$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/5KD70o2wBfuM-Vrx7EUKh-PRqXw.roa File: 5KD70o2wBfuM-Vrx7EUKh-PRqXw.roa (raw, json) Hash identifier: g0dYMwEUFHDZxs+/F0x6eLArAsq3AjWNqhGQD5OrSTU= Subject key identifier: E4:A0:FB:D2:8D:B0:05:FB:8C:F9:5A:F1:EC:45:0A:87:E3:D1:A9:7C Certificate issuer: /CN=EE1941C37BD1E2CF12512F98AB366C29DA79B718 Certificate serial: 8B Authority key identifier: EE:19:41:C3:7B:D1:E2:CF:12:51:2F:98:AB:36:6C:29:DA:79:B7:18 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/5KD70o2wBfuM-Vrx7EUKh-PRqXw.roa Signing time: Mon 10 Feb 2025 14:13:54 +0000 ROA not before: Mon 10 Feb 2025 14:13:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 32595 IP address blocks: 160.30.98.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE1941C37BD1E2CF12512F98AB366C29DA79B718 Validity Not Before: Feb 10 14:13:54 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E4A0FBD28DB005FB8CF95AF1EC450A87E3D1A97C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:50:13:3a:0e:7d:b9:66:91:2d:c8:0a:73:0c: 4b:b1:30:a9:62:f5:22:39:6e:bb:41:82:5a:8d:19: 4d:ee:38:6b:86:fa:09:e4:7f:d6:f6:58:68:99:d1: 63:30:ef:37:eb:ca:43:ca:e8:a9:7d:c8:62:2c:d6: 51:5d:21:55:d0:f8:7c:01:2f:42:8b:00:fe:33:ae: 3e:41:e6:4a:5c:59:fa:aa:e7:c0:a9:d0:a8:11:4f: 42:4d:1e:a1:b1:91:8c:25:e8:0a:9e:c0:fd:f8:c3: e3:ec:01:2c:61:ee:f8:74:2c:5d:a3:2c:f7:07:ce: b0:33:d5:21:df:86:26:b0:fc:34:71:e2:5f:e2:81: 49:21:fb:63:45:9b:80:0d:b0:f8:55:8a:e0:10:f4: d5:6d:d1:24:26:d1:56:04:2c:5c:54:a3:56:61:a7: ef:61:01:8e:4b:5e:e5:5c:64:2d:97:db:88:9f:81: 22:04:7c:a9:df:6a:37:19:3e:ed:96:7b:80:78:db: 63:51:58:2b:8b:ca:d7:ab:7d:2f:7e:dd:fb:0b:1c: c9:bc:4e:da:53:26:7b:eb:1c:a2:87:cf:87:5c:5e: 38:0e:fe:ec:ca:c7:19:4d:34:9c:f3:06:8c:a4:da: 9d:f6:d1:95:bd:a7:97:69:4a:1f:81:be:92:95:32: 98:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A0:FB:D2:8D:B0:05:FB:8C:F9:5A:F1:EC:45:0A:87:E3:D1:A9:7C X509v3 Authority Key Identifier: keyid:EE:19:41:C3:7B:D1:E2:CF:12:51:2F:98:AB:36:6C:29:DA:79:B7:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/5KD70o2wBfuM-Vrx7EUKh-PRqXw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.98.0/23 Signature Algorithm: sha256WithRSAEncryption 36:70:f1:ba:d4:5f:d3:18:d9:6e:0e:1b:48:88:73:54:98:8a: 09:21:4b:8c:34:fb:b5:d2:57:32:0e:80:9a:02:4e:c2:76:c9: 33:c3:2b:0e:6e:a1:9e:74:01:e4:b3:68:db:59:aa:14:e9:9d: 1e:78:7d:c3:4e:06:1b:51:73:cd:11:ca:fc:72:95:d0:6a:62: 02:8e:24:79:1a:7e:8d:20:7d:a2:72:6f:71:b8:9d:82:45:df: 90:e3:cf:e0:29:ea:dd:97:12:9b:08:77:3b:ad:6d:a8:51:9b: 54:58:91:6e:3e:8c:d1:ae:fb:5b:46:36:20:f8:85:9c:96:fa: c6:f9:fc:46:e5:53:a0:e9:16:99:9b:f9:5a:ba:7c:34:19:6e: 11:3d:97:97:f3:fa:4c:19:0f:ce:37:00:87:47:f3:c2:55:c0: 9c:28:20:37:9b:79:2a:a8:42:bf:9b:36:74:3b:a5:08:3c:24: 35:56:bb:fe:ff:df:ce:d2:57:1c:fb:54:2d:a9:6c:3b:e1:04: 96:94:80:50:2a:8e:95:11:5c:bb:2f:dc:6a:00:a0:ad:ea:75: d0:93:ef:f3:18:e9:79:d6:0d:50:fe:fb:28:7b:f0:f5:7f:7c: 91:9f:ca:58:38:1d:2a:4a:5b:39:84:49:99:0b:a6:3f:8e:29: ad:62:24:a1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAIswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUUx OTQxQzM3QkQxRTJDRjEyNTEyRjk4QUIzNjZDMjlEQTc5QjcxODAeFw0yNTAyMTAx NDEzNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU0QTBGQkQyOERCMDA1 RkI4Q0Y5NUFGMUVDNDUwQTg3RTNEMUE5N0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtUBM6Dn25ZpEtyApzDEuxMKli9SI5brtBglqNGU3uOGuG+gnk f9b2WGiZ0WMw7zfrykPK6Kl9yGIs1lFdIVXQ+HwBL0KLAP4zrj5B5kpcWfqq58Cp 0KgRT0JNHqGxkYwl6AqewP34w+PsASxh7vh0LF2jLPcHzrAz1SHfhiaw/DRx4l/i gUkh+2NFm4ANsPhViuAQ9NVt0SQm0VYELFxUo1Zhp+9hAY5LXuVcZC2X24ifgSIE fKnfajcZPu2We4B422NRWCuLyterfS9+3fsLHMm8TtpTJnvrHKKHz4dcXjgO/uzK xxlNNJzzBoyk2p320ZW9p5dpSh+BvpKVMpjvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU5KD70o2wBfuM+Vrx7EUKh+PRqXwwHwYDVR0jBBgwFoAU7hlBw3vR4s8SUS+Y qzZsKdp5txgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lNUExF LzdobEJ3M3ZSNHM4U1VTLVlxelpzS2RwNXR4Zy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvN2hsQnczdlI0czhTVVMtWXF6WnNLZHA1dHhnLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lNUExFLzVLRDcwbzJ3QmZ1TS1Wcng3 RVVLaC1QUnFYdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg HmIwDQYJKoZIhvcNAQELBQADggEBADZw8brUX9MY2W4OG0iIc1SYigkhS4w0+7XS VzIOgJoCTsJ2yTPDKw5uoZ50AeSzaNtZqhTpnR54fcNOBhtRc80RyvxyldBqYgKO JHkafo0gfaJyb3G4nYJF35Djz+Ap6t2XEpsIdzutbahRm1RYkW4+jNGu+1tGNiD4 hZyW+sb5/EblU6DpFpmb+Vq6fDQZbhE9l5fz+kwZD843AIdH88JVwJwoIDebeSqo Qr+bNnQ7pQg8JDVWu/7/387SVxz7VC2pbDvhBJaUgFAqjpURXLsv3GoAoK3qddCT 7/MY6XnWDVD++yh78PV/fJGfylg4HSpKWzmESZkLpj+OKa1iJKE= -----END CERTIFICATE-----Generated at Wed Feb 19 22:12:47 2025 by rpki-client