$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/gdpH0lGys1M_c9_M325vQsMI29A.roa File: gdpH0lGys1M_c9_M325vQsMI29A.roa (raw, json) Hash identifier: GZQEFMEz3grgU/sBeGJSt/p2mZOfpetivFCYkYoQEws= Subject key identifier: 81:DA:47:D2:51:B2:B3:53:3F:73:DF:CC:DF:6E:6F:42:C3:08:DB:D0 Certificate issuer: /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC Certificate serial: 0D7F Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/gdpH0lGys1M_c9_M325vQsMI29A.roa Signing time: Fri 23 May 2025 07:37:04 +0000 ROA not before: Fri 23 May 2025 07:37:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4783 IP address blocks: 210.63.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3455 (0xd7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC Validity Not Before: May 23 07:37:04 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=81DA47D251B2B3533F73DFCCDF6E6F42C308DBD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:59:09:a2:7a:ad:cf:bd:06:2f:50:68:07:61: 05:41:9b:2c:46:bb:ee:00:90:e7:62:08:0c:cb:38: 13:a4:7d:7b:0e:83:e3:b1:b2:e1:6b:4f:ef:8c:5b: 3b:60:d3:eb:8d:ac:35:84:8e:47:88:d3:90:d2:9d: 0a:61:e9:8a:be:72:32:33:9c:7f:c0:3a:14:70:fb: b2:53:91:36:3e:33:0d:09:57:5e:5f:4c:fe:3e:cb: f8:d8:31:77:31:05:b8:e0:e6:14:cd:e9:4a:7a:46: 8e:7b:ca:b1:3e:bb:35:db:55:17:f8:0b:53:a0:f6: 6d:dd:41:0f:16:8d:db:8e:35:1c:59:1b:46:4a:43: 2b:56:6b:a8:2a:df:51:74:76:ea:2a:69:5f:52:a5: da:73:11:9c:83:4c:fa:0e:a5:c5:dd:8e:d2:0b:a0: 14:cc:26:24:8d:5b:72:8f:da:28:4a:f7:9c:94:fe: a5:c4:41:ac:24:05:97:62:49:2f:63:a0:44:8f:8d: 7f:27:c7:19:c1:f1:8e:11:ca:de:ba:63:4c:92:8b: ab:f2:c9:cb:11:0c:03:65:99:e9:68:e0:3a:fe:94: 8d:81:3d:55:3e:99:ec:9d:55:3e:72:97:1d:de:54: a3:4d:8a:c0:d9:b4:28:68:c6:9f:4b:4c:69:0c:49: 2a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DA:47:D2:51:B2:B3:53:3F:73:DF:CC:DF:6E:6F:42:C3:08:DB:D0 X509v3 Authority Key Identifier: keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/gdpH0lGys1M_c9_M325vQsMI29A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.32.0/19 Signature Algorithm: sha256WithRSAEncryption 61:c5:4f:ab:ed:db:54:af:a1:23:14:13:fb:7a:9a:2e:c6:93: ef:fd:51:7d:21:3b:96:43:7e:97:6c:a8:88:2d:1e:7b:0e:dc: 4f:cf:3b:6d:00:32:fd:4d:45:16:44:b0:15:5c:ba:a2:e1:c1: 21:0d:3d:2e:9d:4b:e8:71:24:50:43:09:96:8f:f6:80:df:da: 3d:f1:ac:2f:7c:e8:23:98:05:0f:d8:95:f3:bb:35:73:a0:fc: 07:5f:b9:d3:15:d7:1f:e5:d6:7c:6c:00:b8:3d:4d:08:36:5e: ce:9c:d2:e8:62:09:24:e4:cd:3a:2e:6d:3a:a6:1d:d9:63:d4: f1:85:41:d6:68:e0:cd:fe:88:3a:b0:61:de:0c:2f:77:0e:3c: 5c:62:2e:97:c7:71:6d:5a:05:f1:5f:48:bf:57:d6:a6:bd:ab: c6:48:73:bf:10:d5:be:6b:c3:b3:c5:2f:ee:4f:e3:42:96:20: 1e:5f:38:9d:6e:0e:37:4f:28:86:39:dc:fc:73:69:15:6c:1b: 41:2b:1e:54:f6:3e:f2:74:90:fb:56:da:c6:e6:ab:2f:e9:eb: e0:4c:e7:f7:a0:15:8a:7a:31:a6:5a:f0:c0:fa:5a:04:43:7b: 07:fd:7a:e8:65:1f:86:9e:bb:36:b5:66:78:44:92:05:75:34: 86:00:7a:76 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDX8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTZC Qjk0QjQ1N0Y5RDgyQTI5QjVCMkZEOUYzQTQ0MTg4OTlFNzFFQzAeFw0yNTA1MjMw NzM3MDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgxREE0N0QyNTFCMkIz NTMzRjczREZDQ0RGNkU2RjQyQzMwOERCRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtWQmieq3PvQYvUGgHYQVBmyxGu+4AkOdiCAzLOBOkfXsOg+Ox suFrT++MWztg0+uNrDWEjkeI05DSnQph6Yq+cjIznH/AOhRw+7JTkTY+Mw0JV15f TP4+y/jYMXcxBbjg5hTN6Up6Ro57yrE+uzXbVRf4C1Og9m3dQQ8WjduONRxZG0ZK QytWa6gq31F0duoqaV9SpdpzEZyDTPoOpcXdjtILoBTMJiSNW3KP2ihK95yU/qXE QawkBZdiSS9joESPjX8nxxnB8Y4Ryt66Y0ySi6vyycsRDANlmelo4Dr+lI2BPVU+ meydVT5ylx3eVKNNisDZtChoxp9LTGkMSSphAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUgdpH0lGys1M/c9/M325vQsMI29AwHwYDVR0jBBgwFoAUlruUtFf52CoptbL9 nzpEGImecewwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1lTTkVU L2xydVV0RmY1MkNvcHRiTDluenBFR0ltZWNldy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbHJ1VXRGZjUyQ29wdGJMOW56cEVHSW1lY2V3LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1lTTkVUL2dkcEgwbEd5czFNX2M5X00z MjV2UXNNSTI5QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXS PyAwDQYJKoZIhvcNAQELBQADggEBAGHFT6vt21SvoSMUE/t6mi7Gk+/9UX0hO5ZD fpdsqIgtHnsO3E/PO20AMv1NRRZEsBVcuqLhwSENPS6dS+hxJFBDCZaP9oDf2j3x rC986COYBQ/YlfO7NXOg/AdfudMV1x/l1nxsALg9TQg2Xs6c0uhiCSTkzToubTqm Hdlj1PGFQdZo4M3+iDqwYd4ML3cOPFxiLpfHcW1aBfFfSL9X1qa9q8ZIc78Q1b5r w7PFL+5P40KWIB5fOJ1uDjdPKIY53PxzaRVsG0ErHlT2PvJ0kPtW2sbmqy/p6+BM 5/egFYp6MaZa8MD6WgRDewf9euhlH4aeuza1ZnhEkgV1NIYAenY= -----END CERTIFICATE-----Generated at Wed Jun 4 00:21:42 2025 by rpki-client