$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/N4OGqr4XNtexpJC4EOXhjC9CXoA.roa File: N4OGqr4XNtexpJC4EOXhjC9CXoA.roa (raw, json) Hash identifier: kyfCiOfbviZpjV8GYuan5VxVSwOLcQCNvuHHKUfZ0O8= Subject key identifier: 37:83:86:AA:BE:17:36:D7:B1:A4:90:B8:10:E5:E1:8C:2F:42:5E:80 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0D88 Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/N4OGqr4XNtexpJC4EOXhjC9CXoA.roa Signing time: Mon 10 Feb 2025 13:50:06 +0000 ROA not before: Mon 10 Feb 2025 13:50:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9244 IP address blocks: 61.247.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 06:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3464 (0xd88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Feb 10 13:50:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=378386AABE1736D7B1A490B810E5E18C2F425E80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:c4:ea:f7:f1:90:ce:24:cc:cd:dc:34:11:95: 89:ee:67:39:cd:bb:4d:77:7c:ae:31:1f:4d:55:fc: 4e:f4:1b:bb:4d:2b:45:c5:a7:78:55:ee:0e:b2:4e: 6c:24:2f:9c:11:9a:a8:ea:57:77:1e:bb:ba:74:48: 14:c8:3b:98:63:29:9c:b3:35:34:69:10:40:6f:2a: 53:e5:09:42:e1:fc:2d:47:80:7b:3e:9a:cf:31:e5: 21:ea:30:fd:ea:d9:8e:69:f9:23:77:02:ea:f6:7a: 71:6a:46:27:18:61:e0:35:c5:ec:08:0b:38:c6:c6: 41:b9:cf:b0:b1:67:b0:43:e0:f6:7e:9b:9a:94:c0: 47:76:bc:fa:f9:fe:82:af:f5:26:5c:7d:b6:1a:d9: 26:ed:bf:2b:ce:da:63:2f:3a:fb:62:d8:84:da:9c: 61:34:08:42:20:60:47:a9:0d:0a:a7:70:7e:36:05: 9b:8a:53:23:cb:ed:92:05:85:71:1f:d1:00:26:6c: 37:ec:34:f7:d9:f9:a9:aa:00:d2:da:ce:60:b1:36: 92:45:d3:71:9f:ef:34:89:bc:5f:47:75:34:5e:27: b7:82:d7:8b:64:85:c8:82:08:5b:07:85:b9:6b:33: ca:01:1a:eb:25:48:30:16:eb:7f:17:ba:62:6a:ab: 4e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:83:86:AA:BE:17:36:D7:B1:A4:90:B8:10:E5:E1:8C:2F:42:5E:80 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/N4OGqr4XNtexpJC4EOXhjC9CXoA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.247.165.0/24 Signature Algorithm: sha256WithRSAEncryption 48:05:66:33:4c:66:58:30:b5:f9:8b:14:f5:d8:1c:d6:e2:97: 73:03:d6:04:f1:f5:d2:cf:42:79:38:04:84:7e:d8:19:12:86: 07:d0:d6:69:f6:fd:5d:20:f1:90:e0:fe:6e:53:98:74:77:f2: 6e:a7:77:a2:27:0d:4a:80:12:07:ec:38:37:8d:b9:d3:94:ed: 53:43:b5:36:25:48:38:d6:3b:fa:96:2e:dd:ae:13:26:3f:72: 84:72:92:2b:79:af:b4:f6:45:fb:4e:75:ff:10:3b:5b:e0:b3: af:5e:2f:5a:a6:9b:e4:f4:2c:23:e6:bd:de:f6:d7:1d:90:39: 23:fe:44:62:e9:e5:ad:82:d5:7c:6b:05:d9:9f:01:bb:f8:df: 56:66:57:fd:d6:2b:49:62:0f:94:61:2e:61:6e:a2:c6:c8:66: be:b8:8b:3e:4f:26:db:be:8a:4a:62:db:dc:21:28:1b:9b:5f: 04:8f:44:14:8c:b6:16:1f:7a:a7:14:43:6c:33:b4:62:c5:49: 15:30:d8:07:47:5a:6e:ec:6d:ac:ec:75:a5:3e:2d:48:e2:93: 0f:46:fb:fa:e9:a5:f8:3f:ca:b9:9b:86:50:85:e2:7a:4f:ae: 4a:f8:61:19:bd:cc:6c:1a:d5:39:bc:6b:67:bf:b2:50:d3:b8: ef:c7:1a:8c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDYgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNTAyMTAx MzUwMDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM3ODM4NkFBQkUxNzM2 RDdCMUE0OTBCODEwRTVFMThDMkY0MjVFODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD4xOr38ZDOJMzN3DQRlYnuZznNu013fK4xH01V/E70G7tNK0XF p3hV7g6yTmwkL5wRmqjqV3ceu7p0SBTIO5hjKZyzNTRpEEBvKlPlCULh/C1HgHs+ ms8x5SHqMP3q2Y5p+SN3Aur2enFqRicYYeA1xewICzjGxkG5z7CxZ7BD4PZ+m5qU wEd2vPr5/oKv9SZcfbYa2SbtvyvO2mMvOvti2ITanGE0CEIgYEepDQqncH42BZuK UyPL7ZIFhXEf0QAmbDfsNPfZ+amqANLazmCxNpJF03Gf7zSJvF9HdTReJ7eC14tk hciCCFsHhblrM8oBGuslSDAW638XumJqq05HAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUN4OGqr4XNtexpJC4EOXhjC9CXoAwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL040T0dxcjRYTnRleHBKQzRF T1hoakM5Q1hvQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9 96UwDQYJKoZIhvcNAQELBQADggEBAEgFZjNMZlgwtfmLFPXYHNbil3MD1gTx9dLP Qnk4BIR+2BkShgfQ1mn2/V0g8ZDg/m5TmHR38m6nd6InDUqAEgfsODeNudOU7VND tTYlSDjWO/qWLt2uEyY/coRykit5r7T2RftOdf8QO1vgs69eL1qmm+T0LCPmvd72 1x2QOSP+RGLp5a2C1XxrBdmfAbv431ZmV/3WK0liD5RhLmFuosbIZr64iz5PJtu+ ikpi29whKBubXwSPRBSMthYfeqcUQ2wztGLFSRUw2AdHWm7sbazsdaU+LUjikw9G +/rppfg/yrmbhlCF4npPrkr4YRm9zGwa1Tm8a2e/slDTuO/HGow= -----END CERTIFICATE-----Generated at Sun Apr 27 05:29:51 2025 by rpki-client