$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/l9O-eISc_dECMF9e43SWxmq4AEg.roa File: l9O-eISc_dECMF9e43SWxmq4AEg.roa (raw, json) Hash identifier: Y1pbsqjJNWxpuCH/R9FBJN0tRoSqkpUmOcFlxjK86zA= Subject key identifier: 97:D3:BE:78:84:9C:FD:D1:02:30:5F:5E:E3:74:96:C6:6A:B8:00:48 Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB Certificate serial: 0D23 Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/l9O-eISc_dECMF9e43SWxmq4AEg.roa Signing time: Mon 10 Feb 2025 14:04:36 +0000 ROA not before: Mon 10 Feb 2025 14:04:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18046 IP address blocks: 61.65.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 17:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3363 (0xd23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB Validity Not Before: Feb 10 14:04:36 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=97D3BE78849CFDD102305F5EE37496C66AB80048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f8:d3:de:f2:cb:bd:f5:62:a8:ee:9f:6e:f2: 7c:bb:6c:5b:9b:b0:e9:72:39:81:aa:c4:91:d4:7e: 79:f9:ff:89:9a:68:06:ea:f8:cd:06:27:6a:84:0c: 1f:4e:17:36:27:f6:44:6b:41:be:bd:c3:02:5c:48: 6f:aa:b8:e7:e0:e2:2d:2d:a4:02:1c:24:36:6a:c6: b1:a8:19:aa:63:6a:49:05:68:f7:f3:88:8a:6e:51: ac:05:89:46:55:59:11:5b:bc:08:ab:40:29:35:4d: fb:2a:9a:8a:73:c9:5b:04:9e:28:3f:5f:0e:33:25: c6:b7:9c:fa:63:ad:b0:87:c9:24:9c:5b:7b:4b:d8: c3:8b:e1:92:67:01:7e:cf:e1:91:f2:2a:6e:37:3b: 2b:9f:ee:ad:d5:cb:6b:4e:48:c1:69:00:8d:85:b1: 22:90:3d:49:ef:00:95:0f:4f:0f:94:ee:ab:dc:f8: e3:a6:93:94:28:48:a9:7d:29:a1:cd:5a:f3:58:3e: 1e:62:be:a7:a6:ed:52:a9:77:f1:dc:af:76:1e:83: c3:23:ea:bd:ac:2f:20:40:ac:ff:9b:56:f6:ad:ab: 87:0f:82:7c:ed:a7:dc:30:b5:ba:be:15:6e:59:f4: d7:a1:13:3b:75:3d:1d:bf:04:db:8c:d9:be:b1:e9: 7b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D3:BE:78:84:9C:FD:D1:02:30:5F:5E:E3:74:96:C6:6A:B8:00:48 X509v3 Authority Key Identifier: keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/l9O-eISc_dECMF9e43SWxmq4AEg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.65.224.0/19 Signature Algorithm: sha256WithRSAEncryption 8b:db:d1:ae:a2:eb:cf:5f:4d:3c:01:37:78:d5:74:7b:2b:7a: f2:33:af:c3:a6:52:81:db:0a:63:cd:63:6a:12:87:59:22:d1: 15:fe:f7:98:ca:d2:fd:45:82:ea:09:a4:fa:64:6b:03:8c:f5: 7f:61:31:c5:70:3e:de:18:ae:71:1c:af:e4:bb:6d:12:fa:52: 2a:89:e2:f9:f7:d3:88:93:aa:0e:6b:ff:82:32:a2:1b:72:ef: f8:b9:0a:ba:2d:43:98:2f:ad:b6:94:cf:58:ab:80:68:c1:a6: e1:74:2d:6c:a9:6c:be:cf:a1:f6:44:74:03:db:27:43:fd:20: a4:03:3d:85:a3:3e:47:7f:a9:f5:dc:89:15:2f:6b:af:d3:e6: 46:42:ba:f7:c9:a6:93:10:40:f4:ea:60:77:88:56:92:e3:3f: 00:ec:66:2b:c4:79:b3:5f:7d:f6:50:5e:2a:4c:74:2f:45:e6: 94:65:44:f8:de:19:a8:93:25:73:d8:0e:db:7f:3e:a6:24:38: 5a:f0:79:e4:c4:0b:28:b7:eb:33:80:df:02:b3:1d:38:b3:03: 2e:3a:7f:b5:1a:37:41:09:09:6a:63:ae:b7:43:58:28:dc:1f: 12:2e:39:f4:58:70:d3:e4:79:09:da:c8:b4:f1:be:0f:1f:69: 10:51:09:1c -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDSMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEM3 ODk2MTY0MkEwNEJFMTMyNzA4REIxOTNEN0JBOTE2QjJCNjdDQjAeFw0yNTAyMTAx NDA0MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk3RDNCRTc4ODQ5Q0ZE RDEwMjMwNUY1RUUzNzQ5NkM2NkFCODAwNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCs+NPe8su99WKo7p9u8ny7bFubsOlyOYGqxJHUfnn5/4maaAbq +M0GJ2qEDB9OFzYn9kRrQb69wwJcSG+quOfg4i0tpAIcJDZqxrGoGapjakkFaPfz iIpuUawFiUZVWRFbvAirQCk1TfsqmopzyVsEnig/Xw4zJca3nPpjrbCHySScW3tL 2MOL4ZJnAX7P4ZHyKm43Oyuf7q3Vy2tOSMFpAI2FsSKQPUnvAJUPTw+U7qvc+OOm k5QoSKl9KaHNWvNYPh5ivqem7VKpd/Hcr3Yeg8Mj6r2sLyBArP+bVvatq4cPgnzt p9wwtbq+FW5Z9NehEzt1PR2/BNuM2b6x6XsnAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUl9O+eISc/dECMF9e43SWxmq4AEgwHwYDVR0jBBgwFoAUDHiWFkKgS+EycI2x k9e6kWsrZ8swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9OR0ZP TkcvREhpV0ZrS2dTLUV5Y0kyeGs5ZTZrV3NyWjhzLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9ESGlXRmtLZ1MtRXljSTJ4azllNmtXc3JaOHMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ET05HRk9ORy9sOU8tZUlTY19kRUNN RjllNDNTV3htcTRBRWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQFPUHgMA0GCSqGSIb3DQEBCwUAA4IBAQCL29GuouvPX008ATd41XR7K3ryM6/D plKB2wpjzWNqEodZItEV/veYytL9RYLqCaT6ZGsDjPV/YTHFcD7eGK5xHK/ku20S +lIqieL599OIk6oOa/+CMqIbcu/4uQq6LUOYL622lM9Yq4BowabhdC1sqWy+z6H2 RHQD2ydD/SCkAz2Foz5Hf6n13IkVL2uv0+ZGQrr3yaaTEED06mB3iFaS4z8A7GYr xHmzX332UF4qTHQvReaUZUT43hmokyVz2A7bfz6mJDha8HnkxAsot+szgN8Csx04 swMuOn+1GjdBCQlqY663Q1go3B8SLjn0WHDT5HkJ2si08b4PH2kQUQkc -----END CERTIFICATE-----Generated at Thu May 15 16:29:43 2025 by rpki-client