$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/rCVQvnsOImRkTIe2wgPkl-dx7Tk.roa File: rCVQvnsOImRkTIe2wgPkl-dx7Tk.roa (raw, json) Hash identifier: QeTCpLz32SVYncvhmEpXzQMrI3DPT4ZzUe7oigUXPLQ= Subject key identifier: AC:25:50:BE:7B:0E:22:64:64:4C:87:B6:C2:03:E4:97:E7:71:ED:39 Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Certificate serial: 0E08 Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/rCVQvnsOImRkTIe2wgPkl-dx7Tk.roa Signing time: Mon 10 Feb 2025 14:22:05 +0000 ROA not before: Mon 10 Feb 2025 14:22:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18424 IP address blocks: 121.50.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 01:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3592 (0xe08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Validity Not Before: Feb 10 14:22:05 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AC2550BE7B0E2264644C87B6C203E497E771ED39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d3:ec:68:14:1d:a8:3d:50:28:11:36:8f:d5: 7a:8d:57:19:11:bc:02:ae:60:99:75:02:8b:da:95: 03:80:58:bb:31:2f:ba:7c:9f:00:79:5f:ab:4b:7b: 59:87:5e:8c:68:fa:ea:2c:48:c6:38:df:c4:88:9f: 6a:79:07:6a:21:5f:eb:60:ed:f3:08:26:ed:43:98: f2:01:56:85:38:52:08:32:e6:3a:80:c8:dc:23:50: d6:63:18:b7:55:2b:25:09:53:c3:fd:00:5b:f2:e1: e3:7e:ad:c3:44:59:cd:0c:7e:ac:4b:82:3d:c4:17: 3b:16:f9:86:88:a9:71:01:1e:30:c3:2d:f8:5a:50: 36:af:47:03:d7:d6:db:7c:6e:5f:4a:50:93:3d:43: 37:50:fa:16:2d:a2:c0:04:c2:50:71:39:77:24:fb: 4c:21:fa:ca:b2:0b:2e:cb:4f:ca:f5:bc:84:31:f7: 50:29:46:4c:de:29:52:93:81:86:74:ed:b9:63:be: cf:08:65:3b:66:56:52:3b:c5:d0:f3:af:05:44:e0: 33:10:de:4c:1c:ec:ef:b3:b2:63:ff:44:76:8f:ff: 4e:cd:7d:1d:2d:a7:0d:55:6d:7f:04:8e:42:0e:8a: 9a:86:f4:0d:02:c7:3e:51:2b:2f:47:1b:53:8b:3d: d0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:25:50:BE:7B:0E:22:64:64:4C:87:B6:C2:03:E4:97:E7:71:ED:39 X509v3 Authority Key Identifier: keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/rCVQvnsOImRkTIe2wgPkl-dx7Tk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.50.147.0/24 Signature Algorithm: sha256WithRSAEncryption 89:9e:35:58:53:a4:b7:84:f8:18:52:48:79:7c:07:18:25:09: 1b:a3:28:e7:9e:84:09:6b:2e:97:fb:78:9e:e1:c5:dd:a6:a2: 60:27:b9:51:3c:97:45:2a:6f:83:b2:2d:db:55:7b:fa:c4:a7: 98:b4:f7:e8:4d:f7:fb:1d:a0:6c:bf:85:de:1b:cf:96:77:ac: 25:70:89:c8:5a:03:7d:ff:ea:60:0f:aa:50:bd:36:f9:a6:9e: f6:93:46:93:f6:a7:ac:2d:bf:3a:a6:6f:2b:f6:24:78:51:32: 49:f6:71:18:9c:ab:3e:0d:9d:a8:18:3d:66:6b:28:03:3f:4e: 3f:9b:47:58:44:51:e6:6b:ce:63:f5:8a:a6:37:d5:77:46:4a: 6e:e0:43:5f:ae:54:ab:56:12:50:d1:20:97:bc:09:9e:6a:02: 52:95:17:54:5d:07:ae:1e:ed:7e:a5:28:b2:8a:8d:af:01:6e: 2c:8c:47:8f:25:1f:55:a1:19:5f:86:71:50:7b:fe:aa:8b:87: 9b:58:cc:6f:32:fc:53:e3:d3:b2:ce:24:26:7c:68:a3:ea:90: 7f:68:e0:0f:34:e1:f0:40:84:31:63:81:0d:59:2f:3a:50:39: ea:22:9e:a1:fe:b4:9d:7d:0c:6c:36:39:96:25:78:13:11:95: 41:37:f8:c5 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDggwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3 RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yNTAyMTAx NDIyMDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFDMjU1MEJFN0IwRTIy NjQ2NDRDODdCNkMyMDNFNDk3RTc3MUVEMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCf0+xoFB2oPVAoETaP1XqNVxkRvAKuYJl1AovalQOAWLsxL7p8 nwB5X6tLe1mHXoxo+uosSMY438SIn2p5B2ohX+tg7fMIJu1DmPIBVoU4Uggy5jqA yNwjUNZjGLdVKyUJU8P9AFvy4eN+rcNEWc0MfqxLgj3EFzsW+YaIqXEBHjDDLfha UDavRwPX1tt8bl9KUJM9QzdQ+hYtosAEwlBxOXck+0wh+sqyCy7LT8r1vIQx91Ap RkzeKVKTgYZ07bljvs8IZTtmVlI7xdDzrwVE4DMQ3kwc7O+zsmP/RHaP/07NfR0t pw1VbX8EjkIOipqG9A0Cxz5RKy9HG1OLPdAtAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUrCVQvnsOImRkTIe2wgPkl+dx7TkwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL3JDVlF2bnNPSW1S a1RJZTJ3Z1BrbC1keDdUay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAB5MpMwDQYJKoZIhvcNAQELBQADggEBAImeNVhTpLeE+BhSSHl8BxglCRuj KOeehAlrLpf7eJ7hxd2momAnuVE8l0Uqb4OyLdtVe/rEp5i09+hN9/sdoGy/hd4b z5Z3rCVwichaA33/6mAPqlC9NvmmnvaTRpP2p6wtvzqmbyv2JHhRMkn2cRicqz4N nagYPWZrKAM/Tj+bR1hEUeZrzmP1iqY31XdGSm7gQ1+uVKtWElDRIJe8CZ5qAlKV F1RdB64e7X6lKLKKja8BbiyMR48lH1WhGV+GcVB7/qqLh5tYzG8y/FPj07LOJCZ8 aKPqkH9o4A804fBAhDFjgQ1ZLzpQOeoinqH+tJ19DGw2OZYleBMRlUE3+MU= -----END CERTIFICATE-----Generated at Wed Apr 23 00:01:43 2025 by rpki-client