$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/GAAoDqSjii4e2mW1nCHKN25plRA.roa File: GAAoDqSjii4e2mW1nCHKN25plRA.roa (raw, json) Hash identifier: pSG1lA/dBuVNF3n3D+8cV7CtqpKVqvJeAtS84fgH/pg= Subject key identifier: 18:00:28:0E:A4:A3:8A:2E:1E:DA:65:B5:9C:21:CA:37:6E:69:95:10 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0D86 Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/GAAoDqSjii4e2mW1nCHKN25plRA.roa Signing time: Mon 10 Feb 2025 13:50:05 +0000 ROA not before: Mon 10 Feb 2025 13:50:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9244 IP address blocks: 113.21.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 01:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3462 (0xd86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Feb 10 13:50:05 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1800280EA4A38A2E1EDA65B59C21CA376E699510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:58:21:a0:aa:69:56:a1:e7:88:b3:8d:03:f7: f5:2c:20:a7:8f:c0:da:10:91:d9:f5:4f:e9:a6:40: 3b:43:5c:fc:f9:3b:85:60:9d:13:7a:e0:aa:c9:7e: de:14:67:e7:02:93:ef:78:ff:d5:67:bc:57:3a:9b: 9a:be:89:f3:78:78:dc:8c:23:a0:da:f8:69:a4:35: b9:a9:19:26:cc:1f:80:9d:3a:19:d5:9b:89:68:7b: 56:41:0f:86:f5:42:1f:ed:b6:a9:d3:99:bd:bf:ad: 54:db:c8:e2:f6:27:7a:1f:54:66:7a:03:79:3a:69: 67:58:5a:7c:96:db:a9:61:72:53:1a:e7:a4:c5:9c: fe:38:9d:0c:94:d3:de:37:25:4e:b6:64:0e:44:98: 94:52:90:52:31:ba:40:5c:74:00:e0:32:57:bf:be: 47:90:e4:88:d0:2d:c6:6b:d6:93:df:0e:a9:c2:eb: 8a:6c:f3:a9:a5:96:f7:e8:8b:e1:3c:77:f7:31:51: a1:83:fe:90:07:93:88:38:05:14:64:7a:5e:22:e6: b7:fe:fc:c1:ed:80:e2:5f:8e:53:08:8a:e3:88:16: 23:33:56:3b:9a:56:c7:35:d4:34:03:a4:1b:65:d2: 08:ae:83:1a:3d:9c:3e:01:61:75:69:22:6e:21:60: 4e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:00:28:0E:A4:A3:8A:2E:1E:DA:65:B5:9C:21:CA:37:6E:69:95:10 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/GAAoDqSjii4e2mW1nCHKN25plRA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.21.188.0/22 Signature Algorithm: sha256WithRSAEncryption 57:d2:71:cf:4c:b9:38:5d:b0:56:db:a1:af:0e:70:4e:e1:b6: 26:9e:6a:9b:49:d7:53:aa:d5:cc:72:2b:13:2e:3d:96:fb:17: 02:bb:f4:fe:10:b3:79:ee:fc:60:36:a1:a7:84:38:cd:27:4a: 3e:77:5f:69:72:92:c5:f0:df:6d:2e:1b:19:85:06:bd:1f:56: 35:60:8c:c2:0e:6e:a0:7f:9c:a9:6c:96:75:7e:f2:41:aa:26: c8:51:c6:8c:f4:90:a7:a4:2f:27:91:9d:97:28:5c:84:e5:88: d4:eb:58:55:d7:d6:a0:3f:06:a2:a6:86:e6:47:c9:61:8c:45: 08:e5:4b:de:dc:89:56:38:55:66:8b:e4:09:be:2e:5a:34:22: 02:a8:dc:e1:20:88:e1:d3:55:e1:59:d1:da:2f:35:e4:45:e4: f9:dd:1c:a8:5b:f4:e0:ff:d0:e9:7e:9b:46:8d:51:f2:52:a8: 4f:71:dc:60:d1:0c:a8:9b:8d:4c:f3:5e:03:3d:b8:6c:ef:32: 2f:9b:62:77:ca:16:95:48:01:e5:ae:37:f5:4b:8e:ba:13:07: 90:60:86:ee:17:3d:e9:35:3f:1b:4a:a0:71:8f:ee:a6:78:ab: d5:f0:c0:01:c5:7e:73:8e:f8:a2:22:c8:35:6b:91:d2:34:e7: 6e:44:57:2e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDYYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNTAyMTAx MzUwMDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE4MDAyODBFQTRBMzhB MkUxRURBNjVCNTlDMjFDQTM3NkU2OTk1MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOWCGgqmlWoeeIs40D9/UsIKePwNoQkdn1T+mmQDtDXPz5O4Vg nRN64KrJft4UZ+cCk+94/9VnvFc6m5q+ifN4eNyMI6Da+GmkNbmpGSbMH4CdOhnV m4loe1ZBD4b1Qh/ttqnTmb2/rVTbyOL2J3ofVGZ6A3k6aWdYWnyW26lhclMa56TF nP44nQyU0943JU62ZA5EmJRSkFIxukBcdADgMle/vkeQ5IjQLcZr1pPfDqnC64ps 86mllvfoi+E8d/cxUaGD/pAHk4g4BRRkel4i5rf+/MHtgOJfjlMIiuOIFiMzVjua Vsc11DQDpBtl0giugxo9nD4BYXVpIm4hYE5FAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUGAAoDqSjii4e2mW1nCHKN25plRAwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL0dBQW9EcVNqaWk0ZTJtVzFu Q0hLTjI1cGxSQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJx FbwwDQYJKoZIhvcNAQELBQADggEBAFfScc9MuThdsFbboa8OcE7htiaeaptJ11Oq 1cxyKxMuPZb7FwK79P4Qs3nu/GA2oaeEOM0nSj53X2lyksXw320uGxmFBr0fVjVg jMIObqB/nKlslnV+8kGqJshRxoz0kKekLyeRnZcoXITliNTrWFXX1qA/BqKmhuZH yWGMRQjlS97ciVY4VWaL5Am+Llo0IgKo3OEgiOHTVeFZ0dovNeRF5PndHKhb9OD/ 0Ol+m0aNUfJSqE9x3GDRDKibjUzzXgM9uGzvMi+bYnfKFpVIAeWuN/VLjroTB5Bg hu4XPek1PxtKoHGP7qZ4q9XwwAHFfnOO+KIiyDVrkdI0525EVy4= -----END CERTIFICATE-----Generated at Tue Apr 22 23:22:31 2025 by rpki-client