$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/YZSy8aBSV_gBOhoMobvaAhG5Szc.roa File: YZSy8aBSV_gBOhoMobvaAhG5Szc.roa (raw, json) Hash identifier: NCBxT2TsOrNfcmk9NKpLCX1INITiMQoaon0a3RxTlw8= Subject key identifier: 61:94:B2:F1:A0:52:57:F8:01:3A:1A:0C:A1:BB:DA:02:11:B9:4B:37 Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 01FE Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/YZSy8aBSV_gBOhoMobvaAhG5Szc.roa Signing time: Wed 14 May 2025 05:24:01 +0000 ROA not before: Wed 14 May 2025 05:24:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 152609 IP address blocks: 157.20.249.97/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 08:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: May 14 05:24:01 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6194B2F1A05257F8013A1A0CA1BBDA0211B94B37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c0:fb:26:2d:02:a9:79:b6:72:a9:e0:06:de: e6:8b:38:bd:b2:0a:fd:56:e8:85:fb:b2:53:ef:93: 3d:f9:38:0d:8c:b1:72:57:b0:d9:62:36:de:a3:fc: a1:c8:48:dd:e5:91:a8:60:d3:54:3d:37:64:62:01: 8c:ef:df:64:78:ee:a8:fc:39:b8:0d:59:ed:24:59: 03:6e:25:fe:a3:f1:26:fd:5d:5f:b2:de:59:d7:60: 61:e7:e7:bf:d6:73:78:f1:0f:7e:1d:37:73:b9:02: 7e:ec:53:52:13:2e:af:d7:40:8b:26:b8:cb:13:12: dd:c6:88:8c:8f:88:87:ab:16:da:96:00:3f:f8:ba: b8:3c:45:1a:33:ce:e5:78:78:b7:e4:ee:60:71:6e: 21:23:61:9d:46:99:70:e5:2a:22:b7:24:02:76:69: c5:5c:cf:e0:14:e1:42:55:c4:7c:59:d9:8e:37:24: 3c:14:2d:97:33:0e:21:d1:1e:b8:7c:05:5e:91:5e: 7c:5e:7d:7a:ff:84:3e:0f:77:dd:e8:64:80:41:5d: f3:56:92:77:8a:12:e7:32:14:71:4f:20:0e:8b:9e: 5e:ec:4c:86:28:3a:f2:ff:25:1e:ff:a8:1a:72:4f: 34:0b:b2:c4:af:3f:32:49:e2:77:78:5e:90:d7:58: b6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:94:B2:F1:A0:52:57:F8:01:3A:1A:0C:A1:BB:DA:02:11:B9:4B:37 X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/YZSy8aBSV_gBOhoMobvaAhG5Szc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.249.97/32 Signature Algorithm: sha256WithRSAEncryption 48:1b:81:7b:39:3d:b9:9d:b6:eb:d4:ba:49:9d:55:56:c5:0d: 01:7d:f7:34:c6:32:bb:15:61:54:fd:d0:f3:c5:26:84:8d:06: 24:d8:9c:dd:df:55:30:9c:20:43:0a:94:98:dc:54:80:a4:5c: 76:b2:8b:8d:5c:c1:5e:db:3e:7e:78:0e:f0:d5:e6:3c:f2:01: 43:19:c8:e4:14:40:6e:b2:ea:96:7e:c9:f4:c9:58:8e:2c:5b: 2f:7f:88:f1:9a:31:3b:6a:6d:2a:29:cb:3b:ba:59:a3:e1:ad: 7f:4d:a4:2a:74:c9:c9:d1:eb:14:67:ea:f1:86:7f:52:97:ae: 85:35:7c:f1:e9:59:ff:67:8e:79:4e:b0:cc:35:42:3b:af:c0: e9:f3:3e:9d:d4:45:e1:78:b4:2f:6c:19:04:ff:23:5f:d3:f6: 23:ee:1a:7d:dd:36:f8:e4:e8:2e:91:b4:d9:10:a3:c0:a9:fd: 9b:06:27:1c:37:32:3c:bd:ff:fb:21:a1:23:02:a5:da:13:c8: 50:4c:f7:ad:fa:d2:1a:cd:0a:e7:1b:35:2c:f9:c3:93:d4:c2: a8:31:24:f6:98:63:f6:41:df:48:be:bf:15:40:e5:98:b7:bc: 6a:30:07:0d:60:a6:a9:cd:84:fc:77:6a:11:d7:10:b8:be:29: d7:95:b9:f1 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTA1MTQw NTI0MDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYxOTRCMkYxQTA1MjU3 RjgwMTNBMUEwQ0ExQkJEQTAyMTFCOTRCMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0wPsmLQKpebZyqeAG3uaLOL2yCv1W6IX7slPvkz35OA2MsXJX sNliNt6j/KHISN3lkahg01Q9N2RiAYzv32R47qj8ObgNWe0kWQNuJf6j8Sb9XV+y 3lnXYGHn57/Wc3jxD34dN3O5An7sU1ITLq/XQIsmuMsTEt3GiIyPiIerFtqWAD/4 urg8RRozzuV4eLfk7mBxbiEjYZ1GmXDlKiK3JAJ2acVcz+AU4UJVxHxZ2Y43JDwU LZczDiHRHrh8BV6RXnxefXr/hD4Pd93oZIBBXfNWkneKEucyFHFPIA6Lnl7sTIYo OvL/JR7/qBpyTzQLssSvPzJJ4nd4XpDXWLb5AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUYZSy8aBSV/gBOhoMobvaAhG5SzcwHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvWVpTeThhQlNWX2dCT2hvTW9idmFB aEc1U3pjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFAJ0U+WEw DQYJKoZIhvcNAQELBQADggEBAEgbgXs5PbmdtuvUukmdVVbFDQF99zTGMrsVYVT9 0PPFJoSNBiTYnN3fVTCcIEMKlJjcVICkXHayi41cwV7bPn54DvDV5jzyAUMZyOQU QG6y6pZ+yfTJWI4sWy9/iPGaMTtqbSopyzu6WaPhrX9NpCp0ycnR6xRn6vGGf1KX roU1fPHpWf9njnlOsMw1QjuvwOnzPp3UReF4tC9sGQT/I1/T9iPuGn3dNvjk6C6R tNkQo8Cp/ZsGJxw3Mjy9//shoSMCpdoTyFBM96360hrNCucbNSz5w5PUwqgxJPaY Y/ZB30i+vxVA5Zi3vGowBw1gpqnNhPx3ahHXELi+KdeVufE= -----END CERTIFICATE-----Generated at Mon May 19 07:02:41 2025 by rpki-client