$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0WIZ85G7yFQ60emLIg4hjQZdrGE.roa File: 0WIZ85G7yFQ60emLIg4hjQZdrGE.roa (raw, json) Hash identifier: AQvi+KvtOt59jfwnIZ4fki3nEzFXCZcQUpbLAYIdd8c= Subject key identifier: D1:62:19:F3:91:BB:C8:54:3A:D1:E9:8B:22:0E:21:8D:06:5D:AC:61 Certificate issuer: /CN=D330BC4E137B1512E2E4506806B870A4EAA860D7 Certificate serial: 0177 Authority key identifier: D3:30:BC:4E:13:7B:15:12:E2:E4:50:68:06:B8:70:A4:EA:A8:60:D7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0WIZ85G7yFQ60emLIg4hjQZdrGE.roa Signing time: Mon 10 Feb 2025 13:43:09 +0000 ROA not before: Mon 10 Feb 2025 13:43:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131149 IP address blocks: 103.6.126.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D330BC4E137B1512E2E4506806B870A4EAA860D7 Validity Not Before: Feb 10 13:43:09 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D16219F391BBC8543AD1E98B220E218D065DAC61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:36:af:c5:f7:ae:1b:8b:5b:7e:04:4a:48:96: 06:4f:37:2d:af:c2:f7:c3:d9:79:8a:08:7b:d8:b0: 96:f5:56:d5:a3:30:56:0f:65:dc:bc:0e:4d:fd:95: c8:5a:51:c7:cf:8d:a8:21:ca:e3:d5:9f:d4:10:91: bc:32:88:d3:74:24:6d:7e:21:c9:b9:f6:e8:74:c0: d9:dc:f9:26:77:cc:c5:cc:a7:fc:7b:57:14:63:f7: 3f:4a:f8:59:3e:b5:7a:6e:4a:73:05:a3:c9:26:66: 0c:43:0e:71:3b:d0:77:70:11:28:e9:cc:cc:81:a6: 29:06:29:db:a9:7f:2f:3c:15:22:0f:ce:db:c5:08: 7e:fd:a9:79:25:e2:64:3a:a5:94:1e:49:d1:13:54: 1a:32:3b:91:6b:6b:66:ee:62:67:3c:11:0c:2a:41: 1a:27:18:fb:82:47:88:89:95:7e:fd:6d:db:c9:42: d5:98:4e:42:b9:cc:84:09:21:0f:d2:e3:51:70:fc: 2b:f9:5a:93:45:48:c5:f0:11:28:8a:7f:fb:03:f8: 61:91:96:f0:73:28:5e:a1:b4:72:95:3f:d9:5a:7f: 34:35:f9:b9:9d:e3:ea:01:98:72:f0:12:ea:9e:a6: c3:e8:16:17:0e:00:d9:dc:7a:09:b0:f5:4c:bd:9f: 30:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:62:19:F3:91:BB:C8:54:3A:D1:E9:8B:22:0E:21:8D:06:5D:AC:61 X509v3 Authority Key Identifier: keyid:D3:30:BC:4E:13:7B:15:12:E2:E4:50:68:06:B8:70:A4:EA:A8:60:D7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0WIZ85G7yFQ60emLIg4hjQZdrGE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.6.126.0/23 Signature Algorithm: sha256WithRSAEncryption c2:30:02:7b:40:a8:70:d2:5c:57:3c:bd:7a:07:c6:16:cd:91: 07:da:2d:3e:d9:b7:8e:2f:7b:e2:d9:c1:af:0d:5a:a5:89:d4: 60:32:d2:ae:a0:cc:6f:24:ab:97:9f:5d:51:d3:a3:24:57:ea: b9:d1:fb:9b:c5:03:85:1b:23:ae:93:6a:6d:12:0e:c5:15:b8: 46:15:ed:81:98:bc:7b:22:d6:ef:a8:28:c7:2b:05:c1:ad:64: 6f:21:3e:da:11:2d:99:7c:01:bd:12:5f:61:05:f0:0a:b2:f8: 94:b5:9c:87:4f:76:fc:02:49:6a:88:00:c7:83:c4:d9:3d:31: 19:bc:87:a6:20:e3:c8:d4:fd:44:03:c9:71:fa:4d:9b:61:f3: 1d:8e:33:ba:89:9c:0b:40:cb:2c:06:4d:ce:23:17:b4:06:42: 74:41:df:14:a1:42:48:d3:88:20:5c:4c:ca:b5:55:06:e3:29: 5b:45:60:b4:17:9f:46:d4:f1:eb:74:4d:98:fb:26:6a:47:6b: 2c:bc:8f:fc:79:cf:8d:e2:42:84:8a:6a:25:81:e7:29:da:05: a6:3a:05:dc:f7:7a:43:f9:8e:6e:74:02:80:cd:4d:cc:b0:ff: 15:8d:b2:ed:63:5f:2a:5f:48:be:a9:03:80:8a:62:29:22:45: e5:31:79:b5 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDMz MEJDNEUxMzdCMTUxMkUyRTQ1MDY4MDZCODcwQTRFQUE4NjBENzAeFw0yNTAyMTAx MzQzMDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQxNjIxOUYzOTFCQkM4 NTQzQUQxRTk4QjIyMEUyMThEMDY1REFDNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcNq/F964bi1t+BEpIlgZPNy2vwvfD2XmKCHvYsJb1VtWjMFYP Zdy8Dk39lchaUcfPjaghyuPVn9QQkbwyiNN0JG1+Icm59uh0wNnc+SZ3zMXMp/x7 VxRj9z9K+Fk+tXpuSnMFo8kmZgxDDnE70HdwESjpzMyBpikGKdupfy88FSIPztvF CH79qXkl4mQ6pZQeSdETVBoyO5Fra2buYmc8EQwqQRonGPuCR4iJlX79bdvJQtWY TkK5zIQJIQ/S41Fw/Cv5WpNFSMXwESiKf/sD+GGRlvBzKF6htHKVP9lafzQ1+bmd 4+oBmHLwEuqepsPoFhcOANncegmw9Uy9nzAvAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU0WIZ85G7yFQ60emLIg4hjQZdrGEwHwYDVR0jBBgwFoAU0zC8ThN7FRLi5FBo BrhwpOqoYNcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVTVEJB U0lTLzB6QzhUaE43RlJMaTVGQm9Ccmh3cE9xb1lOYy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvMHpDOFRoTjdGUkxpNUZCb0JyaHdwT3FvWU5jLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVTVEJBU0lTLzBXSVo4NUc3eUZR NjBlbUxJZzRoalFaZHJHRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnBn4wDQYJKoZIhvcNAQELBQADggEBAMIwAntAqHDSXFc8vXoHxhbNkQfa LT7Zt44ve+LZwa8NWqWJ1GAy0q6gzG8kq5efXVHToyRX6rnR+5vFA4UbI66Tam0S DsUVuEYV7YGYvHsi1u+oKMcrBcGtZG8hPtoRLZl8Ab0SX2EF8Aqy+JS1nIdPdvwC SWqIAMeDxNk9MRm8h6Yg48jU/UQDyXH6TZth8x2OM7qJnAtAyywGTc4jF7QGQnRB 3xShQkjTiCBcTMq1VQbjKVtFYLQXn0bU8et0TZj7JmpHayy8j/x5z43iQoSKaiWB 5ynaBaY6Bdz3ekP5jm50AoDNTcyw/xWNsu1jXypfSL6pA4CKYikiReUxebU= -----END CERTIFICATE-----Generated at Fri Apr 18 22:01:49 2025 by rpki-client