$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/9hprR9JpNzKfz7fClJHRbQEEtkU.roa File: 9hprR9JpNzKfz7fClJHRbQEEtkU.roa (raw, json) Hash identifier: fU47rjPuUw+mWy0ZxTHSlwyV6VpkLo9pi3yBwf4K49E= Subject key identifier: F6:1A:6B:47:D2:69:37:32:9F:CF:B7:C2:94:91:D1:6D:01:04:B6:45 Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 135E Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/9hprR9JpNzKfz7fClJHRbQEEtkU.roa Signing time: Mon 10 Feb 2025 14:03:40 +0000 ROA not before: Mon 10 Feb 2025 14:03:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131621 IP address blocks: 182.173.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 08:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4958 (0x135e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Feb 10 14:03:40 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F61A6B47D26937329FCFB7C29491D16D0104B645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:97:1f:8b:43:35:41:43:b6:94:75:a4:09:88: 94:73:9e:32:a9:7f:8f:a8:f6:c9:7a:61:e3:37:e4: ea:c6:2a:4e:a8:d4:99:bd:84:61:27:0b:f1:12:78: f8:3c:79:f5:05:1f:25:70:c8:28:7c:42:5f:69:e6: de:76:09:93:ab:9d:a7:69:60:58:f6:ed:43:ad:c9: db:00:c3:f7:da:2e:16:e3:70:9c:53:71:e3:d0:bd: e9:83:76:56:1f:3e:c8:db:82:cb:27:ef:4c:d9:bc: d1:8e:02:85:da:3a:51:56:91:7e:56:1c:bd:0c:fc: bb:d9:2c:5c:fa:42:6e:3f:aa:95:06:7c:34:13:cd: 39:11:e3:37:f4:32:59:06:a8:e7:1f:c1:03:a3:71: 69:63:18:99:e0:6e:32:b4:88:d1:6a:c5:fd:a6:8b: 74:e1:28:2e:43:11:bd:3e:1b:30:ec:10:b6:0f:e9: a9:59:a0:4d:c3:96:c7:8f:c9:4a:f7:40:44:d9:9b: 91:3e:96:90:d2:45:a2:d9:f5:c2:01:90:14:f9:7f: ee:f6:3b:59:72:d2:6c:11:1e:07:a8:f5:5a:35:f5: 3c:bf:15:e2:23:4e:26:6a:3a:fc:34:ee:59:39:3b: 52:d4:31:48:0f:dc:06:37:f9:07:91:26:5f:8a:5a: 24:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1A:6B:47:D2:69:37:32:9F:CF:B7:C2:94:91:D1:6D:01:04:B6:45 X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/9hprR9JpNzKfz7fClJHRbQEEtkU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 182.173.1.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:a0:05:a6:6c:09:c7:9a:d7:a3:4e:d1:b8:91:71:44:bb:90: 88:d5:da:d9:1f:6c:04:9b:36:0d:dd:c3:00:dc:be:6d:78:68: 83:79:b8:e9:84:bc:9c:6b:84:c5:91:4d:77:d8:38:c8:1c:d0: 8b:5c:e4:5e:b6:07:24:78:1c:d7:8e:ff:fd:dc:fd:20:d9:2b: 8c:7e:d3:04:21:81:d6:65:e4:bc:ba:59:34:5b:2f:e2:cb:71: 94:76:98:9a:ec:78:a8:bf:3f:74:41:89:db:cc:35:d1:54:0d: bc:f6:9f:c1:10:ba:80:6c:a3:b4:05:2b:94:02:b5:24:af:ff: cd:89:3e:37:83:69:63:b8:0d:e0:94:e6:6c:b1:f8:78:b7:96: 2f:8a:48:0c:ed:99:49:cb:22:a5:cc:32:b8:90:00:7a:ec:56: 84:1d:b0:10:9c:86:99:e8:0e:62:77:1c:39:5d:d2:57:8e:42: 7b:99:58:6a:54:9f:58:4e:39:f7:d6:eb:c6:0e:d5:b1:e4:b6: 8e:ff:d3:a5:2f:97:b5:20:95:98:d4:2d:60:fd:49:99:21:e0: 19:9d:bc:c2:c5:49:38:08:19:b6:72:1e:83:d5:8f:47:52:69: 7a:32:39:2a:95:75:e1:3c:9a:3b:1d:1d:8a:50:88:b3:b5:05: fd:c8:62:29 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICE14wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNTAyMTAx NDAzNDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY2MUE2QjQ3RDI2OTM3 MzI5RkNGQjdDMjk0OTFEMTZEMDEwNEI2NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7lx+LQzVBQ7aUdaQJiJRznjKpf4+o9sl6YeM35OrGKk6o1Jm9 hGEnC/ESePg8efUFHyVwyCh8Ql9p5t52CZOrnadpYFj27UOtydsAw/faLhbjcJxT cePQvemDdlYfPsjbgssn70zZvNGOAoXaOlFWkX5WHL0M/LvZLFz6Qm4/qpUGfDQT zTkR4zf0MlkGqOcfwQOjcWljGJngbjK0iNFqxf2mi3ThKC5DEb0+GzDsELYP6alZ oE3DlsePyUr3QETZm5E+lpDSRaLZ9cIBkBT5f+72O1ly0mwRHgeo9Vo19Ty/FeIj TiZqOvw07lk5O1LUMUgP3AY3+QeRJl+KWiQHAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU9hprR9JpNzKfz7fClJHRbQEEtkUwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy85aHByUjlKcE56S2Z6N2ZDbEpI UmJRRUV0a1Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtq0B MA0GCSqGSIb3DQEBCwUAA4IBAQAeoAWmbAnHmtejTtG4kXFEu5CI1drZH2wEmzYN 3cMA3L5teGiDebjphLyca4TFkU132DjIHNCLXORetgckeBzXjv/93P0g2SuMftME IYHWZeS8ulk0Wy/iy3GUdpia7Hiovz90QYnbzDXRVA289p/BELqAbKO0BSuUArUk r//NiT43g2ljuA3glOZssfh4t5YvikgM7ZlJyyKlzDK4kAB67FaEHbAQnIaZ6A5i dxw5XdJXjkJ7mVhqVJ9YTjn31uvGDtWx5LaO/9OlL5e1IJWY1C1g/UmZIeAZnbzC xUk4CBm2ch6D1Y9HUml6MjkqlXXhPJo7HR2KUIiztQX9yGIp -----END CERTIFICATE-----Generated at Sat Apr 5 08:27:29 2025 by rpki-client