$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LINGCAI/RihfMfWvQsLq-r9eLjMkQB5ScIo.roa File: RihfMfWvQsLq-r9eLjMkQB5ScIo.roa (raw, json) Hash identifier: h+3FeksP7vpLGtxaVSkH3RkUH7+7bnYI87GWeleGJ1I= Subject key identifier: 46:28:5F:31:F5:AF:42:C2:EA:FA:BF:5E:2E:33:24:40:1E:52:70:8A Certificate issuer: /CN=8AB99EC90607B96019516ECA604C7B7FF2474A9A Certificate serial: 0179 Authority key identifier: 8A:B9:9E:C9:06:07:B9:60:19:51:6E:CA:60:4C:7B:7F:F2:47:4A:9A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/irmeyQYHuWAZUW7KYEx7f_JHSpo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGCAI/RihfMfWvQsLq-r9eLjMkQB5ScIo.roa Signing time: Mon 10 Feb 2025 13:43:18 +0000 ROA not before: Mon 10 Feb 2025 13:43:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 103.20.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGCAI/irmeyQYHuWAZUW7KYEx7f_JHSpo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGCAI/irmeyQYHuWAZUW7KYEx7f_JHSpo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/irmeyQYHuWAZUW7KYEx7f_JHSpo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AB99EC90607B96019516ECA604C7B7FF2474A9A Validity Not Before: Feb 10 13:43:18 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=46285F31F5AF42C2EAFABF5E2E3324401E52708A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7e:44:85:e9:27:aa:27:15:08:67:eb:42:8c: 32:b8:72:e5:1d:36:25:dd:47:6f:61:48:b7:d5:a0: 58:00:d4:aa:a5:61:bd:c8:9e:49:29:3d:51:e6:ac: 4b:5e:a1:c0:1b:5a:96:a2:fe:25:2d:be:f6:bb:ec: cc:95:a7:04:5d:9b:1f:fe:7f:64:da:69:06:46:86: 30:19:5a:28:cc:14:38:a4:3e:32:42:f5:cf:47:fb: d5:0a:cc:27:72:68:f2:d5:58:41:c6:d6:71:7c:ba: a2:76:b7:a0:32:ec:df:7c:e3:0c:df:c3:56:18:c7: 3f:fc:dc:10:06:25:4a:60:bb:40:6e:12:64:9e:b4: 09:7c:c2:69:5e:08:c7:3c:a7:70:e0:3d:2d:5a:b5: 34:b4:da:f9:73:04:9a:58:ed:d7:95:5a:ef:a5:46: be:9d:90:55:0f:82:61:97:df:f2:86:ca:3b:ca:fd: 15:40:f0:f5:32:1d:02:a4:40:75:99:c1:80:f4:51: e2:49:75:28:ca:4d:40:9c:fb:80:82:04:8a:b3:34: fe:7f:19:81:0d:b6:37:0f:62:0d:9a:d4:6d:e9:1f: d2:d3:da:50:3a:f1:ae:30:08:4c:25:8c:e4:14:b6: 01:96:4e:c5:93:6e:ab:58:6c:d1:fa:29:f7:cb:ba: 7e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:28:5F:31:F5:AF:42:C2:EA:FA:BF:5E:2E:33:24:40:1E:52:70:8A X509v3 Authority Key Identifier: keyid:8A:B9:9E:C9:06:07:B9:60:19:51:6E:CA:60:4C:7B:7F:F2:47:4A:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGCAI/irmeyQYHuWAZUW7KYEx7f_JHSpo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/irmeyQYHuWAZUW7KYEx7f_JHSpo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGCAI/RihfMfWvQsLq-r9eLjMkQB5ScIo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.20.98.0/23 