$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/pNlrL6APdKQYJGtiQc5w_uV5Lig.roa File: pNlrL6APdKQYJGtiQc5w_uV5Lig.roa (raw, json) Hash identifier: yN2OL8pJ56/6tRq8fPF1UVhWnjSlvuoecWahU6DNv9U= Subject key identifier: A4:D9:6B:2F:A0:0F:74:A4:18:24:6B:62:41:CE:70:FE:E5:79:2E:28 Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D Certificate serial: 1316 Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/pNlrL6APdKQYJGtiQc5w_uV5Lig.roa Signing time: Mon 10 Feb 2025 14:26:07 +0000 ROA not before: Mon 10 Feb 2025 14:26:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131636 IP address blocks: 103.130.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 13:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4886 (0x1316) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D Validity Not Before: Feb 10 14:26:07 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A4D96B2FA00F74A418246B6241CE70FEE5792E28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:10:b1:d0:9f:cd:c9:ae:25:f0:de:0c:8c:96: d1:15:57:61:b9:26:a5:94:3b:a9:a7:fd:c1:77:10: ca:35:e6:27:09:5c:46:67:8e:0d:77:65:2c:16:6a: 41:16:f1:60:64:da:32:e8:99:aa:05:ac:b0:a9:25: 2e:14:0e:82:6a:d7:63:f3:e1:9c:3f:fb:b7:20:25: c4:c8:50:58:e0:dc:f3:88:e8:8c:e3:bf:ae:d1:3a: f1:98:ae:bb:aa:52:04:bc:ee:61:1b:0d:12:72:cb: 7e:9c:bd:6c:0e:28:c0:c3:bd:71:41:34:0f:2b:a7: a5:7d:e5:9b:6e:df:d9:5e:5d:e0:9d:9c:ad:56:76: 90:15:7e:0b:a5:a7:ee:17:11:1f:67:1f:85:57:52: 13:a5:82:16:87:74:c6:26:57:05:ee:25:3b:95:c2: 6f:c3:bd:8d:d8:8a:e0:e9:36:2a:f2:4c:83:a0:70: 9b:06:b6:6d:ab:6f:21:9e:f7:6f:bc:82:c0:2b:a2: 95:90:0f:72:ed:e5:3d:d5:13:35:d4:7b:a1:ef:5e: 13:ba:f0:63:78:b4:c5:49:33:26:e2:7b:ec:06:1c: 1b:ca:d3:ce:ee:c0:64:b4:94:a9:b3:4e:c2:f7:b1: 3b:45:d4:1b:8a:b6:78:bd:2d:1a:89:11:12:b3:3b: 28:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D9:6B:2F:A0:0F:74:A4:18:24:6B:62:41:CE:70:FE:E5:79:2E:28 X509v3 Authority Key Identifier: keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/pNlrL6APdKQYJGtiQc5w_uV5Lig.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.125.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:a0:03:59:5c:0f:43:d5:50:80:f8:a4:25:b5:2b:96:96:e7: 58:95:5d:c5:5e:7a:0e:aa:c9:b4:a1:7d:d1:6a:b9:e7:64:08: 51:87:7e:64:33:de:73:5f:8a:57:71:30:46:71:ff:c1:29:9b: 8e:0c:75:eb:58:1f:92:bf:b4:38:7a:1b:d2:14:68:88:72:95: 76:b8:b5:08:3f:ab:2c:35:d6:34:6a:d2:bc:eb:d6:15:2e:0e: 76:d9:17:64:e3:d4:aa:a6:9e:71:b4:7f:2f:28:e0:b7:6d:12: 2b:3c:92:c2:da:56:9b:a2:b5:07:37:61:37:93:47:ac:63:bf: a4:27:f9:bd:72:96:31:7e:b0:b2:c0:3c:ee:67:30:9e:9f:8b: 3e:a9:70:c1:82:b7:2d:47:38:98:64:26:90:6f:35:22:d5:a9: 35:a3:70:7c:4a:77:e7:bd:46:41:e0:c9:23:60:46:e5:43:98: c2:23:ee:e1:dc:b0:4e:01:83:1e:38:67:d3:17:e5:b1:3c:03: 8b:64:84:cd:62:a5:98:99:18:84:17:cc:83:b0:8f:50:58:9c: 91:72:29:48:4f:b0:d7:8a:1f:af:64:15:79:e1:3b:d8:39:42: 0d:4c:87:66:df:b3:08:51:21:92:83:4f:1f:21:f8:76:d9:7a: 11:d5:4d:b7 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICExYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzBE MkM4QzNENEMyRkJCQTI0RDNEODM1MDhBQjE0MkYyRDQ5NDI3RDAeFw0yNTAyMTAx NDI2MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE0RDk2QjJGQTAwRjc0 QTQxODI0NkI2MjQxQ0U3MEZFRTU3OTJFMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGELHQn83JriXw3gyMltEVV2G5JqWUO6mn/cF3EMo15icJXEZn jg13ZSwWakEW8WBk2jLomaoFrLCpJS4UDoJq12Pz4Zw/+7cgJcTIUFjg3POI6Izj v67ROvGYrruqUgS87mEbDRJyy36cvWwOKMDDvXFBNA8rp6V95Ztu39leXeCdnK1W dpAVfgulp+4XER9nH4VXUhOlghaHdMYmVwXuJTuVwm/DvY3YiuDpNiryTIOgcJsG tm2rbyGe92+8gsAropWQD3Lt5T3VEzXUe6HvXhO68GN4tMVJMybie+wGHBvK087u wGS0lKmzTsL3sTtF1BuKtni9LRqJERKzOyiVAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUpNlrL6APdKQYJGtiQc5w/uV5LigwHwYDVR0jBBgwFoAUwNLIw9TC+7ok09g1 CKsULy1JQn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOSU4v d05MSXc5VEMtN29rMDlnMUNLc1VMeTFKUW4wLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS93TkxJdzlUQy03b2swOWcxQ0tzVUx5MUpRbjAuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5JTi9wTmxyTDZBUGRLUVlKR3RpUWM1 d191VjVMaWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4J9 MA0GCSqGSIb3DQEBCwUAA4IBAQAqoANZXA9D1VCA+KQltSuWludYlV3FXnoOqsm0 oX3RarnnZAhRh35kM95zX4pXcTBGcf/BKZuODHXrWB+Sv7Q4ehvSFGiIcpV2uLUI P6ssNdY0atK869YVLg522Rdk49Sqpp5xtH8vKOC3bRIrPJLC2laborUHN2E3k0es Y7+kJ/m9cpYxfrCywDzuZzCen4s+qXDBgrctRziYZCaQbzUi1ak1o3B8SnfnvUZB 4MkjYEblQ5jCI+7h3LBOAYMeOGfTF+WxPAOLZITNYqWYmRiEF8yDsI9QWJyRcilI T7DXih+vZBV54TvYOUINTIdm37MIUSGSg08fIfh22XoR1U23 -----END CERTIFICATE-----Generated at Thu Apr 17 12:08:03 2025 by rpki-client