$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JGZ/5kOBDp9jfXuDFvfA1W_lYEoS2dY.roa File: 5kOBDp9jfXuDFvfA1W_lYEoS2dY.roa (raw, json) Hash identifier: FJD2mQnY+I0ZK4rHJS53+PX7U8IQxazyrPbXtYXVkDM= Subject key identifier: E6:43:81:0E:9F:63:7D:7B:83:16:F7:C0:D5:6F:E5:60:4A:12:D9:D6 Certificate issuer: /CN=72C436BE92AE0ADCB314EBC1ACE319FF77BDA3FC Certificate serial: 017C Authority key identifier: 72:C4:36:BE:92:AE:0A:DC:B3:14:EB:C1:AC:E3:19:FF:77:BD:A3:FC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/5kOBDp9jfXuDFvfA1W_lYEoS2dY.roa Signing time: Mon 24 Feb 2025 01:03:15 +0000 ROA not before: Mon 24 Feb 2025 01:03:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 19551 IP address blocks: 180.94.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 07:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72C436BE92AE0ADCB314EBC1ACE319FF77BDA3FC Validity Not Before: Feb 24 01:03:15 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E643810E9F637D7B8316F7C0D56FE5604A12D9D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cb:82:ed:0b:b9:62:df:c0:48:71:25:38:21: 20:61:6b:72:19:bb:76:25:dc:a4:12:2a:cd:88:2c: a4:ca:1a:24:ee:08:7c:af:0e:a8:8a:9e:b9:f9:b3: b0:42:6c:d4:85:18:68:c4:31:93:44:81:b8:a6:bb: d6:eb:e4:39:04:ea:e9:dd:1e:ac:2a:c0:38:70:05: 07:b4:8d:30:89:c0:ec:8a:06:f1:62:e7:44:bb:a3: 1d:d0:70:6d:38:9a:ff:a3:cc:4e:7d:c9:d4:2f:ea: e0:ce:fe:9e:27:fa:2d:0a:c8:2c:76:8c:c8:7c:da: aa:fc:79:f0:77:20:94:45:42:e9:85:7e:83:07:29: 29:5b:25:bd:b8:b4:e2:f1:44:95:88:62:0c:c5:3d: 6e:41:a8:cc:09:2c:db:27:d8:fe:5a:8c:e6:c9:90: a8:01:43:ec:c6:57:10:4b:16:1c:1c:40:f0:30:0a: 99:4d:4a:4d:d9:64:ab:69:d2:83:fc:eb:67:8b:15: b0:8d:b2:9d:de:2a:3f:69:41:a9:b1:7f:14:51:62: 6a:d5:ba:14:ae:ca:ac:7c:15:37:17:ee:ae:b0:a6: fd:20:5b:2f:7c:e9:c5:8e:1e:35:93:1c:79:39:c7: c3:f1:ab:1f:37:8a:af:f6:8f:ce:af:ab:c7:81:30: 89:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:43:81:0E:9F:63:7D:7B:83:16:F7:C0:D5:6F:E5:60:4A:12:D9:D6 X509v3 Authority Key Identifier: keyid:72:C4:36:BE:92:AE:0A:DC:B3:14:EB:C1:AC:E3:19:FF:77:BD:A3:FC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/5kOBDp9jfXuDFvfA1W_lYEoS2dY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.94.30.0/23 Signature Algorithm: sha256WithRSAEncryption 12:4f:8a:40:2a:e4:c0:c8:18:ac:9b:89:0f:02:20:94:24:0a: e1:dd:34:60:05:4b:9b:fe:88:9d:60:5f:12:bc:41:48:64:15: db:b7:ae:a8:dd:10:7e:e6:78:ac:60:60:f1:37:c6:e3:41:e6: 47:a7:6b:29:78:18:c0:80:c1:5a:17:69:b0:56:6b:c7:39:d6: 39:ee:4d:a1:14:9f:e7:17:a4:3b:84:35:32:c7:7d:a7:0c:77: d9:2e:6e:fa:0c:ba:ed:3d:5d:a7:51:50:d5:6e:5a:52:0a:ca: 4c:ea:80:85:1c:d8:de:32:53:51:70:86:63:2c:e2:f3:a1:1b: c0:68:10:51:12:d7:c2:4a:42:56:e8:d4:e4:31:33:96:70:a4: 2a:3c:36:8d:3e:85:6c:35:70:e4:12:2f:8b:89:e7:2e:d0:74: da:eb:6d:97:03:bd:15:f4:39:4e:e7:9d:b4:83:2e:29:12:b6: cd:9e:80:65:8d:bd:1d:c2:c3:87:bf:6a:c7:f7:e2:9c:dc:ba: e6:32:e7:de:07:46:35:f0:2c:23:dd:12:d9:af:75:47:e2:c0: 89:ee:3a:fb:3f:72:de:c2:99:92:76:79:c6:dc:8e:d3:e9:42: 7e:11:41:b8:d5:c9:90:b2:b4:41:27:a9:c2:97:39:56:4d:85: 22:01:58:9e -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzJD NDM2QkU5MkFFMEFEQ0IzMTRFQkMxQUNFMzE5RkY3N0JEQTNGQzAeFw0yNTAyMjQw MTAzMTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU2NDM4MTBFOUY2MzdE N0I4MzE2RjdDMEQ1NkZFNTYwNEExMkQ5RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCby4LtC7li38BIcSU4ISBha3IZu3Yl3KQSKs2ILKTKGiTuCHyv DqiKnrn5s7BCbNSFGGjEMZNEgbimu9br5DkE6undHqwqwDhwBQe0jTCJwOyKBvFi 50S7ox3QcG04mv+jzE59ydQv6uDO/p4n+i0KyCx2jMh82qr8efB3IJRFQumFfoMH KSlbJb24tOLxRJWIYgzFPW5BqMwJLNsn2P5ajObJkKgBQ+zGVxBLFhwcQPAwCplN Sk3ZZKtp0oP862eLFbCNsp3eKj9pQamxfxRRYmrVuhSuyqx8FTcX7q6wpv0gWy98 6cWOHjWTHHk5x8Pxqx83iq/2j86vq8eBMIn9AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU5kOBDp9jfXuDFvfA1W/lYEoS2dYwHwYDVR0jBBgwFoAUcsQ2vpKuCtyzFOvB rOMZ/3e9o/wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSkdaL2Nz UTJ2cEt1Q3R5ekZPdkJyT01aXzNlOW9fdy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev Y3NRMnZwS3VDdHl6Rk92QnJPTVpfM2U5b193LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSkdaLzVrT0JEcDlqZlh1REZ2ZkExV19sWUVv UzJkWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0Xh4wDQYJ KoZIhvcNAQELBQADggEBABJPikAq5MDIGKybiQ8CIJQkCuHdNGAFS5v+iJ1gXxK8 QUhkFdu3rqjdEH7meKxgYPE3xuNB5kenayl4GMCAwVoXabBWa8c51jnuTaEUn+cX pDuENTLHfacMd9kubvoMuu09XadRUNVuWlIKykzqgIUc2N4yU1FwhmMs4vOhG8Bo EFES18JKQlbo1OQxM5ZwpCo8No0+hWw1cOQSL4uJ5y7QdNrrbZcDvRX0OU7nnbSD LikSts2egGWNvR3Cw4e/asf34pzcuuYy594HRjXwLCPdEtmvdUfiwInuOvs/ct7C mZJ2ecbcjtPpQn4RQbjVyZCytEEnqcKXOVZNhSIBWJ4= -----END CERTIFICATE-----Generated at Sun Apr 6 04:21:10 2025 by rpki-client