$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIH/-Je16G7yxSwab30W7lP6iLrBJa4.roa File: -Je16G7yxSwab30W7lP6iLrBJa4.roa (raw, json) Hash identifier: SXNdZAUmfT/M3W6/tVxFSMApyGnXmOWfT4O+gKYhOJ8= Subject key identifier: F8:97:B5:E8:6E:F2:C5:2C:1A:6F:7D:16:EE:53:FA:88:BA:C1:25:AE Certificate issuer: /CN=2D7204617354D70523B6F65A270712B6B19D815E Certificate serial: 0CD9 Authority key identifier: 2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/-Je16G7yxSwab30W7lP6iLrBJa4.roa Signing time: Mon 10 Feb 2025 13:49:23 +0000 ROA not before: Mon 10 Feb 2025 13:49:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131639 IP address blocks: 103.129.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 21:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3289 (0xcd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D7204617354D70523B6F65A270712B6B19D815E Validity Not Before: Feb 10 13:49:23 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F897B5E86EF2C52C1A6F7D16EE53FA88BAC125AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a8:ce:0c:9e:cf:4e:f0:f4:29:36:ab:91:e4: 65:94:c5:dc:c9:c8:df:6e:2c:3d:59:aa:35:f2:e7: 14:78:92:91:ea:e7:c1:71:fd:34:79:38:e8:81:6a: ae:f3:e8:44:ff:70:8d:91:8f:d4:60:b4:4a:a8:91: 3a:e7:c9:61:8c:53:38:00:3f:59:2c:32:21:f2:d1: f0:f4:72:eb:dd:11:36:4f:e1:40:c1:d8:1d:65:73: 72:83:56:ef:8d:ea:2a:54:10:85:f2:11:4b:cb:7e: c0:e3:09:85:12:d9:64:a9:17:41:6d:8d:76:82:96: 53:b0:f7:05:4d:83:55:27:b8:7b:19:a0:6f:a8:9f: c3:fa:ab:15:72:59:03:18:55:a3:59:1d:54:79:f1: 0b:d9:c4:4a:75:8b:4a:55:e6:46:c7:50:3c:dc:bb: a4:ec:73:a9:fc:26:08:38:f6:47:d7:21:6a:cd:10: 56:e2:59:74:84:66:55:d2:d3:6d:2d:90:fa:bd:3a: 29:62:11:9e:e1:c4:db:9e:7e:87:3d:7f:5c:61:8a: 02:5f:ea:a1:a4:26:b2:81:c6:44:de:c4:da:db:0d: 5e:25:06:ef:98:c7:fb:61:02:f0:c1:81:7e:8d:bf: 04:f1:05:38:f5:07:ac:13:a2:a1:b7:f3:2c:52:0e: 77:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:97:B5:E8:6E:F2:C5:2C:1A:6F:7D:16:EE:53:FA:88:BA:C1:25:AE X509v3 Authority Key Identifier: keyid:2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/-Je16G7yxSwab30W7lP6iLrBJa4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.129.146.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:7c:d2:c2:0f:a0:08:25:0f:23:8a:4b:13:bf:f6:4d:96:bb: 10:92:e9:c4:ac:89:13:9a:ba:0d:48:ea:27:ef:b3:d4:3b:3a: 5f:3e:ef:fc:55:ab:5b:aa:1c:88:0b:dd:c9:0d:3a:08:eb:e3: fb:ff:3a:ad:a5:34:35:3f:2c:76:0e:5e:d8:ad:e5:93:77:e3: a3:a6:91:c2:b7:81:1a:6d:7f:14:09:50:0a:0a:ff:0b:f8:3e: 13:87:47:bb:61:41:35:2a:6e:16:b0:32:39:48:d4:c3:53:65: db:0c:f1:f0:c5:f0:f6:3c:a7:02:62:b0:ee:e4:9d:10:81:d8: fa:bb:92:13:a5:1f:07:c2:d7:e3:e5:2b:ae:35:5e:4a:00:08: 29:f7:b5:7d:73:77:63:d9:d7:eb:a1:34:44:df:53:fb:62:ef: 36:b3:35:5b:67:40:46:14:0b:ef:9c:f6:d2:c3:67:81:b1:69: d6:4d:9e:ae:ce:5f:4c:78:7a:5f:c3:16:fd:4a:9c:6d:30:22: 73:f9:88:07:a1:5f:0b:88:2a:ed:62:1d:63:1b:f8:ba:c0:3c: 80:fb:55:0e:3f:8e:b2:35:84:de:eb:08:ac:07:7c:63:3d:c3: f9:66:8b:df:7c:f5:4c:7d:52:5f:2a:c8:16:39:82:e1:00:2e: 27:77:05:19 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDNkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkQ3 MjA0NjE3MzU0RDcwNTIzQjZGNjVBMjcwNzEyQjZCMTlEODE1RTAeFw0yNTAyMTAx MzQ5MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY4OTdCNUU4NkVGMkM1 MkMxQTZGN0QxNkVFNTNGQTg4QkFDMTI1QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2qM4Mns9O8PQpNquR5GWUxdzJyN9uLD1ZqjXy5xR4kpHq58Fx /TR5OOiBaq7z6ET/cI2Rj9RgtEqokTrnyWGMUzgAP1ksMiHy0fD0cuvdETZP4UDB 2B1lc3KDVu+N6ipUEIXyEUvLfsDjCYUS2WSpF0FtjXaCllOw9wVNg1UnuHsZoG+o n8P6qxVyWQMYVaNZHVR58QvZxEp1i0pV5kbHUDzcu6Tsc6n8Jgg49kfXIWrNEFbi WXSEZlXS020tkPq9OiliEZ7hxNuefoc9f1xhigJf6qGkJrKBxkTexNrbDV4lBu+Y x/thAvDBgX6NvwTxBTj1B6wToqG38yxSDnclAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU+Je16G7yxSwab30W7lP6iLrBJa4wHwYDVR0jBBgwFoAULXIEYXNU1wUjtvZa JwcStrGdgV4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElIL0xY SUVZWE5VMXdVanR2WmFKd2NTdHJHZGdWNC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TFhJRVlYTlUxd1VqdHZaYUp3Y1N0ckdkZ1Y0LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVElILy1KZTE2Rzd5eFN3YWIzMFc3bFA2aUxy QkphNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABngZIwDQYJ KoZIhvcNAQELBQADggEBAG580sIPoAglDyOKSxO/9k2WuxCS6cSsiROaug1I6ifv s9Q7Ol8+7/xVq1uqHIgL3ckNOgjr4/v/Oq2lNDU/LHYOXtit5ZN346OmkcK3gRpt fxQJUAoK/wv4PhOHR7thQTUqbhawMjlI1MNTZdsM8fDF8PY8pwJisO7knRCB2Pq7 khOlHwfC1+PlK641XkoACCn3tX1zd2PZ1+uhNETfU/ti7zazNVtnQEYUC++c9tLD Z4GxadZNnq7OX0x4el/DFv1KnG0wInP5iAehXwuIKu1iHWMb+LrAPID7VQ4/jrI1 hN7rCKwHfGM9w/lmi9989Ux9Ul8qyBY5guEALid3BRk= -----END CERTIFICATE-----Generated at Sun Apr 6 18:50:02 2025 by rpki-client