$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/JypRIJVFCDF9nHrztmMuWXOQrVI.roa File: JypRIJVFCDF9nHrztmMuWXOQrVI.roa (raw, json) Hash identifier: Z9anN/46mmAVyxiuIOx7k1jO3hcqWl4sBZVw8E9PbmA= Subject key identifier: 27:2A:51:20:95:45:08:31:7D:9C:7A:F3:B6:63:2E:59:73:90:AD:52 Certificate issuer: /CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3 Certificate serial: 022C Authority key identifier: 9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/JypRIJVFCDF9nHrztmMuWXOQrVI.roa Signing time: Mon 10 Feb 2025 14:31:52 +0000 ROA not before: Mon 10 Feb 2025 14:31:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 134823 IP address blocks: 103.51.88.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 13:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3 Validity Not Before: Feb 10 14:31:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=272A5120954508317D9C7AF3B6632E597390AD52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:32:8c:fc:89:ee:a1:67:e4:dd:ff:ca:6d:8a: c1:bc:7a:9a:92:04:3b:ed:66:63:cb:30:63:27:0a: 37:bb:5f:2f:e4:a6:67:1a:e2:24:40:42:9c:15:a6: 1b:a2:7a:90:a4:cf:e5:66:82:15:18:53:29:5b:b9: 8d:00:3a:1c:aa:6c:5d:e6:d2:dc:84:14:62:75:02: a1:06:08:9b:47:e4:a9:c5:4b:7c:3b:48:d5:da:3a: 58:1c:2d:24:2e:11:05:ef:95:02:9c:4d:86:12:b1: 38:06:ab:0c:0b:9a:8c:21:00:f5:50:69:50:49:22: 73:06:89:e4:e1:e9:98:4c:48:84:0a:f8:59:be:42: 5a:c8:26:91:84:43:27:f8:f0:f2:95:65:6e:dd:fb: 92:40:7c:74:f4:cd:ca:a8:31:b4:33:46:36:11:fb: 1d:05:31:bd:08:5c:e6:35:6d:90:b4:5b:9d:53:9c: 3b:cd:fa:ec:05:ab:64:52:8e:19:60:d8:79:d6:e1: ae:58:54:1d:fb:05:f0:cc:03:3d:3e:9a:3f:47:12: 90:e7:43:4d:41:3c:35:ec:3b:b7:e2:95:72:83:a2: 91:70:a3:e1:9d:3a:2b:48:a1:8c:74:b9:5f:3f:5b: 6b:53:34:99:e5:27:be:48:b7:40:92:76:92:c1:4c: 57:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2A:51:20:95:45:08:31:7D:9C:7A:F3:B6:63:2E:59:73:90:AD:52 X509v3 Authority Key Identifier: keyid:9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/JypRIJVFCDF9nHrztmMuWXOQrVI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.51.88.0/23 Signature Algorithm: sha256WithRSAEncryption 42:f9:b3:f0:13:de:e6:e5:89:f7:ee:cb:f9:ef:2c:fa:45:72: 00:ba:1f:bd:8a:71:b5:d9:f3:78:a9:83:54:1b:d2:a3:21:7c: 93:c0:94:b8:5c:5a:36:69:37:0f:66:4b:60:3e:7d:24:35:af: e1:50:11:a2:3e:44:c6:2c:76:b8:90:64:aa:b0:00:a6:78:74: 58:44:24:95:5f:ec:67:e3:67:07:13:be:f0:49:25:58:2c:be: f5:e6:e3:65:7a:f8:f0:c8:30:7b:d7:3f:3d:7e:35:af:36:f9: 17:bd:09:0a:ae:35:cd:c8:da:6d:f2:c3:71:9f:6e:3f:51:c8: 3f:e9:25:5e:41:30:f0:74:dc:4e:01:e8:c1:43:aa:0d:60:1c: d6:81:b6:b6:33:d6:af:1f:bf:a3:f8:b9:03:a5:dd:3c:79:c7: 16:c0:c3:a0:56:e9:f6:90:7a:ee:e9:94:36:e0:c7:67:62:70: 91:32:9b:c8:8a:d8:7a:99:6e:5c:56:4a:3f:82:f4:aa:2d:74: a8:11:7b:7a:f1:1f:f8:8a:24:8c:0b:f6:68:1d:eb:cb:db:0d: 2e:e7:35:e1:f9:9f:e5:ee:b3:5a:f7:cb:c8:73:65:29:e9:81: fa:a1:cf:47:55:a8:fa:ee:9a:b7:e9:a8:29:97:5d:b6:8c:e5: e6:f1:b4:91 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUJG Q0ZBQTIxMDY3NDJCMkMwOTlFM0Y0QzJBNTA0MjhFNUNENjJEMzAeFw0yNTAyMTAx NDMxNTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI3MkE1MTIwOTU0NTA4 MzE3RDlDN0FGM0I2NjMyRTU5NzM5MEFENTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6Moz8ie6hZ+Td/8ptisG8epqSBDvtZmPLMGMnCje7Xy/kpmca 4iRAQpwVphuiepCkz+VmghUYUylbuY0AOhyqbF3m0tyEFGJ1AqEGCJtH5KnFS3w7 SNXaOlgcLSQuEQXvlQKcTYYSsTgGqwwLmowhAPVQaVBJInMGieTh6ZhMSIQK+Fm+ QlrIJpGEQyf48PKVZW7d+5JAfHT0zcqoMbQzRjYR+x0FMb0IXOY1bZC0W51TnDvN +uwFq2RSjhlg2HnW4a5YVB37BfDMAz0+mj9HEpDnQ01BPDXsO7filXKDopFwo+Gd OitIoYx0uV8/W2tTNJnlJ75It0CSdpLBTFfBAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUJypRIJVFCDF9nHrztmMuWXOQrVIwHwYDVR0jBBgwFoAUm/z6ohBnQrLAmeP0 wqUEKOXNYtMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEVDSERS SVZFTi9tX3o2b2hCblFyTEFtZVAwd3FVRUtPWE5ZdE0uY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL21fejZvaEJuUXJMQW1lUDB3cVVFS09YTll0TS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RFQ0hEUklWRU4vSnlwUklKVkZD REY5bkhyenRtTXVXWE9RclZJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWczWDANBgkqhkiG9w0BAQsFAAOCAQEAQvmz8BPe5uWJ9+7L+e8s+kVy ALofvYpxtdnzeKmDVBvSoyF8k8CUuFxaNmk3D2ZLYD59JDWv4VARoj5Exix2uJBk qrAApnh0WEQklV/sZ+NnBxO+8EklWCy+9ebjZXr48Mgwe9c/PX41rzb5F70JCq41 zcjabfLDcZ9uP1HIP+klXkEw8HTcTgHowUOqDWAc1oG2tjPWrx+/o/i5A6XdPHnH FsDDoFbp9pB67umUNuDHZ2JwkTKbyIrYepluXFZKP4L0qi10qBF7evEf+IokjAv2 aB3ry9sNLuc14fmf5e6zWvfLyHNlKemB+qHPR1Wo+u6at+moKZddtozl5vG0kQ== -----END CERTIFICATE-----Generated at Sat Apr 5 09:31:48 2025 by rpki-client