$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/138RUx5NE1Hd6NaTwgYcT4MrHEU.roa File: 138RUx5NE1Hd6NaTwgYcT4MrHEU.roa (raw, json) Hash identifier: sqJUSH+7870lRXPx9Xq7UO3DRtkJR1SE/CdvhVf/rJ8= Subject key identifier: D7:7F:11:53:1E:4D:13:51:DD:E8:D6:93:C2:06:1C:4F:83:2B:1C:45 Certificate issuer: /CN=F297B39C40002EFADBDDE272B637AD61A9F51A45 Certificate serial: 0298 Authority key identifier: F2:97:B3:9C:40:00:2E:FA:DB:DD:E2:72:B6:37:AD:61:A9:F5:1A:45 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8peznEAALvrb3eJytjetYan1GkU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/138RUx5NE1Hd6NaTwgYcT4MrHEU.roa Signing time: Mon 10 Feb 2025 14:04:47 +0000 ROA not before: Mon 10 Feb 2025 14:04:47 +0000 ROA not after: Wed 08 Oct 2025 15:30:28 +0000 asID: 38047 IP address blocks: 2401:cae0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/8peznEAALvrb3eJytjetYan1GkU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/8peznEAALvrb3eJytjetYan1GkU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8peznEAALvrb3eJytjetYan1GkU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F297B39C40002EFADBDDE272B637AD61A9F51A45 Validity Not Before: Feb 10 14:04:47 2025 GMT Not After : Oct 8 15:30:28 2025 GMT Subject: CN=D77F11531E4D1351DDE8D693C2061C4F832B1C45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d6:bc:8e:df:1f:26:fd:e8:14:06:22:97:96: 7e:c7:ec:bd:c3:81:b8:cb:29:a9:5f:26:2c:8c:b5: bf:16:4f:0c:2d:db:7d:78:a0:f1:a1:60:39:59:c9: 82:36:81:f6:12:1c:77:0b:93:e4:ef:8c:d6:0e:2a: 5f:aa:ca:d6:f7:df:d0:2a:59:ec:d5:69:34:ed:23: 4b:e1:3a:fc:17:93:37:5a:3a:ef:3d:55:bc:83:c2: 4d:a4:82:45:2c:ae:63:e0:e2:47:5f:19:69:7e:22: a0:9c:c3:a9:99:83:b5:e5:f5:64:6b:dd:ce:06:b5: f2:02:5e:3b:62:36:ca:33:a4:de:8e:7f:0f:8b:13: 57:cc:2e:b8:6f:42:eb:59:bf:58:48:39:90:44:6c: dc:9c:30:56:8c:b2:e6:3f:a9:4b:b6:7f:24:a1:1d: 35:3c:ee:50:d0:8f:f0:8e:36:b4:ff:33:a8:06:a4: de:57:6f:95:6a:63:1e:8a:2e:cb:26:44:b8:d9:c6: b2:5c:6b:9e:11:8b:a6:60:94:78:25:8a:2d:88:02: 98:92:b6:27:26:76:0d:e5:fa:de:cc:61:e0:af:1c: bb:31:e0:ed:b4:a3:02:93:3b:8e:b0:f1:2d:be:99: cb:39:75:91:cd:a0:6a:51:1a:a9:17:72:bd:05:3a: 0d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7F:11:53:1E:4D:13:51:DD:E8:D6:93:C2:06:1C:4F:83:2B:1C:45 X509v3 Authority Key Identifier: keyid:F2:97:B3:9C:40:00:2E:FA:DB:DD:E2:72:B6:37:AD:61:A9:F5:1A:45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/8peznEAALvrb3eJytjetYan1GkU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8peznEAALvrb3eJytjetYan1GkU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/138RUx5NE1Hd6NaTwgYcT4MrHEU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:cae0::/32 