$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/B8FhmCsfy1uPGWz1_1jR4HJXQQU.roa File: B8FhmCsfy1uPGWz1_1jR4HJXQQU.roa (raw, json) Hash identifier: IR9r6u7jvsYxQCMxBr6pM0v4vbQlAECgtgBjtgQFaCU= Subject key identifier: 07:C1:61:98:2B:1F:CB:5B:8F:19:6C:F5:FF:58:D1:E0:72:57:41:05 Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 0206 Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/B8FhmCsfy1uPGWz1_1jR4HJXQQU.roa Signing time: Wed 14 May 2025 06:03:12 +0000 ROA not before: Wed 14 May 2025 06:03:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 152609 IP address blocks: 157.20.249.8/30 maxlen: 30 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 08:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: May 14 06:03:12 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=07C161982B1FCB5B8F196CF5FF58D1E072574105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0f:f0:9c:99:76:9c:cd:a8:5e:1c:c1:be:a8: d8:93:01:e1:54:36:52:f0:d3:4c:8f:45:5b:5d:f8: c5:14:53:63:ba:d4:10:9c:75:e0:45:e4:54:b9:fc: 30:bb:69:79:b7:3e:cc:45:72:69:fa:c7:94:90:cf: 0d:e0:70:56:d6:7d:7c:1d:67:e1:3b:1a:50:64:64: 1c:08:9e:1c:2b:9c:8f:c1:be:2b:32:29:6e:64:ff: fd:cb:5e:86:f4:7d:93:73:4a:2b:7e:dd:ac:a7:38: 23:b1:38:76:f8:ee:1a:1e:41:b1:8a:9c:aa:72:7a: a5:96:71:40:4e:43:6d:0e:82:dd:19:d4:dc:c0:be: 6b:e6:59:16:ea:44:93:97:fc:a9:1d:a0:24:aa:9e: a3:1a:52:57:7d:60:9a:78:14:9b:13:c1:f9:64:30: b3:f4:9f:64:9e:29:3a:10:6b:79:12:2d:4b:a8:5a: 28:45:be:f6:33:1c:af:f7:5d:cf:ee:9c:91:f1:6e: c1:0e:03:5f:21:e7:d7:6c:9a:81:f7:cb:10:8c:80: 76:1b:8a:f2:8c:77:98:97:99:31:4e:05:f6:12:95: 5d:12:25:2b:44:46:8f:5d:68:b6:cd:fe:1f:19:28: ef:9b:79:b7:a1:30:72:55:a9:99:2a:e3:f7:72:4c: 23:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C1:61:98:2B:1F:CB:5B:8F:19:6C:F5:FF:58:D1:E0:72:57:41:05 X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/B8FhmCsfy1uPGWz1_1jR4HJXQQU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.249.8/30 Signature Algorithm: sha256WithRSAEncryption 07:bf:e5:83:28:c7:65:4f:b6:0a:80:77:5b:e8:93:e3:60:bd: 51:40:95:1c:42:35:b8:d4:1f:ed:de:ba:e3:38:02:3c:a8:4a: d7:7a:cc:bd:2f:6c:94:4f:17:d2:40:2b:eb:b0:02:c6:67:05: ee:88:fa:ec:bb:88:8c:cd:5d:ff:fb:4d:ba:79:0a:1a:ac:15: 0a:01:e0:0c:2c:d6:9d:ef:47:be:7e:8b:3d:a6:e4:3f:9b:2d: ca:25:87:f3:61:0c:1e:72:5b:3c:58:77:0b:c8:3a:d9:23:4c: 53:b1:13:c3:02:90:4e:d7:4c:8e:38:32:5e:da:91:1f:8d:3b: 8f:9a:08:ef:f3:9d:cb:ea:48:09:97:d1:2f:db:26:e2:f2:e4: ca:10:f4:0c:9a:27:3a:2b:a3:88:22:20:f5:a1:5c:62:cc:09: 1e:30:20:ea:95:27:ef:cf:e7:4f:ef:db:54:34:7b:c4:c6:1d: 19:a1:e4:8e:1d:52:8b:53:65:99:a1:26:cd:1c:23:54:33:f9: d7:d5:27:6c:ec:91:70:91:bf:55:66:1a:6a:ef:cc:a0:f5:39: 96:36:f7:7f:3a:bf:93:1f:e2:7b:29:4a:6d:7c:08:b7:b3:a4: 2f:b1:e2:c0:41:bc:28:37:72:82:1a:e9:b8:85:8d:ce:77:c6: 4d:36:75:2d -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTA1MTQw NjAzMTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA3QzE2MTk4MkIxRkNC NUI4RjE5NkNGNUZGNThEMUUwNzI1NzQxMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBD/CcmXaczaheHMG+qNiTAeFUNlLw00yPRVtd+MUUU2O61BCc deBF5FS5/DC7aXm3PsxFcmn6x5SQzw3gcFbWfXwdZ+E7GlBkZBwInhwrnI/Bvisy KW5k//3LXob0fZNzSit+3aynOCOxOHb47hoeQbGKnKpyeqWWcUBOQ20Ogt0Z1NzA vmvmWRbqRJOX/KkdoCSqnqMaUld9YJp4FJsTwflkMLP0n2SeKToQa3kSLUuoWihF vvYzHK/3Xc/unJHxbsEOA18h59dsmoH3yxCMgHYbivKMd5iXmTFOBfYSlV0SJStE Ro9daLbN/h8ZKO+bebehMHJVqZkq4/dyTCM7AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUB8FhmCsfy1uPGWz1/1jR4HJXQQUwHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvQjhGaG1Dc2Z5MXVQR1d6MV8xalI0 SEpYUVFVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFAp0U+Qgw DQYJKoZIhvcNAQELBQADggEBAAe/5YMox2VPtgqAd1vok+NgvVFAlRxCNbjUH+3e uuM4AjyoStd6zL0vbJRPF9JAK+uwAsZnBe6I+uy7iIzNXf/7Tbp5ChqsFQoB4Aws 1p3vR75+iz2m5D+bLcolh/NhDB5yWzxYdwvIOtkjTFOxE8MCkE7XTI44Ml7akR+N O4+aCO/zncvqSAmX0S/bJuLy5MoQ9AyaJzoro4giIPWhXGLMCR4wIOqVJ+/P50/v 21Q0e8TGHRmh5I4dUotTZZmhJs0cI1Qz+dfVJ2zskXCRv1VmGmrvzKD1OZY29386 v5Mf4nspSm18CLezpC+x4sBBvCg3coIa6biFjc53xk02dS0= -----END CERTIFICATE-----Generated at Mon May 19 07:01:04 2025 by rpki-client