$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCRS/zZ1WC-SmSKUMmKU_aG0kyKlf4Qc.roa File: zZ1WC-SmSKUMmKU_aG0kyKlf4Qc.roa (raw, json) Hash identifier: iwxg2LNZggRq16yye7v8Az8Vj/590Tz07JA5bljtp6M= Subject key identifier: CD:9D:56:0B:E4:A6:48:A5:0C:98:A5:3F:68:6D:24:C8:A9:5F:E1:07 Certificate issuer: /CN=22C51298D97A102902731FDC49BDFAB39D52AB2B Certificate serial: 03CD Authority key identifier: 22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/zZ1WC-SmSKUMmKU_aG0kyKlf4Qc.roa Signing time: Thu 15 May 2025 04:01:13 +0000 ROA not before: Thu 15 May 2025 04:01:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 214432 IP address blocks: 103.177.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 04:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 973 (0x3cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22C51298D97A102902731FDC49BDFAB39D52AB2B Validity Not Before: May 15 04:01:13 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CD9D560BE4A648A50C98A53F686D24C8A95FE107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5e:87:47:70:39:88:a4:27:55:db:4c:a8:1a: b9:1b:ed:d4:60:e9:c4:8a:80:ba:4f:fd:00:46:dd: e2:4d:63:b2:15:41:e1:bc:00:1f:04:1f:d7:72:1f: eb:af:4d:32:0d:74:8c:ea:f9:c5:68:96:0d:9a:82: d6:97:8b:fb:b6:c7:98:c9:e7:a1:be:b1:78:2c:77: c2:b1:13:a7:09:7d:7f:70:3f:09:45:7f:7e:bd:38: 7b:00:ac:b4:30:6e:b1:f2:bb:d3:74:08:21:02:35: 8c:bd:51:3e:5d:e3:86:ce:46:10:b0:d6:9a:fa:b6: 15:ac:26:9e:58:f8:9e:2d:96:b2:e7:a4:95:c1:c9: 88:02:77:55:c9:19:f6:79:1f:7c:68:6e:56:1f:bf: a7:e8:b2:e7:ec:20:0f:1c:0e:e1:f6:aa:2a:ad:a9: e6:e1:31:84:0e:4a:ff:45:56:65:da:cf:23:58:cd: 1a:71:60:c4:6c:28:55:d0:48:e4:ba:cf:9c:da:d6: 79:e5:40:72:d1:53:a5:5f:2a:52:3c:9f:94:1c:f0: e0:da:f7:a9:31:b8:e2:d9:20:ed:43:83:3c:8a:f2: 20:72:68:ef:e0:df:1b:7e:aa:0a:c1:89:00:82:a3: 4b:67:6e:66:b0:af:87:eb:6e:f0:f5:3a:d5:43:7e: 68:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9D:56:0B:E4:A6:48:A5:0C:98:A5:3F:68:6D:24:C8:A9:5F:E1:07 X509v3 Authority Key Identifier: keyid:22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/zZ1WC-SmSKUMmKU_aG0kyKlf4Qc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.177.32.0/24 Signature Algorithm: sha256WithRSAEncryption e5:9c:a3:f7:89:89:e5:72:f7:6c:de:e3:21:d5:10:a0:23:83: 25:d4:a7:14:77:2f:29:12:3e:3c:9c:77:29:87:df:d8:91:3c: 6a:a0:5f:36:dc:72:72:c6:4b:a3:87:05:16:61:af:57:61:f8: 02:b3:79:95:e5:2e:b7:e4:09:a5:b8:57:e7:45:48:25:14:40: 95:11:16:9e:c8:ad:1a:d4:85:20:48:d1:62:c9:da:27:d4:23: 44:ec:82:c6:07:10:04:76:4a:17:70:61:99:c0:09:7d:fe:0e: 0a:43:dc:af:ef:b3:b2:77:2f:f6:a2:dc:18:ae:84:46:d8:f7: dc:96:35:1e:a3:9e:e6:6c:10:0e:37:2a:a5:e7:c4:74:7a:d1: 0c:ab:0e:44:b9:42:0c:8e:de:d1:19:f2:d5:74:51:2a:8c:85: 54:25:41:ef:f2:56:f0:27:6b:14:3d:f8:f5:57:88:ea:02:35: 4f:18:e0:4f:53:05:1f:82:ff:d5:65:49:fc:f1:a8:19:c4:2d: 09:51:1c:05:6f:fe:b0:b4:a4:a1:20:fb:43:42:53:4f:87:b4: 91:90:0a:20:df:7d:1d:52:85:21:ab:ab:34:47:87:6b:5c:9d: 72:19:84:09:65:60:fd:03:d9:c7:4f:db:08:98:fe:7f:c5:e3: fc:70:80:68 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICA80wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjJD NTEyOThEOTdBMTAyOTAyNzMxRkRDNDlCREZBQjM5RDUyQUIyQjAeFw0yNTA1MTUw NDAxMTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENEOUQ1NjBCRTRBNjQ4 QTUwQzk4QTUzRjY4NkQyNEM4QTk1RkUxMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGXodHcDmIpCdV20yoGrkb7dRg6cSKgLpP/QBG3eJNY7IVQeG8 AB8EH9dyH+uvTTINdIzq+cVolg2agtaXi/u2x5jJ56G+sXgsd8KxE6cJfX9wPwlF f369OHsArLQwbrHyu9N0CCECNYy9UT5d44bORhCw1pr6thWsJp5Y+J4tlrLnpJXB yYgCd1XJGfZ5H3xoblYfv6fosufsIA8cDuH2qiqtqebhMYQOSv9FVmXazyNYzRpx YMRsKFXQSOS6z5za1nnlQHLRU6VfKlI8n5Qc8ODa96kxuOLZIO1DgzyK8iByaO/g 3xt+qgrBiQCCo0tnbmawr4frbvD1OtVDfmiDAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUzZ1WC+SmSKUMmKU/aG0kyKlf4QcwHwYDVR0jBBgwFoAUIsUSmNl6ECkCcx/c Sb36s51SqyswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU1DUlMv SXNVU21ObDZFQ2tDY3hfY1NiMzZzNTFTcXlzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9Jc1VTbU5sNkVDa0NjeF9jU2IzNnM1MVNxeXMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9JTUNSUy96WjFXQy1TbVNLVU1tS1VfYUcw a3lLbGY0UWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7Eg MA0GCSqGSIb3DQEBCwUAA4IBAQDlnKP3iYnlcvds3uMh1RCgI4Ml1KcUdy8pEj48 nHcph9/YkTxqoF823HJyxkujhwUWYa9XYfgCs3mV5S635AmluFfnRUglFECVERae yK0a1IUgSNFiydon1CNE7ILGBxAEdkoXcGGZwAl9/g4KQ9yv77Oydy/2otwYroRG 2PfcljUeo57mbBAONyql58R0etEMqw5EuUIMjt7RGfLVdFEqjIVUJUHv8lbwJ2sU Pfj1V4jqAjVPGOBPUwUfgv/VZUn88agZxC0JURwFb/6wtKShIPtDQlNPh7SRkAog 330dUoUhq6s0R4drXJ1yGYQJZWD9A9nHT9sImP5/xeP8cIBo -----END CERTIFICATE-----Generated at Mon May 19 01:39:18 2025 by rpki-client