$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYMPHOX/3rjWAxXRpRfRdgwIYep_BjelY1Y.roa File: 3rjWAxXRpRfRdgwIYep_BjelY1Y.roa (raw, json) Hash identifier: 2wSSepExb6w95+N1V/0CBi2cUE9IoVuH5Y8t5iMhDew= Subject key identifier: DE:B8:D6:03:15:D1:A5:17:D1:76:0C:08:61:EA:7F:06:37:A5:63:56 Certificate issuer: /CN=A61402819401D363CB1F9BFBD538875F41F211C3 Certificate serial: 0C56 Authority key identifier: A6:14:02:81:94:01:D3:63:CB:1F:9B:FB:D5:38:87:5F:41:F2:11:C3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/phQCgZQB02PLH5v71TiHX0HyEcM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYMPHOX/3rjWAxXRpRfRdgwIYep_BjelY1Y.roa Signing time: Mon 10 Feb 2025 14:21:39 +0000 ROA not before: Mon 10 Feb 2025 14:21:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9216 IP address blocks: 211.76.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYMPHOX/phQCgZQB02PLH5v71TiHX0HyEcM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SYMPHOX/phQCgZQB02PLH5v71TiHX0HyEcM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/phQCgZQB02PLH5v71TiHX0HyEcM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3158 (0xc56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A61402819401D363CB1F9BFBD538875F41F211C3 Validity Not Before: Feb 10 14:21:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DEB8D60315D1A517D1760C0861EA7F0637A56356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f6:68:c7:54:ef:53:54:89:e8:ac:6e:c4:5e: c8:65:db:2e:44:54:5e:6e:74:e9:32:40:cd:be:08: cc:f6:1e:e9:ba:ee:59:ab:9d:c0:bc:1d:e6:fd:e1: cc:59:02:46:8c:92:31:6e:b3:c2:79:63:1c:ad:6c: 87:6b:a2:ff:2d:c2:30:50:d3:ae:8e:4e:6e:18:74: 89:dd:b2:d5:e3:f8:ad:a9:d5:10:34:81:2f:9b:14: fc:79:b1:2d:2f:4e:99:5f:2e:dd:79:b1:a1:16:28: 12:f8:10:16:8b:1c:e5:eb:54:c0:c0:e3:d2:6a:b5: c5:d2:bc:bf:3a:ed:bd:80:59:a5:84:fc:e2:f9:30: 49:e5:90:52:14:4d:f5:2f:88:69:4c:c9:db:bd:e4: 63:a9:68:df:21:f4:16:9e:be:58:50:d9:29:33:a3: 82:a9:52:9e:07:bc:ab:3b:7d:b6:40:a3:f4:7f:70: 3e:4b:07:40:23:8e:56:c7:d3:ba:88:30:f3:6a:70: b6:9f:40:9d:f4:6d:88:d7:f3:89:98:9d:2e:53:5a: 43:54:92:ad:28:f5:09:be:8c:b7:f4:83:9d:db:90: fb:e7:17:f7:45:e5:f9:38:25:7a:a2:60:2f:28:cf: 2d:c1:e5:16:60:5c:d5:d0:7b:42:ba:c2:ed:d9:27: 26:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B8:D6:03:15:D1:A5:17:D1:76:0C:08:61:EA:7F:06:37:A5:63:56 X509v3 Authority Key Identifier: keyid:A6:14:02:81:94:01:D3:63:CB:1F:9B:FB:D5:38:87:5F:41:F2:11:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYMPHOX/phQCgZQB02PLH5v71TiHX0HyEcM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/phQCgZQB02PLH5v71TiHX0HyEcM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYMPHOX/3rjWAxXRpRfRdgwIYep_BjelY1Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.128.0/20 