$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/BQF-mcMQMDsbGPaYligBLxUJ6hU.roa File: BQF-mcMQMDsbGPaYligBLxUJ6hU.roa (raw, json) Hash identifier: 3V1kpjJ3Fdi2U8u2AOPZ4RxZTLzudoyge59Q3uwdsZU= Subject key identifier: 05:01:7E:99:C3:10:30:3B:1B:18:F6:98:96:28:01:2F:15:09:EA:15 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 11E9 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/BQF-mcMQMDsbGPaYligBLxUJ6hU.roa Signing time: Mon 10 Feb 2025 14:27:52 +0000 ROA not before: Mon 10 Feb 2025 14:27:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24154 IP address blocks: 60.244.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4585 (0x11e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=05017E99C310303B1B18F6989628012F1509EA15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c0:da:58:68:6c:dc:9b:ba:19:ca:e7:9e:cc: c9:90:66:90:58:1c:3d:8a:80:b5:ab:38:1c:3d:a0: a8:87:b9:72:f7:0f:4c:61:6a:77:7b:71:a9:0d:ef: 46:fb:47:1c:71:ed:e0:73:62:19:1b:49:a7:63:33: a6:e9:b2:66:19:ed:d8:81:8a:90:51:bf:1e:9b:e2: f9:5a:d0:61:4b:01:11:5a:c3:f5:29:b5:e2:2d:ff: e4:32:10:20:ed:e4:3a:e7:8e:11:68:db:12:2f:6f: c9:ca:64:d3:ed:56:46:02:10:1f:14:15:ec:48:a0: 21:c5:05:32:09:f4:f2:94:a2:13:1d:54:03:56:dc: d6:8c:11:0a:43:d1:44:8b:98:ed:b9:5d:6c:d4:88: 62:8c:3e:ef:a1:2c:42:71:fd:81:5a:2f:00:83:91: 95:9c:2f:0e:92:d7:f1:42:22:85:55:a6:20:f5:e5: 0d:6c:05:e8:df:12:61:c3:e1:fb:8d:c6:b9:c8:28: 50:cd:5b:56:6b:c4:0c:2e:c2:85:98:1d:77:81:07: 06:d4:bd:87:ea:26:d8:5d:b3:6d:62:0f:24:af:17: 5b:aa:b7:e4:23:0d:19:52:ff:c3:f2:84:3b:d6:4f: 88:02:4b:39:b0:c7:45:41:da:b2:f3:e5:9d:48:47: a7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:01:7E:99:C3:10:30:3B:1B:18:F6:98:96:28:01:2F:15:09:EA:15 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/BQF-mcMQMDsbGPaYligBLxUJ6hU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.244.0.0/24 Signature Algorithm: sha256WithRSAEncryption 08:c4:bb:6e:fa:6e:10:1f:85:48:48:a6:27:bb:bc:a0:e4:48: 8d:9a:be:6e:3e:dd:15:96:c7:0c:0a:40:cd:6a:05:a0:e5:3a: 83:5f:92:5d:47:f9:26:b2:e3:bd:8e:76:df:1a:3a:10:fd:75: d3:14:fe:9e:e5:e1:25:91:7f:b6:09:73:4a:63:7c:c2:21:a7: 22:83:7f:58:b6:f1:c4:73:2c:14:7e:15:33:c7:0f:25:88:74: 6a:ef:00:2a:c9:d7:18:d1:2f:bf:d7:29:3d:4c:58:41:ed:27: 4c:b4:9f:68:1c:88:c4:1e:a6:8d:6c:ed:26:8a:98:f5:30:c7: 9d:80:03:2d:d2:19:9c:d8:e0:6c:30:1f:94:3b:60:95:dc:c7: 9a:4f:23:c8:21:5f:45:11:01:bb:de:d9:5a:1c:4a:53:63:37: c2:aa:0b:be:2d:fc:9c:ac:c0:5d:5b:ca:b6:4a:0f:e9:ec:6c: 61:5b:ee:7f:73:f7:de:19:10:ec:21:23:0d:14:63:8a:cb:9b: f7:c9:2a:a8:26:bc:67:9f:4f:95:0b:16:6f:e3:3b:18:b5:81: 1d:98:e5:d1:20:4c:48:fe:81:75:07:08:4a:04:7b:7e:18:db: 9b:0a:8c:d2:e8:ce:3f:0e:1f:35:f9:62:21:0e:55:18:aa:9d: 1a:43:21:87 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA1MDE3RTk5QzMxMDMw M0IxQjE4RjY5ODk2MjgwMTJGMTUwOUVBMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRwNpYaGzcm7oZyueezMmQZpBYHD2KgLWrOBw9oKiHuXL3D0xh and7cakN70b7Rxxx7eBzYhkbSadjM6bpsmYZ7diBipBRvx6b4vla0GFLARFaw/Up teIt/+QyECDt5DrnjhFo2xIvb8nKZNPtVkYCEB8UFexIoCHFBTIJ9PKUohMdVANW 3NaMEQpD0USLmO25XWzUiGKMPu+hLEJx/YFaLwCDkZWcLw6S1/FCIoVVpiD15Q1s BejfEmHD4fuNxrnIKFDNW1ZrxAwuwoWYHXeBBwbUvYfqJthds21iDySvF1uqt+Qj DRlS/8PyhDvWT4gCSzmwx0VB2rLz5Z1IR6e3AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUBQF+mcMQMDsbGPaYligBLxUJ6hUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0JRRi1tY01RTURzYkdQYVlsaWdCTHhV SjZoVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA89AAwDQYJ KoZIhvcNAQELBQADggEBAAjEu276bhAfhUhIpie7vKDkSI2avm4+3RWWxwwKQM1q BaDlOoNfkl1H+Say472Odt8aOhD9ddMU/p7l4SWRf7YJc0pjfMIhpyKDf1i28cRz LBR+FTPHDyWIdGrvACrJ1xjRL7/XKT1MWEHtJ0y0n2gciMQepo1s7SaKmPUwx52A Ay3SGZzY4GwwH5Q7YJXcx5pPI8ghX0URAbve2VocSlNjN8KqC74t/JyswF1byrZK D+nsbGFb7n9z994ZEOwhIw0UY4rLm/fJKqgmvGefT5ULFm/jOxi1gR2Y5dEgTEj+ gXUHCEoEe34Y25sKjNLozj8OHzX5YiEOVRiqnRpDIYc= -----END CERTIFICATE-----Generated at Mon Apr 7 20:49:23 2025 by rpki-client