$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ULC/X9uMsZZ5AU3KHHweRpel2Ppflp4.roa File: X9uMsZZ5AU3KHHweRpel2Ppflp4.roa (raw, json) Hash identifier: dnqjHXAlN1o6TRO0CRjCu6+dGxVcEMmUhzxNl73EGZs= Subject key identifier: 5F:DB:8C:B1:96:79:01:4D:CA:1C:7C:1E:46:97:A5:D8:FA:5F:96:9E Certificate issuer: /CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B Certificate serial: 0509 Authority key identifier: BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/X9uMsZZ5AU3KHHweRpel2Ppflp4.roa Signing time: Mon 10 Feb 2025 14:25:52 +0000 ROA not before: Mon 10 Feb 2025 14:25:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 103.157.42.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 18:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1289 (0x509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B Validity Not Before: Feb 10 14:25:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5FDB8CB19679014DCA1C7C1E4697A5D8FA5F969E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:03:8f:f8:97:85:91:66:d9:a4:e4:8f:3a:ca: 60:07:f5:32:f2:87:9a:96:c2:61:41:15:1d:0a:e8: de:d1:4a:6e:e9:73:4a:44:45:40:0a:78:68:e4:4a: f1:b9:58:c3:51:bc:c1:b0:7c:da:cf:67:b9:bc:c0: 27:31:e4:9f:12:5c:da:ab:6c:e1:69:cb:36:4e:78: c0:c7:f6:fc:cb:18:4c:e2:8d:16:36:1e:11:53:84: b2:ef:00:86:bf:66:98:65:5e:38:d2:10:a5:bb:64: fe:f4:06:57:01:81:80:3b:88:9c:dd:3d:7b:52:00: 90:fe:53:e1:8b:95:7a:89:36:43:8c:79:4f:65:6b: d6:85:1b:f6:c2:d2:91:ba:b0:20:29:71:cd:7b:2e: 7c:dd:d2:0a:71:66:42:96:6c:e8:11:64:ba:ac:d3: ac:09:2b:8c:70:4b:73:77:9c:44:8f:13:6c:6d:f4: 36:16:38:ef:c2:a4:e8:84:09:89:7c:1e:ec:d6:c4: 84:79:88:de:19:e5:fd:2a:c9:a2:cc:0c:ea:4e:7b: f0:68:19:b2:fb:00:b7:f3:a4:9a:fb:0b:ca:36:23: 73:d0:ba:29:28:2f:66:f7:31:24:ea:9b:8f:d1:eb: 5d:a1:c7:aa:7c:a4:ca:3c:9f:8c:24:48:41:1b:b0: 16:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DB:8C:B1:96:79:01:4D:CA:1C:7C:1E:46:97:A5:D8:FA:5F:96:9E X509v3 Authority Key Identifier: keyid:BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/X9uMsZZ5AU3KHHweRpel2Ppflp4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.157.42.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:1d:b4:20:4e:ea:38:6f:f7:09:b8:ee:31:34:57:ba:f5:59: f5:66:06:8e:80:83:fc:84:cb:96:34:96:66:26:88:70:c2:4a: 5b:f7:34:32:41:06:40:6f:3a:cf:49:94:eb:ce:b6:69:42:06: 81:6f:c0:40:af:60:73:3f:07:32:a4:6e:c7:01:05:25:3f:b8: 8d:be:1b:c5:c0:c6:23:10:5a:84:f9:7d:84:20:fe:32:e8:a2: 47:e1:8a:6e:75:ce:84:2e:35:9d:6b:d5:ee:94:10:52:fc:11: a8:65:72:6e:b8:6e:d9:c6:e2:88:96:8f:9a:d4:0d:e6:c1:82: 3d:46:f1:19:07:41:8b:50:85:d2:e3:a1:e9:65:95:1e:fe:76: b3:fb:a4:ab:40:79:15:38:ab:7a:10:cb:35:9e:ad:96:25:01: 4e:ef:ab:a7:87:f4:ac:3a:bd:06:6f:4b:49:3a:4d:3b:12:76: 7c:c0:7e:63:95:4b:22:37:bc:13:ad:59:ed:a5:8a:63:94:01: c2:00:09:5c:0c:aa:e9:62:fc:aa:6f:c6:d7:9a:f7:81:ea:7d: 6d:bb:25:1a:8d:1f:91:5a:4e:88:b5:6e:e9:fb:d6:c2:ef:9a: 2d:4b:af:1b:74:e6:6f:2c:7f:6a:e0:68:75:65:d5:19:6c:b0: db:5f:83:4e -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICBQkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkZC QjdGN0I1QzU4MzIzNDkwODc1ODQ5QjhFRERBNDk1RUYxN0IxQjAeFw0yNTAyMTAx NDI1NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVGREI4Q0IxOTY3OTAx NERDQTFDN0MxRTQ2OTdBNUQ4RkE1Rjk2OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHA4/4l4WRZtmk5I86ymAH9TLyh5qWwmFBFR0K6N7RSm7pc0pE RUAKeGjkSvG5WMNRvMGwfNrPZ7m8wCcx5J8SXNqrbOFpyzZOeMDH9vzLGEzijRY2 HhFThLLvAIa/ZphlXjjSEKW7ZP70BlcBgYA7iJzdPXtSAJD+U+GLlXqJNkOMeU9l a9aFG/bC0pG6sCApcc17Lnzd0gpxZkKWbOgRZLqs06wJK4xwS3N3nESPE2xt9DYW OO/CpOiECYl8HuzWxIR5iN4Z5f0qyaLMDOpOe/BoGbL7ALfzpJr7C8o2I3PQuiko L2b3MSTqm4/R612hx6p8pMo8n4wkSEEbsBaZAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUX9uMsZZ5AU3KHHweRpel2Ppflp4wHwYDVR0jBBgwFoAUv7t/e1xYMjSQh1hJ uO3aSV7xexswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUxDL3Y3 dF9lMXhZTWpTUWgxaEp1TzNhU1Y3eGV4cy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev djd0X2UxeFlNalNRaDFoSnVPM2FTVjd4ZXhzLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVUxDL1g5dU1zWlo1QVUzS0hId2VScGVsMlBw ZmxwNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnnSowDQYJ KoZIhvcNAQELBQADggEBAFwdtCBO6jhv9wm47jE0V7r1WfVmBo6Ag/yEy5Y0lmYm iHDCSlv3NDJBBkBvOs9JlOvOtmlCBoFvwECvYHM/BzKkbscBBSU/uI2+G8XAxiMQ WoT5fYQg/jLookfhim51zoQuNZ1r1e6UEFL8Eahlcm64btnG4oiWj5rUDebBgj1G 8RkHQYtQhdLjoelllR7+drP7pKtAeRU4q3oQyzWerZYlAU7vq6eH9Kw6vQZvS0k6 TTsSdnzAfmOVSyI3vBOtWe2limOUAcIACVwMquli/Kpvxtea94HqfW27JRqNH5Fa Toi1bun71sLvmi1Lrxt05m8sf2rgaHVl1RlssNtfg04= -----END CERTIFICATE-----Generated at Thu Apr 17 13:19:43 2025 by rpki-client