$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINETEL/jlvMV4gawBJMu0ZjpyaeJU9o0es.roa File: jlvMV4gawBJMu0ZjpyaeJU9o0es.roa (raw, json) Hash identifier: o/CPwQ5BFAHHjtTMLp7iqUJWaJO9U7m9RBpf6yNlbP4= Subject key identifier: 8E:5B:CC:57:88:1A:C0:12:4C:BB:46:63:A7:26:9E:25:4F:68:D1:EB Certificate issuer: /CN=DDA2DA33DF9088B68EDC6F74EA8B1C0EEE2E26C1 Certificate serial: 0237 Authority key identifier: DD:A2:DA:33:DF:90:88:B6:8E:DC:6F:74:EA:8B:1C:0E:EE:2E:26:C1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3aLaM9-QiLaO3G906oscDu4uJsE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINETEL/jlvMV4gawBJMu0ZjpyaeJU9o0es.roa Signing time: Mon 10 Feb 2025 14:15:39 +0000 ROA not before: Mon 10 Feb 2025 14:15:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 63902 IP address blocks: 103.116.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINETEL/3aLaM9-QiLaO3G906oscDu4uJsE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINETEL/3aLaM9-QiLaO3G906oscDu4uJsE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3aLaM9-QiLaO3G906oscDu4uJsE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 02:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDA2DA33DF9088B68EDC6F74EA8B1C0EEE2E26C1 Validity Not Before: Feb 10 14:15:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8E5BCC57881AC0124CBB4663A7269E254F68D1EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:88:d5:76:c9:05:fd:80:2d:a3:f2:6a:12:57: e0:95:b5:3a:1a:32:46:d0:e1:66:f3:f6:0c:c5:d0: d6:a5:e1:fd:3a:17:94:5f:52:db:4f:7e:f4:17:a1: 04:c5:03:77:82:7d:92:86:72:44:29:ee:ba:6c:f2: c0:6c:6f:a2:1d:c4:b0:a7:02:b8:2a:cc:69:d9:dd: 8a:11:c8:3d:5d:71:ae:3f:ec:dc:76:bd:f0:2d:13: 3c:2b:02:ed:66:77:87:ac:d0:e2:d8:c6:2a:60:08: df:5d:a3:f8:f5:ba:80:01:df:d3:8f:2b:23:0e:4f: 08:6d:44:ad:7e:58:25:9f:b5:8c:b8:fc:ab:2a:6c: bd:f9:70:bc:e3:9c:02:cf:e9:69:45:a3:9a:ca:cb: db:77:61:8e:e6:f8:d7:37:e3:ed:93:27:26:0d:c4: 07:fc:65:f9:b3:ea:6a:18:d6:67:2b:d1:22:15:1b: 92:35:63:7e:cb:f8:1d:4a:86:46:b2:9d:d1:fc:86: ff:49:e0:a1:19:d7:7f:42:c3:07:93:33:c0:a9:2f: 2b:4a:98:75:62:83:7b:92:43:ff:2a:78:aa:79:e1: 2e:6c:1f:48:e1:e9:57:dd:a5:d8:07:b5:5e:b9:c4: 19:24:16:49:cf:83:09:bb:f0:b9:82:e3:45:59:d7: 97:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5B:CC:57:88:1A:C0:12:4C:BB:46:63:A7:26:9E:25:4F:68:D1:EB X509v3 Authority Key Identifier: keyid:DD:A2:DA:33:DF:90:88:B6:8E:DC:6F:74:EA:8B:1C:0E:EE:2E:26:C1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINETEL/3aLaM9-QiLaO3G906oscDu4uJsE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3aLaM9-QiLaO3G906oscDu4uJsE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINETEL/jlvMV4gawBJMu0ZjpyaeJU9o0es.