$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/GLKDThE_7VN466wQqSfROrBEvak.roa File: GLKDThE_7VN466wQqSfROrBEvak.roa (raw, json) Hash identifier: KD3BPA3ZUO1oX1YoRi505oPlI4/Ly67aoe4F94SMIsg= Subject key identifier: 18:B2:83:4E:11:3F:ED:53:78:EB:AC:10:A9:27:D1:3A:B0:44:BD:A9 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1184 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/GLKDThE_7VN466wQqSfROrBEvak.roa Signing time: Mon 10 Feb 2025 14:27:26 +0000 ROA not before: Mon 10 Feb 2025 14:27:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 202.178.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4484 (0x1184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=18B2834E113FED5378EBAC10A927D13AB044BDA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ac:1f:4d:60:7c:30:d4:ca:79:30:07:1f:26: 1e:84:f2:e7:b5:b3:f7:46:47:07:9a:b0:43:4a:2c: c2:ac:e9:8c:44:6e:38:54:3a:58:c5:c1:f2:c7:7a: 69:b1:7b:96:87:27:8f:06:bd:3b:cf:a6:08:ae:ae: 75:52:ec:11:91:84:64:f1:24:3e:67:17:44:1b:d5: f8:4e:ba:c0:f1:ee:28:03:d2:b2:c0:f4:b6:32:ff: cf:e7:d4:73:28:5e:bc:a3:0c:91:39:54:6f:79:e6: a7:c7:1d:73:b6:ad:65:27:05:3b:28:d2:ec:a7:8d: a4:f7:22:6b:3d:33:70:d1:f7:28:af:08:c0:f8:d4: f6:8f:23:89:ca:7a:1c:e4:e8:52:d5:79:30:77:f4: 42:e7:df:03:fb:85:10:41:f6:ac:cc:e6:d8:2b:e5: 6b:e6:98:1b:d3:dc:69:04:54:4a:e3:36:b3:0f:69: 76:3c:a3:8e:dd:fc:48:d0:00:cb:0a:35:5c:35:88: c7:85:56:6f:b5:9f:38:a4:a5:15:56:c7:54:23:51: 21:ac:63:82:f1:db:07:8f:12:96:2b:07:64:1e:d3: 21:7f:6e:ea:4f:63:a9:fa:d8:85:50:03:41:da:2b: 8e:8e:6b:95:df:19:3b:2b:85:39:ad:d6:44:68:1e: 16:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B2:83:4E:11:3F:ED:53:78:EB:AC:10:A9:27:D1:3A:B0:44:BD:A9 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/GLKDThE_7VN466wQqSfROrBEvak.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.178.128.0/17 Signature Algorithm: sha256WithRSAEncryption 35:7d:f8:c8:d3:bd:56:d5:88:ad:c7:9c:0f:67:b4:a2:d9:26: 5c:49:ee:74:c1:a7:98:8d:46:69:5a:b9:36:9c:b4:ef:f8:b0: 56:31:6f:ca:2f:1a:b3:31:ab:1e:02:af:0e:7a:10:a1:f3:81: 04:6d:5a:6d:43:5c:96:3b:64:71:28:82:fe:9d:e2:67:e4:0b: 59:f5:3a:41:9a:0d:90:14:78:f6:a7:dd:36:1d:5e:86:03:eb: bb:ad:4d:7f:13:05:70:c6:6c:ed:6b:43:e0:98:f5:63:c8:62: 93:00:5c:aa:57:68:b5:0d:10:e5:00:b8:aa:5e:e6:bb:fc:2c: df:89:4d:14:f7:89:70:38:2d:4a:9f:04:19:93:a8:82:e0:c7: c7:aa:e5:1e:d5:0b:cc:27:fd:8c:07:78:a7:2c:fe:87:27:32: 9e:c7:7a:60:09:5c:34:b2:2d:5d:ec:a7:8b:44:ce:73:1a:20: 90:b0:ba:fa:84:d3:f9:d1:62:4e:af:21:19:92:08:a7:39:b1: 04:1d:c3:57:d4:a7:f8:75:09:00:24:67:fb:45:35:ba:e8:b6: 6b:e2:cf:ae:3a:97:e5:50:da:8b:73:9e:42:97:36:dd:e0:19: 9e:e4:a5:72:8a:50:a7:f2:49:7f:06:2f:e1:2e:ae:68:2e:e6: a5:b0:7a:af -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEYQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE4QjI4MzRFMTEzRkVE NTM3OEVCQUMxMEE5MjdEMTNBQjA0NEJEQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcrB9NYHww1Mp5MAcfJh6E8ue1s/dGRweasENKLMKs6YxEbjhU OljFwfLHemmxe5aHJ48GvTvPpgiurnVS7BGRhGTxJD5nF0Qb1fhOusDx7igD0rLA 9LYy/8/n1HMoXryjDJE5VG955qfHHXO2rWUnBTso0uynjaT3Ims9M3DR9yivCMD4 1PaPI4nKehzk6FLVeTB39ELn3wP7hRBB9qzM5tgr5WvmmBvT3GkEVErjNrMPaXY8 o47d/EjQAMsKNVw1iMeFVm+1nzikpRVWx1QjUSGsY4Lx2wePEpYrB2Qe0yF/bupP Y6n62IVQA0HaK46Oa5XfGTsrhTmt1kRoHhbLAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUGLKDThE/7VN466wQqSfROrBEvakwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0dMS0RUaEVfN1ZONDY2d1FxU2ZST3JC RXZhay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfKsoAwDQYJ KoZIhvcNAQELBQADggEBADV9+MjTvVbViK3HnA9ntKLZJlxJ7nTBp5iNRmlauTac tO/4sFYxb8ovGrMxqx4Crw56EKHzgQRtWm1DXJY7ZHEogv6d4mfkC1n1OkGaDZAU ePan3TYdXoYD67utTX8TBXDGbO1rQ+CY9WPIYpMAXKpXaLUNEOUAuKpe5rv8LN+J TRT3iXA4LUqfBBmTqILgx8eq5R7VC8wn/YwHeKcs/ocnMp7HemAJXDSyLV3sp4tE znMaIJCwuvqE0/nRYk6vIRmSCKc5sQQdw1fUp/h1CQAkZ/tFNbrotmviz646l+VQ 2otznkKXNt3gGZ7kpXKKUKfySX8GL+Eurmgu5qWweq8= -----END CERTIFICATE-----Generated at Mon Apr 7 20:54:09 2025 by rpki-client