$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/J0I3uDp4KWX8pFXelpwvmTSBTOw.roa File: J0I3uDp4KWX8pFXelpwvmTSBTOw.roa (raw, json) Hash identifier: czszQDnBqvbtpZDcCukKvEBsz2eh8EUA/v3V2f5zM54= Subject key identifier: 27:42:37:B8:3A:78:29:65:FC:A4:55:DE:96:9C:2F:99:34:81:4C:EC Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 11E0 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/J0I3uDp4KWX8pFXelpwvmTSBTOw.roa Signing time: Mon 10 Feb 2025 14:27:50 +0000 ROA not before: Mon 10 Feb 2025 14:27:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9674 IP address blocks: 211.77.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4576 (0x11e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:50 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=274237B83A782965FCA455DE969C2F9934814CEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ce:c8:93:6c:2b:f3:66:52:ea:12:a4:13:78: 22:c4:f6:19:4d:86:fb:aa:42:69:e8:12:76:aa:f4: 7a:ea:e3:32:3f:03:d6:52:50:5e:83:c0:a8:91:f5: 01:93:31:62:39:87:ac:fb:b6:63:a6:4f:0d:d4:4c: 5e:e6:d7:5e:f6:67:c0:e8:12:a3:cd:cb:76:d7:7b: 88:df:4e:40:2a:e2:7a:f4:fa:62:de:5b:89:c6:16: 62:4a:94:09:03:00:fb:b9:9b:3c:db:2d:d9:fa:63: 0f:9f:9d:7a:4d:b7:0e:1d:37:75:6c:26:58:35:10: 50:53:36:9f:cb:7a:ad:0f:52:3d:91:ad:76:d4:75: 90:7e:81:2a:3e:cc:c0:d5:cc:52:89:f5:98:3a:21: d2:04:e0:84:40:f4:5b:77:5e:90:52:b6:31:06:25: 07:7b:5f:85:56:a1:54:3d:f0:d3:f6:e0:85:b4:93: c3:60:f1:50:fc:dc:75:74:90:dc:9d:7a:58:93:60: cc:f3:20:fa:3c:06:6d:e2:ca:7a:37:3f:a7:55:7b: 55:74:1e:ba:09:60:e9:d7:ac:47:89:9e:33:1b:f2: 41:cc:68:cc:bd:f3:5a:8d:7c:b4:e7:94:84:4a:1d: e9:19:1d:3a:b8:36:be:50:a8:b1:bd:19:ef:fc:09: 46:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:42:37:B8:3A:78:29:65:FC:A4:55:DE:96:9C:2F:99:34:81:4C:EC X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/J0I3uDp4KWX8pFXelpwvmTSBTOw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.77.128.0/17 Signature Algorithm: sha256WithRSAEncryption 4d:4e:6e:0b:3e:24:c6:01:e5:f9:16:84:4d:15:69:88:21:69: 48:1c:95:2a:c0:80:dd:2b:06:56:0f:fc:ef:64:21:74:f4:ba: 55:01:e4:4f:ae:45:f3:f3:58:8f:a7:14:dd:4a:4b:a5:af:dc: 1b:7c:ea:42:31:5e:81:aa:a4:e2:6c:85:11:f2:17:17:ed:3a: ac:6c:98:4e:91:31:89:b4:62:80:79:b2:bc:4b:e6:e1:fd:a4: c5:35:4d:3a:b9:d7:ac:8a:d5:75:e6:f1:2c:7c:97:18:23:de: 2e:f6:46:ce:a5:1a:c0:db:e4:2e:6b:b5:fe:14:9d:ca:ef:5f: e0:3a:7a:de:b1:1b:4e:b3:43:0d:35:f3:71:ab:dd:0d:8a:65: 13:8a:2a:65:09:d6:6b:1d:02:18:61:d8:bb:b3:e8:ef:59:0e: aa:ef:56:8c:8b:de:31:c6:3d:0c:31:b8:e3:a8:bc:6f:3b:3f: 19:c8:6e:8f:2c:55:8d:ce:5c:27:79:38:81:85:72:70:42:2c: 40:37:ad:27:ea:0f:f9:e8:1c:be:16:01:c7:2d:23:3a:64:bd: 9a:a7:b8:07:23:8b:ae:94:fc:fa:12:7b:ca:ba:48:f6:00:0e: b7:53:c7:9e:c7:c2:40:8b:8e:0c:d1:f4:89:ff:9d:f5:ca:57: 68:72:a9:0a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEeAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI3NDIzN0I4M0E3ODI5 NjVGQ0E0NTVERTk2OUMyRjk5MzQ4MTRDRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7zsiTbCvzZlLqEqQTeCLE9hlNhvuqQmnoEnaq9Hrq4zI/A9ZS UF6DwKiR9QGTMWI5h6z7tmOmTw3UTF7m1172Z8DoEqPNy3bXe4jfTkAq4nr0+mLe W4nGFmJKlAkDAPu5mzzbLdn6Yw+fnXpNtw4dN3VsJlg1EFBTNp/Leq0PUj2RrXbU dZB+gSo+zMDVzFKJ9Zg6IdIE4IRA9Ft3XpBStjEGJQd7X4VWoVQ98NP24IW0k8Ng 8VD83HV0kNydeliTYMzzIPo8Bm3iyno3P6dVe1V0HroJYOnXrEeJnjMb8kHMaMy9 81qNfLTnlIRKHekZHTq4Nr5QqLG9Ge/8CUZTAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUJ0I3uDp4KWX8pFXelpwvmTSBTOwwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0owSTN1RHA0S1dYOHBGWGVscHd2bVRT QlRPdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfTTYAwDQYJ KoZIhvcNAQELBQADggEBAE1Obgs+JMYB5fkWhE0VaYghaUgclSrAgN0rBlYP/O9k IXT0ulUB5E+uRfPzWI+nFN1KS6Wv3Bt86kIxXoGqpOJshRHyFxftOqxsmE6RMYm0 YoB5srxL5uH9pMU1TTq516yK1XXm8Sx8lxgj3i72Rs6lGsDb5C5rtf4UncrvX+A6 et6xG06zQw0183Gr3Q2KZROKKmUJ1msdAhhh2Luz6O9ZDqrvVoyL3jHGPQwxuOOo vG87PxnIbo8sVY3OXCd5OIGFcnBCLEA3rSfqD/noHL4WAcctIzpkvZqnuAcji66U /PoSe8q6SPYADrdTx57HwkCLjgzR9In/nfXKV2hyqQo= -----END CERTIFICATE-----Generated at Mon Apr 7 20:49:29 2025 by rpki-client