$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/mE5eRQ_EQ565VzWg0lok2q186rM.roa File: mE5eRQ_EQ565VzWg0lok2q186rM.roa (raw, json) Hash identifier: LM6NP1zolcxc1zsXWgaS/7tNjVyIFUIS4I/fOEDRxDk= Subject key identifier: 98:4E:5E:45:0F:C4:43:9E:B9:57:35:A0:D2:5A:24:DA:AD:7C:EA:B3 Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Certificate serial: 0D33 Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/mE5eRQ_EQ565VzWg0lok2q186rM.roa Signing time: Mon 10 Feb 2025 13:51:20 +0000 ROA not before: Mon 10 Feb 2025 13:51:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18042 IP address blocks: 58.86.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 06:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3379 (0xd33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Validity Not Before: Feb 10 13:51:20 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=984E5E450FC4439EB95735A0D25A24DAAD7CEAB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:83:f1:f4:fd:cb:d4:19:f3:82:04:ba:b3: ea:d1:48:c8:a6:15:e2:1c:8f:06:fe:c3:83:13:e9: 45:f9:62:57:bc:0f:bc:e6:0b:ad:02:3d:e3:da:ec: fc:87:04:9b:fb:9f:e4:15:76:f0:b6:c9:f8:21:af: e7:a5:ed:f0:22:25:15:c4:24:77:01:3c:a4:4c:ce: 1a:e0:51:8f:32:4b:ae:7b:66:50:82:eb:60:22:3d: 11:cb:82:f2:7d:c4:72:a1:1f:7a:c3:ea:99:ea:6e: a1:cd:f3:f3:46:da:b2:be:24:8e:f3:50:52:c5:00: c7:33:5e:09:07:07:5f:d9:e4:fc:2e:9d:9f:93:ca: 55:cd:66:db:92:a4:ef:76:56:9a:78:21:dc:df:42: f4:f8:ee:08:4b:5d:8e:9f:ca:98:c8:0e:12:c4:02: 9c:7f:5e:b9:97:d8:cb:07:ce:60:de:9d:1a:74:18: 8f:38:e0:84:45:d8:da:fb:da:ad:1a:08:c2:9c:ab: 77:b1:8e:22:d1:59:3c:a6:e4:eb:4b:fb:b0:48:31: f7:fa:b3:c7:33:8e:5b:94:91:cb:03:bd:24:5f:3d: c9:3a:67:52:cf:04:09:98:f4:d0:9c:92:16:6f:ec: 1d:08:95:2b:90:46:3c:7b:98:6d:c6:bf:2c:80:28: a6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4E:5E:45:0F:C4:43:9E:B9:57:35:A0:D2:5A:24:DA:AD:7C:EA:B3 X509v3 Authority Key Identifier: keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/mE5eRQ_EQ565VzWg0lok2q186rM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 58.86.0.0/16 Signature Algorithm: sha256WithRSAEncryption b7:71:2a:0d:07:83:11:bc:d1:a9:dc:98:b9:9f:58:dd:f2:37: 93:3c:3c:51:de:65:4e:fd:4f:ad:1d:c3:df:25:ea:6b:e9:75: f0:27:a9:00:7f:37:91:03:bc:29:ec:00:15:02:75:33:7c:74: 22:81:06:fb:37:9b:16:9c:13:92:6a:6c:f3:89:c6:05:6f:6a: 61:16:3f:22:fd:2f:79:61:8e:3f:21:14:5e:72:16:20:ba:6d: d3:4d:40:65:d7:d5:b5:1d:8c:28:0e:9e:b3:b7:38:39:35:ea: 04:a4:55:05:0a:f4:50:f4:d7:b8:13:dd:8d:6f:31:b2:aa:ef: c0:ea:16:4d:d8:c2:5b:fd:48:56:06:3b:4b:31:e5:69:59:42: 46:6b:e7:84:a1:ad:f9:7c:97:02:3f:53:1b:57:56:46:d3:1d: 83:95:af:99:9f:d1:af:5a:c6:ca:ef:48:fc:bf:c2:55:dc:11: 3c:a7:ae:5d:8c:5e:53:80:c3:73:9f:10:6c:34:f3:b0:af:d1: f7:38:f3:72:9c:3a:83:4e:05:40:89:6f:fb:fe:3a:83:a2:e7: bd:31:60:a3:4a:95:b3:bd:cd:44:b6:93:5d:95:77:6c:12:0b: b0:01:3a:b1:37:2b:dc:49:74:14:30:11:93:f5:d5:79:bf:0d: a4:49:bd:82 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICDTMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRC RUQ3NTFEQThGMDE5MzA0MThFMkRFMjQzMkQwRDAzQTk3REE3QzAeFw0yNTAyMTAx MzUxMjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk4NEU1RTQ1MEZDNDQz OUVCOTU3MzVBMEQyNUEyNERBQUQ3Q0VBQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIHYPx9P3L1BnzggS6s+rRSMimFeIcjwb+w4MT6UX5Yle8D7zm C60CPePa7PyHBJv7n+QVdvC2yfghr+el7fAiJRXEJHcBPKRMzhrgUY8yS657ZlCC 62AiPRHLgvJ9xHKhH3rD6pnqbqHN8/NG2rK+JI7zUFLFAMczXgkHB1/Z5PwunZ+T ylXNZtuSpO92Vpp4IdzfQvT47ghLXY6fypjIDhLEApx/XrmX2MsHzmDenRp0GI84 4IRF2Nr72q0aCMKcq3exjiLRWTym5OtL+7BIMff6s8czjluUkcsDvSRfPck6Z1LP BAmY9NCckhZv7B0IlSuQRjx7mG3GvyyAKKYJAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUmE5eRQ/EQ565VzWg0lok2q186rMwHwYDVR0jBBgwFoAULb7XUdqPAZMEGOLe JDLQ0DqX2nwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL0xi N1hVZHFQQVpNRUdPTGVKRExRMERxWDJudy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TGI3WFVkcVBBWk1FR09MZUpETFEwRHFYMm53LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL21FNWVSUV9FUTU2NVZ6V2cwbG9rMnEx ODZyTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwA6VjANBgkq hkiG9w0BAQsFAAOCAQEAt3EqDQeDEbzRqdyYuZ9Y3fI3kzw8Ud5lTv1PrR3D3yXq a+l18CepAH83kQO8KewAFQJ1M3x0IoEG+zebFpwTkmps84nGBW9qYRY/Iv0veWGO PyEUXnIWILpt001AZdfVtR2MKA6es7c4OTXqBKRVBQr0UPTXuBPdjW8xsqrvwOoW TdjCW/1IVgY7SzHlaVlCRmvnhKGt+XyXAj9TG1dWRtMdg5WvmZ/Rr1rGyu9I/L/C VdwRPKeuXYxeU4DDc58QbDTzsK/R9zjzcpw6g04FQIlv+/46g6LnvTFgo0qVs73N RLaTXZV3bBILsAE6sTcr3El0FDARk/XVeb8NpEm9gg== -----END CERTIFICATE-----Generated at Sat May 17 05:04:05 2025 by rpki-client