$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUCD/DM3B-X6bQd8mx9qgeqHZvrbRl2s.roa File: DM3B-X6bQd8mx9qgeqHZvrbRl2s.roa (raw, json) Hash identifier: trMRTy1hxfvBO4Rmg0EJm/DSd7/y/1HUHYifu3e6Kyo= Subject key identifier: 0C:CD:C1:F9:7E:9B:41:DF:26:C7:DA:A0:7A:A1:D9:BE:B6:D1:97:6B Certificate issuer: /CN=35D63F285426D9D57209D42C46B9125B23A78EC1 Certificate serial: 01E7 Authority key identifier: 35:D6:3F:28:54:26:D9:D5:72:09:D4:2C:46:B9:12:5B:23:A7:8E:C1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NdY_KFQm2dVyCdQsRrkSWyOnjsE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUCD/DM3B-X6bQd8mx9qgeqHZvrbRl2s.roa Signing time: Mon 10 Feb 2025 14:19:40 +0000 ROA not before: Mon 10 Feb 2025 14:19:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 152179 IP address blocks: 103.115.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUCD/NdY_KFQm2dVyCdQsRrkSWyOnjsE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUCD/NdY_KFQm2dVyCdQsRrkSWyOnjsE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NdY_KFQm2dVyCdQsRrkSWyOnjsE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 17:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35D63F285426D9D57209D42C46B9125B23A78EC1 Validity Not Before: Feb 10 14:19:40 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0CCDC1F97E9B41DF26C7DAA07AA1D9BEB6D1976B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:ef:1f:7a:6d:18:47:90:bb:5a:07:f2:11: cd:d8:95:2c:5d:e4:3e:04:83:64:2c:78:16:38:76: 2b:b6:ab:e2:05:1f:86:89:eb:ef:1f:50:f2:7a:73: 66:9a:b8:64:6e:2b:1c:fd:a1:1e:ea:bd:2f:7a:65: eb:52:0a:1a:55:3f:ee:7e:87:3f:21:fe:de:0b:12: e2:87:7e:ad:e5:8e:93:fb:0c:93:f2:88:82:ef:2f: d9:40:97:fd:e3:64:01:33:f3:d2:16:5d:93:01:30: cc:5a:e1:63:27:ce:bd:ec:2d:c2:e6:7e:04:fd:97: c5:61:ff:ea:3f:d0:ff:9e:5b:9b:d8:e1:a9:a6:cc: 62:f1:23:d1:db:b6:80:cf:b7:12:6e:7d:4b:e4:ae: d6:6e:78:3e:a5:ef:41:8a:10:87:1a:21:b2:32:43: 3d:7f:ba:31:a0:2d:13:19:2e:3d:b6:83:35:37:b2: 00:aa:77:47:76:43:94:dd:bb:2e:53:67:db:e3:68: c7:cd:e2:f9:00:bb:6b:ee:23:b4:d6:bb:54:8b:5d: eb:4a:61:b0:51:f3:80:a5:29:76:8d:c8:ce:08:ab: 4e:b7:86:e6:23:1f:2f:00:8f:a9:b6:23:de:ab:b8: d6:a4:af:a0:b2:b2:89:77:2a:c4:d5:a6:5c:ba:6d: e7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CD:C1:F9:7E:9B:41:DF:26:C7:DA:A0:7A:A1:D9:BE:B6:D1:97:6B X509v3 Authority Key Identifier: keyid:35:D6:3F:28:54:26:D9:D5:72:09:D4:2C:46:B9:12:5B:23:A7:8E:C1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUCD/NdY_KFQm2dVyCdQsRrkSWyOnjsE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NdY_KFQm2dVyCdQsRrkSWyOnjsE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUCD/DM3B-X6bQd8mx9qgeqHZvrbRl2s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.115.108.0/23 