$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/zZd4tI2U3He9WtcWBC15ig9_010.roa File: zZd4tI2U3He9WtcWBC15ig9_010.roa (raw, json) Hash identifier: DsNYAuSrAlGON8ZglDhMAfqrZ28BCvZgG46AmzbS4fc= Subject key identifier: CD:97:78:B4:8D:94:DC:77:BD:5A:D7:16:04:2D:79:8A:0F:7F:D3:5D Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Certificate serial: 0D4D Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/zZd4tI2U3He9WtcWBC15ig9_010.roa Signing time: Mon 10 Feb 2025 14:05:25 +0000 ROA not before: Mon 10 Feb 2025 14:05:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 61.58.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3405 (0xd4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Validity Not Before: Feb 10 14:05:25 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CD9778B48D94DC77BD5AD716042D798A0F7FD35D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:31:68:72:cf:ef:96:12:d6:54:a6:53:82:b4: f8:e8:29:2f:3c:27:c4:f4:7a:73:55:14:5f:38:ec: 19:cf:0a:37:d1:31:5e:55:70:c6:a3:86:0a:99:42: f2:97:a0:22:d8:7d:ef:f6:17:a2:3e:5e:16:39:bd: 20:06:93:a9:52:96:57:d7:4d:b1:14:d2:e2:48:84: ce:fe:c5:61:cc:e3:52:14:18:24:a9:c9:5c:cf:a0: ae:d7:56:55:8b:54:ab:14:7b:f0:51:08:22:b3:fb: e7:13:5c:17:9f:df:1b:91:24:e6:86:98:60:6d:60: 24:4c:50:83:b0:54:8d:f0:7b:53:32:04:4f:75:43: ae:03:a2:5d:9f:27:87:00:63:3e:01:a3:90:82:35: e0:60:3e:6d:7b:9a:d9:2d:62:36:23:37:ed:e7:7a: ff:a9:9c:00:4f:4d:7e:e0:6c:6c:78:c0:64:6f:74: 7d:8c:93:e5:37:17:e9:65:9e:eb:db:56:5c:66:0b: 7d:18:0d:d7:35:2b:a3:5e:e8:2a:00:a2:9f:0e:10: 6d:d7:1a:8a:69:23:92:59:04:18:c1:a6:56:44:ef: 58:6e:ae:88:45:d4:fa:1a:0a:cc:d4:d1:66:70:d9: b9:77:60:5d:dc:32:55:66:9c:4e:53:5b:04:e1:39: 69:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:97:78:B4:8D:94:DC:77:BD:5A:D7:16:04:2D:79:8A:0F:7F:D3:5D X509v3 Authority Key Identifier: keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/zZd4tI2U3He9WtcWBC15ig9_010.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.159.0/24 Signature Algorithm: sha256WithRSAEncryption 44:76:be:0f:63:4d:82:54:92:e2:7a:a7:5b:37:88:54:e6:11: bc:40:25:29:59:d9:8f:e2:78:f6:b2:d9:f8:92:4a:51:65:c0: b0:69:34:89:c3:9d:14:be:ff:79:b1:6a:e7:14:f2:6a:20:0f: 26:c1:7c:b9:a3:db:a8:05:52:25:2b:11:9e:5f:96:5e:04:1c: 13:d5:04:68:6f:66:bb:20:aa:a1:66:a2:87:2a:44:bd:1b:be: 9a:e5:f4:b6:fc:d7:6f:b6:99:d6:26:e4:68:58:64:44:e2:2b: 07:da:55:56:58:e0:81:b6:7c:76:c5:20:45:87:1b:b1:52:e0: 3a:cd:a5:c8:67:6e:36:60:65:d0:5a:bc:d5:06:12:07:88:ed: bf:d4:2c:36:21:9e:0b:14:86:c6:dd:13:83:63:82:ae:d8:33: 42:7d:3b:61:6d:2e:9b:00:36:84:c6:b2:1e:80:a2:f8:79:22: 73:85:d8:69:ac:b7:18:ae:e4:ee:1a:86:c9:da:55:9d:66:d8: 1a:5c:5f:b2:0e:94:8d:6c:14:31:15:96:15:63:a4:e7:d7:5b: 4e:f3:4d:a9:c8:0f:5c:11:f2:a5:d1:4e:f9:2d:75:bb:bb:24: 82:dd:ee:1b:08:86:e3:15:f8:06:2a:96:05:ee:e6:5a:c6:6b: e2:d3:b6:8d -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDU0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yNTAyMTAx NDA1MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENEOTc3OEI0OEQ5NERD NzdCRDVBRDcxNjA0MkQ3OThBMEY3RkQzNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSMWhyz++WEtZUplOCtPjoKS88J8T0enNVFF847BnPCjfRMV5V cMajhgqZQvKXoCLYfe/2F6I+XhY5vSAGk6lSllfXTbEU0uJIhM7+xWHM41IUGCSp yVzPoK7XVlWLVKsUe/BRCCKz++cTXBef3xuRJOaGmGBtYCRMUIOwVI3we1MyBE91 Q64Dol2fJ4cAYz4Bo5CCNeBgPm17mtktYjYjN+3nev+pnABPTX7gbGx4wGRvdH2M k+U3F+llnuvbVlxmC30YDdc1K6Ne6CoAop8OEG3XGoppI5JZBBjBplZE71hurohF 1PoaCszU0WZw2bl3YF3cMlVmnE5TWwThOWkLAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUzZd4tI2U3He9WtcWBC15ig9/010wHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80 Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAvelpkNHRJMlUzSGU5V3RjV0JDMTVp ZzlfMDEwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD06nzAN BgkqhkiG9w0BAQsFAAOCAQEARHa+D2NNglSS4nqnWzeIVOYRvEAlKVnZj+J49rLZ +JJKUWXAsGk0icOdFL7/ebFq5xTyaiAPJsF8uaPbqAVSJSsRnl+WXgQcE9UEaG9m uyCqoWaihypEvRu+muX0tvzXb7aZ1ibkaFhkROIrB9pVVljggbZ8dsUgRYcbsVLg Os2lyGduNmBl0Fq81QYSB4jtv9QsNiGeCxSGxt0Tg2OCrtgzQn07YW0umwA2hMay HoCi+Hkic4XYaay3GK7k7hqGydpVnWbYGlxfsg6UjWwUMRWWFWOk59dbTvNNqcgP XBHypdFO+S11u7skgt3uGwiG4xX4BiqWBe7mWsZr4tO2jQ== -----END CERTIFICATE-----Generated at Mon Apr 7 14:56:44 2025 by rpki-client