$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/WsgN_xKfukmQhWxbg9-JwMoPmmY.roa File: WsgN_xKfukmQhWxbg9-JwMoPmmY.roa (raw, json) Hash identifier: 3TM0yfRdg6Wy/SOcYgYDK4CwMu53s+7ClRK6A8imPMw= Subject key identifier: 5A:C8:0D:FF:12:9F:BA:49:90:85:6C:5B:83:DF:89:C0:CA:0F:9A:66 Certificate issuer: /CN=F5A44B5E078865BAEF9351369D961D6BA2556D47 Certificate serial: 01D2 Authority key identifier: F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/WsgN_xKfukmQhWxbg9-JwMoPmmY.roa Signing time: Mon 10 Feb 2025 14:26:25 +0000 ROA not before: Mon 10 Feb 2025 14:26:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 8075 IP address blocks: 103.131.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 15:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A44B5E078865BAEF9351369D961D6BA2556D47 Validity Not Before: Feb 10 14:26:25 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5AC80DFF129FBA4990856C5B83DF89C0CA0F9A66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:35:10:c4:da:b4:da:de:28:ed:2f:e9:f0:0b: a0:38:e5:5f:d2:bd:34:04:20:39:7f:8e:71:ba:fa: b1:f1:f3:2a:88:5a:02:8f:20:37:ce:db:b4:7b:04: 07:b7:d9:58:98:d8:af:5e:d3:52:ae:33:6d:b4:f6: 95:17:c4:01:2d:46:ff:27:a1:82:33:1e:99:0a:cf: e8:61:5a:f7:e0:70:5e:ed:7e:0e:29:82:40:97:eb: 5a:72:76:78:fa:e8:d8:98:5c:bb:68:d7:61:64:41: 85:98:fc:21:31:02:9b:21:36:7d:32:57:96:ad:41: b2:b8:04:8d:e7:af:37:83:73:58:32:eb:a7:f8:22: 93:d6:8b:63:70:a6:3f:1d:f6:ed:a4:83:1f:67:04: cd:4e:6d:49:70:89:cf:f9:16:3d:a9:2e:58:9b:15: 8f:04:b5:c8:89:3f:09:d1:ba:f0:7d:68:e4:5e:a6: 1b:a0:4f:67:c1:2c:8c:a4:e6:57:c3:06:54:94:17: d2:51:6c:e5:f3:7d:65:3e:52:3e:61:a1:63:c3:76: e8:5c:b0:ff:43:c9:b0:75:71:3f:27:8a:f2:d3:74: d0:61:0f:18:7f:ae:90:26:81:97:b9:da:22:b1:ba: ee:90:46:81:8a:79:a4:90:b8:ce:85:02:a2:f0:99: 2f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C8:0D:FF:12:9F:BA:49:90:85:6C:5B:83:DF:89:C0:CA:0F:9A:66 X509v3 Authority Key Identifier: keyid:F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/WsgN_xKfukmQhWxbg9-JwMoPmmY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.131.148.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:9b:9e:92:3b:d2:01:f2:3d:b1:27:7d:bb:ab:59:a7:23:07: dd:01:92:89:a2:ba:b0:2d:2c:f3:b2:52:9e:e8:8a:0c:39:fa: 1c:94:6f:b2:c6:00:ea:6e:c0:fd:49:88:df:bb:42:0f:65:cb: 77:2c:64:e0:5d:89:aa:3d:6f:9d:31:b3:9a:84:d5:99:09:71: 5f:a6:0d:a4:20:a6:b8:37:5f:06:af:98:ed:a6:57:c4:a7:67: a5:0e:ce:c8:ea:96:ea:b4:88:3d:6f:fb:20:76:01:63:af:86: b8:42:89:4e:98:82:32:3c:c8:65:41:0c:89:11:d2:5b:63:45: ee:dc:4d:ab:b6:e8:91:2f:df:0f:8e:1b:87:a0:c8:90:2c:6e: a4:e6:4d:73:47:b2:20:39:81:e7:c5:ab:5f:2b:59:ed:52:5c: 5b:bc:1c:3a:30:4b:a6:a1:7f:fa:0a:07:94:8b:dc:95:5e:14: 53:32:a5:f3:e3:aa:c1:78:c9:22:07:83:9a:11:0a:64:1c:19: fd:6d:1c:8f:8c:65:98:77:54:2d:dd:1b:b5:12:52:8b:ec:00: df:e9:0b:8c:df:26:ac:f6:1a:61:ab:4d:25:fa:47:ce:e0:3e: 9c:d4:8a:82:1d:ca:30:6e:9c:d1:1c:93:22:ff:3f:93:15:18: 42:c8:16:33 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjVB NDRCNUUwNzg4NjVCQUVGOTM1MTM2OUQ5NjFENkJBMjU1NkQ0NzAeFw0yNTAyMTAx NDI2MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVBQzgwREZGMTI5RkJB NDk5MDg1NkM1QjgzREY4OUMwQ0EwRjlBNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPNRDE2rTa3ijtL+nwC6A45V/SvTQEIDl/jnG6+rHx8yqIWgKP IDfO27R7BAe32ViY2K9e01KuM2209pUXxAEtRv8noYIzHpkKz+hhWvfgcF7tfg4p gkCX61pydnj66NiYXLto12FkQYWY/CExApshNn0yV5atQbK4BI3nrzeDc1gy66f4 IpPWi2Nwpj8d9u2kgx9nBM1ObUlwic/5Fj2pLlibFY8EtciJPwnRuvB9aORephug T2fBLIyk5lfDBlSUF9JRbOXzfWU+Uj5hoWPDduhcsP9DybB1cT8nivLTdNBhDxh/ rpAmgZe52iKxuu6QRoGKeaSQuM6FAqLwmS+XAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUWsgN/xKfukmQhWxbg9+JwMoPmmYwHwYDVR0jBBgwFoAU9aRLXgeIZbrvk1E2 nZYda6JVbUcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT05FREVH UkVFLzlhUkxYZ2VJWmJydmsxRTJuWllkYTZKVmJVYy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvOWFSTFhnZUlaYnJ2azFFMm5aWWRhNkpWYlVjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT05FREVHUkVFL1dzZ05feEtmdWtt UWhXeGJnOS1Kd01vUG1tWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABng5QwDQYJKoZIhvcNAQELBQADggEBAG2bnpI70gHyPbEnfburWacjB90B komiurAtLPOyUp7oigw5+hyUb7LGAOpuwP1JiN+7Qg9ly3csZOBdiao9b50xs5qE 1ZkJcV+mDaQgprg3XwavmO2mV8SnZ6UOzsjqluq0iD1v+yB2AWOvhrhCiU6YgjI8 yGVBDIkR0ltjRe7cTau26JEv3w+OG4egyJAsbqTmTXNHsiA5gefFq18rWe1SXFu8 HDowS6ahf/oKB5SL3JVeFFMypfPjqsF4ySIHg5oRCmQcGf1tHI+MZZh3VC3dG7US UovsAN/pC4zfJqz2GmGrTSX6R87gPpzUioIdyjBunNEckyL/P5MVGELIFjM= -----END CERTIFICATE-----Generated at Sat May 10 13:00:55 2025 by rpki-client