$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VOCOM/wjzqVJPZUHTKgkZxfcaP6iJ2lPo.roa File: wjzqVJPZUHTKgkZxfcaP6iJ2lPo.roa (raw, json) Hash identifier: cAKYw96vd80FWOvb0GYcqCBieVFrf4EGv0eM+MCiss8= Subject key identifier: C2:3C:EA:54:93:D9:50:74:CA:82:46:71:7D:C6:8F:EA:22:76:94:FA Certificate issuer: /CN=9E847108EBA0B550BC020FD9B1DC6DEB29E0DBEF Certificate serial: 01C4 Authority key identifier: 9E:84:71:08:EB:A0:B5:50:BC:02:0F:D9:B1:DC:6D:EB:29:E0:DB:EF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/wjzqVJPZUHTKgkZxfcaP6iJ2lPo.roa Signing time: Mon 10 Feb 2025 14:17:16 +0000 ROA not before: Mon 10 Feb 2025 14:17:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 63897 IP address blocks: 103.178.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/noRxCOugtVC8Ag_Zsdxt6yng2-8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/noRxCOugtVC8Ag_Zsdxt6yng2-8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E847108EBA0B550BC020FD9B1DC6DEB29E0DBEF Validity Not Before: Feb 10 14:17:16 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C23CEA5493D95074CA8246717DC68FEA227694FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bb:b9:53:66:86:37:f7:3d:93:46:93:97:66: 8b:19:ef:db:2c:20:3d:d6:a2:c0:03:1a:8c:18:82: ca:dd:d7:f5:0a:79:9b:db:70:95:61:60:79:7f:b8: dd:ff:5b:79:06:26:52:fc:b9:d2:40:03:db:e4:b7: a3:b2:bf:3e:3a:9a:e8:32:16:33:be:21:51:19:75: 6f:f0:af:a1:04:d7:59:62:5e:5f:b0:1b:94:1e:a1: 44:e9:ed:3e:ed:09:2e:8a:be:3e:b7:05:75:51:8b: 76:cc:f1:b9:57:a0:bf:c9:b2:99:29:b3:15:03:84: b0:58:83:ef:b5:c9:9b:42:0f:eb:9f:1d:f3:60:4f: 32:7d:1c:96:d0:f8:d9:e8:60:9a:c8:7a:b5:6a:a2: d3:66:8a:ca:f8:7d:71:45:7d:e4:60:e2:73:ed:bd: a5:fd:42:d5:ff:2c:1c:b7:d3:46:3d:c4:ed:ed:91: 48:e4:d0:2e:bb:e2:d1:45:14:72:c5:1b:9a:65:02: 12:06:1b:e1:12:88:07:57:9e:97:26:24:1f:80:95: 67:08:da:89:ca:ad:56:db:df:3b:a2:e6:04:14:b0: 9a:a6:d6:1f:1b:15:fe:e2:86:e5:f7:c6:6b:7b:b3: 2e:35:d1:ff:af:a5:01:58:61:22:8d:41:17:dc:f8: 00:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3C:EA:54:93:D9:50:74:CA:82:46:71:7D:C6:8F:EA:22:76:94:FA X509v3 Authority Key Identifier: keyid:9E:84:71:08:EB:A0:B5:50:BC:02:0F:D9:B1:DC:6D:EB:29:E0:DB:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/noRxCOugtVC8Ag_Zsdxt6yng2-8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/wjzqVJPZUHTKgkZxfcaP6iJ2lPo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.178.37.