$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/rPThUX_xW3dVN8Sefv9vxG5k9uM.roa File: rPThUX_xW3dVN8Sefv9vxG5k9uM.roa (raw, json) Hash identifier: i66VTpeUsn60krnTtSgnmtky2YgvJ47l7yrCPbV9IsM= Subject key identifier: AC:F4:E1:51:7F:F1:5B:77:55:37:C4:9E:7E:FF:6F:C4:6E:64:F6:E3 Certificate issuer: /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A Certificate serial: 018C Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/rPThUX_xW3dVN8Sefv9vxG5k9uM.roa Signing time: Mon 10 Feb 2025 13:44:14 +0000 ROA not before: Mon 10 Feb 2025 13:44:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 2914 IP address blocks: 202.160.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A Validity Not Before: Feb 10 13:44:14 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=ACF4E1517FF15B775537C49E7EFF6FC46E64F6E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f5:cc:9c:01:fa:23:28:0a:0d:cf:05:3e:38: 9c:bc:c5:b1:1b:cb:6b:a4:ab:53:22:f5:45:5c:9a: 0c:6b:67:36:54:0c:84:18:8f:e0:74:01:05:2d:55: 7c:31:ec:e8:1e:b9:29:cf:bb:ea:eb:1c:d2:59:2f: 6a:3a:b6:9e:55:5a:6a:1c:58:a2:42:7a:43:1e:ec: d1:ea:c5:b4:ec:70:08:fc:b8:72:79:9c:30:b0:21: 98:3a:5e:9b:23:ac:8e:96:8b:cb:45:a9:33:81:13: 7d:83:a1:03:92:93:33:c3:b8:7c:08:0b:05:c3:ef: 08:61:c7:72:a3:84:ee:de:e4:9c:f9:d4:d7:6b:b0: 00:85:8a:57:24:13:05:05:35:39:45:bf:3b:28:83: 93:fa:9c:83:04:32:59:4f:0e:e0:36:76:2b:50:30: 55:12:47:dd:76:45:c2:6c:89:ee:c9:ad:d0:b4:5c: 6c:e2:c2:c3:dc:24:54:62:e4:17:b0:42:53:e8:8b: a6:65:fe:16:0b:0d:1c:89:2b:69:02:60:b2:17:32: a4:b2:67:c2:8f:fa:20:f5:30:21:8b:b3:d4:1b:9e: f7:97:6f:79:59:06:33:83:39:62:0b:28:b7:53:16: 7a:c2:c7:68:c6:e6:5d:00:e8:e6:26:2e:8c:5f:05: bf:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F4:E1:51:7F:F1:5B:77:55:37:C4:9E:7E:FF:6F:C4:6E:64:F6:E3 X509v3 Authority Key Identifier: keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/rPThUX_xW3dVN8Sefv9vxG5k9uM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.160.88.0/21 Signature Algorithm: sha256WithRSAEncryption 72:b7:e2:29:3c:d2:c9:6a:a8:47:24:89:5c:57:8e:77:3c:01: 7e:aa:1b:4a:57:50:a0:52:e6:06:88:68:4e:54:5c:a1:d7:bd: ec:78:7b:b5:af:bb:b1:38:ef:17:1a:65:69:5c:ff:03:7e:cf: 69:0b:17:d7:d6:6d:35:23:00:45:23:32:06:d3:df:b1:44:5c: 88:04:52:21:50:f3:f9:58:16:5d:17:3f:20:a0:58:2a:d0:eb: 12:87:f1:22:39:40:b9:32:3c:f9:d8:2b:d7:6a:20:3b:a7:d5: e8:16:fb:40:7b:9d:d1:d2:48:08:6a:a8:e4:25:c3:ba:bb:47: 5a:74:31:52:e5:66:5c:57:dd:5a:b6:06:39:85:15:20:5b:a0: 22:e9:fa:61:40:1d:15:3c:52:5c:53:a3:39:61:29:1c:eb:4d: 5e:b2:22:a5:73:15:b0:c2:1e:bb:f5:d4:4c:95:1f:d3:d7:ac: fc:a0:fe:e3:ac:13:24:a5:a2:4b:99:10:74:a4:22:07:c4:68: e1:dd:91:dc:3b:98:86:53:8c:1c:4f:b2:06:fc:c5:5c:00:6b: 6f:55:d8:30:01:3e:e1:7c:4f:57:44:43:72:80:57:3f:b3:4c: 7f:96:05:e0:63:c0:7c:56:6b:2d:3f:92:85:f7:6f:f7:5c:09: 95:7a:52:02 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUNE MkZEQzM4NTIyQTc0QTQyMkRFN0JEMUMwMjZENTVFMDhEOUU5QTAeFw0yNTAyMTAx MzQ0MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFDRjRFMTUxN0ZGMTVC Nzc1NTM3QzQ5RTdFRkY2RkM0NkU2NEY2RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDX9cycAfojKAoNzwU+OJy8xbEby2ukq1Mi9UVcmgxrZzZUDIQY j+B0AQUtVXwx7OgeuSnPu+rrHNJZL2o6tp5VWmocWKJCekMe7NHqxbTscAj8uHJ5 nDCwIZg6XpsjrI6Wi8tFqTOBE32DoQOSkzPDuHwICwXD7whhx3KjhO7e5Jz51Ndr sACFilckEwUFNTlFvzsog5P6nIMEMllPDuA2ditQMFUSR912RcJsie7JrdC0XGzi wsPcJFRi5BewQlPoi6Zl/hYLDRyJK2kCYLIXMqSyZ8KP+iD1MCGLs9QbnveXb3lZ BjODOWILKLdTFnrCx2jG5l0A6OYmLoxfBb8xAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUrPThUX/xW3dVN8Sefv9vxG5k9uMwHwYDVR0jBBgwFoAU7NL9w4Uip0pCLee9 HAJtVeCNnpowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxL RVJBLzdOTDl3NFVpcDBwQ0xlZTlIQUp0VmVDTm5wby5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvN05MOXc0VWlwMHBDTGVlOUhBSnRWZUNObnBvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxLRVJBL3JQVGhVWF94VzNk Vk44U2Vmdjl2eEc1azl1TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPKoFgwDQYJKoZIhvcNAQELBQADggEBAHK34ik80slqqEckiVxXjnc8AX6q G0pXUKBS5gaIaE5UXKHXvex4e7Wvu7E47xcaZWlc/wN+z2kLF9fWbTUjAEUjMgbT 37FEXIgEUiFQ8/lYFl0XPyCgWCrQ6xKH8SI5QLkyPPnYK9dqIDun1egW+0B7ndHS SAhqqOQlw7q7R1p0MVLlZlxX3Vq2BjmFFSBboCLp+mFAHRU8UlxTozlhKRzrTV6y IqVzFbDCHrv11EyVH9PXrPyg/uOsEySlokuZEHSkIgfEaOHdkdw7mIZTjBxPsgb8 xVwAa29V2DABPuF8T1dEQ3KAVz+zTH+WBeBjwHxWay0/koX3b/dcCZV6UgI= -----END CERTIFICATE-----Generated at Mon Apr 7 17:37:24 2025 by rpki-client