$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/qpDvUNdvRke8LBYVnLYGH6AjgpI.roa File: qpDvUNdvRke8LBYVnLYGH6AjgpI.roa (raw, json) Hash identifier: zYf+v16KFFJ/aGcnTNGBhhdfIKi5KJtz9utnQx0wPmk= Subject key identifier: AA:90:EF:50:D7:6F:46:47:BC:2C:16:15:9C:B6:06:1F:A0:23:82:92 Certificate issuer: /CN=2B3B89AD32F3B95B7AF165F4C8A4CD08E754D5AB Certificate serial: 03B6 Authority key identifier: 2B:3B:89:AD:32:F3:B9:5B:7A:F1:65:F4:C8:A4:CD:08:E7:54:D5:AB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KzuJrTLzuVt68WX0yKTNCOdU1as.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/qpDvUNdvRke8LBYVnLYGH6AjgpI.roa Signing time: Mon 31 Mar 2025 03:42:49 +0000 ROA not before: Mon 31 Mar 2025 03:42:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 40065 IP address blocks: 103.175.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/KzuJrTLzuVt68WX0yKTNCOdU1as.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/KzuJrTLzuVt68WX0yKTNCOdU1as.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KzuJrTLzuVt68WX0yKTNCOdU1as.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 950 (0x3b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B3B89AD32F3B95B7AF165F4C8A4CD08E754D5AB Validity Not Before: Mar 31 03:42:49 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AA90EF50D76F4647BC2C16159CB6061FA0238292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:8a:d1:38:a1:41:88:19:e6:02:8c:7b:76: 4a:26:29:7f:ff:be:e9:80:28:2f:2e:cc:43:b7:68: aa:3c:85:00:2e:b8:4a:d8:00:ce:9d:03:36:c3:75: 46:dd:3a:2a:8a:a5:f8:1c:40:78:56:1a:12:ea:b4: fc:21:6d:2f:71:af:11:4a:97:95:07:08:bd:f0:a6: a0:72:74:bf:7f:57:1a:5f:64:c6:d4:b3:44:b0:a7: c0:03:7e:38:90:60:f4:e1:6f:e5:11:22:3a:b7:8e: 79:d5:8e:ef:3c:fc:6c:65:55:45:f9:78:a1:d6:35: 13:65:33:0a:f4:31:d2:a7:01:9d:55:41:25:15:52: a1:86:91:39:f6:39:d3:49:32:4d:77:a9:c4:dc:ba: 97:e7:42:6c:ba:b0:1b:1a:7d:03:e2:1f:5f:09:74: d7:7a:6b:50:12:96:61:88:c9:ae:3c:29:db:7d:f1: 82:72:db:37:f0:2c:dd:3d:96:c0:e3:26:0c:64:6d: b7:1d:0e:fa:35:a2:77:1c:b1:0e:f1:1d:31:de:7c: 5a:28:1d:e6:1a:a0:e8:cd:b8:14:ab:4a:03:02:bd: 52:af:81:46:08:80:b8:9c:19:28:21:d5:ff:2e:58: 58:8c:c8:82:91:b8:56:0a:05:61:5b:61:96:a0:70: f8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:90:EF:50:D7:6F:46:47:BC:2C:16:15:9C:B6:06:1F:A0:23:82:92 X509v3 Authority Key Identifier: keyid:2B:3B:89:AD:32:F3:B9:5B:7A:F1:65:F4:C8:A4:CD:08:E7:54:D5:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/KzuJrTLzuVt68WX0yKTNCOdU1as.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KzuJrTLzuVt68WX0yKTNCOdU1as.