$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/karv1ahNl-9MYE6V3Sv2zKBlcu0.roa File: karv1ahNl-9MYE6V3Sv2zKBlcu0.roa (raw, json) Hash identifier: fq9/2jpgg5k8rdC1KEmTpc2RTG5bIn42DAj32nnVUqM= Subject key identifier: 91:AA:EF:D5:A8:4D:97:EF:4C:60:4E:95:DD:2B:F6:CC:A0:65:72:ED Certificate issuer: /CN=2855973672B1EED71760C0942C27FD5F7569019C Certificate serial: 0CF3 Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/karv1ahNl-9MYE6V3Sv2zKBlcu0.roa Signing time: Mon 10 Feb 2025 14:10:19 +0000 ROA not before: Mon 10 Feb 2025 14:10:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 101.0.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3315 (0xcf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C Validity Not Before: Feb 10 14:10:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=91AAEFD5A84D97EF4C604E95DD2BF6CCA06572ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:aa:74:1d:2e:0e:15:59:60:88:38:ac:6f:1f: b2:c7:44:b8:8b:b9:a9:7b:0f:04:e4:fa:7b:a3:c5: 5c:7e:90:b4:e1:d6:37:49:59:ee:66:37:2f:09:5c: 74:52:5c:cb:4e:b3:d3:6b:6b:e0:86:78:bd:2a:97: 7b:e8:32:50:56:39:74:69:fa:cb:93:7c:44:63:c6: ff:ed:c0:29:6c:8d:74:26:43:1b:79:4e:2b:a2:75: 92:32:e0:c2:a8:b5:25:dd:2d:9c:89:34:80:46:77: ca:6c:db:46:3c:d7:e5:b6:99:e2:98:ca:87:47:35: cd:bd:84:d3:b5:95:38:4f:e7:19:6d:42:9f:eb:59: b4:72:c0:7a:26:79:ca:a6:87:99:8d:a8:1f:29:ac: 90:09:5c:97:44:cb:01:eb:64:92:40:5e:93:54:3e: 79:33:e9:9a:ab:bd:6f:b4:26:07:ab:a3:71:de:dc: 66:a2:70:90:57:04:57:0a:84:03:fa:f2:74:fb:0c: d1:77:27:10:49:8c:93:73:d2:cf:e9:b5:6a:c4:5a: a9:08:ee:27:95:61:d6:61:e4:ac:b4:96:f0:9f:1e: c6:11:e2:5c:63:be:de:60:fa:30:84:33:dd:b8:f1: 0c:6a:4e:44:54:09:12:f6:9c:c2:3e:66:38:28:a0: 08:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AA:EF:D5:A8:4D:97:EF:4C:60:4E:95:DD:2B:F6:CC:A0:65:72:ED X509v3 Authority Key Identifier: keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/karv1ahNl-9MYE6V3Sv2zKBlcu0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.0.232.0/21 Signature Algorithm: sha256WithRSAEncryption 69:59:77:c5:ca:08:74:14:34:22:60:2f:b6:0b:e2:15:41:2c: 09:4a:9f:af:0b:2e:e6:1e:32:3e:87:45:39:9b:a6:45:ba:32: bf:4e:48:48:88:d4:80:39:19:15:1e:b5:0a:9e:3a:8e:8d:63: 0c:74:5b:6b:c9:f3:b8:97:30:8d:b2:18:29:94:95:8d:cf:66: 4d:92:a8:48:2b:50:72:4c:fb:6a:b0:bf:f3:c4:d5:96:ab:64: 4c:6c:10:75:f6:ae:11:f6:19:54:4f:bf:c5:af:07:a6:74:99: 77:ec:49:30:09:80:8a:11:5e:fa:81:d0:67:06:97:43:53:1f: 6b:f2:e5:25:72:68:a2:bc:c3:e8:1c:57:4c:f2:24:a0:69:e0: d0:6a:9d:51:71:c0:af:b8:15:f4:03:66:34:99:eb:25:c2:66: fd:57:4e:0b:5d:c9:ac:9f:a6:91:e1:4d:33:52:15:2f:3d:49: 17:68:d2:4e:06:b8:36:96:a4:49:cd:d6:bd:32:3d:d4:68:70: 5b:d9:b5:32:c2:dd:b7:5f:fc:17:07:4e:f7:d7:97:22:6c:4e: ea:52:b3:b8:70:2f:41:ac:76:c0:da:99:51:9c:e7:20:dc:ba: 9b:41:6f:83:90:9e:24:49:9b:6e:18:7f:ed:e8:a9:22:a3:09: fe:dc:1b:30 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjg1 NTk3MzY3MkIxRUVENzE3NjBDMDk0MkMyN0ZENUY3NTY5MDE5QzAeFw0yNTAyMTAx NDEwMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkxQUFFRkQ1QTg0RDk3 RUY0QzYwNEU5NUREMkJGNkNDQTA2NTcyRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+qnQdLg4VWWCIOKxvH7LHRLiLual7DwTk+nujxVx+kLTh1jdJ We5mNy8JXHRSXMtOs9Nra+CGeL0ql3voMlBWOXRp+suTfERjxv/twClsjXQmQxt5 TiuidZIy4MKotSXdLZyJNIBGd8ps20Y81+W2meKYyodHNc29hNO1lThP5xltQp/r WbRywHomecqmh5mNqB8prJAJXJdEywHrZJJAXpNUPnkz6ZqrvW+0Jgero3He3Gai cJBXBFcKhAP68nT7DNF3JxBJjJNz0s/ptWrEWqkI7ieVYdZh5Ky0lvCfHsYR4lxj vt5g+jCEM9248QxqTkRUCRL2nMI+ZjgooAh5AgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUkarv1ahNl+9MYE6V3Sv2zKBlcu0wHwYDVR0jBBgwFoAUKFWXNnKx7tcXYMCU LCf9X3VpAZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVQU4t Q0hBTi9LRldYTm5LeDd0Y1hZTUNVTENmOVgzVnBBWncuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0tGV1hObkt4N3RjWFlNQ1VMQ2Y5WDNWcEFady5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIVUFOLUNIQU4va2FydjFhaE5s LTlNWUU2VjNTdjJ6S0JsY3UwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA2UA6DANBgkqhkiG9w0BAQsFAAOCAQEAaVl3xcoIdBQ0ImAvtgviFUEs CUqfrwsu5h4yPodFOZumRboyv05ISIjUgDkZFR61Cp46jo1jDHRba8nzuJcwjbIY KZSVjc9mTZKoSCtQckz7arC/88TVlqtkTGwQdfauEfYZVE+/xa8HpnSZd+xJMAmA ihFe+oHQZwaXQ1Mfa/LlJXJoorzD6BxXTPIkoGng0GqdUXHAr7gV9ANmNJnrJcJm /VdOC13JrJ+mkeFNM1IVLz1JF2jSTga4NpakSc3WvTI91GhwW9m1MsLdt1/8FwdO 99eXImxO6lKzuHAvQax2wNqZUZznINy6m0Fvg5CeJEmbbhh/7eipIqMJ/twbMA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:34 2025 by rpki-client on console.sobornost.net