$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/MTfyH8Kj7YIKmto4WG_bFlEF7qM.roa File: MTfyH8Kj7YIKmto4WG_bFlEF7qM.roa (raw, json) Hash identifier: HHyBcPkWrv/s4BAPXcka/XOk74nTviZhJ+Pn7QHT6+E= Subject key identifier: 31:37:F2:1F:C2:A3:ED:82:0A:9A:DA:38:58:6F:DB:16:51:05:EE:A3 Certificate issuer: /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A Certificate serial: 018B Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/MTfyH8Kj7YIKmto4WG_bFlEF7qM.roa Signing time: Mon 10 Feb 2025 13:44:14 +0000 ROA not before: Mon 10 Feb 2025 13:44:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 2914 IP address blocks: 202.160.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A Validity Not Before: Feb 10 13:44:14 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3137F21FC2A3ED820A9ADA38586FDB165105EEA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d3:ca:15:b1:63:55:8c:a7:9a:85:91:af:26: 5a:f4:86:9e:9c:04:0f:5c:31:51:57:0f:66:63:66: 5d:d7:38:a7:d5:04:a5:5c:44:16:a0:b7:ec:d7:64: 46:e9:10:e1:2d:14:c5:1e:89:16:87:92:bc:5c:b8: a9:d2:c2:cf:56:89:a3:05:e8:cb:d3:55:35:c7:9a: 7b:28:68:fd:ab:1d:6a:9e:31:b2:a4:5b:6c:fd:dd: f3:7a:2c:4b:7b:8a:8b:f4:9b:57:19:55:07:86:62: 2a:70:1b:92:d2:25:fa:ed:2d:b5:a0:56:23:2a:8a: 6c:bb:01:08:03:ec:76:66:14:f8:ff:d1:48:7d:94: b9:7f:25:49:06:b7:93:8c:a9:ec:77:7f:75:b8:b2: f5:cc:e7:1f:f6:f4:58:31:1d:a2:00:fb:4d:71:d0: ab:d7:98:aa:73:eb:72:68:3b:5d:9e:e7:97:7b:6b: 30:66:2a:b5:d1:db:80:8f:85:f6:b7:d3:82:d8:61: d6:1a:c9:84:03:c6:f9:b5:97:5b:ef:f2:0b:ee:04: 49:af:0d:de:92:5a:84:72:16:5d:a6:c5:3d:c0:92: 8a:ba:63:74:c6:ab:6a:07:a5:08:d4:86:a0:a9:d4: 3c:83:20:f2:18:1c:77:d9:59:d7:58:99:4d:58:6e: 22:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:37:F2:1F:C2:A3:ED:82:0A:9A:DA:38:58:6F:DB:16:51:05:EE:A3 X509v3 Authority Key Identifier: keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/MTfyH8Kj7YIKmto4WG_bFlEF7qM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.160.64.0/21 Signature Algorithm: sha256WithRSAEncryption 09:43:8f:56:f0:5c:2c:2f:a6:2e:f3:43:41:42:66:aa:35:69: 0f:5e:35:d3:34:0e:ac:45:1c:c2:ba:95:04:11:a1:d1:c4:84: 83:b8:13:65:88:4c:6a:07:a5:02:77:05:b1:40:c3:e1:e2:1b: 81:84:31:08:ce:28:22:c2:58:2a:ca:f8:b3:62:f0:98:35:bc: 98:6d:35:0b:6f:1b:4e:bd:a3:25:48:94:cb:29:e2:07:54:b4: 06:ba:58:4f:55:7d:87:64:b0:ec:51:7b:b0:98:1f:0e:31:ad: fd:4b:2a:cb:40:00:02:44:0a:b8:1c:72:1d:70:18:a7:c4:6e: 4f:89:e1:e1:de:eb:00:52:6d:ab:86:5b:d6:65:21:1b:e4:4a: 73:bc:08:be:a4:d0:e8:2d:75:4a:00:c4:18:1a:32:58:6f:a9: 9f:e0:84:96:20:b4:b1:d7:d7:84:f0:f5:da:4d:6c:ad:00:6a: 15:26:23:d4:ad:69:61:d6:dc:fb:04:b7:63:57:c3:ff:e7:d9: 0a:70:9a:07:50:9f:6e:9d:a6:a7:30:09:e6:62:38:f9:19:21: 91:df:f8:1e:4b:b9:5c:ae:29:21:0f:e4:ca:1e:f4:34:92:36: fb:68:15:fa:a4:54:44:d0:b7:2c:57:84:c7:8a:3a:3e:7d:ab: f7:c1:96:24 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAYswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUNE MkZEQzM4NTIyQTc0QTQyMkRFN0JEMUMwMjZENTVFMDhEOUU5QTAeFw0yNTAyMTAx MzQ0MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMxMzdGMjFGQzJBM0VE ODIwQTlBREEzODU4NkZEQjE2NTEwNUVFQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDF08oVsWNVjKeahZGvJlr0hp6cBA9cMVFXD2ZjZl3XOKfVBKVc RBagt+zXZEbpEOEtFMUeiRaHkrxcuKnSws9WiaMF6MvTVTXHmnsoaP2rHWqeMbKk W2z93fN6LEt7iov0m1cZVQeGYipwG5LSJfrtLbWgViMqimy7AQgD7HZmFPj/0Uh9 lLl/JUkGt5OMqex3f3W4svXM5x/29FgxHaIA+01x0KvXmKpz63JoO12e55d7azBm KrXR24CPhfa304LYYdYayYQDxvm1l1vv8gvuBEmvDd6SWoRyFl2mxT3Akoq6Y3TG q2oHpQjUhqCp1DyDIPIYHHfZWddYmU1YbiLpAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUMTfyH8Kj7YIKmto4WG/bFlEF7qMwHwYDVR0jBBgwFoAU7NL9w4Uip0pCLee9 HAJtVeCNnpowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxL RVJBLzdOTDl3NFVpcDBwQ0xlZTlIQUp0VmVDTm5wby5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvN05MOXc0VWlwMHBDTGVlOUhBSnRWZUNObnBvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxLRVJBL01UZnlIOEtqN1lJ S210bzRXR19iRmxFRjdxTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPKoEAwDQYJKoZIhvcNAQELBQADggEBAAlDj1bwXCwvpi7zQ0FCZqo1aQ9e NdM0DqxFHMK6lQQRodHEhIO4E2WITGoHpQJ3BbFAw+HiG4GEMQjOKCLCWCrK+LNi 8Jg1vJhtNQtvG069oyVIlMsp4gdUtAa6WE9VfYdksOxRe7CYHw4xrf1LKstAAAJE Crgcch1wGKfEbk+J4eHe6wBSbauGW9ZlIRvkSnO8CL6k0OgtdUoAxBgaMlhvqZ/g hJYgtLHX14Tw9dpNbK0AahUmI9StaWHW3PsEt2NXw//n2QpwmgdQn26dpqcwCeZi OPkZIZHf+B5LuVyuKSEP5Moe9DSSNvtoFfqkVETQtyxXhMeKOj59q/fBliQ= -----END CERTIFICATE-----Generated at Mon Apr 7 17:50:42 2025 by rpki-client