$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/gAZ1g9M85QPcGzCSeRhZOkPqdGI.roa File: gAZ1g9M85QPcGzCSeRhZOkPqdGI.roa (raw, json) Hash identifier: Y15YZakQCxu5EXbQHRSXAR4Dmbp2CSXLuzPJPrJfz5w= Subject key identifier: 80:06:75:83:D3:3C:E5:03:DC:1B:30:92:79:18:59:3A:43:EA:74:62 Certificate issuer: /CN=1D92BE0ACF9887B1A8192875CFE732238DE322A9 Certificate serial: 0C70 Authority key identifier: 1D:92:BE:0A:CF:98:87:B1:A8:19:28:75:CF:E7:32:23:8D:E3:22:A9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/gAZ1g9M85QPcGzCSeRhZOkPqdGI.roa Signing time: Mon 10 Feb 2025 14:02:11 +0000 ROA not before: Mon 10 Feb 2025 14:02:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18185 IP address blocks: 211.76.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3184 (0xc70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D92BE0ACF9887B1A8192875CFE732238DE322A9 Validity Not Before: Feb 10 14:02:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=80067583D33CE503DC1B30927918593A43EA7462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:ea:61:b9:30:20:c3:8c:f2:f4:85:1a:da: 83:98:4a:cb:de:26:6b:70:9b:00:0e:0c:74:44:ac: 4a:96:fa:3f:7d:63:75:b0:28:37:4f:9c:35:a3:9f: 3d:e0:cc:36:5d:45:e7:df:43:13:25:ce:95:65:51: 26:a3:b4:a8:db:c0:f3:f2:c7:f8:b4:b9:d8:6e:14: 55:a8:8e:69:e4:57:ef:52:33:da:30:f8:73:f4:75: f8:77:73:82:ea:86:09:52:97:96:50:e8:74:c9:e8: 5e:ff:03:4e:d2:de:cf:d4:9d:9b:a9:ff:ff:d4:2d: e6:f7:50:14:18:64:60:f0:b9:f0:0e:dc:9c:87:eb: 06:e9:fe:eb:91:f0:46:24:60:f9:6e:e9:1c:63:db: b5:60:43:e8:2f:d2:0c:3a:f6:22:e1:df:62:ba:af: 53:e3:e1:b5:e6:be:04:6c:dd:7a:c8:23:d3:b2:b0: 99:b2:42:b0:7a:1a:1a:5e:a6:f2:7f:47:d2:b1:1c: 4f:39:b8:b4:06:45:26:7a:11:54:8f:b0:99:d1:ce: 40:d0:02:67:79:72:6b:c5:f1:64:02:be:f9:5a:8f: 69:a6:90:1a:e9:da:a6:70:3d:bf:76:94:d8:31:f9: 91:6b:d3:01:82:f3:9e:e8:67:fc:53:a2:d0:53:7c: 32:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:06:75:83:D3:3C:E5:03:DC:1B:30:92:79:18:59:3A:43:EA:74:62 X509v3 Authority Key Identifier: keyid:1D:92:BE:0A:CF:98:87:B1:A8:19:28:75:CF:E7:32:23:8D:E3:22:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/gAZ1g9M85QPcGzCSeRhZOkPqdGI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.240.0/20 Signature Algorithm: sha256WithRSAEncryption a5:f7:fb:85:ac:e7:86:8c:75:de:c9:a7:fa:04:cb:5d:96:57: aa:06:a5:3c:7e:87:be:c1:a0:85:a1:a3:5d:c1:fe:e4:23:8e: 3e:4f:21:5c:97:8f:74:b0:8e:b1:c6:18:28:6d:95:5d:91:8c: ce:e2:90:de:8d:9b:91:47:01:dd:07:32:54:a7:1b:83:db:68: 31:06:fb:79:b9:8f:8d:1b:dc:03:70:6d:e5:cc:33:b7:dd:c9: 6e:2e:a3:96:8d:7b:8d:93:6a:7b:e4:1e:39:22:fc:ec:27:f9: 23:a5:43:e2:76:ee:68:17:08:9f:ce:93:da:15:44:fb:c9:65: fd:cd:6d:49:4e:86:b1:9d:c9:f5:9e:a6:02:d1:92:87:62:af: 04:1f:26:e2:f6:27:f3:0e:1b:a5:46:3e:57:e6:05:e4:0d:ef: 5b:27:58:8e:3b:e5:a3:fb:27:7a:a0:e1:54:9b:fa:97:87:f3: 70:36:5d:71:b6:28:0c:3d:c8:b9:3b:ae:1c:b8:e9:aa:be:7d: 4c:0f:e3:48:45:ac:97:51:28:73:f7:02:d8:3a:56:50:6f:33: a9:49:3e:d8:52:f8:4c:4d:56:27:a4:c6:25:e8:85:ea:b2:12: ad:5d:db:ce:47:6a:b8:e3:c7:b2:3f:e5:db:3a:1a:ab:08:c1: 79:c1:bc:a0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDHAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUQ5 MkJFMEFDRjk4ODdCMUE4MTkyODc1Q0ZFNzMyMjM4REUzMjJBOTAeFw0yNTAyMTAx NDAyMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgwMDY3NTgzRDMzQ0U1 MDNEQzFCMzA5Mjc5MTg1OTNBNDNFQTc0NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4luphuTAgw4zy9IUa2oOYSsveJmtwmwAODHRErEqW+j99Y3Ww KDdPnDWjnz3gzDZdReffQxMlzpVlUSajtKjbwPPyx/i0udhuFFWojmnkV+9SM9ow +HP0dfh3c4LqhglSl5ZQ6HTJ6F7/A07S3s/UnZup///ULeb3UBQYZGDwufAO3JyH 6wbp/uuR8EYkYPlu6Rxj27VgQ+gv0gw69iLh32K6r1Pj4bXmvgRs3XrII9OysJmy QrB6GhpepvJ/R9KxHE85uLQGRSZ6EVSPsJnRzkDQAmd5cmvF8WQCvvlaj2mmkBrp 2qZwPb92lNgx+ZFr0wGC857oZ/xTotBTfDK1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUgAZ1g9M85QPcGzCSeRhZOkPqdGIwHwYDVR0jBBgwFoAUHZK+Cs+Yh7GoGSh1 z+cyI43jIqkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOQ1RV L0haSy1Dcy1ZaDdHb0dTaDF6LWN5STQzaklxay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSFpLLUNzLVloN0dvR1NoMXotY3lJNDNqSXFrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOQ1RVL2dBWjFnOU04NVFQY0d6Q1Nl UmhaT2tQcWRHSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATT TPAwDQYJKoZIhvcNAQELBQADggEBAKX3+4Ws54aMdd7Jp/oEy12WV6oGpTx+h77B oIWho13B/uQjjj5PIVyXj3SwjrHGGChtlV2RjM7ikN6Nm5FHAd0HMlSnG4PbaDEG +3m5j40b3ANwbeXMM7fdyW4uo5aNe42TanvkHjki/Own+SOlQ+J27mgXCJ/Ok9oV RPvJZf3NbUlOhrGdyfWepgLRkodirwQfJuL2J/MOG6VGPlfmBeQN71snWI475aP7 J3qg4VSb+peH83A2XXG2KAw9yLk7rhy46aq+fUwP40hFrJdRKHP3Atg6VlBvM6lJ PthS+ExNViekxiXoheqyEq1d285Harjjx7I/5ds6GqsIwXnBvKA= -----END CERTIFICATE-----Generated at Fri Apr 18 15:49:04 2025 by rpki-client