$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/RxLNDBhbmRFtSAhqDIq62vUvecY.roa File: RxLNDBhbmRFtSAhqDIq62vUvecY.roa (raw, json) Hash identifier: y1UGQ4p73UkndrTtaA5Sek64GoD2Qj8ypy20ePPodnw= Subject key identifier: 47:12:CD:0C:18:5B:99:11:6D:48:08:6A:0C:8A:BA:DA:F5:2F:79:C6 Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 135B Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/RxLNDBhbmRFtSAhqDIq62vUvecY.roa Signing time: Mon 10 Feb 2025 14:03:39 +0000 ROA not before: Mon 10 Feb 2025 14:03:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 14618 IP address blocks: 103.235.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4955 (0x135b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Feb 10 14:03:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4712CD0C185B99116D48086A0C8ABADAF52F79C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9b:cf:8d:bb:11:9f:c7:05:77:2b:57:45:44: f4:28:35:8d:75:78:24:81:1f:a2:db:cc:4f:dc:bd: 3a:40:e9:04:a8:ee:4a:d9:b7:56:9c:1e:4b:19:7b: a1:7c:10:7e:bf:d1:65:1d:38:70:1e:e5:ea:34:d6: 78:1a:9d:7a:87:d9:77:b8:4b:27:c2:1f:42:74:fa: c5:ef:60:19:2d:07:ff:22:88:0b:4c:f6:f0:73:0c: 11:38:14:af:1c:f0:95:f5:01:30:68:fc:ff:5c:ee: c6:48:d1:3c:9a:3a:69:96:1b:5d:60:f8:38:64:c8: df:1f:32:81:10:8f:82:e7:98:08:fd:ef:7f:f4:24: 34:17:ef:55:4f:62:18:54:b6:22:9d:8c:df:65:98: 72:f4:9d:2a:e1:d6:5e:b3:0a:a3:56:cc:d7:b9:8e: b6:6e:85:4c:b9:a5:e6:39:54:18:3f:2e:07:27:77: c9:ad:31:68:ec:49:b7:80:f2:05:24:5f:d4:0d:6a: 29:30:77:88:9c:cc:86:c0:46:1c:d6:3b:c6:91:67: f6:fe:a4:d9:60:43:8f:a3:6b:c8:63:8a:fb:11:04: ed:3d:3b:c7:e7:c6:e9:01:35:58:9f:f9:86:e9:c7: 9f:d0:4d:23:9a:af:a0:ff:78:c2:59:a6:fc:4a:f7: c0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:12:CD:0C:18:5B:99:11:6D:48:08:6A:0C:8A:BA:DA:F5:2F:79:C6 X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/RxLNDBhbmRFtSAhqDIq62vUvecY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.235.88.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:fd:aa:46:bf:e1:e9:70:43:c6:d0:f3:79:52:fa:8c:49:7a: 47:50:b4:a3:2c:da:08:db:06:49:54:bd:8e:1f:66:e4:dd:ff: 06:14:24:fd:46:2f:36:ae:04:bc:6a:cf:f3:6a:a3:7e:25:7b: d9:62:9c:01:0e:d8:84:a8:ba:5e:84:65:65:a2:2c:db:f2:af: 54:2d:f2:0d:8b:de:b7:d0:6c:ff:c7:46:a7:3a:6f:0f:7f:d8: a0:41:30:15:ff:64:9d:e7:5a:9b:94:73:a2:f8:d0:02:31:9e: 53:96:e9:24:30:27:e9:9c:34:16:9f:21:35:cd:f8:19:95:03: 52:5d:9b:16:27:d1:50:fa:bb:aa:90:56:a2:d2:ef:a1:be:5c: 77:55:01:61:cb:f8:53:25:53:b8:e8:52:d9:cd:a6:84:94:50: 49:20:f1:fa:b1:1f:36:20:c7:8d:39:c9:d6:96:95:e2:78:58: ba:43:1d:b3:2c:d7:26:d7:bd:ce:2a:c8:18:b4:ce:fe:f4:31: 9f:dc:2d:06:c3:a1:25:95:b9:86:b6:74:d3:33:90:74:07:eb: d0:13:d8:d3:f3:f1:56:60:1b:4a:a8:06:e0:6a:79:b6:ad:92: 28:dd:88:07:0e:63:27:e6:f4:a9:f4:16:06:4e:fe:8c:ef:d9: 8a:40:2d:77 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICE1swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNTAyMTAx NDAzMzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ3MTJDRDBDMTg1Qjk5 MTE2RDQ4MDg2QTBDOEFCQURBRjUyRjc5QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLm8+NuxGfxwV3K1dFRPQoNY11eCSBH6LbzE/cvTpA6QSo7krZ t1acHksZe6F8EH6/0WUdOHAe5eo01nganXqH2Xe4SyfCH0J0+sXvYBktB/8iiAtM 9vBzDBE4FK8c8JX1ATBo/P9c7sZI0TyaOmmWG11g+DhkyN8fMoEQj4LnmAj973/0 JDQX71VPYhhUtiKdjN9lmHL0nSrh1l6zCqNWzNe5jrZuhUy5peY5VBg/Lgcnd8mt MWjsSbeA8gUkX9QNaikwd4iczIbARhzWO8aRZ/b+pNlgQ4+ja8hjivsRBO09O8fn xukBNVif+Ybpx5/QTSOar6D/eMJZpvxK98AXAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQURxLNDBhbmRFtSAhqDIq62vUvecYwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9SeExOREJoYm1SRnRTQWhxRElx NjJ2VXZlY1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+tY MA0GCSqGSIb3DQEBCwUAA4IBAQB6/apGv+HpcEPG0PN5UvqMSXpHULSjLNoI2wZJ VL2OH2bk3f8GFCT9Ri82rgS8as/zaqN+JXvZYpwBDtiEqLpehGVloizb8q9ULfIN i9630Gz/x0anOm8Pf9igQTAV/2Sd51qblHOi+NACMZ5TlukkMCfpnDQWnyE1zfgZ lQNSXZsWJ9FQ+ruqkFai0u+hvlx3VQFhy/hTJVO46FLZzaaElFBJIPH6sR82IMeN OcnWlpXieFi6Qx2zLNcm173OKsgYtM7+9DGf3C0Gw6EllbmGtnTTM5B0B+vQE9jT 8/FWYBtKqAbganm2rZIo3YgHDmMn5vSp9BYGTv6M79mKQC13 -----END CERTIFICATE-----Generated at Fri Apr 4 23:58:33 2025 by rpki-client