$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/sN7sF_H5cTvgAhf3UlVfFdNewmk.roa File: sN7sF_H5cTvgAhf3UlVfFdNewmk.roa (raw, json) Hash identifier: 3sjLMWb0J1IsuhgSqjJ1Xoinm3mgu5+F7Gy3tLG84Ns= Subject key identifier: B0:DE:EC:17:F1:F9:71:3B:E0:02:17:F7:52:55:5F:15:D3:5E:C2:69 Certificate issuer: /CN=53AB025E558614A6AC89DCA0302DD23BD596A256 Certificate serial: 0167 Authority key identifier: 53:AB:02:5E:55:86:14:A6:AC:89:DC:A0:30:2D:D2:3B:D5:96:A2:56 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/U6sCXlWGFKasidygMC3SO9WWolY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/sN7sF_H5cTvgAhf3UlVfFdNewmk.roa Signing time: Mon 10 Feb 2025 13:43:58 +0000 ROA not before: Mon 10 Feb 2025 13:43:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 103.99.140.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/U6sCXlWGFKasidygMC3SO9WWolY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/U6sCXlWGFKasidygMC3SO9WWolY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/U6sCXlWGFKasidygMC3SO9WWolY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 18:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53AB025E558614A6AC89DCA0302DD23BD596A256 Validity Not Before: Feb 10 13:43:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B0DEEC17F1F9713BE00217F752555F15D35EC269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:0e:4c:3c:89:de:a9:36:66:43:72:5c:f3: 16:fa:d2:a2:f5:ac:9c:b3:47:ab:d5:02:b9:8a:75: 96:1b:5a:0d:9f:e9:9a:42:c1:14:6f:9b:f6:b0:99: f9:02:05:c9:29:23:8d:ff:be:ac:d1:37:51:f8:d6: 2e:23:d4:7d:25:b2:d4:19:78:b1:b4:b5:27:e9:6d: 2e:4d:d6:b7:23:42:58:1e:b9:5e:84:56:88:bc:4a: dd:73:18:a9:0e:66:32:b8:8f:9d:d1:a1:f6:fa:e3: 59:cd:49:4f:bb:c5:6a:ae:78:b8:39:33:ee:30:4a: b4:e8:7d:27:23:ed:5a:5e:20:27:d8:03:26:0f:3d: 2a:78:e0:c6:e2:1e:93:80:69:b1:96:f2:f1:8a:3c: 22:b9:13:cb:ab:c1:bd:f6:10:8f:b5:98:24:5d:83: fd:80:22:e8:87:40:a6:d0:ae:4f:33:cc:58:4a:67: 7f:22:27:71:e8:95:80:b5:1d:6a:ee:61:2b:2d:24: 0d:51:4e:9a:51:c2:4a:a8:0b:9c:48:9d:3e:bc:a9: d5:ee:fc:89:d6:11:1f:e1:15:21:20:48:37:1c:ca: dd:ed:02:72:47:2f:86:6b:9e:53:6b:b9:51:23:a8: 88:03:1a:14:5e:b1:e8:52:6c:b9:fb:44:fe:92:a2: e8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DE:EC:17:F1:F9:71:3B:E0:02:17:F7:52:55:5F:15:D3:5E:C2:69 X509v3 Authority Key Identifier: keyid:53:AB:02:5E:55:86:14:A6:AC:89:DC:A0:30:2D:D2:3B:D5:96:A2:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/U6sCXlWGFKasidygMC3SO9WWolY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U6sCXlWGFKasidygMC3SO9WWolY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/sN7sF_H5cTvgAhf3UlVfFdNewmk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.99.140.0/23 