$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/DKAmm7WvROO-uq9Txso8xOhskiI.roa File: DKAmm7WvROO-uq9Txso8xOhskiI.roa (raw, json) Hash identifier: kHjrWIt3U+AspPuXQqE+ZeDId+XcnLjJ1iYQYYBAczE= Subject key identifier: 0C:A0:26:9B:B5:AF:44:E3:BE:BA:AF:53:C6:CA:3C:C4:E8:6C:92:22 Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 13FB Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/DKAmm7WvROO-uq9Txso8xOhskiI.roa Signing time: Wed 02 Apr 2025 14:38:15 +0000 ROA not before: Wed 02 Apr 2025 14:38:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18248 IP address blocks: 2407:3d00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 11:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5115 (0x13fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Apr 2 14:38:15 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0CA0269BB5AF44E3BEBAAF53C6CA3CC4E86C9222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4f:99:78:66:02:e3:33:fb:12:64:f4:d2:4c: fd:d2:e0:83:ed:65:b3:e3:08:94:99:1a:06:98:17: e1:4d:e9:f0:cc:e8:d9:6d:a2:69:df:0c:ba:1c:69: 92:b7:2b:6b:95:03:1c:be:4b:8a:39:e0:9d:a2:69: dd:af:8e:64:19:28:62:5c:39:6f:d7:f2:79:83:d5: 1f:c1:94:83:b8:e1:08:ec:8e:29:88:ea:f8:20:e7: 20:a5:06:c2:bb:9b:49:ff:18:07:e3:64:c1:e5:b2: d2:be:7d:27:9e:d4:81:49:fb:8a:e6:4a:df:42:6c: 5e:cc:fb:d2:aa:43:97:8f:c9:9f:ee:50:ca:f9:5b: 4c:e6:52:98:5c:58:41:a4:13:c9:e0:f4:92:35:b8: e4:45:42:e4:0e:61:ab:db:c3:e2:4d:8f:4d:9e:85: 62:19:98:2c:b6:9c:b1:57:43:f8:da:fd:a3:9a:27: 16:f6:54:bf:5b:0d:6e:d3:2f:42:96:4c:89:a8:c4: 6a:8e:98:f1:d4:a7:df:50:81:7e:d1:5e:3d:33:1a: f7:e9:08:8a:cb:4c:61:48:1a:61:ba:1b:8e:53:59: 05:24:da:22:b1:bc:ed:15:0b:fe:0f:96:33:f1:bc: ad:ef:11:9a:fb:6b:4e:66:18:fc:d9:5f:55:3c:fd: b6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A0:26:9B:B5:AF:44:E3:BE:BA:AF:53:C6:CA:3C:C4:E8:6C:92:22 X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/DKAmm7WvROO-uq9Txso8xOhskiI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:3d00::/32 Signature Algorithm: sha256WithRSAEncryption 17:9d:b6:4c:26:c5:7c:93:13:74:16:ff:6c:39:82:fd:7c:a6: cd:10:be:9b:90:12:81:42:60:51:11:51:bc:99:20:0a:8a:16: 8a:77:a7:ba:7a:0b:a4:a5:98:23:af:6f:cc:bd:79:11:bf:6a: b7:bf:b9:8c:1e:5f:a1:f9:b8:f1:5a:af:94:e0:e9:db:de:64: 98:17:a7:23:60:89:d3:d8:32:81:3c:c7:b0:41:1c:b3:f1:bc: c2:8f:2d:38:20:fd:43:26:7c:57:4a:ee:54:63:d3:57:2b:c9: fa:7e:26:0a:e9:90:48:60:fe:6f:9a:65:c7:71:f2:b6:ea:13: e2:c6:f4:52:ae:76:67:5a:56:0c:0b:20:37:47:1a:99:65:3b: 99:5f:8b:34:88:67:bf:32:ca:82:0a:7b:91:b3:47:ec:11:2d: cc:02:a9:10:7b:eb:f6:6d:58:0d:ac:02:7f:97:dd:83:04:bd: 1f:f2:3d:72:93:ba:7e:c6:f9:72:4c:fb:a5:12:e8:b4:3e:9d: 66:80:9e:7e:a6:8a:62:9c:bf:5d:cc:f4:1a:b5:58:ec:e5:51: ff:66:94:46:8b:5c:f7:33:32:5e:a4:5a:64:28:85:79:9c:69: eb:0e:2d:4e:fd:3e:cb:f9:91:c8:66:ca:2a:5d:e2:0e:25:52: a5:32:8c:88 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICE/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNTA0MDIx NDM4MTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBDQTAyNjlCQjVBRjQ0 RTNCRUJBQUY1M0M2Q0EzQ0M0RTg2QzkyMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhT5l4ZgLjM/sSZPTSTP3S4IPtZbPjCJSZGgaYF+FN6fDM6Nlt omnfDLocaZK3K2uVAxy+S4o54J2iad2vjmQZKGJcOW/X8nmD1R/BlIO44QjsjimI 6vgg5yClBsK7m0n/GAfjZMHlstK+fSee1IFJ+4rmSt9CbF7M+9KqQ5ePyZ/uUMr5 W0zmUphcWEGkE8ng9JI1uORFQuQOYavbw+JNj02ehWIZmCy2nLFXQ/ja/aOaJxb2 VL9bDW7TL0KWTImoxGqOmPHUp99QgX7RXj0zGvfpCIrLTGFIGmG6G45TWQUk2iKx vO0VC/4PljPxvK3vEZr7a05mGPzZX1U8/bbHAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUDKAmm7WvROO+uq9Txso8xOhskiIwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9ES0FtbTdXdlJPTy11cTlUeHNv OHhPaHNraUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAc9 ADANBgkqhkiG9w0BAQsFAAOCAQEAF522TCbFfJMTdBb/bDmC/XymzRC+m5ASgUJg URFRvJkgCooWinenunoLpKWYI69vzL15Eb9qt7+5jB5fofm48VqvlODp295kmBen I2CJ09gygTzHsEEcs/G8wo8tOCD9QyZ8V0ruVGPTVyvJ+n4mCumQSGD+b5plx3Hy tuoT4sb0Uq52Z1pWDAsgN0camWU7mV+LNIhnvzLKggp7kbNH7BEtzAKpEHvr9m1Y DawCf5fdgwS9H/I9cpO6fsb5ckz7pRLotD6dZoCefqaKYpy/Xcz0GrVY7OVR/2aU Rotc9zMyXqRaZCiFeZxp6w4tTv0+y/mRyGbKKl3iDiVSpTKMiA== -----END CERTIFICATE-----Generated at Mon Apr 14 10:21:36 2025 by rpki-client