$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/H-2A2GhR8QtThMQIuA1DIBKfQPM.roa File: H-2A2GhR8QtThMQIuA1DIBKfQPM.roa (raw, json) Hash identifier: qf2hNRs8P8P7Yutye8MGKghfFDmW8UzO/ODUf2TxJTE= Subject key identifier: 1F:ED:80:D8:68:51:F1:0B:53:84:C4:08:B8:0D:43:20:12:9F:40:F3 Certificate issuer: /CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3 Certificate serial: 022A Authority key identifier: 9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/H-2A2GhR8QtThMQIuA1DIBKfQPM.roa Signing time: Mon 10 Feb 2025 14:31:51 +0000 ROA not before: Mon 10 Feb 2025 14:31:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 134823 IP address blocks: 2400:c9a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 13:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3 Validity Not Before: Feb 10 14:31:51 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1FED80D86851F10B5384C408B80D4320129F40F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0d:fc:e9:bd:93:3c:cf:93:de:fe:25:16:bd: eb:5e:22:29:df:e3:76:2b:50:40:4c:dd:59:7a:a1: 1d:0a:d9:dc:8e:90:41:d1:c8:b5:24:b2:36:15:c0: d6:ba:bf:8f:1e:ae:41:3d:91:73:14:04:ad:45:d0: 9f:2c:a5:c2:84:ab:0c:23:58:4f:38:ca:00:20:1a: ec:8b:f5:43:4f:87:13:2e:0a:b9:36:4e:86:77:f7: 5f:48:bb:97:e4:f7:ce:3e:b4:65:3f:7b:63:41:61: ad:d4:44:69:ad:2e:93:e9:d2:a6:39:83:82:8d:d5: 18:1b:1d:24:e3:83:4a:ab:11:a7:fb:67:05:64:26: 73:4b:87:ee:e5:89:f4:5e:8d:6a:82:bf:44:82:39: ed:25:91:dc:bb:8f:95:0f:be:e6:1e:d1:cb:2e:e2: 5d:bb:10:c2:a6:ac:a2:30:7a:c6:95:c9:2a:88:f0: af:84:bf:9e:13:9e:1a:98:e1:97:c6:dd:49:26:de: 6b:b2:f6:1a:99:a7:db:3d:f1:29:74:f9:c7:cf:36: 21:a5:a9:2a:cc:82:e4:5e:ce:e3:db:9e:2d:cd:a6: 70:06:ea:71:bb:28:0b:5d:68:27:4d:76:f2:83:d3: 8d:b3:04:e7:56:66:f2:51:a3:56:25:4c:35:c0:c6: 69:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:ED:80:D8:68:51:F1:0B:53:84:C4:08:B8:0D:43:20:12:9F:40:F3 X509v3 Authority Key Identifier: keyid:9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/H-2A2GhR8QtThMQIuA1DIBKfQPM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:c9a0::/32 Signature Algorithm: sha256WithRSAEncryption 29:49:d4:01:5d:15:0e:4b:2e:0d:a8:73:00:21:1b:2d:52:53: 4f:52:89:cc:7b:a2:bb:c5:8e:60:d9:c0:3b:42:00:87:7e:07: 4a:58:60:2a:6e:c3:51:bb:1b:e0:e1:5a:e1:6c:ed:e8:a4:e4: 87:ac:f1:b7:4b:05:36:84:a8:2b:21:9f:51:6c:ae:3b:86:3a: 01:84:18:01:9c:97:c2:c9:78:6a:18:cb:ab:6c:bf:91:61:b9: 5e:99:1a:16:e2:7e:f5:9e:1c:9f:30:de:02:3c:53:14:2f:6b: a4:2b:c0:2f:2f:65:65:02:02:ab:c9:b0:e5:db:1f:d9:bf:e6: 80:5c:bb:de:4c:6d:92:4b:26:88:48:1f:48:9e:a1:8a:08:d2: 25:a9:7e:19:99:db:9c:e9:c1:66:ed:64:24:cf:33:fa:e3:f0: 66:a6:20:d6:ff:d3:a2:14:cb:65:09:ca:9e:00:9e:a5:3b:96: 53:60:5c:54:44:e4:9e:16:3e:0b:2b:34:c9:cc:20:b9:29:9a: 8e:be:d9:38:76:e3:1c:0a:7d:9f:a8:ce:2c:81:2e:d3:39:07: b7:f9:c5:39:35:1f:c4:51:e4:be:36:3d:99:a8:75:d7:41:3a: ef:64:d7:e0:2c:2d:fb:94:98:25:9d:46:6f:90:e6:38:f1:e2: 39:ef:15:f3 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICAiowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUJG Q0ZBQTIxMDY3NDJCMkMwOTlFM0Y0QzJBNTA0MjhFNUNENjJEMzAeFw0yNTAyMTAx NDMxNTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFGRUQ4MEQ4Njg1MUYx MEI1Mzg0QzQwOEI4MEQ0MzIwMTI5RjQwRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdDfzpvZM8z5Pe/iUWveteIinf43YrUEBM3Vl6oR0K2dyOkEHR yLUksjYVwNa6v48erkE9kXMUBK1F0J8spcKEqwwjWE84ygAgGuyL9UNPhxMuCrk2 ToZ3919Iu5fk984+tGU/e2NBYa3URGmtLpPp0qY5g4KN1RgbHSTjg0qrEaf7ZwVk JnNLh+7lifRejWqCv0SCOe0lkdy7j5UPvuYe0csu4l27EMKmrKIwesaVySqI8K+E v54TnhqY4ZfG3Ukm3muy9hqZp9s98Sl0+cfPNiGlqSrMguRezuPbni3NpnAG6nG7 KAtdaCdNdvKD042zBOdWZvJRo1YlTDXAxmnNAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUH+2A2GhR8QtThMQIuA1DIBKfQPMwHwYDVR0jBBgwFoAUm/z6ohBnQrLAmeP0 wqUEKOXNYtMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEVDSERS SVZFTi9tX3o2b2hCblFyTEFtZVAwd3FVRUtPWE5ZdE0uY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL21fejZvaEJuUXJMQW1lUDB3cVVFS09YTll0TS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RFQ0hEUklWRU4vSC0yQTJHaFI4 UXRUaE1RSXVBMURJQktmUVBNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQAyaAwDQYJKoZIhvcNAQELBQADggEBAClJ1AFdFQ5LLg2ocwAhGy1S U09Sicx7orvFjmDZwDtCAId+B0pYYCpuw1G7G+DhWuFs7eik5Ies8bdLBTaEqCsh n1FsrjuGOgGEGAGcl8LJeGoYy6tsv5FhuV6ZGhbifvWeHJ8w3gI8UxQva6QrwC8v ZWUCAqvJsOXbH9m/5oBcu95MbZJLJohIH0ieoYoI0iWpfhmZ25zpwWbtZCTPM/rj 8GamINb/06IUy2UJyp4AnqU7llNgXFRE5J4WPgsrNMnMILkpmo6+2Th24xwKfZ+o ziyBLtM5B7f5xTk1H8RR5L42PZmodddBOu9k1+AsLfuUmCWdRm+Q5jjx4jnvFfM= -----END CERTIFICATE-----Generated at Sat Apr 5 09:27:23 2025 by rpki-client