$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/mg5Pb36Ed8Qv3k_YEqaFZvERe0I.roa File: mg5Pb36Ed8Qv3k_YEqaFZvERe0I.roa (raw, json) Hash identifier: Q3PKKLm+2lFbBPPWZDJx6s4Y08oGpPv83go4EVgOnM0= Subject key identifier: 9A:0E:4F:6F:7E:84:77:C4:2F:DE:4F:D8:12:A6:85:66:F1:11:7B:42 Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Certificate serial: 0F95 Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/mg5Pb36Ed8Qv3k_YEqaFZvERe0I.roa Signing time: Mon 10 Feb 2025 14:30:52 +0000 ROA not before: Mon 10 Feb 2025 14:30:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18424 IP address blocks: 103.136.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3989 (0xf95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Validity Not Before: Feb 10 14:30:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9A0E4F6F7E8477C42FDE4FD812A68566F1117B42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:31:83:48:e3:92:ff:49:44:01:4c:69:3d:41: 88:7a:54:b5:aa:82:67:1e:9f:f2:16:bb:55:5f:4c: 69:56:04:9d:ad:20:55:28:cc:be:44:7b:78:72:ca: 34:23:b5:27:04:16:70:6c:ed:84:e3:ba:ec:d8:8c: 26:1f:d9:19:fd:c4:27:f6:ab:d1:41:b9:d0:b8:25: 57:9e:1b:17:26:95:9d:eb:99:cf:9c:58:06:b9:e2: a1:f8:43:1b:88:b7:d3:53:f1:91:fc:a6:71:af:b5: 5d:70:a2:8e:ee:72:ee:16:3b:61:27:d8:8a:f3:e7: 56:ec:7c:2d:7e:3a:d4:13:68:0a:ef:4a:73:a5:6a: f3:01:99:92:bb:04:68:84:c9:30:4e:3d:51:6f:d9: a0:4e:6d:0b:5a:10:16:1b:db:42:02:4b:f8:fc:7b: 03:58:ac:1c:d3:84:61:cb:b2:c4:7b:d9:21:62:82: bc:51:e4:0e:d2:21:72:cd:30:bc:1d:bc:0b:28:b3: dc:bf:31:9c:f3:fb:81:04:98:ee:b3:0e:ff:f8:d1: 51:87:81:d8:8f:ec:6e:d1:c3:9c:a9:e8:c8:98:50: d1:50:b6:1f:e9:e5:7f:60:bb:64:72:b4:a0:27:a8: 8c:cd:01:27:9f:56:98:ab:40:9c:20:0f:1d:a8:22: 3b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0E:4F:6F:7E:84:77:C4:2F:DE:4F:D8:12:A6:85:66:F1:11:7B:42 X509v3 Authority Key Identifier: keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/mg5Pb36Ed8Qv3k_YEqaFZvERe0I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.136.60.0/23 Signature Algorithm: sha256WithRSAEncryption 18:41:2c:4b:60:df:e0:a2:19:9a:e3:b9:3d:9f:d6:6b:df:7e: b4:0b:27:6b:44:0a:f2:28:2d:0d:bb:fb:42:5e:78:b4:95:a6: e0:07:21:ed:69:f9:37:e7:e9:d6:7b:71:f0:00:d8:a5:c7:b8: 14:77:3e:b9:5a:4e:36:5a:9e:07:fb:72:05:f3:43:3a:ba:34: 0c:a4:00:dc:f4:69:31:94:0c:c9:51:b9:c4:f1:e2:72:01:b0: a6:a8:be:8c:f0:fd:a1:b0:d6:ae:0b:7b:3f:dd:cf:b6:f0:79: d4:4b:67:8c:92:38:e9:2b:3f:a8:37:fd:e1:f1:e7:d7:9e:63: ea:10:ea:70:6e:a1:4e:7e:61:a0:d7:e5:0f:32:ef:ae:39:65: 62:e0:33:4c:c2:7f:7b:73:4a:23:33:d6:1e:e7:d9:56:76:e4: c2:7d:d6:bc:36:03:7b:8a:b9:38:7d:ea:b6:8b:53:9d:17:d5: 77:60:e8:f1:f6:f9:15:22:c4:0b:07:5f:ae:14:43:af:63:14: f2:06:3d:6a:b2:20:9c:d7:96:d7:71:3d:4e:73:94:d6:21:7f: 99:db:7f:e3:15:04:28:3f:b2:17:34:06:6e:82:10:13:27:a8: 2a:34:9f:6f:b4:34:5e:59:d0:6e:03:72:2d:c4:19:27:a4:09: 53:db:ca:87 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICD5UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDRG MEREMEY0RkI4MDEwMjVENTg2RUY5OTlDNUVFRTAyRDdDMjA1OTAeFw0yNTAyMTAx NDMwNTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlBMEU0RjZGN0U4NDc3 QzQyRkRFNEZEODEyQTY4NTY2RjExMTdCNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmMYNI45L/SUQBTGk9QYh6VLWqgmcen/IWu1VfTGlWBJ2tIFUo zL5Ee3hyyjQjtScEFnBs7YTjuuzYjCYf2Rn9xCf2q9FBudC4JVeeGxcmlZ3rmc+c WAa54qH4QxuIt9NT8ZH8pnGvtV1woo7ucu4WO2En2Irz51bsfC1+OtQTaArvSnOl avMBmZK7BGiEyTBOPVFv2aBObQtaEBYb20ICS/j8ewNYrBzThGHLssR72SFigrxR 5A7SIXLNMLwdvAsos9y/MZzz+4EEmO6zDv/40VGHgdiP7G7Rw5yp6MiYUNFQth/p 5X9gu2RytKAnqIzNASefVpirQJwgDx2oIjujAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUmg5Pb36Ed8Qv3k/YEqaFZvERe0IwHwYDVR0jBBgwFoAU1PDdD0+4AQJdWG75 mcXu4C18IFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdULzFQ RGREMC00QVFKZFdHNzVtY1h1NEMxOElGay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev MVBEZEQwLTRBUUpkV0c3NW1jWHU0QzE4SUZrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRFdUL21nNVBiMzZFZDhRdjNrX1lFcWFGWnZF UmUwSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFniDwwDQYJ KoZIhvcNAQELBQADggEBABhBLEtg3+CiGZrjuT2f1mvffrQLJ2tECvIoLQ27+0Je eLSVpuAHIe1p+Tfn6dZ7cfAA2KXHuBR3PrlaTjZangf7cgXzQzq6NAykANz0aTGU DMlRucTx4nIBsKaovozw/aGw1q4Lez/dz7bwedRLZ4ySOOkrP6g3/eHx59eeY+oQ 6nBuoU5+YaDX5Q8y7645ZWLgM0zCf3tzSiMz1h7n2VZ25MJ91rw2A3uKuTh96raL U50X1Xdg6PH2+RUixAsHX64UQ69jFPIGPWqyIJzXltdxPU5zlNYhf5nbf+MVBCg/ shc0Bm6CEBMnqCo0n2+0NF5Z0G4Dci3EGSekCVPbyoc= -----END CERTIFICATE-----Generated at Fri Apr 18 23:44:42 2025 by rpki-client