Signature Algorithm: sha256WithRSAEncryption 7e:72:e0:1b:24:2b:ff:fa:7c:ff:86:22:7c:29:53:d3:89:c7: 81:63:db:d5:de:c0:2e:9f:2e:b4:7a:a9:16:a8:f5:c0:2c:34: dc:f5:48:d9:2b:56:d4:f0:51:fc:f0:74:e7:6f:cd:d6:6b:12: ad:a0:32:14:e6:e9:98:64:cd:80:b9:e1:82:77:4f:fd:cc:65: f6:82:81:78:38:93:22:ea:91:86:10:f5:9b:4d:5e:f2:27:6a: b1:5b:60:ce:d8:ad:9e:8f:f2:51:d4:37:fa:27:3c:41:65:4d: d0:12:9e:b2:41:53:a5:2f:21:ef:d8:6c:76:a6:0d:e5:53:4a: 5e:1c:c8:ef:ff:e8:eb:45:94:3f:47:c5:d7:1c:2b:68:92:d5: e3:47:88:9f:77:76:f9:a6:e9:9e:78:2d:e9:49:e9:a7:9d:5c: 4d:26:3a:7f:23:55:1a:66:35:6a:ff:26:37:05:85:3c:1b:aa: b6:81:66:d9:a0:fc:d8:f0:97:1c:68:fe:8e:67:92:88:71:f8: b3:90:d4:ee:a5:7f:2a:d0:9a:d9:94:9d:d3:4e:41:47:6e:c1: 1a:18:ac:22:19:2a:db:40:2e:d3:58:d9:c4:91:64:b8:de:bd: 6f:85:c5:f6:0d:6c:63:7a:b5:4d:24:78:d2:07:0e:ea:59:0d: 59:78:1d:57 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICApgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjI5 N0IzOUM0MDAwMkVGQURCRERFMjcyQjYzN0FENjFBOUY1MUE0NTAeFw0yNTAyMTAx NDA0NDdaFw0yNTEwMDgxNTMwMjhaMDMxMTAvBgNVBAMTKEQ3N0YxMTUzMUU0RDEz NTFEREU4RDY5M0MyMDYxQzRGODMyQjFDNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCt1ryO3x8m/egUBiKXln7H7L3DgbjLKalfJiyMtb8WTwwt2314 oPGhYDlZyYI2gfYSHHcLk+TvjNYOKl+qytb339AqWezVaTTtI0vhOvwXkzdaOu89 VbyDwk2kgkUsrmPg4kdfGWl+IqCcw6mZg7Xl9WRr3c4GtfICXjtiNsozpN6Ofw+L E1fMLrhvQutZv1hIOZBEbNycMFaMsuY/qUu2fyShHTU87lDQj/CONrT/M6gGpN5X b5VqYx6KLssmRLjZxrJca54Ri6ZglHglii2IApiSticmdg3l+t7MYeCvHLsx4O20 owKTO46w8S2+mcs5dZHNoGpRGqkXcr0FOg2vAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQU138RUx5NE1Hd6NaTwgYcT4MrHEUwHwYDVR0jBBgwFoAU8peznEAALvrb3eJy tjetYan1GkUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO X05PMS84cGV6bkVBQUx2cmIzZUp5dGpldFlhbjFHa1UuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBLzhwZXpuRUFBTHZyYjNlSnl0amV0WWFuMUdrVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RBSVdBTl9OTzEvMTM4UlV4NU5F MUhkNk5hVHdnWWNUNE1ySEVVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQByuAwDQYJKoZIhvcNAQELBQADggEBAH5y4BskK//6fP+GInwpU9OJ x4Fj29XewC6fLrR6qRao9cAsNNz1SNkrVtTwUfzwdOdvzdZrEq2gMhTm6ZhkzYC5 4YJ3T/3MZfaCgXg4kyLqkYYQ9ZtNXvInarFbYM7YrZ6P8lHUN/onPEFlTdASnrJB U6UvIe/YbHamDeVTSl4cyO//6OtFlD9HxdccK2iS1eNHiJ93dvmm6Z54LelJ6aed XE0mOn8jVRpmNWr/JjcFhTwbqraBZtmg/Njwlxxo/o5nkohx+LOQ1O6lfyrQmtmU ndNOQUduwRoYrCIZKttALtNY2cSRZLjevW+FxfYNbGN6tU0keNIHDupZDVl4HVc= -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:17 2025 by rpki-client