$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/7aHAb8ZN59EzEsIAsXoKDKKztpA.roa File: 7aHAb8ZN59EzEsIAsXoKDKKztpA.roa (raw, json) Hash identifier: kbw9o7Mp2uhWSCQxHBI2J9U+EXsf43O5KztUcRlaZlY= Subject key identifier: ED:A1:C0:6F:C6:4D:E7:D1:33:12:C2:00:B1:7A:0A:0C:A2:B3:B6:90 Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0EEF Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/7aHAb8ZN59EzEsIAsXoKDKKztpA.roa Signing time: Tue 18 Feb 2025 01:51:33 +0000 ROA not before: Tue 18 Feb 2025 01:51:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9916 IP address blocks: 140.126.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 10:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3823 (0xeef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Feb 18 01:51:33 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EDA1C06FC64DE7D13312C200B17A0A0CA2B3B690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a3:c3:d5:30:54:1b:a8:ad:c6:e7:9f:db:9e: 7f:e2:36:bc:88:b8:01:b2:88:1c:68:2e:00:e3:e5: be:e4:b4:71:14:f2:47:d3:a0:b2:11:aa:6d:ce:f3: dc:02:7d:89:63:25:ab:47:ad:a7:26:af:9a:25:05: fe:88:b4:2c:5e:29:8a:93:6a:35:ae:12:30:b0:63: 1c:19:d9:02:a8:e1:0d:01:56:62:31:cb:13:02:d3: ff:b1:6f:a6:f3:9f:a1:98:bb:25:42:d8:e4:8f:c5: 5b:79:72:48:fe:79:d2:fd:5e:76:d1:35:de:65:9a: f8:bd:47:1e:1a:4a:fb:08:9d:1d:fc:79:8d:1e:74: 68:f4:b4:4f:d2:a7:2a:e1:97:6c:c9:4c:a2:56:a8: 55:b6:5a:4c:27:b4:40:13:e8:f0:0a:b3:37:9e:25: 7c:0f:23:f4:08:74:54:da:94:42:f7:57:b7:de:87: f8:f4:cf:a5:f2:9c:7b:44:a7:42:2a:0c:75:6f:54: f1:a6:ba:77:d9:20:eb:35:90:e4:65:3a:7f:a9:b7: 79:8b:eb:db:5b:68:f7:4d:bb:77:49:39:c7:17:2d: a9:45:8f:3c:f9:41:69:83:cf:0f:a2:04:38:6e:fe: 9f:b3:01:ff:8e:84:72:83:59:c0:f1:7f:4b:9f:92: 0b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A1:C0:6F:C6:4D:E7:D1:33:12:C2:00:B1:7A:0A:0C:A2:B3:B6:90 X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/7aHAb8ZN59EzEsIAsXoKDKKztpA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.126.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8e:e4:cc:a1:80:d8:75:b4:c0:1e:ac:9a:0f:87:56:77:41:9e: 05:7d:47:06:73:c7:36:0c:35:1d:88:80:04:ba:a3:db:05:0a: f7:be:49:b3:e1:56:78:41:bc:07:0e:d4:0b:17:9a:b9:b5:0c: c6:33:ed:6f:6d:d3:77:74:c2:22:77:1b:41:4f:c9:bf:7e:53: b7:a1:97:da:23:bc:89:7e:f7:a2:92:1e:eb:74:64:10:44:51: ca:ad:32:51:fe:ed:f6:fb:66:32:6d:01:cb:b2:ae:85:36:de: e8:6e:b0:c7:a6:82:8d:cb:90:27:51:ee:39:8b:03:f3:92:f3: d3:59:27:9e:02:51:91:ce:aa:be:a2:8f:dd:68:a2:39:48:39: 37:b8:af:2a:7d:7c:63:33:56:4c:83:8e:c3:ec:a7:99:ca:27: 46:ab:b1:e6:66:c2:ec:df:19:11:5d:de:7b:b0:fb:49:c0:e3: 1e:8d:63:5c:ea:cf:e5:e8:0f:b9:37:de:da:8a:d2:3d:5d:ae: 78:62:09:42:e5:9e:83:41:86:72:e3:05:6b:17:3f:2a:40:68: 05:c0:dd:ff:c6:0e:f4:cd:1c:33:e4:79:57:43:78:a8:23:3e: a3:5d:de:86:3f:08:f9:b3:bd:6d:c3:1a:41:16:a1:54:47:87: 8b:5b:bf:09 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDu8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNTAyMTgw MTUxMzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVEQTFDMDZGQzY0REU3 RDEzMzEyQzIwMEIxN0EwQTBDQTJCM0I2OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdo8PVMFQbqK3G55/bnn/iNryIuAGyiBxoLgDj5b7ktHEU8kfT oLIRqm3O89wCfYljJatHracmr5olBf6ItCxeKYqTajWuEjCwYxwZ2QKo4Q0BVmIx yxMC0/+xb6bzn6GYuyVC2OSPxVt5ckj+edL9XnbRNd5lmvi9Rx4aSvsInR38eY0e dGj0tE/Spyrhl2zJTKJWqFW2WkwntEAT6PAKszeeJXwPI/QIdFTalEL3V7feh/j0 z6XynHtEp0IqDHVvVPGmunfZIOs1kORlOn+pt3mL69tbaPdNu3dJOccXLalFjzz5 QWmDzw+iBDhu/p+zAf+OhHKDWcDxf0ufkgtlAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU7aHAb8ZN59EzEsIAsXoKDKKztpAwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC83YUhBYjhaTjU5RXpFc0lBc1hv S0RLS3p0cEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjH4w DQYJKoZIhvcNAQELBQADggEBAI7kzKGA2HW0wB6smg+HVndBngV9RwZzxzYMNR2I gAS6o9sFCve+SbPhVnhBvAcO1AsXmrm1DMYz7W9t03d0wiJ3G0FPyb9+U7ehl9oj vIl+96KSHut0ZBBEUcqtMlH+7fb7ZjJtAcuyroU23uhusMemgo3LkCdR7jmLA/OS 89NZJ54CUZHOqr6ij91oojlIOTe4ryp9fGMzVkyDjsPsp5nKJ0arseZmwuzfGRFd 3nuw+0nA4x6NY1zqz+XoD7k33tqK0j1drnhiCULlnoNBhnLjBWsXPypAaAXA3f/G DvTNHDPkeVdDeKgjPqNd3oY/CPmzvW3DGkEWoVRHh4tbvwk= -----END CERTIFICATE-----Generated at Mon Apr 7 09:20:33 2025 by rpki-client