$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/duqV8FxZ95KRYR751h5qzBS0aHg.roa File: duqV8FxZ95KRYR751h5qzBS0aHg.roa (raw, json) Hash identifier: j3REByZ4MCyzVRj7pQqHxOD8KIPya9+Kt2eOAtT6ntw= Subject key identifier: 76:EA:95:F0:5C:59:F7:92:91:61:1E:F9:D6:1E:6A:CC:14:B4:68:78 Certificate issuer: /CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Certificate serial: 0F92 Authority key identifier: A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/duqV8FxZ95KRYR751h5qzBS0aHg.roa Signing time: Mon 19 May 2025 03:09:06 +0000 ROA not before: Mon 19 May 2025 03:09:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 208932 IP address blocks: 103.135.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3986 (0xf92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Validity Not Before: May 19 03:09:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=76EA95F05C59F79291611EF9D61E6ACC14B46878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6c:ae:12:8f:3e:24:95:95:8e:8a:b8:ac:ee: 53:cd:9e:64:1b:e3:b2:a0:88:fa:d3:69:ba:30:3d: 7d:d9:ff:83:f7:dc:80:2d:82:91:8b:69:30:c0:9e: 39:c4:e7:43:1f:3d:3a:3b:d1:1c:e3:07:81:43:02: 84:71:03:f9:99:c3:d5:cc:7c:1c:6e:f7:50:34:88: 81:fc:c1:cc:c2:59:62:5b:3e:fa:cf:f4:bd:3a:eb: 60:63:04:3b:f6:b7:ac:ac:f3:1b:11:ac:1e:2a:88: 78:2c:8b:39:40:9c:6d:70:e9:16:1c:c6:28:6f:94: 07:fb:92:56:72:35:a7:a4:1f:5a:a9:16:a9:dc:bd: d3:9a:35:cf:88:0b:20:50:c6:43:5b:b3:be:72:fb: b0:f2:09:4b:42:9e:40:13:73:39:89:76:7c:e5:00: 86:fc:32:e1:ea:f2:a4:aa:1a:17:99:d0:d2:24:f1: 8b:c9:f6:0d:df:15:5c:be:d4:ae:c2:03:c5:e7:af: e7:36:7c:56:ac:cd:dd:27:1f:67:e3:b8:7b:1f:6f: 67:7a:d5:55:2b:a9:80:5a:58:ff:f5:5e:7d:ed:24: d7:c4:de:75:2d:7a:d0:70:a4:c9:3f:4d:75:b9:f6: 49:89:8d:ca:05:34:28:99:ba:c6:23:3f:12:2a:12: 46:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EA:95:F0:5C:59:F7:92:91:61:1E:F9:D6:1E:6A:CC:14:B4:68:78 X509v3 Authority Key Identifier: keyid:A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/duqV8FxZ95KRYR751h5qzBS0aHg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.135.22.0/24 Signature Algorithm: sha256WithRSAEncryption 74:75:a9:af:0c:e4:d1:1e:f4:ce:6a:37:9c:df:f2:34:7e:2e: 2c:bd:20:2d:6f:52:9c:c9:89:36:cb:e3:53:03:ac:21:77:ed: 94:41:70:2b:c7:fd:31:a2:e4:d3:91:1a:9c:0f:1d:7d:8d:cd: a5:ae:c6:e6:ca:b3:67:4f:3d:de:25:82:26:a1:25:96:97:57: c3:f0:fe:44:4b:29:07:59:40:2f:02:b1:ff:55:23:b4:e6:c1: 67:17:ce:78:9a:53:0b:94:90:1a:c2:33:d9:7a:15:c6:f5:f7: ed:47:59:00:13:ab:5f:b0:99:3a:f3:62:be:77:9a:e3:3e:ea: 97:c3:a1:ad:e2:11:e0:c3:8c:36:46:e4:69:1c:08:91:b8:e9: 4d:9a:06:1f:25:24:cf:86:34:bd:09:83:1f:14:78:0f:9c:ec: e6:cd:36:3e:b8:2a:e8:90:4d:e5:ef:f0:40:b6:ab:79:0c:71: 48:9e:b2:91:ab:ae:1a:c9:72:2e:51:19:b1:f3:80:5c:d2:e0: 9c:42:5e:8b:13:76:ca:b1:d2:0a:e5:a8:38:b7:61:f9:53:85: 2e:80:ed:3c:7f:95:c9:95:fc:86:9e:83:4c:b8:50:c3:e6:68: c9:2b:81:e7:18:cd:d6:9f:c5:76:ee:5a:6c:45:94:ce:0f:ce: d0:cf:1a:2e -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICD5IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTE4 RUIzNzdERDAzMThBRTQ2NUQ4RjNGN0Q2RTBBRDBBNEU5RUQxRTAeFw0yNTA1MTkw MzA5MDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc2RUE5NUYwNUM1OUY3 OTI5MTYxMUVGOUQ2MUU2QUNDMTRCNDY4NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwbK4Sjz4klZWOiris7lPNnmQb47KgiPrTabowPX3Z/4P33IAt gpGLaTDAnjnE50MfPTo70RzjB4FDAoRxA/mZw9XMfBxu91A0iIH8wczCWWJbPvrP 9L0662BjBDv2t6ys8xsRrB4qiHgsizlAnG1w6RYcxihvlAf7klZyNaekH1qpFqnc vdOaNc+ICyBQxkNbs75y+7DyCUtCnkATczmJdnzlAIb8MuHq8qSqGheZ0NIk8YvJ 9g3fFVy+1K7CA8Xnr+c2fFaszd0nH2fjuHsfb2d61VUrqYBaWP/1Xn3tJNfE3nUt etBwpMk/TXW59kmJjcoFNCiZusYjPxIqEkaFAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUduqV8FxZ95KRYR751h5qzBS0aHgwHwYDVR0jBBgwFoAUoY6zd90DGK5GXY8/ fW4K0KTp7R4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ TkdFTi9vWTZ6ZDkwREdLNUdYWThfZlc0SzBLVHA3UjQuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL29ZNnpkOTBER0s1R1hZOF9mVzRLMEtUcDdSNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL01JTkdKSU5HRU4vZHVxVjhGeFo5 NUtSWVI3NTFoNXF6QlMwYUhnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGeHFjANBgkqhkiG9w0BAQsFAAOCAQEAdHWprwzk0R70zmo3nN/yNH4u LL0gLW9SnMmJNsvjUwOsIXftlEFwK8f9MaLk05EanA8dfY3Npa7G5sqzZ0893iWC JqEllpdXw/D+REspB1lALwKx/1UjtObBZxfOeJpTC5SQGsIz2XoVxvX37UdZABOr X7CZOvNivnea4z7ql8OhreIR4MOMNkbkaRwIkbjpTZoGHyUkz4Y0vQmDHxR4D5zs 5s02Prgq6JBN5e/wQLareQxxSJ6ykauuGslyLlEZsfOAXNLgnEJeixN2yrHSCuWo OLdh+VOFLoDtPH+VyZX8hp6DTLhQw+ZoySuB5xjN1p/Fdu5abEWUzg/O0M8aLg== -----END CERTIFICATE-----Generated at Wed Jun 4 01:15:28 2025 by rpki-client