$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/gnm9Usyz32xvCKSnZVhuktLJnVc.roa File: gnm9Usyz32xvCKSnZVhuktLJnVc.roa (raw, json) Hash identifier: 3+vk2s1/DnMG4LnJakMyacglYkM7fcMyyxI76H3sb9o= Subject key identifier: 82:79:BD:52:CC:B3:DF:6C:6F:08:A4:A7:65:58:6E:92:D2:C9:9D:57 Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Certificate serial: 0CF0 Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/gnm9Usyz32xvCKSnZVhuktLJnVc.roa Signing time: Mon 10 Feb 2025 13:50:57 +0000 ROA not before: Mon 10 Feb 2025 13:50:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 2914 IP address blocks: 122.255.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 08:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3312 (0xcf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Validity Not Before: Feb 10 13:50:57 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8279BD52CCB3DF6C6F08A4A765586E92D2C99D57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e1:0e:bc:b9:dd:2c:1d:13:19:11:34:ef:49: a1:9f:a4:76:44:f1:00:38:b6:f2:10:76:fb:9d:c7: 0f:73:d2:91:16:b5:4a:12:ca:af:ef:7c:6c:a2:90: df:8c:f2:b8:4c:45:32:8a:e5:b0:e4:82:76:13:c2: bc:76:6e:aa:a4:37:ac:d0:ba:ae:ab:ed:e4:b5:70: be:ac:0d:85:3c:92:49:5f:61:4e:15:e5:a9:26:29: ad:80:56:55:09:64:cd:08:53:d1:e6:f1:4b:02:37: 6c:53:92:ab:9d:b7:a9:fe:5e:19:5f:44:49:56:e5: 76:ca:a0:8d:20:3a:9f:54:55:33:f7:f5:46:cf:55: 8c:85:ed:af:09:19:07:2b:a9:ad:14:c6:89:66:bf: 1f:c3:5f:55:c4:c4:85:0a:32:c5:13:8e:57:2d:3e: f2:e4:70:0b:57:eb:a7:20:da:f5:7e:9e:50:97:58: f6:7d:a4:c5:12:75:4e:b6:b8:92:cf:dd:8e:b5:24: eb:31:5c:9f:f7:a4:3d:52:aa:59:66:b2:5c:a6:bd: 39:c3:57:32:8f:28:b0:eb:6c:4b:5c:d1:07:99:ae: c2:01:0d:1b:5f:e0:bd:2b:71:9f:a2:81:cb:5b:c7: c7:85:9d:e7:88:f2:fc:b2:d3:67:e0:e9:d0:87:d6: 01:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:79:BD:52:CC:B3:DF:6C:6F:08:A4:A7:65:58:6E:92:D2:C9:9D:57 X509v3 Authority Key Identifier: keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/gnm9Usyz32xvCKSnZVhuktLJnVc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.255.80.0/20 Signature Algorithm: sha256WithRSAEncryption 62:af:dc:06:73:bf:65:ac:ec:06:18:ab:f1:3f:40:ea:a6:50: 63:53:15:96:9c:06:24:2c:70:00:1d:f1:15:a4:06:38:a1:7d: 97:c2:5e:89:40:0a:ea:98:c2:35:67:74:15:9a:ee:d2:52:41: 3b:8e:b7:68:cb:7f:46:fa:5a:a8:a9:a8:d2:ba:cf:cc:8e:91: 3a:d1:a4:08:6f:46:ba:46:37:f2:6b:4a:37:5d:14:af:8a:bc: 12:a8:58:7d:93:6f:d0:95:d5:3d:49:d3:78:36:7e:e3:40:b6: d8:2f:34:6b:b1:db:f1:67:da:05:36:92:4a:ff:93:ad:f3:b3: e9:dd:27:0b:44:b9:fb:71:b8:44:dc:eb:a0:4f:41:c7:03:3d: 35:fb:00:12:22:c3:68:da:02:91:ba:8a:ef:f5:cc:65:f5:e0: 9f:0c:6c:a8:42:ce:f2:71:08:e1:59:0c:37:80:02:9a:da:1a: 3d:1d:c0:28:cc:39:48:f5:63:ef:34:55:c2:5d:33:d6:20:e2: 7e:52:9b:95:bd:f1:da:2c:2a:e5:7b:84:72:5a:28:65:54:af: 3b:41:a6:a5:79:0b:59:37:a4:69:a8:cb:7a:80:5e:42:f4:94: fd:94:40:3f:18:8a:cb:76:1c:1e:98:f8:d8:04:f0:59:97:e8: 12:38:d4:54 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDPAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yNTAyMTAx MzUwNTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgyNzlCRDUyQ0NCM0RG NkM2RjA4QTRBNzY1NTg2RTkyRDJDOTlENTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCh4Q68ud0sHRMZETTvSaGfpHZE8QA4tvIQdvudxw9z0pEWtUoS yq/vfGyikN+M8rhMRTKK5bDkgnYTwrx2bqqkN6zQuq6r7eS1cL6sDYU8kklfYU4V 5akmKa2AVlUJZM0IU9Hm8UsCN2xTkqudt6n+XhlfRElW5XbKoI0gOp9UVTP39UbP VYyF7a8JGQcrqa0Uxolmvx/DX1XExIUKMsUTjlctPvLkcAtX66cg2vV+nlCXWPZ9 pMUSdU62uJLP3Y61JOsxXJ/3pD1SqllmslymvTnDVzKPKLDrbEtc0QeZrsIBDRtf 4L0rcZ+igctbx8eFneeI8vyy02fg6dCH1gFtAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUgnm9Usyz32xvCKSnZVhuktLJnVcwHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC9nbm05VXN5ejMyeHZDS1NuWlZo dWt0TEpuVmMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEev9Q MA0GCSqGSIb3DQEBCwUAA4IBAQBir9wGc79lrOwGGKvxP0DqplBjUxWWnAYkLHAA HfEVpAY4oX2Xwl6JQArqmMI1Z3QVmu7SUkE7jrdoy39G+lqoqajSus/MjpE60aQI b0a6Rjfya0o3XRSvirwSqFh9k2/QldU9SdN4Nn7jQLbYLzRrsdvxZ9oFNpJK/5Ot 87Pp3ScLRLn7cbhE3OugT0HHAz01+wASIsNo2gKRuorv9cxl9eCfDGyoQs7ycQjh WQw3gAKa2ho9HcAozDlI9WPvNFXCXTPWIOJ+UpuVvfHaLCrle4RyWihlVK87Qaal eQtZN6RpqMt6gF5C9JT9lEA/GIrLdhwemPjYBPBZl+gSONRU -----END CERTIFICATE-----Generated at Sat Apr 12 05:37:08 2025 by rpki-client