$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ARCHE/E_JWqcoO7EcFuEzGnzKrBjWldqM.roa File: E_JWqcoO7EcFuEzGnzKrBjWldqM.roa (raw, json) Hash identifier: O8oWogY+TrtvEq6X8MLndGGGVT9NMHXVNZFqZUWczmA= Subject key identifier: 13:F2:56:A9:CA:0E:EC:47:05:B8:4C:C6:9F:32:AB:06:35:A5:76:A3 Certificate issuer: /CN=069CE651DD7D716A89A8EE84873DCCBF41354799 Certificate serial: 0106 Authority key identifier: 06:9C:E6:51:DD:7D:71:6A:89:A8:EE:84:87:3D:CC:BF:41:35:47:99 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BpzmUd19cWqJqO6Ehz3Mv0E1R5k.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/E_JWqcoO7EcFuEzGnzKrBjWldqM.roa Signing time: Mon 10 Feb 2025 13:45:26 +0000 ROA not before: Mon 10 Feb 2025 13:45:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131668 IP address blocks: 2401:7a60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/BpzmUd19cWqJqO6Ehz3Mv0E1R5k.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/BpzmUd19cWqJqO6Ehz3Mv0E1R5k.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/BpzmUd19cWqJqO6Ehz3Mv0E1R5k.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 16:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069CE651DD7D716A89A8EE84873DCCBF41354799 Validity Not Before: Feb 10 13:45:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=13F256A9CA0EEC4705B84CC69F32AB0635A576A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:77:e1:72:de:ec:c9:06:f3:ed:b5:eb:30:e2: 3b:df:7f:f8:b9:b4:59:e3:c8:45:bd:ed:51:be:21: ac:bd:d4:66:c5:49:81:1b:41:cc:cb:8d:33:14:84: ca:1f:14:5b:10:3d:25:89:1d:e2:1c:1a:f0:03:3b: 51:0a:24:05:8d:74:6a:1c:5f:45:60:29:e6:65:fb: cd:bc:85:9e:30:b9:46:12:b6:e1:9d:80:59:3d:fd: a8:e9:28:58:6e:12:cd:39:1b:e0:ad:8a:c4:25:59: cc:89:11:e3:3a:96:7a:32:ff:53:d1:5f:0d:5c:c9: 24:ef:50:df:60:29:4c:ef:12:ae:4b:8a:ef:38:62: 74:6a:73:84:43:b3:90:1c:da:af:2d:dd:12:86:02: 2e:50:c8:78:d7:e8:20:6e:bb:dd:b2:1d:b1:39:45: 5b:b6:fe:45:f2:0c:ec:61:36:e7:f6:9c:19:cd:53: 11:7e:3d:c4:b9:f0:b5:0c:d5:1b:55:60:ad:87:af: 67:89:ea:71:25:3b:6b:71:a6:f3:9b:bd:44:6a:36: df:91:0b:1a:21:3a:e9:5e:1a:0f:10:69:af:59:7f: b2:a6:ce:e9:43:f7:65:5e:ca:46:c6:e5:6b:f2:91: ef:4f:e5:fb:89:e9:fa:ba:cf:19:6b:de:84:45:e6: 11:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F2:56:A9:CA:0E:EC:47:05:B8:4C:C6:9F:32:AB:06:35:A5:76:A3 X509v3 Authority Key Identifier: keyid:06:9C:E6:51:DD:7D:71:6A:89:A8:EE:84:87:3D:CC:BF:41:35:47:99 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/BpzmUd19cWqJqO6Ehz3Mv0E1R5k.