$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/cHwrVBpkzhU0BMJWAgCeMMcVDq4.roa File: cHwrVBpkzhU0BMJWAgCeMMcVDq4.roa (raw, json) Hash identifier: MRbSBzjrJIEl4FUSKBgsZ+2gFsZlWT2y0TzPf5wpW/0= Subject key identifier: 70:7C:2B:54:1A:64:CE:15:34:04:C2:56:02:00:9E:30:C7:15:0E:AE Certificate issuer: /CN=F5A44B5E078865BAEF9351369D961D6BA2556D47 Certificate serial: 01D1 Authority key identifier: F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/cHwrVBpkzhU0BMJWAgCeMMcVDq4.roa Signing time: Mon 10 Feb 2025 14:26:25 +0000 ROA not before: Mon 10 Feb 2025 14:26:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 8075 IP address blocks: 2400:f520::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 19:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A44B5E078865BAEF9351369D961D6BA2556D47 Validity Not Before: Feb 10 14:26:25 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=707C2B541A64CE153404C25602009E30C7150EAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:23:d4:72:3d:8c:2c:24:ed:bd:82:cf:e3:41: 12:a1:47:02:ea:3b:b4:77:77:9a:32:b9:c0:31:bd: 79:9c:6a:22:b6:21:4a:40:ab:21:e4:2b:bc:87:28: 38:a0:3b:2a:61:71:13:59:71:17:ec:bc:c6:54:69: 49:66:8e:83:ab:1a:6e:44:e3:98:66:58:aa:82:d8: 49:65:4a:35:ec:c1:e1:31:a7:e7:f2:73:8d:a1:f7: cd:9a:6f:d0:2b:10:12:fa:54:f8:13:fc:ad:a6:87: 34:a0:ec:12:8e:5e:4a:61:0e:6d:f9:51:e0:23:09: 80:aa:3e:9a:c6:87:b1:8b:1b:60:17:5c:a3:80:8b: db:39:61:8a:dd:e7:09:d4:b0:71:b2:68:97:84:01: b8:ff:50:0c:91:bd:88:86:91:38:1d:7f:0b:6e:fe: 8d:28:f3:c0:f5:f9:be:f2:fa:d2:25:14:41:f9:fa: 1b:cf:02:7b:74:4e:19:ac:b9:0a:79:da:a7:6d:9d: dc:f1:74:6d:e9:84:1d:10:04:fd:2c:36:bd:a4:ad: d1:e1:3b:42:a0:14:1f:27:65:d0:7e:20:e0:1b:5f: f8:25:27:2b:45:8a:11:3c:12:36:d6:11:6b:fe:d3: 2f:99:1e:0d:90:43:31:17:8f:1c:88:fb:3b:8f:39: 39:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7C:2B:54:1A:64:CE:15:34:04:C2:56:02:00:9E:30:C7:15:0E:AE X509v3 Authority Key Identifier: keyid:F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/cHwrVBpkzhU0BMJWAgCeMMcVDq4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:f520::/32 Signature Algorithm: sha256WithRSAEncryption 17:cf:f9:d0:a0:89:98:d7:42:cb:10:56:36:8c:12:61:a2:44: 79:67:08:95:b4:54:b6:5f:f9:1d:01:8c:0e:85:5d:4d:96:9e: 6a:df:db:fd:6d:3b:ea:81:37:7b:94:5a:6c:ed:9e:31:fa:41: e7:8e:24:48:16:05:eb:1a:3a:5b:fc:fd:6c:9b:57:bb:27:8b: 27:fd:a9:6c:47:56:4c:05:09:e0:32:ee:a2:7f:c4:03:bb:eb: 73:2b:25:11:30:3b:98:aa:79:69:e8:e5:f4:87:cf:8a:65:ed: 2a:ca:6b:32:02:9b:84:00:66:14:75:ef:8e:89:f0:18:89:c4: 10:32:96:b8:77:59:df:55:84:56:1b:5e:69:44:fe:8d:08:23: e5:16:fb:60:ec:78:73:d3:e5:17:6f:5b:ed:82:0a:4d:6b:ba: 65:55:2d:58:89:1f:73:54:a2:6b:88:64:39:a7:5c:7d:cc:c0: f2:e0:b5:f0:1d:df:a3:95:20:a6:8f:a8:d4:1e:5d:0d:a6:b2: 36:40:dc:14:4a:11:93:4e:a6:3f:d6:ef:a9:2d:bf:42:e1:83: 53:ac:cc:ca:da:be:0c:e1:c7:e1:fe:14:bb:c5:2d:86:76:db: 02:1d:b6:78:0c:b1:a9:ac:58:b5:05:b3:b3:61:be:e7:43:38: 91:b1:32:60 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjVB NDRCNUUwNzg4NjVCQUVGOTM1MTM2OUQ5NjFENkJBMjU1NkQ0NzAeFw0yNTAyMTAx NDI2MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcwN0MyQjU0MUE2NENF MTUzNDA0QzI1NjAyMDA5RTMwQzcxNTBFQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmI9RyPYwsJO29gs/jQRKhRwLqO7R3d5oyucAxvXmcaiK2IUpA qyHkK7yHKDigOyphcRNZcRfsvMZUaUlmjoOrGm5E45hmWKqC2EllSjXsweExp+fy c42h982ab9ArEBL6VPgT/K2mhzSg7BKOXkphDm35UeAjCYCqPprGh7GLG2AXXKOA i9s5YYrd5wnUsHGyaJeEAbj/UAyRvYiGkTgdfwtu/o0o88D1+b7y+tIlFEH5+hvP Ant0ThmsuQp52qdtndzxdG3phB0QBP0sNr2krdHhO0KgFB8nZdB+IOAbX/glJytF ihE8EjbWEWv+0y+ZHg2QQzEXjxyI+zuPOTkhAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUcHwrVBpkzhU0BMJWAgCeMMcVDq4wHwYDVR0jBBgwFoAU9aRLXgeIZbrvk1E2 nZYda6JVbUcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT05FREVH UkVFLzlhUkxYZ2VJWmJydmsxRTJuWllkYTZKVmJVYy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvOWFSTFhnZUlaYnJ2azFFMm5aWWRhNkpWYlVjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT05FREVHUkVFL2NId3JWQnBremhV MEJNSldBZ0NlTU1jVkRxNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkAPUgMA0GCSqGSIb3DQEBCwUAA4IBAQAXz/nQoImY10LLEFY2jBJhokR5 ZwiVtFS2X/kdAYwOhV1Nlp5q39v9bTvqgTd7lFps7Z4x+kHnjiRIFgXrGjpb/P1s m1e7J4sn/alsR1ZMBQngMu6if8QDu+tzKyURMDuYqnlp6OX0h8+KZe0qymsyApuE AGYUde+OifAYicQQMpa4d1nfVYRWG15pRP6NCCPlFvtg7Hhz0+UXb1vtggpNa7pl VS1YiR9zVKJriGQ5p1x9zMDy4LXwHd+jlSCmj6jUHl0NprI2QNwUShGTTqY/1u+p Lb9C4YNTrMzK2r4M4cfh/hS7xS2GdtsCHbZ4DLGprFi1BbOzYb7nQziRsTJg -----END CERTIFICATE-----Generated at Fri Apr 4 16:58:06 2025 by rpki-client