Signature Algorithm: sha256WithRSAEncryption 34:b9:21:2c:56:07:96:53:87:27:e2:9c:6a:ba:81:76:fd:18: 71:f2:28:3e:ca:d5:84:c0:22:1b:65:62:e3:48:0b:a6:ee:23: 2e:de:83:64:33:bc:ff:26:61:ea:54:37:08:ef:76:e4:65:cc: e5:91:f9:e1:d3:1a:26:8d:e3:53:8a:d5:77:4d:90:35:96:56: 9b:83:aa:6e:4f:3b:5e:48:fc:91:f8:1d:c5:94:07:ce:23:43: da:c3:d8:f3:c8:59:ba:bf:68:c5:22:02:e0:b2:67:af:f6:ef: 72:d2:ef:62:b9:2c:40:9e:47:07:95:ea:ed:9d:36:cf:57:59: db:68:a8:05:18:df:09:e1:45:50:22:d6:2c:0c:23:29:8b:13: 23:a9:0f:44:5e:00:f3:62:2f:eb:16:4e:12:40:0b:89:86:e4: 6b:a7:b5:34:48:dd:3e:35:21:03:0a:f0:d5:f2:bd:fd:9f:eb: b9:fd:d3:e5:f2:f6:42:05:24:41:8d:46:47:b2:03:99:6a:6f: 7d:f7:42:95:9e:8e:4f:09:85:47:96:63:24:ea:6d:eb:e9:cb: 46:c7:05:07:a5:24:62:c8:d6:3f:bf:f3:44:9e:44:97:4d:1a: 9b:9e:2c:e4:83:27:45:a7:8e:81:9b:de:8f:7e:39:3b:c1:c3: 2f:26:34:83 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTNB QjAyNUU1NTg2MTRBNkFDODlEQ0EwMzAyREQyM0JENTk2QTI1NjAeFw0yNTAyMTAx MzQzNThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIwREVFQzE3RjFGOTcx M0JFMDAyMTdGNzUyNTU1RjE1RDM1RUMyNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC1w5MPIneqTZmQ3Jc8xb60qL1rJyzR6vVArmKdZYbWg2f6ZpC wRRvm/awmfkCBckpI43/vqzRN1H41i4j1H0lstQZeLG0tSfpbS5N1rcjQlgeuV6E Voi8St1zGKkOZjK4j53Rofb641nNSU+7xWqueLg5M+4wSrTofScj7VpeICfYAyYP PSp44MbiHpOAabGW8vGKPCK5E8urwb32EI+1mCRdg/2AIuiHQKbQrk8zzFhKZ38i J3HolYC1HWruYSstJA1RTppRwkqoC5xInT68qdXu/InWER/hFSEgSDccyt3tAnJH L4ZrnlNruVEjqIgDGhResehSbLn7RP6Soui/AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUsN7sF/H5cTvgAhf3UlVfFdNewmkwHwYDVR0jBBgwFoAUU6sCXlWGFKasidyg MC3SO9WWolYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEVJQ0hB TkcvVTZzQ1hsV0dGS2FzaWR5Z01DM1NPOVdXb2xZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9VNnNDWGxXR0ZLYXNpZHlnTUMzU085V1dvbFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QRUlDSEFORy9zTjdzRl9INWNUdmdB aGYzVWxWZkZkTmV3bWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ2OMMA0GCSqGSIb3DQEBCwUAA4IBAQA0uSEsVgeWU4cn4pxquoF2/Rhx8ig+ ytWEwCIbZWLjSAum7iMu3oNkM7z/JmHqVDcI73bkZczlkfnh0xomjeNTitV3TZA1 llabg6puTzteSPyR+B3FlAfOI0Paw9jzyFm6v2jFIgLgsmev9u9y0u9iuSxAnkcH lertnTbPV1nbaKgFGN8J4UVQItYsDCMpixMjqQ9EXgDzYi/rFk4SQAuJhuRrp7U0 SN0+NSEDCvDV8r39n+u5/dPl8vZCBSRBjUZHsgOZam9990KVno5PCYVHlmMk6m3r 6ctGxwUHpSRiyNY/v/NEnkSXTRqbnizkgydFp46Bm96Pfjk7wcMvJjSD -----END CERTIFICATE-----Generated at Thu Apr 17 13:22:00 2025 by rpki-client