Signature Algorithm: sha256WithRSAEncryption af:34:10:34:d0:96:0c:35:0c:72:d2:5b:32:dc:b9:58:b8:52: 1e:18:d6:61:31:15:e2:6f:08:8a:d5:04:a5:2c:63:fb:64:74: 5c:f0:18:d5:71:70:2f:de:68:e3:00:d0:14:08:dd:68:15:d1: 92:3f:7d:82:44:0f:de:76:27:e1:a2:c3:ab:6f:b3:ce:66:bb: c2:37:18:73:c3:ec:49:0f:0b:e7:9d:c3:8f:b8:f3:39:46:17: 80:cd:b8:98:56:46:96:07:45:a7:69:ba:11:be:56:46:18:00: 87:50:79:53:fd:26:24:eb:91:b5:22:ed:f1:8a:20:e3:df:2f: 16:5c:cb:e4:10:17:07:f5:1d:bd:ae:72:cf:a4:2e:78:da:a4: 28:93:5e:5c:96:88:a6:27:c4:ff:92:84:ee:5d:50:b8:a4:46: 46:0f:60:83:e7:8e:47:14:a6:69:e2:a9:bd:48:6d:72:ec:69: 32:b0:ee:c8:b5:56:1c:82:76:08:6f:58:aa:46:aa:b8:9d:2f: e8:34:1a:20:06:2b:c0:22:98:e6:81:70:74:ec:16:b0:2e:fb: 5b:5b:86:b6:fd:44:8a:d5:bf:67:ab:1e:b7:fb:4f:c8:04:a4: 25:db:12:87:8a:5a:73:b0:ef:92:7f:90:1e:11:3f:20:48:41: 9f:ca:ff:36 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFC OTlFQzkwNjA3Qjk2MDE5NTE2RUNBNjA0QzdCN0ZGMjQ3NEE5QTAeFw0yNTAyMTAx MzQzMThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ2Mjg1RjMxRjVBRjQy QzJFQUZBQkY1RTJFMzMyNDQwMUU1MjcwOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4fkSF6SeqJxUIZ+tCjDK4cuUdNiXdR29hSLfVoFgA1KqlYb3I nkkpPVHmrEteocAbWpai/iUtvva77MyVpwRdmx/+f2TaaQZGhjAZWijMFDikPjJC 9c9H+9UKzCdyaPLVWEHG1nF8uqJ2t6Ay7N984wzfw1YYxz/83BAGJUpgu0BuEmSe tAl8wmleCMc8p3DgPS1atTS02vlzBJpY7deVWu+lRr6dkFUPgmGX3/KGyjvK/RVA 8PUyHQKkQHWZwYD0UeJJdSjKTUCc+4CCBIqzNP5/GYENtjcPYg2a1G3pH9LT2lA6 8a4wCEwljOQUtgGWTsWTbqtYbNH6KffLun5JAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQURihfMfWvQsLq+r9eLjMkQB5ScIowHwYDVR0jBBgwFoAUirmeyQYHuWAZUW7K YEx7f/JHSpowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTElOR0NB SS9pcm1leVFZSHVXQVpVVzdLWUV4N2ZfSkhTcG8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2lybWV5UVlIdVdBWlVXN0tZRXg3Zl9KSFNwby5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0xJTkdDQUkvUmloZk1mV3ZRc0xxLXI5 ZUxqTWtRQjVTY0lvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWcUYjANBgkqhkiG9w0BAQsFAAOCAQEArzQQNNCWDDUMctJbMty5WLhSHhjWYTEV 4m8IitUEpSxj+2R0XPAY1XFwL95o4wDQFAjdaBXRkj99gkQP3nYn4aLDq2+zzma7 wjcYc8PsSQ8L553Dj7jzOUYXgM24mFZGlgdFp2m6Eb5WRhgAh1B5U/0mJOuRtSLt 8Yog498vFlzL5BAXB/Udva5yz6QueNqkKJNeXJaIpifE/5KE7l1QuKRGRg9gg+eO RxSmaeKpvUhtcuxpMrDuyLVWHIJ2CG9YqkaquJ0v6DQaIAYrwCKY5oFwdOwWsC77 W1uGtv1EitW/Z6set/tPyASkJdsSh4pac7Dvkn+QHhE/IEhBn8r/Ng== -----END CERTIFICATE-----Generated at Wed Feb 19 21:56:12 2025 by rpki-client