$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/G7ioUVEV7C23rYXKw6_CEPXRB_o.roa File: G7ioUVEV7C23rYXKw6_CEPXRB_o.roa (raw, json) Hash identifier: 4bsxg8Wj2fhFlTYW0BFq1jVczwS7MLY9kjWr8p7wU8M= Subject key identifier: 1B:B8:A8:51:51:15:EC:2D:B7:AD:85:CA:C3:AF:C2:10:F5:D1:07:FA Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0E06 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/G7ioUVEV7C23rYXKw6_CEPXRB_o.roa Signing time: Mon 10 Feb 2025 13:59:21 +0000 ROA not before: Mon 10 Feb 2025 13:59:21 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 211.78.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 08:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3590 (0xe06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Feb 10 13:59:21 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1BB8A8515115EC2DB7AD85CAC3AFC210F5D107FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2f:dc:e1:62:65:29:e4:c5:1f:3a:a9:4f:a3: 22:ae:4c:da:80:a8:f9:87:5e:eb:75:ac:6b:f9:56: 6d:43:75:36:d0:34:58:8f:45:07:09:04:32:2d:68: d3:bd:8b:13:7a:ee:f7:34:59:a2:82:21:cd:cf:36: 73:2b:86:55:0a:f0:32:4d:7c:3e:5d:50:04:34:2a: 82:6d:72:b2:03:e3:9f:1c:89:e0:fb:dd:1d:a2:e2: 0b:64:37:d1:16:78:b2:f3:4a:fd:5a:c3:fa:f5:3a: 26:18:bf:74:ff:fe:fd:ee:31:6f:03:28:18:02:86: da:29:44:5d:d7:27:bf:df:00:e0:ad:b7:0d:fc:83: 0a:76:ee:d0:13:85:62:74:1f:a6:11:be:df:cf:e0: 18:d3:75:f3:86:2d:e9:36:92:3b:90:00:dd:e8:8b: 59:c9:a7:18:fb:ea:2e:00:03:56:d2:0f:b4:b0:73: 60:60:0b:d2:7f:c9:d2:42:f8:86:2f:5b:66:8d:70: e5:fb:ab:f8:32:50:78:3a:34:8b:27:df:9d:1c:16: cc:ab:a0:ea:77:d3:fd:7d:d3:ba:09:9a:3b:0c:c2: 1c:ed:f3:04:b4:ee:66:31:2c:59:7c:0d:92:c3:c2: 61:0f:7b:69:1e:cd:a0:4f:cf:b7:2d:e1:c5:d1:1d: 41:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B8:A8:51:51:15:EC:2D:B7:AD:85:CA:C3:AF:C2:10:F5:D1:07:FA X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/G7ioUVEV7C23rYXKw6_CEPXRB_o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.24.0/21 Signature Algorithm: sha256WithRSAEncryption 3d:af:60:b4:e9:1f:c8:99:1f:67:13:30:55:54:d1:a8:04:ce: 92:d5:d3:b0:4b:41:6b:18:ad:6a:fc:2a:8d:42:18:13:8b:bf: ea:b0:52:8a:3b:80:79:81:b0:a0:c5:c3:24:64:ff:35:49:35: 4b:c3:9d:28:2a:11:df:4b:3a:93:a9:2b:da:46:69:50:28:7e: df:05:ec:c3:5f:76:9e:51:03:d9:84:b6:7e:c4:82:fd:8b:c7: 2a:7f:ee:de:fd:d5:0c:12:36:fe:ed:49:73:10:12:8e:b7:15: c2:58:2f:09:56:be:84:c3:34:4a:90:b3:e6:e2:74:de:84:87: 2a:2e:2b:c1:c3:b9:9f:f0:ad:55:aa:5c:d5:1a:09:94:b4:11: b5:fe:35:b2:8b:20:d0:f0:01:47:0e:6b:be:11:24:e2:50:37: a9:26:26:2c:63:a7:fe:28:6b:f8:2d:82:5c:6e:08:bb:1f:86: 4a:db:59:84:61:71:6c:2e:8c:7e:f6:a2:db:c6:05:bc:89:76: b3:ab:fa:59:30:ea:1d:6c:65:0f:0a:7e:29:01:a0:32:70:65: 51:c2:33:07:30:40:1f:5e:89:e3:68:39:8b:24:f0:34:06:3a: b5:44:02:de:73:89:16:60:5a:90:cd:94:f0:f3:3a:dd:ac:8a: 72:06:7d:a2 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDgYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTAyMTAx MzU5MjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFCQjhBODUxNTExNUVD MkRCN0FEODVDQUMzQUZDMjEwRjVEMTA3RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjL9zhYmUp5MUfOqlPoyKuTNqAqPmHXut1rGv5Vm1DdTbQNFiP RQcJBDItaNO9ixN67vc0WaKCIc3PNnMrhlUK8DJNfD5dUAQ0KoJtcrID458cieD7 3R2i4gtkN9EWeLLzSv1aw/r1OiYYv3T//v3uMW8DKBgChtopRF3XJ7/fAOCttw38 gwp27tAThWJ0H6YRvt/P4BjTdfOGLek2kjuQAN3oi1nJpxj76i4AA1bSD7Swc2Bg C9J/ydJC+IYvW2aNcOX7q/gyUHg6NIsn350cFsyroOp30/1907oJmjsMwhzt8wS0 7mYxLFl8DZLDwmEPe2kezaBPz7ct4cXRHUEvAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUG7ioUVEV7C23rYXKw6/CEPXRB/owHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL0c3aW9VVkVWN0MyM3JZWEt3Nl9DRVBY UkJfby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPTThgwDQYJ KoZIhvcNAQELBQADggEBAD2vYLTpH8iZH2cTMFVU0agEzpLV07BLQWsYrWr8Ko1C GBOLv+qwUoo7gHmBsKDFwyRk/zVJNUvDnSgqEd9LOpOpK9pGaVAoft8F7MNfdp5R A9mEtn7Egv2Lxyp/7t791QwSNv7tSXMQEo63FcJYLwlWvoTDNEqQs+bidN6Ehyou K8HDuZ/wrVWqXNUaCZS0EbX+NbKLINDwAUcOa74RJOJQN6kmJixjp/4oa/gtglxu CLsfhkrbWYRhcWwujH72otvGBbyJdrOr+lkw6h1sZQ8KfikBoDJwZVHCMwcwQB9e ieNoOYsk8DQGOrVEAt5ziRZgWpDNlPDzOt2sinIGfaI= -----END CERTIFICATE-----Generated at Mon Apr 7 08:03:38 2025 by rpki-client