed: 7f:f5:9c:da:57:82:87:e4:c0:ef:16:03:f9:b2:d6:81:ea:5c: 49:1f:d8:fd:76:b9:84:05:e2:28:ad:bc:db:22:9d:00:6f:49: d2:35:1f:82:dc:e3:62:f4:d7:75:72:3e:df:7d:18:af:dd:64: 4d:33:98:bd:c4:fb:25:bb:b3:fa:3c:09:74:0d:70:62:23:c9: 92:b3:72:94:58:e7:aa:28:b1:c1:21:32:9f:51:03:4c:8c:6b: 73:e3:8c:cc:b0:81:55:49:e3:7c:b5:24:84:4f:7e:da:4f:9b: 3a:25:6e:cb:4a:1b:f1:44:64:5a:4c:11:1f:16:8a:44:7b:fd: 97:50:35:d6:0c:92:67:17:e7:5f:78:69:e0:e2:9a:7a:df:4f: 49:14:8e:97:e8:bf:93:12:0a:24:60:31:d0:61:89:a4:98:71: 96:ac:5e:c4:b8:f2:75:17:b9:49:80:23:ab:32:b9:af:98:da: 99:09:e6:8d -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjI3 RDY3NUZGNUUyQzhCQTkwRjRCNjU1QjEwOEI2OTI1REFGMTU5NTAeFw0yNTAyMTAx MzQyMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDczODJFODAxNTk5RjM2 RjlBNjFFNjAzOUJGNkVBOUJFRDhCQzhGNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWuzZxcSNHSlTwXa+oQ8sY6FLauiovJq0hikUhkIk3Qndv3Z0q U/GUvEoDubkbLugiE5cp5omcqR/XxCaHCdn/h1BnPXEKFLi8R1xfCB2ly33KNU5D qVCZ0P06/fmjORe71/n6tLktXftmyLy8fFIZiHFazPgAgi1UFzzMdarWYxTnixEh bJ+xDhOTK+xFU4xA2gHK/lW9GKNUu/iaZ/ADZgUCTVKBYq8jADJytOn+bhk63pko GVP6PXW+dYksnB3rukmhOOMt7hLBUkGB7Da53dGkF41JiGvlwZSWx16JbRe/bREr Tb5wof4XVoZkhib57j54zoWppBFuNh973eh9AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUc4LoAVmfNvmmHmA5v26pvti8j0YwHwYDVR0jBBgwFoAUYn1nX/XiyLqQ9LZV sQi2kl2vFZUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSkZUL1lu MW5YX1hpeUxxUTlMWlZzUWkya2wydkZaVS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev WW4xblhfWGl5THFROUxaVnNRaTJrbDJ2RlpVLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSkZUL2M0TG9BVm1mTnZtbUhtQTV2MjZwdnRp OGowWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn7OIwDQYJ KoZIhvcNAQELBQADggEBAK3Vt0aZpN/0tvnGaMDu9ij2fG8mlWJyq7+zv2th3hz2 YUOHoWBZplLoOC0S5WT45J8cglexX+m+jbkuaXIkbkeE7L3WeZal7X/1nNpXgofk wO8WA/my1oHqXEkf2P12uYQF4iitvNsinQBvSdI1H4Lc42L013VyPt99GK/dZE0z mL3E+yW7s/o8CXQNcGIjyZKzcpRY56ooscEhMp9RA0yMa3PjjMywgVVJ43y1JIRP ftpPmzolbstKG/FEZFpMER8WikR7/ZdQNdYMkmcX5194aeDimnrfT0kUjpfov5MS CiRgMdBhiaSYcZasXsS48nUXuUmAI6syua+Y2pkJ5o0= -----END CERTIFICATE-----Generated at Wed Apr 23 07:35:33 2025 by rpki-client