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:eb:a1:4d:c9:73:f7:99:a3:1b:73:62:cf:98:6b:b2:cc:3c: 9a:fc:79:1e:a9:6e:59:52:8d:ab:fe:54:bd:ef:fa:47:ea:08: 22:df:6e:13:bb:fe:04:82:ac:1b:1c:95:10:35:17:75:44:97: e5:c5:c5:d4:55:39:af:f0:d7:cc:49:08:cd:92:96:1e:91:c0: ec:a7:a0:56:ab:4a:24:83:a2:74:4c:bc:4f:eb:ef:0f:e1:83: 4b:38:4a:48:d8:a8:7d:09:8b:c2:33:8f:4d:30:40:8d:58:5b: 90:00:49:a1:4f:22:a9:64:be:2f:ee:6e:6e:1a:ae:11:b2:5e: 01:07:91:4f:89:90:e4:c1:1e:05:b3:9c:0a:ff:13:8c:58:23: 4b:65:50:e9:33:63:ca:d1:78:ea:28:96:84:70:c1:e4:1b:5d: c6:24:95:17:c2:04:e8:07:af:7e:7c:91:23:81:6d:83:2f:f4: 23:2a:d0:9c:b8:8c:0a:f7:6b:b1:0a:31:ab:e0:76:0b:90:0f: f4:e8:a8:01:00:15:70:84:ba:8a:f0:af:37:69:0c:d5:96:9d: b3:aa:92:3c:ad:ef:46:7f:7d:f9:14:2a:64:a8:5e:b2:71:a3: 43:7a:4f:07:21:cc:33:b5:e2:3a:d4:57:54:a5:81:8a:c5:ae: 68:d7:a9:9c -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUU4 NDcxMDhFQkEwQjU1MEJDMDIwRkQ5QjFEQzZERUIyOUUwREJFRjAeFw0yNTAyMTAx NDE3MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMyM0NFQTU0OTNEOTUw NzRDQTgyNDY3MTdEQzY4RkVBMjI3Njk0RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSu7lTZoY39z2TRpOXZosZ79ssID3WosADGowYgsrd1/UKeZvb cJVhYHl/uN3/W3kGJlL8udJAA9vkt6Oyvz46mugyFjO+IVEZdW/wr6EE11liXl+w G5QeoUTp7T7tCS6Kvj63BXVRi3bM8blXoL/JspkpsxUDhLBYg++1yZtCD+ufHfNg TzJ9HJbQ+NnoYJrIerVqotNmisr4fXFFfeRg4nPtvaX9QtX/LBy300Y9xO3tkUjk 0C674tFFFHLFG5plAhIGG+ESiAdXnpcmJB+AlWcI2onKrVbb3zui5gQUsJqm1h8b Ff7ihuX3xmt7sy410f+vpQFYYSKNQRfc+ADFAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUwjzqVJPZUHTKgkZxfcaP6iJ2lPowHwYDVR0jBBgwFoAUnoRxCOugtVC8Ag/Z sdxt6yng2+8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVk9DT00v bm9SeENPdWd0VkM4QWdfWnNkeHQ2eW5nMi04LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9ub1J4Q091Z3RWQzhBZ19ac2R4dDZ5bmcyLTguY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9WT0NPTS93anpxVkpQWlVIVEtna1p4ZmNh UDZpSjJsUG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7Il MA0GCSqGSIb3DQEBCwUAA4IBAQCd66FNyXP3maMbc2LPmGuyzDya/HkeqW5ZUo2r /lS97/pH6ggi324Tu/4EgqwbHJUQNRd1RJflxcXUVTmv8NfMSQjNkpYekcDsp6BW q0okg6J0TLxP6+8P4YNLOEpI2Kh9CYvCM49NMECNWFuQAEmhTyKpZL4v7m5uGq4R sl4BB5FPiZDkwR4Fs5wK/xOMWCNLZVDpM2PK0XjqKJaEcMHkG13GJJUXwgToB69+ fJEjgW2DL/QjKtCcuIwK92uxCjGr4HYLkA/06KgBABVwhLqK8K83aQzVlp2zqpI8 re9Gf335FCpkqF6ycaNDek8HIcwzteI61FdUpYGKxa5o16mc -----END CERTIFICATE-----Generated at Thu Apr 17 22:15:53 2025 by rpki-client