$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/XNUl43XsORAoCFC-AWmnYjamku0.roa File: XNUl43XsORAoCFC-AWmnYjamku0.roa (raw, json) Hash identifier: lGc2SMZmPlAN6mhiIFd9x2qjZhhXHUAGBDwhyeHfr/I= Subject key identifier: 5C:D5:25:E3:75:EC:39:10:28:08:50:BE:01:69:A7:62:36:A6:92:ED Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Certificate serial: 0CF4 Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/XNUl43XsORAoCFC-AWmnYjamku0.roa Signing time: Mon 10 Feb 2025 13:50:58 +0000 ROA not before: Mon 10 Feb 2025 13:50:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131618 IP address blocks: 61.58.41.128/29 maxlen: 29 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 16:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3316 (0xcf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Validity Not Before: Feb 10 13:50:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5CD525E375EC3910280850BE0169A76236A692ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9a:73:a1:2d:db:90:48:97:f4:c0:83:b7:36: 75:d4:aa:72:0c:5f:1e:8c:f0:2f:cb:b8:7d:2b:3b: 15:42:48:47:b7:d6:26:e4:41:bd:cc:92:8c:65:fc: 4b:80:2f:b9:6d:84:fe:1f:35:59:52:d6:d2:aa:6b: b2:43:48:34:b8:2d:34:09:8f:90:3b:c9:c3:5e:88: e3:40:b6:be:9d:6a:bf:91:18:9e:49:63:38:00:a0: 20:80:4d:16:b4:c4:95:22:df:c8:a4:b0:8b:f5:91: 93:f3:a5:41:32:e7:29:80:f3:b5:6e:71:29:d6:9b: ab:c4:5f:b3:c4:16:30:10:9f:e3:ba:57:86:e8:0f: 35:79:e6:ea:0c:3f:d3:37:0f:25:a7:75:18:8c:67: 13:4c:71:fc:84:de:cc:05:9c:c1:7d:58:b7:6d:49: 3b:34:69:ec:e6:72:41:e9:41:31:db:be:72:58:86: 2d:58:da:60:d2:f9:29:26:db:fc:b5:7d:09:f9:3d: de:6a:f3:a2:e2:21:7d:d9:71:d0:66:6d:d2:d3:51: e8:a6:de:e2:bd:35:3f:63:21:4f:be:f9:ac:97:35: 34:5c:b6:19:96:7f:ac:00:f3:a7:db:18:08:c8:0e: 0a:34:b9:bf:8e:17:24:64:9d:4b:11:cf:56:16:85: 2c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D5:25:E3:75:EC:39:10:28:08:50:BE:01:69:A7:62:36:A6:92:ED X509v3 Authority Key Identifier: keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/XNUl43XsORAoCFC-AWmnYjamku0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.41.128/29 Signature Algorithm: sha256WithRSAEncryption 85:aa:cd:09:90:cf:86:0b:61:0d:be:dd:5b:f7:d2:25:f0:e8: 9b:5a:96:d4:56:22:bc:3d:80:cd:9d:b4:20:c4:8d:28:f0:02: db:0f:c6:b0:93:bf:b5:67:55:57:8f:da:a9:2a:87:30:e8:de: 8d:8e:59:19:d0:46:df:fd:58:d8:3c:b1:57:ec:3e:05:12:7f: 42:56:9a:94:08:c6:82:40:1e:c3:e9:43:73:9e:05:13:33:c8: 6c:c1:e9:72:12:00:69:40:d5:67:be:47:d3:57:57:a9:e5:2c: 2f:f9:ad:cf:18:e2:b5:07:89:93:2a:d6:62:12:87:6e:55:b5: aa:ba:82:1a:b0:ec:43:10:d3:61:4c:28:05:f8:da:f1:51:04: 61:0d:a5:5a:d0:cf:ab:f5:8a:5c:51:24:4b:99:ea:3e:bc:25: 5f:53:ec:3f:40:c8:e2:0e:d5:92:36:f8:be:c7:ec:b6:ff:95: 58:37:df:76:80:ad:87:df:51:03:4e:f0:b0:66:8e:83:bd:9e: 85:c9:83:47:e2:1b:7b:e8:ad:d7:b7:c7:46:e4:0b:6b:0e:77: 0a:2b:b4:ae:ca:48:b9:9c:7a:96:2d:9d:6e:f4:a3:6b:97:59: ee:62:36:0a:7c:8e:a9:49:60:9a:b2:1f:31:16:dc:f2:ad:79: e4:c4:ac:98 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDPQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yNTAyMTAx MzUwNThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVDRDUyNUUzNzVFQzM5 MTAyODA4NTBCRTAxNjlBNzYyMzZBNjkyRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNmnOhLduQSJf0wIO3NnXUqnIMXx6M8C/LuH0rOxVCSEe31ibk Qb3Mkoxl/EuAL7lthP4fNVlS1tKqa7JDSDS4LTQJj5A7ycNeiONAtr6dar+RGJ5J YzgAoCCATRa0xJUi38iksIv1kZPzpUEy5ymA87VucSnWm6vEX7PEFjAQn+O6V4bo DzV55uoMP9M3DyWndRiMZxNMcfyE3swFnMF9WLdtSTs0aezmckHpQTHbvnJYhi1Y 2mDS+Skm2/y1fQn5Pd5q86LiIX3ZcdBmbdLTUeim3uK9NT9jIU+++ayXNTRcthmW f6wA86fbGAjIDgo0ub+OFyRknUsRz1YWhSxHAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUXNUl43XsORAoCFC+AWmnYjamku0wHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC9YTlVsNDNYc09SQW9DRkMtQVdt bllqYW1rdTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDPTop gDANBgkqhkiG9w0BAQsFAAOCAQEAharNCZDPhgthDb7dW/fSJfDom1qW1FYivD2A zZ20IMSNKPAC2w/GsJO/tWdVV4/aqSqHMOjejY5ZGdBG3/1Y2DyxV+w+BRJ/Qlaa lAjGgkAew+lDc54FEzPIbMHpchIAaUDVZ75H01dXqeUsL/mtzxjitQeJkyrWYhKH blW1qrqCGrDsQxDTYUwoBfja8VEEYQ2lWtDPq/WKXFEkS5nqPrwlX1PsP0DI4g7V kjb4vsfstv+VWDffdoCth99RA07wsGaOg72ehcmDR+Ibe+it17fHRuQLaw53Ciu0 rspIuZx6li2dbvSja5dZ7mI2CnyOqUlgmrIfMRbc8q155MSsmA== -----END CERTIFICATE-----Generated at Sun Apr 6 15:27:40 2025 by rpki-client