Signature Algorithm: sha256WithRSAEncryption 89:63:d9:7e:b1:75:db:27:9d:bd:ef:52:90:7e:8c:35:78:80: b3:7f:82:68:3c:73:e4:cc:ba:22:6e:4b:bf:15:9d:9a:78:0f: de:cb:21:3f:46:25:01:7f:36:9c:52:f7:0e:60:52:dd:ad:be: 06:f6:28:51:d2:f5:90:b0:08:2d:20:49:6a:23:60:3a:b9:3f: 8c:68:65:46:74:bf:d5:fb:e8:61:6b:06:dd:3e:15:bc:c3:85: 32:46:69:53:93:bf:5f:c5:05:3f:ba:2b:1c:a5:8e:33:85:81: 52:c3:c9:26:57:b8:7b:37:f0:16:b3:35:50:ee:6e:b3:cd:ff: 3f:21:96:cd:b1:05:9c:2e:54:e0:c1:fb:56:d7:ba:03:88:a8: 1d:33:42:9d:15:46:89:93:5d:fc:d4:ab:a7:32:19:fe:be:ac: ca:40:5b:81:c4:3a:cf:03:2d:4b:81:7c:a4:6f:ca:6a:bf:c3: a2:8c:47:23:e4:ed:c4:dc:c1:1a:ef:7c:bf:3f:4c:6e:82:9a: ca:3f:1a:e2:27:16:e3:4d:c2:c3:af:f2:95:3a:f3:a6:5f:5c: 78:2b:72:28:fc:23:03:e3:f7:e7:76:dd:f6:5c:4b:bd:c8:86: da:16:f4:cd:05:0b:7f:8a:ef:e7:48:6f:45:84:88:20:46:87: e2:c6:01:0b -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDFYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTYx NDAyODE5NDAxRDM2M0NCMUY5QkZCRDUzODg3NUY0MUYyMTFDMzAeFw0yNTAyMTAx NDIxMzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERFQjhENjAzMTVEMUE1 MTdEMTc2MEMwODYxRUE3RjA2MzdBNTYzNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/9mjHVO9TVInorG7EXshl2y5EVF5udOkyQM2+CMz2Hum67lmr ncC8Heb94cxZAkaMkjFus8J5YxytbIdrov8twjBQ066OTm4YdIndstXj+K2p1RA0 gS+bFPx5sS0vTplfLt15saEWKBL4EBaLHOXrVMDA49JqtcXSvL867b2AWaWE/OL5 MEnlkFIUTfUviGlMydu95GOpaN8h9BaevlhQ2Skzo4KpUp4HvKs7fbZAo/R/cD5L B0AjjlbH07qIMPNqcLafQJ30bYjX84mYnS5TWkNUkq0o9Qm+jLf0g53bkPvnF/dF 5fk4JXqiYC8ozy3B5RZgXNXQe0K6wu3ZJybVAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU3rjWAxXRpRfRdgwIYep/BjelY1YwHwYDVR0jBBgwFoAUphQCgZQB02PLH5v7 1TiHX0HyEcMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1lNUEhP WC9waFFDZ1pRQjAyUExINXY3MVRpSFgwSHlFY00uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3BoUUNnWlFCMDJQTEg1djcxVGlIWDBIeUVjTS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NZTVBIT1gvM3JqV0F4WFJwUmZSZGd3 SVllcF9CamVsWTFZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BNNMgDANBgkqhkiG9w0BAQsFAAOCAQEAiWPZfrF12yedve9SkH6MNXiAs3+CaDxz 5My6Im5LvxWdmngP3sshP0YlAX82nFL3DmBS3a2+BvYoUdL1kLAILSBJaiNgOrk/ jGhlRnS/1fvoYWsG3T4VvMOFMkZpU5O/X8UFP7orHKWOM4WBUsPJJle4ezfwFrM1 UO5us83/PyGWzbEFnC5U4MH7Vte6A4ioHTNCnRVGiZNd/NSrpzIZ/r6sykBbgcQ6 zwMtS4F8pG/Kar/DooxHI+TtxNzBGu98vz9MboKayj8a4icW403Cw6/ylTrzpl9c eCtyKPwjA+P353bd9lxLvciG2hb0zQULf4rv50hvRYSIIEaH4sYBCw== -----END CERTIFICATE-----Generated at Wed Feb 19 22:03:26 2025 by rpki-client