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/qpDvUNdvRke8LBYVnLYGH6AjgpI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.175.194.0/23 Signature Algorithm: sha256WithRSAEncryption 51:52:f0:79:d8:7b:e4:82:90:dd:a6:4e:00:1b:2b:86:e3:c2: 41:c1:54:c2:af:5c:af:ca:01:13:81:2f:ca:82:58:fe:8d:e2: 7b:0d:ac:92:c1:8b:ee:77:75:d9:0f:d6:92:96:dc:cd:46:0a: bf:6f:6f:ac:05:3b:0e:f9:be:64:e5:85:d6:2a:3b:85:ae:93: e5:6f:aa:39:ed:bd:4e:b4:68:ca:92:f6:27:e0:f0:a7:18:43: 7f:a5:f9:13:87:6a:74:17:ce:4e:cb:41:36:05:28:6a:b5:c2: 24:af:ea:9c:aa:d7:69:16:47:3c:e1:96:22:6f:7e:5a:3a:a0: 22:5b:e9:1f:a8:37:ad:cc:42:56:46:74:27:f5:94:7f:3f:1c: 81:65:4d:3c:f4:d7:e6:cb:8b:3b:5d:10:ff:06:1f:35:49:26: 53:eb:a7:40:41:d5:e4:a8:ed:6d:5c:32:95:8d:28:6d:2b:1f: 8c:47:19:ba:49:83:eb:ee:99:71:ac:b8:6b:55:6d:88:2e:95: 2e:9c:fa:11:d5:36:e2:32:94:3f:fc:25:eb:f0:bf:5d:3b:9d: 6e:8b:ae:bd:46:2e:02:3c:3a:24:96:cb:a0:66:f1:11:50:50: eb:51:1f:0c:4e:d1:a1:42:12:43:7d:9f:5d:69:7f:6f:80:f4: 52:b0:33:02 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICA7YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIz Qjg5QUQzMkYzQjk1QjdBRjE2NUY0QzhBNENEMDhFNzU0RDVBQjAeFw0yNTAzMzEw MzQyNDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFBOTBFRjUwRDc2RjQ2 NDdCQzJDMTYxNTlDQjYwNjFGQTAyMzgyOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3NorROKFBiBnmAox7dkomKX//vumAKC8uzEO3aKo8hQAuuErY AM6dAzbDdUbdOiqKpfgcQHhWGhLqtPwhbS9xrxFKl5UHCL3wpqBydL9/VxpfZMbU s0Swp8ADfjiQYPThb+URIjq3jnnVju88/GxlVUX5eKHWNRNlMwr0MdKnAZ1VQSUV UqGGkTn2OdNJMk13qcTcupfnQmy6sBsafQPiH18JdNd6a1ASlmGIya48Kdt98YJy 2zfwLN09lsDjJgxkbbcdDvo1onccsQ7xHTHefFooHeYaoOjNuBSrSgMCvVKvgUYI gLicGSgh1f8uWFiMyIKRuFYKBWFbYZagcPg3AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUqpDvUNdvRke8LBYVnLYGH6AjgpIwHwYDVR0jBBgwFoAUKzuJrTLzuVt68WX0 yKTNCOdU1aswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUFHSUND VUJFL0t6dUpyVEx6dVZ0NjhXWDB5S1ROQ09kVTFhcy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvS3p1SnJUTHp1VnQ2OFdYMHlLVE5DT2RVMWFzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUFHSUNDVUJFL3FwRHZVTmR2Umtl OExCWVZuTFlHSDZBamdwSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnr8IwDQYJKoZIhvcNAQELBQADggEBAFFS8HnYe+SCkN2mTgAbK4bjwkHB VMKvXK/KAROBL8qCWP6N4nsNrJLBi+53ddkP1pKW3M1GCr9vb6wFOw75vmTlhdYq O4Wuk+VvqjntvU60aMqS9ifg8KcYQ3+l+ROHanQXzk7LQTYFKGq1wiSv6pyq12kW RzzhliJvflo6oCJb6R+oN63MQlZGdCf1lH8/HIFlTTz01+bLiztdEP8GHzVJJlPr p0BB1eSo7W1cMpWNKG0rH4xHGbpJg+vumXGsuGtVbYgulS6c+hHVNuIylD/8Jevw v107nW6Lrr1GLgI8OiSWy6Bm8RFQUOtRHwxO0aFCEkN9n11pf2+A9FKwMwI= -----END CERTIFICATE-----Generated at Sat Apr 26 15:27:21 2025 by rpki-client