$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/Y7wR_L9n_YjkMYhYWDSL4kj4KaM.roa File: Y7wR_L9n_YjkMYhYWDSL4kj4KaM.roa (raw, json) Hash identifier: pJFUkqdfGLzCtTGUnttGsbyu6ZSnYV+JfKEkkTSmFpA= Subject key identifier: 63:BC:11:FC:BF:67:FD:88:E4:31:88:58:58:34:8B:E2:48:F8:29:A3 Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0EE7 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Y7wR_L9n_YjkMYhYWDSL4kj4KaM.roa Signing time: Tue 18 Feb 2025 01:47:10 +0000 ROA not before: Tue 18 Feb 2025 01:47:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18177 IP address blocks: 140.116.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 10:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3815 (0xee7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Feb 18 01:47:10 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=63BC11FCBF67FD88E431885858348BE248F829A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:a2:5d:57:46:61:7c:93:11:21:ce:3f:5b: 01:b9:ef:42:6d:e7:48:74:0d:34:9e:06:a6:e7:3a: 89:41:82:8a:5f:71:29:a9:49:e2:e7:27:d4:71:c3: 8e:f3:f6:e7:0e:5f:b8:b2:bb:0b:bb:f1:cc:5b:f3: 0e:ea:6d:f5:a0:94:77:1f:08:69:ed:87:7a:99:75: 10:90:bb:bb:1c:fc:d3:fc:10:0c:92:7a:a2:80:57: 8f:93:07:d9:dd:0c:14:95:ff:41:4a:a2:d5:c9:b7: fb:18:0b:24:18:18:c2:c9:0c:26:08:6d:fc:3e:5e: 5c:02:4a:d5:ce:45:43:0b:ce:99:24:81:43:f0:8e: e0:b7:05:80:17:62:7a:9e:0c:60:c3:06:59:8c:5d: 7c:b6:10:cf:ff:45:bf:9e:5a:9d:c1:cf:c6:55:14: 32:2c:d7:18:90:a1:9a:e3:07:10:81:59:7d:e8:17: ac:f8:51:6c:ca:55:25:98:30:52:e4:30:31:c5:23: aa:86:6b:db:b4:6b:2e:ed:01:b9:0e:fb:ae:8d:f1: c3:c3:f5:37:00:a7:92:c6:84:19:33:45:3b:23:e5: 1a:44:d2:05:4f:aa:7d:ec:d1:35:fa:99:82:a9:ef: 36:49:89:bb:52:f7:ef:57:ac:f8:39:5b:b5:1b:47: 57:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BC:11:FC:BF:67:FD:88:E4:31:88:58:58:34:8B:E2:48:F8:29:A3 X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Y7wR_L9n_YjkMYhYWDSL4kj4KaM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.116.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0a:e2:ea:52:18:fd:eb:61:52:14:51:a0:44:75:bd:33:5f:c2: 93:78:f6:33:0a:38:7d:dc:e3:1c:14:d9:13:73:1e:96:29:e8: 75:3e:9d:2c:b8:99:16:a1:4b:cd:98:09:c3:f8:5e:e9:ca:bd: 40:39:bd:9a:d0:a4:98:82:88:ee:f7:4a:30:6a:2e:d1:ed:f6: dd:d1:d0:0a:3c:ea:75:08:73:97:6f:a9:53:cf:cc:2b:19:0c: 00:73:a0:43:8c:50:7c:68:a3:d7:17:1f:b4:f5:99:75:2e:82: c0:0c:f4:20:a2:85:28:0a:19:05:dd:e9:b7:c7:64:56:88:fc: 9e:6b:51:61:3a:80:81:08:e6:2a:ef:ad:41:40:f8:46:a8:81: c1:33:ad:54:1e:ce:dc:ba:20:d4:b6:88:fb:b6:f3:fd:bc:a9: 65:17:e0:a6:f5:f5:65:42:05:18:99:db:ed:56:ee:a8:4d:e4: 43:8c:55:73:44:ce:01:9a:47:fd:37:65:37:67:c7:e8:31:e2: 8b:bf:ff:0a:27:59:8d:cb:6b:46:9f:8e:ab:56:c1:4c:d3:67: 84:42:09:54:15:56:a0:0c:a2:a9:7c:3c:b7:39:1f:ea:4e:7b: d3:ab:d0:ee:b8:5e:f4:cb:ea:f2:a4:cf:21:7b:e5:74:4c:2c: 6e:57:16:6c -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDucwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNTAyMTgw MTQ3MTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYzQkMxMUZDQkY2N0ZE ODhFNDMxODg1ODU4MzQ4QkUyNDhGODI5QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChSqJdV0ZhfJMRIc4/WwG570Jt50h0DTSeBqbnOolBgopfcSmp SeLnJ9Rxw47z9ucOX7iyuwu78cxb8w7qbfWglHcfCGnth3qZdRCQu7sc/NP8EAyS eqKAV4+TB9ndDBSV/0FKotXJt/sYCyQYGMLJDCYIbfw+XlwCStXORUMLzpkkgUPw juC3BYAXYnqeDGDDBlmMXXy2EM//Rb+eWp3Bz8ZVFDIs1xiQoZrjBxCBWX3oF6z4 UWzKVSWYMFLkMDHFI6qGa9u0ay7tAbkO+66N8cPD9TcAp5LGhBkzRTsj5RpE0gVP qn3s0TX6mYKp7zZJibtS9+9XrPg5W7UbR1eRAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUY7wR/L9n/YjkMYhYWDSL4kj4KaMwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9ZN3dSX0w5bl9ZamtNWWhZV0RT TDRrajRLYU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjHQw DQYJKoZIhvcNAQELBQADggEBAAri6lIY/ethUhRRoER1vTNfwpN49jMKOH3c4xwU 2RNzHpYp6HU+nSy4mRahS82YCcP4XunKvUA5vZrQpJiCiO73SjBqLtHt9t3R0Ao8 6nUIc5dvqVPPzCsZDABzoEOMUHxoo9cXH7T1mXUugsAM9CCihSgKGQXd6bfHZFaI /J5rUWE6gIEI5irvrUFA+EaogcEzrVQezty6INS2iPu28/28qWUX4Kb19WVCBRiZ 2+1W7qhN5EOMVXNEzgGaR/03ZTdnx+gx4ou//wonWY3La0afjqtWwUzTZ4RCCVQV VqAMoql8PLc5H+pOe9Or0O64XvTL6vKkzyF75XRMLG5XFmw= -----END CERTIFICATE-----Generated at Mon Apr 7 09:02:57 2025 by rpki-client