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.116.14.0/23 Signature Algorithm: sha256WithRSAEncryption a3:98:47:c4:45:5f:3e:74:d5:44:20:f1:c1:d1:f2:05:1a:31: ff:57:ce:24:b2:42:b2:b9:56:ec:f4:52:da:17:fc:0a:0a:18: 9a:75:14:c0:9f:fa:29:d5:2f:2c:c1:62:54:d1:6e:dd:ad:c3: d9:70:f2:5a:ef:44:df:c7:06:ad:8a:e7:fc:7c:d2:f3:8f:d0: 84:b5:9a:60:81:9c:f7:00:31:49:18:f1:53:3e:39:f0:3c:b2: 64:ca:5a:a9:9c:fd:cb:07:1d:51:99:bb:32:de:e6:88:7d:ba: 57:ac:aa:a2:2c:9a:2c:0e:dc:99:85:58:7c:9d:13:9b:c7:27: 50:9f:42:f6:cf:d4:85:57:f6:2b:57:4c:1b:a6:2e:e3:c3:6a: 26:9d:a1:25:d5:f6:a4:fa:44:50:fc:38:67:67:b7:66:b4:78: 1a:1b:a8:50:d9:ff:aa:0e:a3:2f:00:15:61:bd:aa:28:5b:86: a3:ea:af:4a:0e:92:ac:a6:5a:29:66:ad:a8:3b:c7:9b:22:72: bf:50:22:98:30:94:34:b5:73:36:da:9e:11:b8:ec:6c:28:fe: a2:84:af:bc:33:cb:64:a6:a9:32:e2:22:a2:ef:c1:e2:54:e9: bb:2c:8e:25:f6:47:61:37:f6:89:68:2f:a1:ee:36:ca:de:1f: e3:8a:83:5d -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRERB MkRBMzNERjkwODhCNjhFREM2Rjc0RUE4QjFDMEVFRTJFMjZDMTAeFw0yNTAyMTAx NDE1MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhFNUJDQzU3ODgxQUMw MTI0Q0JCNDY2M0E3MjY5RTI1NEY2OEQxRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChiNV2yQX9gC2j8moSV+CVtToaMkbQ4Wbz9gzF0Nal4f06F5Rf UttPfvQXoQTFA3eCfZKGckQp7rps8sBsb6IdxLCnArgqzGnZ3YoRyD1dca4/7Nx2 vfAtEzwrAu1md4es0OLYxipgCN9do/j1uoAB39OPKyMOTwhtRK1+WCWftYy4/Ksq bL35cLzjnALP6WlFo5rKy9t3YY7m+Nc34+2TJyYNxAf8Zfmz6moY1mcr0SIVG5I1 Y37L+B1KhkayndH8hv9J4KEZ139CwweTM8CpLytKmHVig3uSQ/8qeKp54S5sH0jh 6VfdpdgHtV65xBkkFknPgwm78LmC40VZ15dzAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUjlvMV4gawBJMu0ZjpyaeJU9o0eswHwYDVR0jBBgwFoAU3aLaM9+QiLaO3G90 6oscDu4uJsEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkVU RUwvM2FMYU05LVFpTGFPM0c5MDZvc2NEdTR1SnNFLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS8zYUxhTTktUWlMYU8zRzkwNm9zY0R1NHVKc0UuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSElORVRFTC9qbHZNVjRnYXdCSk11 MFpqcHlhZUpVOW8wZXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ3QOMA0GCSqGSIb3DQEBCwUAA4IBAQCjmEfERV8+dNVEIPHB0fIFGjH/V84k skKyuVbs9FLaF/wKChiadRTAn/op1S8swWJU0W7drcPZcPJa70Tfxwatiuf8fNLz j9CEtZpggZz3ADFJGPFTPjnwPLJkylqpnP3LBx1Rmbsy3uaIfbpXrKqiLJosDtyZ hVh8nRObxydQn0L2z9SFV/YrV0wbpi7jw2omnaEl1fak+kRQ/DhnZ7dmtHgaG6hQ 2f+qDqMvABVhvaooW4aj6q9KDpKsplopZq2oO8ebInK/UCKYMJQ0tXM22p4RuOxs KP6ihK+8M8tkpqky4iKi78HiVOm7LI4l9kdhN/aJaC+h7jbK3h/jioNd -----END CERTIFICATE-----Generated at Sat Apr 5 23:13:43 2025 by rpki-client