$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/AkjDJVWpU0NNDbpF70-Bk8ziSN0.roa File: AkjDJVWpU0NNDbpF70-Bk8ziSN0.roa (raw, json) Hash identifier: D7cVaUUP5NvIvVkWFC3CqIEKj/Wp68/awsAo+jwABz0= Subject key identifier: 02:48:C3:25:55:A9:53:43:4D:0D:BA:45:EF:4F:81:93:CC:E2:48:DD Certificate issuer: /CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148 Certificate serial: 0929 Authority key identifier: 8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/AkjDJVWpU0NNDbpF70-Bk8ziSN0.roa Signing time: Mon 31 Mar 2025 03:44:44 +0000 ROA not before: Mon 31 Mar 2025 03:44:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 40065 IP address blocks: 103.148.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2345 (0x929) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148 Validity Not Before: Mar 31 03:44:44 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0248C32555A953434D0DBA45EF4F8193CCE248DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:65:21:05:82:83:d4:40:a1:ae:fd:28:68:b5: d3:6e:aa:ce:50:0f:d1:7b:ff:e5:0d:1c:7d:c9:1f: c1:5c:e7:11:4d:de:ea:cc:38:1d:10:13:f0:60:09: 82:77:8b:f8:cb:a7:c2:48:66:40:54:bb:15:d0:78: 1f:ca:0e:47:b7:a6:2d:6a:b0:07:eb:0a:72:ad:17: ce:5b:7d:f1:0c:b4:d3:76:b0:d0:bc:46:ed:96:91: ae:84:99:a7:8b:16:21:82:f9:7b:05:2c:88:bc:68: 54:46:e7:7d:ef:82:ba:b9:03:9c:ce:74:02:ac:f2: 43:3d:48:e1:77:b1:a5:aa:88:f9:87:6c:34:ac:9a: 78:a0:e3:78:55:52:5d:05:d9:32:21:c6:f7:65:07: 7a:de:14:cf:5f:54:4f:df:a6:5e:7e:e2:9e:5f:df: a9:a8:e1:c5:36:73:46:af:7a:b2:6e:56:ab:a6:c5: 6d:26:4c:74:bf:11:23:52:0e:99:f6:7a:6f:ae:db: f9:2f:b0:63:fd:40:2d:69:04:2a:cc:db:ca:f9:f3: d5:85:a2:07:20:6e:0e:a5:7d:87:39:01:37:f9:88: 3a:ac:3a:2b:96:11:61:40:96:47:2f:8e:c1:64:a6: 58:f3:8f:2b:e6:71:5a:c8:83:bc:5c:b6:52:01:f7: 9f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:48:C3:25:55:A9:53:43:4D:0D:BA:45:EF:4F:81:93:CC:E2:48:DD X509v3 Authority Key Identifier: keyid:8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/AkjDJVWpU0NNDbpF70-Bk8ziSN0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.148.146.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:ca:3d:61:81:91:4e:40:a8:b2:27:85:f4:6e:85:a4:48:24: 0e:bc:5f:a1:51:01:a0:d3:4b:22:aa:30:9c:98:57:b1:f5:c0: bc:6f:4c:9c:25:78:38:15:63:fe:1f:ec:1e:dc:5d:b0:d2:55: ac:63:ab:a2:a7:f6:36:fb:d6:bc:5a:32:d3:e0:f6:b7:0d:9b: 60:63:bf:ca:fb:73:1b:d7:de:94:d2:73:86:77:cd:08:58:24: 7d:68:c9:30:c4:34:5a:f9:e7:e4:86:57:04:fe:35:16:c5:21: 93:b9:1c:a7:58:4e:32:ee:2c:40:e0:ba:10:f5:cf:3e:79:0d: 17:67:49:ea:8f:e7:ad:e7:63:12:3e:1e:69:0b:af:57:ae:ec: 69:85:f6:d8:61:13:ee:62:28:13:12:fb:c2:e5:d3:2e:fe:10: cb:bc:e4:4f:50:44:bd:f1:9a:89:bb:ae:ee:e7:d9:92:7a:fb: 10:9b:17:de:fa:3d:08:d6:3c:da:19:70:9a:ed:4e:ea:d1:0d: 9d:2f:08:57:69:46:d0:79:11:fd:28:b0:45:7d:cf:d6:38:0e: 85:60:7a:80:9e:af:1d:a4:34:97:0d:bf:15:81:7e:ec:3f:e6: e9:be:dd:de:c8:a9:29:c5:f6:48:b1:85:0f:fc:ca:2e:7d:ad: 46:ba:79:e0 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICCSkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEEz RkQ4OUNFNzBBMTRGMTNFRDBBODY0NTkyMjREMDA3REQwQTE0ODAeFw0yNTAzMzEw MzQ0NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAyNDhDMzI1NTVBOTUz NDM0RDBEQkE0NUVGNEY4MTkzQ0NFMjQ4REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvZSEFgoPUQKGu/ShotdNuqs5QD9F7/+UNHH3JH8Fc5xFN3urM OB0QE/BgCYJ3i/jLp8JIZkBUuxXQeB/KDke3pi1qsAfrCnKtF85bffEMtNN2sNC8 Ru2Wka6EmaeLFiGC+XsFLIi8aFRG533vgrq5A5zOdAKs8kM9SOF3saWqiPmHbDSs mnig43hVUl0F2TIhxvdlB3reFM9fVE/fpl5+4p5f36mo4cU2c0averJuVqumxW0m THS/ESNSDpn2em+u2/kvsGP9QC1pBCrM28r589WFogcgbg6lfYc5ATf5iDqsOiuW EWFAlkcvjsFkpljzjyvmcVrIg7xctlIB959fAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUAkjDJVWpU0NNDbpF70+Bk8ziSN0wHwYDVR0jBBgwFoAUij/YnOcKFPE+0Khk WSJNAH3QoUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJQU9D SElBTy9pal9Zbk9jS0ZQRS0wS2hrV1NKTkFIM1FvVWcuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL2lqX1luT2NLRlBFLTBLaGtXU0pOQUgzUW9VZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NISUFPQ0hJQU8vQWtqREpWV3BV ME5ORGJwRjcwLUJrOHppU04wLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWeUkjANBgkqhkiG9w0BAQsFAAOCAQEAi8o9YYGRTkCosieF9G6FpEgk DrxfoVEBoNNLIqownJhXsfXAvG9MnCV4OBVj/h/sHtxdsNJVrGOroqf2NvvWvFoy 0+D2tw2bYGO/yvtzG9felNJzhnfNCFgkfWjJMMQ0Wvnn5IZXBP41FsUhk7kcp1hO Mu4sQOC6EPXPPnkNF2dJ6o/nredjEj4eaQuvV67saYX22GET7mIoExL7wuXTLv4Q y7zkT1BEvfGaibuu7ufZknr7EJsX3vo9CNY82hlwmu1O6tENnS8IV2lG0HkR/Siw RX3P1jgOhWB6gJ6vHaQ0lw2/FYF+7D/m6b7d3sipKcX2SLGFD/zKLn2tRrp54A== -----END CERTIFICATE-----Generated at Sat Apr 26 15:25:08 2025 by rpki-client