Signature Algorithm: sha256WithRSAEncryption 94:e5:fa:01:aa:3c:56:24:fd:64:d3:3e:93:c0:04:20:31:1a: 9e:0e:fa:2e:9c:63:de:c3:64:2c:0c:8f:9f:84:5c:fa:69:b0: 32:32:42:cf:1f:82:a5:dc:dd:1b:41:36:21:db:2f:59:6d:7a: 2c:e8:55:2d:5a:d6:e8:2a:a4:b9:80:8a:1c:b2:5c:7d:7d:08: 5c:03:1a:9a:6e:f1:f0:80:f0:e6:7c:ab:56:2b:75:59:b1:58: 18:e3:c5:ec:9c:be:79:9a:04:80:23:b2:02:8f:05:0a:33:9a: 5a:3e:08:28:3e:db:14:93:d3:e3:86:a5:c9:48:81:e4:3c:73: 97:c5:b2:71:d1:a0:dd:af:ac:7b:e6:b8:fe:65:eb:93:21:c3: 87:a9:ee:fa:ba:de:c5:a6:60:42:0d:71:83:43:9f:3c:2d:f7: 11:73:eb:ef:c7:48:6d:8c:24:34:7a:0b:08:f3:45:f0:0a:2e: 20:7b:ea:64:6c:01:f8:ef:e8:a6:95:3a:72:c3:da:2c:26:bf: 43:fc:64:ea:23:5e:61:76:81:83:c3:b7:82:a0:33:10:08:2b: 85:0f:bb:78:14:fd:5a:02:eb:d1:78:0b:3d:8b:df:65:45:7d: 8c:f8:d5:41:2c:4b:1e:f3:8b:dd:60:07:50:56:ff:8c:66:26: 88:5b:4c:7f -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICAecwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzVE NjNGMjg1NDI2RDlENTcyMDlENDJDNDZCOTEyNUIyM0E3OEVDMTAeFw0yNTAyMTAx NDE5NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBDQ0RDMUY5N0U5QjQx REYyNkM3REFBMDdBQTFEOUJFQjZEMTk3NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2Qe8fem0YR5C7WgfyEc3YlSxd5D4Eg2QseBY4diu2q+IFH4aJ 6+8fUPJ6c2aauGRuKxz9oR7qvS96ZetSChpVP+5+hz8h/t4LEuKHfq3ljpP7DJPy iILvL9lAl/3jZAEz89IWXZMBMMxa4WMnzr3sLcLmfgT9l8Vh/+o/0P+eW5vY4amm zGLxI9HbtoDPtxJufUvkrtZueD6l70GKEIcaIbIyQz1/ujGgLRMZLj22gzU3sgCq d0d2Q5Tduy5TZ9vjaMfN4vkAu2vuI7TWu1SLXetKYbBR84ClKXaNyM4Iq063huYj Hy8Aj6m2I96ruNakr6Cysol3KsTVply6befRAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUDM3B+X6bQd8mx9qgeqHZvrbRl2swHwYDVR0jBBgwFoAUNdY/KFQm2dVyCdQs RrkSWyOnjsEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVDRC9O ZFlfS0ZRbTJkVnlDZFFzUnJrU1d5T25qc0UuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05kWV9LRlFtMmRWeUNkUXNScmtTV3lPbmpzRS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RVQ0QvRE0zQi1YNmJRZDhteDlxZ2VxSFp2 cmJSbDJzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdzbDAN BgkqhkiG9w0BAQsFAAOCAQEAlOX6Aao8ViT9ZNM+k8AEIDEang76Lpxj3sNkLAyP n4Rc+mmwMjJCzx+CpdzdG0E2IdsvWW16LOhVLVrW6CqkuYCKHLJcfX0IXAMamm7x 8IDw5nyrVit1WbFYGOPF7Jy+eZoEgCOyAo8FCjOaWj4IKD7bFJPT44alyUiB5Dxz l8WycdGg3a+se+a4/mXrkyHDh6nu+rrexaZgQg1xg0OfPC33EXPr78dIbYwkNHoL CPNF8AouIHvqZGwB+O/oppU6csPaLCa/Q/xk6iNeYXaBg8O3gqAzEAgrhQ+7eBT9 WgLr0XgLPYvfZUV9jPjVQSxLHvOL3WAHUFb/jGYmiFtMfw== -----END CERTIFICATE-----Generated at Sat Apr 5 15:05:08 2025 by rpki-client