$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/D8OpnFkCoLKCci2u8gFGqZkFMQk.roa File: D8OpnFkCoLKCci2u8gFGqZkFMQk.roa (raw, json) Hash identifier: BXnGVj6NxRy1Oj4dYB3uwWJIczhMvDw/ij2sxkYZ8DM= Subject key identifier: 0F:C3:A9:9C:59:02:A0:B2:82:72:2D:AE:F2:01:46:A9:99:05:31:09 Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0E74 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/D8OpnFkCoLKCci2u8gFGqZkFMQk.roa Signing time: Mon 10 Feb 2025 14:16:22 +0000 ROA not before: Mon 10 Feb 2025 14:16:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 192.83.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3700 (0xe74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Feb 10 14:16:22 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0FC3A99C5902A0B282722DAEF20146A999053109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:94:a4:03:d6:8b:9e:3a:3a:66:1d:53:6b: 77:93:fa:08:fe:cd:d9:0d:ef:f2:09:25:a3:94:8d: 82:a5:1b:70:f6:4a:ce:03:ca:00:42:3e:8e:43:3a: dd:03:17:22:29:ca:d3:f1:fe:fe:b6:e8:df:b7:46: 8c:d0:49:f6:f4:00:4b:96:f2:24:c1:c9:bc:b6:c1: 65:31:18:53:b7:05:a4:89:9f:04:ed:28:3a:8d:97: 7f:90:ad:3f:97:e9:db:86:56:74:c4:6b:09:4d:1e: 4e:d3:04:89:e8:83:60:9c:9b:27:b3:f6:3a:95:8f: f9:92:e8:9b:ab:09:e6:cd:f0:44:73:66:47:35:01: 03:3e:4e:e7:0e:6d:d1:8f:0a:99:52:e8:10:63:e6: d6:f3:fc:5c:4a:62:df:dc:b7:e5:0a:f7:a0:59:b1: 2d:fd:50:50:b0:c3:d5:9a:f0:0d:ac:0d:0d:0c:e4: 61:55:1d:e4:48:b5:d2:29:d6:f4:63:3f:84:a4:67: e6:b5:79:68:44:c3:c8:8f:82:fa:3f:16:46:8f:5a: 47:09:0c:b0:27:a8:26:de:1c:de:d1:20:2e:23:0e: 28:da:19:8e:be:e0:8c:8d:2f:ab:04:41:df:23:a8: 55:66:5b:18:31:d9:b2:88:33:d8:66:61:08:e1:69: 5c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C3:A9:9C:59:02:A0:B2:82:72:2D:AE:F2:01:46:A9:99:05:31:09 X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/D8OpnFkCoLKCci2u8gFGqZkFMQk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.83.168.0/21 Signature Algorithm: sha256WithRSAEncryption 9a:62:23:37:2c:15:a5:2b:93:a1:13:2e:aa:d4:27:08:91:dd: 07:88:2c:7d:6e:6d:4b:37:fd:c7:ed:60:25:69:e1:82:14:0f: 20:c4:e0:d1:d5:af:d5:b1:32:10:3f:48:f4:f3:1b:f9:47:bf: 11:c4:ea:d5:b6:f1:4d:89:92:33:e3:01:10:ce:79:93:b4:eb: 53:92:f5:ce:dd:ca:c2:f0:05:1e:c1:fe:dc:06:f1:5c:56:51: a2:8d:6e:b8:9c:dc:38:93:d0:40:4d:e9:a3:44:9b:98:6e:96: be:c7:5f:95:9d:3a:9d:63:6c:07:34:b1:61:d1:b2:8b:ed:f4: 76:58:c6:41:d3:20:a0:19:ce:00:42:4a:b7:97:58:04:0f:a1: af:42:83:c8:28:4c:77:50:3b:85:0f:15:94:b9:97:b8:53:ed: 96:d4:8f:2b:04:41:13:56:a9:69:f8:2b:40:20:f9:d2:88:97: 7d:9c:33:69:ea:2b:6c:65:48:6e:1c:7e:9c:88:8f:7a:73:6a: 92:ed:63:c1:29:3d:1a:c6:5c:ed:f8:d4:1c:9c:ef:d0:fa:c0: f4:80:b2:6a:69:49:f5:a9:3c:03:b2:9b:1f:b5:90:8f:af:f3: d6:fc:43:30:67:1d:25:db:ce:8a:1e:4f:57:e1:f6:47:24:a7: 52:5c:15:b4 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDnQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNTAyMTAx NDE2MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBGQzNBOTlDNTkwMkEw QjI4MjcyMkRBRUYyMDE0NkE5OTkwNTMxMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC11JSkA9aLnjo6Zh1Ta3eT+gj+zdkN7/IJJaOUjYKlG3D2Ss4D ygBCPo5DOt0DFyIpytPx/v626N+3RozQSfb0AEuW8iTByby2wWUxGFO3BaSJnwTt KDqNl3+QrT+X6duGVnTEawlNHk7TBInog2Ccmyez9jqVj/mS6JurCebN8ERzZkc1 AQM+TucObdGPCplS6BBj5tbz/FxKYt/ct+UK96BZsS39UFCww9Wa8A2sDQ0M5GFV HeRItdIp1vRjP4SkZ+a1eWhEw8iPgvo/FkaPWkcJDLAnqCbeHN7RIC4jDijaGY6+ 4IyNL6sEQd8jqFVmWxgx2bKIM9hmYQjhaVyDAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUD8OpnFkCoLKCci2u8gFGqZkFMQkwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9EOE9wbkZrQ29MS0NjaTJ1OGdG R3Faa0ZNUWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwFOo MA0GCSqGSIb3DQEBCwUAA4IBAQCaYiM3LBWlK5OhEy6q1CcIkd0HiCx9bm1LN/3H 7WAlaeGCFA8gxODR1a/VsTIQP0j08xv5R78RxOrVtvFNiZIz4wEQznmTtOtTkvXO 3crC8AUewf7cBvFcVlGijW64nNw4k9BATemjRJuYbpa+x1+VnTqdY2wHNLFh0bKL 7fR2WMZB0yCgGc4AQkq3l1gED6GvQoPIKEx3UDuFDxWUuZe4U+2W1I8rBEETVqlp +CtAIPnSiJd9nDNp6itsZUhuHH6ciI96c2qS7WPBKT0axlzt+NQcnO/Q+sD0gLJq aUn1qTwDspsftZCPr/PW/EMwZx0l286KHk9X4fZHJKdSXBW0 -----END CERTIFICATE-----Generated at Wed Apr 16 04:40:07 2025 by rpki-client