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BpzmUd19cWqJqO6Ehz3Mv0E1R5k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/E_JWqcoO7EcFuEzGnzKrBjWldqM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:7a60::/32 Signature Algorithm: sha256WithRSAEncryption 90:bc:3c:3b:67:83:0c:12:51:f6:38:17:16:c2:7c:7e:7f:22: 0c:a1:65:4a:61:1c:7f:79:74:17:5d:bc:5d:38:4a:ac:a0:f1: da:aa:b9:05:6b:09:2f:37:dd:f9:26:54:4c:fc:86:91:2a:74: bd:ea:58:7d:f3:9c:91:9a:5c:4e:b3:3f:a5:b6:dc:d3:cc:f5: ef:fc:d9:4c:7b:0a:fb:c0:fe:ee:bd:b8:74:a5:4c:02:e7:e0: c1:9e:7a:1b:de:2e:67:91:e2:c8:5f:07:96:83:ec:c5:07:5c: d2:8e:9d:70:a4:09:6f:9b:08:25:b8:d5:4d:9e:cc:9a:e5:28: 33:da:50:28:23:70:1b:4d:5e:fc:ce:dd:0f:aa:c9:ef:78:bc: c9:f6:a4:d8:24:58:03:83:0f:09:03:04:7e:db:9a:52:36:31: d2:b9:ae:eb:77:8b:4b:84:0a:41:64:d6:c1:ce:4b:bb:92:af: 1a:e4:b8:ea:19:0e:88:44:1c:af:5b:37:1c:cb:7f:de:60:7d: 25:88:ff:da:53:b5:21:9e:25:7a:4f:0e:8d:60:4c:5d:69:9e: 3a:c4:90:13:c3:d7:ea:e1:57:a8:9e:17:dd:1b:4e:b5:c1:b7: e8:d5:69:34:1e:8a:92:2a:62:f8:e2:56:e7:db:1a:31:a1:5c: 02:f4:8d:8c -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDY5 Q0U2NTFERDdENzE2QTg5QThFRTg0ODczRENDQkY0MTM1NDc5OTAeFw0yNTAyMTAx MzQ1MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEzRjI1NkE5Q0EwRUVD NDcwNUI4NENDNjlGMzJBQjA2MzVBNTc2QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8d+Fy3uzJBvPttesw4jvff/i5tFnjyEW97VG+Iay91GbFSYEb QczLjTMUhMofFFsQPSWJHeIcGvADO1EKJAWNdGocX0VgKeZl+828hZ4wuUYStuGd gFk9/ajpKFhuEs05G+CtisQlWcyJEeM6lnoy/1PRXw1cySTvUN9gKUzvEq5Liu84 YnRqc4RDs5Ac2q8t3RKGAi5QyHjX6CBuu92yHbE5RVu2/kXyDOxhNuf2nBnNUxF+ PcS58LUM1RtVYK2Hr2eJ6nElO2txpvObvURqNt+RCxohOuleGg8Qaa9Zf7KmzulD 92VeykbG5Wvyke9P5fuJ6fq6zxlr3oRF5hFZAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUE/JWqcoO7EcFuEzGnzKrBjWldqMwHwYDVR0jBBgwFoAUBpzmUd19cWqJqO6E hz3Mv0E1R5kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVJDSEUv QnB6bVVkMTljV3FKcU82RWh6M012MEUxUjVrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9CcHptVWQxOWNXcUpxTzZFaHozTXYwRTFSNWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BUkNIRS9FX0pXcWNvTzdFY0Z1RXpHbnpL ckJqV2xkcU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAF6 YDANBgkqhkiG9w0BAQsFAAOCAQEAkLw8O2eDDBJR9jgXFsJ8fn8iDKFlSmEcf3l0 F128XThKrKDx2qq5BWsJLzfd+SZUTPyGkSp0vepYffOckZpcTrM/pbbc08z17/zZ THsK+8D+7r24dKVMAufgwZ56G94uZ5HiyF8HloPsxQdc0o6dcKQJb5sIJbjVTZ7M muUoM9pQKCNwG01e/M7dD6rJ73i8yfak2CRYA4MPCQMEftuaUjYx0rmu63eLS4QK QWTWwc5Lu5KvGuS46hkOiEQcr1s3HMt/3mB9JYj/2lO1IZ4lek8OjWBMXWmeOsSQ E8PX6uFXqJ4X3RtOtcG36NVpNB6Kkipi+OJW59saMaFcAvSNjA== -----END CERTIFICATE-----Generated at Tue Apr 22 14:50:33 2025 by rpki-client