$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/WQzY8yuC8uUBH-gp0HOFjbX8lrA.roa File: WQzY8yuC8uUBH-gp0HOFjbX8lrA.roa (raw, json) Hash identifier: w9o/CCluixKzLihcCZeULx+pD3OLSEgDRwOay5BqbxA= Subject key identifier: 59:0C:D8:F3:2B:82:F2:E5:01:1F:E8:29:D0:73:85:8D:B5:FC:96:B0 Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 01DE Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/WQzY8yuC8uUBH-gp0HOFjbX8lrA.roa Signing time: Tue 13 May 2025 05:05:31 +0000 ROA not before: Tue 13 May 2025 05:05:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 152609 IP address blocks: 157.20.248.44/30 maxlen: 30 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 08:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: May 13 05:05:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=590CD8F32B82F2E5011FE829D073858DB5FC96B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:43:52:0e:3d:81:60:53:71:3f:5e:d6:45: f8:90:12:96:3c:a4:9a:66:81:bb:2c:d5:f3:ed:ca: fd:fd:fe:4b:ae:01:8b:29:dd:8b:5b:d6:6f:c9:b6: ca:85:4a:55:b5:ef:59:c7:5d:5d:16:1e:c1:b6:e8: c0:06:40:b6:2a:28:35:31:3c:57:67:e4:8a:d2:47: 65:1b:70:83:5b:14:88:d1:75:ed:18:03:0a:0d:1c: 85:51:f3:ed:c2:78:40:64:98:db:4f:50:69:59:b9: 98:a3:71:d7:04:11:1b:a8:b4:f0:4a:0f:9c:8f:c5: 00:b4:61:3a:32:02:5e:b2:8e:0b:fa:3c:c2:96:99: dc:59:41:49:0b:a9:1d:9c:5c:7a:9c:c3:a2:b1:5d: 22:02:70:00:b2:6a:b4:e7:e0:29:ca:96:de:55:01: 07:14:3b:a8:a1:44:ef:da:e3:4a:40:0f:23:18:63: aa:92:7f:b0:c6:5c:e9:a3:39:c0:2b:e8:35:dc:60: 7b:f5:58:65:1b:88:f8:7a:1d:71:62:2d:d5:c9:5c: b1:44:fe:66:48:2f:08:98:5b:67:eb:79:10:5f:7a: a5:c8:d6:59:16:5e:16:8b:32:64:0f:31:76:28:f6: 03:d6:65:8e:b8:b0:35:1a:d1:55:e3:b1:28:4b:5b: 2a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0C:D8:F3:2B:82:F2:E5:01:1F:E8:29:D0:73:85:8D:B5:FC:96:B0 X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/WQzY8yuC8uUBH-gp0HOFjbX8lrA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.248.44/30 Signature Algorithm: sha256WithRSAEncryption 18:df:c6:92:30:ec:34:13:9a:c5:b5:59:33:fb:6c:8e:28:45: 40:fd:51:59:3e:85:76:31:73:a5:a1:64:e2:cb:28:13:de:d8: e4:d2:46:36:03:db:1c:50:8f:dc:28:8b:d6:06:c3:96:68:da: 0e:70:e8:4c:57:b5:5a:04:74:54:98:e4:1b:93:f0:13:5f:6f: 6a:f1:ec:2a:40:2c:4f:45:fc:74:d3:83:c5:ba:71:45:04:39: 6f:5f:16:39:db:55:33:16:9b:a4:f0:c1:13:e4:f6:8e:bc:99: 88:84:84:cd:c1:4d:aa:4f:2a:a8:d9:64:69:5e:ad:21:d8:be: d4:02:e5:90:58:aa:1c:e3:ee:e9:47:e0:5d:20:77:06:45:be: 7e:03:b7:f7:b9:00:d0:20:8f:b7:30:6c:df:04:b6:b6:46:d6: c0:90:be:9a:f9:0e:ce:fc:f0:5c:a2:59:cd:30:1e:31:ea:a5: 75:1c:1a:ec:94:0a:80:bd:06:a1:1d:fc:37:fd:2c:df:d7:db: 10:43:cf:db:23:5f:65:92:8e:d8:a9:08:42:9e:e8:33:82:a6: 5b:c1:ba:8f:89:46:58:21:2d:f5:8a:1e:d4:5d:da:75:d4:97: 9f:91:30:6b:98:b5:66:1f:67:17:d6:2f:71:ca:04:2a:9c:7a: d7:59:23:9c -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTA1MTMw NTA1MzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU5MENEOEYzMkI4MkYy RTUwMTFGRTgyOUQwNzM4NThEQjVGQzk2QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAzUNSDj2BYFNxP17WRfiQEpY8pJpmgbss1fPtyv39/kuuAYsp 3Ytb1m/JtsqFSlW171nHXV0WHsG26MAGQLYqKDUxPFdn5IrSR2UbcINbFIjRde0Y AwoNHIVR8+3CeEBkmNtPUGlZuZijcdcEERuotPBKD5yPxQC0YToyAl6yjgv6PMKW mdxZQUkLqR2cXHqcw6KxXSICcACyarTn4CnKlt5VAQcUO6ihRO/a40pADyMYY6qS f7DGXOmjOcAr6DXcYHv1WGUbiPh6HXFiLdXJXLFE/mZILwiYW2freRBfeqXI1lkW XhaLMmQPMXYo9gPWZY64sDUa0VXjsShLWyolAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUWQzY8yuC8uUBH+gp0HOFjbX8lrAwHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvV1F6WTh5dUM4dVVCSC1ncDBIT0Zq Ylg4bHJBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFAp0U+Cww DQYJKoZIhvcNAQELBQADggEBABjfxpIw7DQTmsW1WTP7bI4oRUD9UVk+hXYxc6Wh ZOLLKBPe2OTSRjYD2xxQj9woi9YGw5Zo2g5w6ExXtVoEdFSY5BuT8BNfb2rx7CpA LE9F/HTTg8W6cUUEOW9fFjnbVTMWm6TwwRPk9o68mYiEhM3BTapPKqjZZGlerSHY vtQC5ZBYqhzj7ulH4F0gdwZFvn4Dt/e5ANAgj7cwbN8EtrZG1sCQvpr5Ds788Fyi Wc0wHjHqpXUcGuyUCoC9BqEd/Df9LN/X2xBDz9sjX2WSjtipCEKe6DOCplvBuo+J RlghLfWKHtRd2nXUl5+RMGuYtWYfZxfWL3HKBCqcetdZI5w= -----END CERTIFICATE-----Generated at Mon May 19 07:09:41 2025 by rpki-client