$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/2t3aIMgHTeZc2vwd5WQ3ZnKjLaI.roa File: 2t3aIMgHTeZc2vwd5WQ3ZnKjLaI.roa (raw, json) Hash identifier: sEmR7HRDeOgCZWutN5hXEjAaXOCsF42WbkQT0gHhppI= Subject key identifier: DA:DD:DA:20:C8:07:4D:E6:5C:DA:FC:1D:E5:64:37:66:72:A3:2D:A2 Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 01E4 Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/2t3aIMgHTeZc2vwd5WQ3ZnKjLaI.roa Signing time: Tue 13 May 2025 17:40:03 +0000 ROA not before: Tue 13 May 2025 17:40:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 152609 IP address blocks: 157.20.249.1/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 08:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: May 13 17:40:03 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DADDDA20C8074DE65CDAFC1DE564376672A32DA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:45:db:6e:db:aa:c2:d8:a2:6b:9c:cf:11:46: 75:28:2f:12:45:52:58:15:ea:54:a7:8f:e9:ff:42: 42:01:df:80:9e:6b:ba:36:67:fb:cf:ad:7c:21:f7: dd:05:49:9f:55:24:e9:30:1a:1c:08:50:77:60:a1: cb:16:28:03:a3:e0:20:ff:49:31:06:de:26:53:de: e9:4c:e7:21:06:36:fa:a1:fc:48:c6:ef:df:cf:e9: b3:e6:c2:db:60:eb:2f:6b:de:02:95:c7:20:4c:51: a5:0b:31:0e:1c:13:d9:25:7d:b5:ae:15:42:f1:90: 14:42:c6:b9:d5:e4:9d:8a:e5:e9:6c:27:70:dd:1b: 3d:4b:3c:a0:43:ce:00:1b:31:ba:79:93:62:e4:78: 58:d3:ed:08:e3:8d:54:97:42:8a:58:bc:90:b7:aa: f3:32:ae:d3:f9:a7:81:c1:97:bd:97:59:4b:96:bf: 87:35:83:b9:e7:70:d7:60:c7:29:74:1d:b3:82:f8: 11:16:40:a5:a3:35:4d:f0:9c:62:5a:4c:9b:26:5c: 97:ca:d1:e2:9c:aa:2f:81:c9:51:67:8a:f7:a8:cc: 83:32:fe:98:cd:0c:0e:16:45:d0:04:9e:7d:b6:84: 03:1f:3f:3d:6b:5b:1f:d8:a3:a8:d7:5e:5d:08:5e: aa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DD:DA:20:C8:07:4D:E6:5C:DA:FC:1D:E5:64:37:66:72:A3:2D:A2 X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/2t3aIMgHTeZc2vwd5WQ3ZnKjLaI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.249.1/32 Signature Algorithm: sha256WithRSAEncryption 8a:0e:66:32:2c:f4:57:42:fb:b6:b6:4e:b1:ff:ce:18:13:b7: 3f:b8:87:96:11:01:39:82:d3:ad:77:ae:82:32:57:9f:fa:d6: fe:21:57:29:da:c3:18:f4:10:db:d9:0f:f7:78:58:22:a6:fa: 07:80:cc:b2:79:73:5a:49:fe:78:fb:58:7e:21:73:ef:01:0b: 43:83:0b:d3:fd:c7:1e:f0:8c:8b:68:08:8e:79:bd:c9:1d:55: a3:05:98:e5:ee:af:9c:1e:10:5a:71:a7:28:e3:4e:b4:92:da: 57:0e:a7:db:9b:55:c9:cc:0e:af:fe:4a:a3:0d:81:c6:90:6a: c8:60:78:d0:6d:2b:3a:a0:3c:20:e4:9a:02:82:a8:5c:e4:32: bf:49:7d:89:5f:83:fd:88:c2:d7:cd:09:0b:06:16:d7:d7:4f: 19:4d:64:d0:b2:10:33:c7:ec:97:8a:a6:ca:d0:fb:10:06:67: 3f:ef:2e:2a:17:e6:75:03:ba:71:e0:43:7a:eb:b8:f3:80:fd: a3:ef:b5:11:c8:58:28:6e:b2:50:c9:3e:51:ce:0a:8e:62:47: c8:57:3e:16:c5:52:40:54:31:80:d6:2a:c9:22:6c:d9:24:fb: b9:15:08:ee:59:f8:7e:c9:5e:6e:6b:eb:57:2b:a4:70:ea:5c: 98:13:4c:ec -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTA1MTMx NzQwMDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERBREREQTIwQzgwNzRE RTY1Q0RBRkMxREU1NjQzNzY2NzJBMzJEQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDuRdtu26rC2KJrnM8RRnUoLxJFUlgV6lSnj+n/QkIB34Cea7o2 Z/vPrXwh990FSZ9VJOkwGhwIUHdgocsWKAOj4CD/STEG3iZT3ulM5yEGNvqh/EjG 79/P6bPmwttg6y9r3gKVxyBMUaULMQ4cE9klfbWuFULxkBRCxrnV5J2K5elsJ3Dd Gz1LPKBDzgAbMbp5k2LkeFjT7QjjjVSXQopYvJC3qvMyrtP5p4HBl72XWUuWv4c1 g7nncNdgxyl0HbOC+BEWQKWjNU3wnGJaTJsmXJfK0eKcqi+ByVFniveozIMy/pjN DA4WRdAEnn22hAMfPz1rWx/Yo6jXXl0IXqqBAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU2t3aIMgHTeZc2vwd5WQ3ZnKjLaIwHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvMnQzYUlNZ0hUZVpjMnZ3ZDVXUTNa bktqTGFJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFAJ0U+QEw DQYJKoZIhvcNAQELBQADggEBAIoOZjIs9FdC+7a2TrH/zhgTtz+4h5YRATmC0613 roIyV5/61v4hVynawxj0ENvZD/d4WCKm+geAzLJ5c1pJ/nj7WH4hc+8BC0ODC9P9 xx7wjItoCI55vckdVaMFmOXur5weEFpxpyjjTrSS2lcOp9ubVcnMDq/+SqMNgcaQ ashgeNBtKzqgPCDkmgKCqFzkMr9JfYlfg/2IwtfNCQsGFtfXTxlNZNCyEDPH7JeK psrQ+xAGZz/vLioX5nUDunHgQ3rruPOA/aPvtRHIWChuslDJPlHOCo5iR8hXPhbF UkBUMYDWKskibNkk+7kVCO5Z+H7JXm5r61crpHDqXJgTTOw= -----END CERTIFICATE-----Generated at Mon May 19 07:20:02 2025 by rpki-client