$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Swf13JHWju2bxmpFCIF6LPBdXY0.roa File: Swf13JHWju2bxmpFCIF6LPBdXY0.roa (raw, json) Hash identifier: vQoMliUC4BQi8uZSD0zhUF9ee562chiG+T5I+nx1baw= Subject key identifier: 4B:07:F5:DC:91:D6:8E:ED:9B:C6:6A:45:08:81:7A:2C:F0:5D:5D:8D Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 11A2 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Swf13JHWju2bxmpFCIF6LPBdXY0.roa Signing time: Mon 10 Feb 2025 14:27:34 +0000 ROA not before: Mon 10 Feb 2025 14:27:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9674 IP address blocks: 118.231.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 03:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4514 (0x11a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:34 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4B07F5DC91D68EED9BC66A4508817A2CF05D5D8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a1:94:60:81:71:ae:5b:fd:54:50:17:09:8c: ce:6c:fd:07:2b:51:34:6f:d0:1a:8b:35:67:a4:8f: 17:d4:e0:4a:e7:ae:1a:db:2c:7d:ea:86:c3:e0:d4: 49:78:00:43:af:fc:f6:48:53:3d:6e:28:af:80:55: 64:ea:06:8f:b2:0f:2e:95:fc:fa:09:9b:d5:8d:15: ee:8a:d2:56:be:e8:ca:8c:81:7a:7a:36:a2:71:d0: ca:c3:1f:78:05:24:3a:af:7d:6a:76:cf:d4:2a:03: 4e:9c:9c:11:49:fb:8d:d0:be:f6:e6:38:7c:25:f3: 6d:36:e2:d6:4c:21:f7:1b:53:f6:ab:71:69:f3:f8: 6c:ff:74:21:e6:d7:c8:e4:c4:23:bb:b3:6a:c6:ec: bb:c2:a7:a5:b4:18:aa:46:42:c9:3c:ed:92:9b:7c: 03:1a:16:65:f1:2e:3a:ed:4f:0b:23:81:f2:24:0b: 2b:82:fe:f7:99:2a:4c:65:e3:9f:60:15:21:a0:d0: b7:6d:41:78:e9:88:77:e3:08:96:57:7c:9b:02:06: 5d:af:fa:68:41:7d:c1:f1:88:e9:80:ee:04:f2:9a: 38:26:86:51:a5:7d:45:00:ff:81:f6:1a:66:41:05: 1a:48:a3:e5:5a:bc:b1:a4:2a:50:45:42:8b:2d:7e: 3c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:07:F5:DC:91:D6:8E:ED:9B:C6:6A:45:08:81:7A:2C:F0:5D:5D:8D X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Swf13JHWju2bxmpFCIF6LPBdXY0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.231.0.0/16 Signature Algorithm: sha256WithRSAEncryption 75:6c:96:5a:28:36:59:3d:d9:dd:04:a1:5b:6d:9b:5e:43:36: d2:50:c2:2b:54:cc:28:11:43:55:73:4c:f3:44:ba:fe:b3:b9: 35:d9:50:84:d9:7c:1f:ae:26:78:11:cb:9e:35:e8:38:98:83: ef:a0:3d:73:fe:61:98:16:89:83:0b:95:08:84:07:3f:f8:4c: e2:b8:5f:35:07:9d:6e:a0:d0:02:5d:6f:dd:5e:a4:2a:a5:99: e4:20:b4:5e:02:e4:04:47:2e:67:8f:de:d6:cb:a7:b2:00:f0: 4f:a1:77:5a:7c:e0:1a:d1:6d:40:e6:3d:c5:f2:23:26:7a:0b: 9f:89:ef:6a:4b:39:fa:b3:8d:79:60:6f:e8:d4:2b:b0:2e:4f: 1d:02:af:4c:2f:e3:8a:98:7c:fd:9d:dd:05:8c:0c:f3:79:ce: 7c:6e:11:6c:7d:88:b5:ae:a3:81:e1:9a:32:50:bb:c5:c5:ce: b9:98:82:bb:37:58:dd:02:1d:59:e3:c6:dc:07:2c:c2:f2:81: 5a:49:d5:a6:00:06:9e:0e:29:b9:aa:23:e8:9d:19:f8:f1:45: d7:6e:53:aa:62:4c:bb:f7:bf:04:32:e8:49:63:e2:53:78:90: e7:49:c1:b4:d5:5f:3d:6d:dc:ec:c0:a7:8d:ce:1b:aa:9c:16: 1e:e4:00:d3 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEaIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3MzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRCMDdGNURDOTFENjhF RUQ5QkM2NkE0NTA4ODE3QTJDRjA1RDVEOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/oZRggXGuW/1UUBcJjM5s/QcrUTRv0BqLNWekjxfU4Ernrhrb LH3qhsPg1El4AEOv/PZIUz1uKK+AVWTqBo+yDy6V/PoJm9WNFe6K0la+6MqMgXp6 NqJx0MrDH3gFJDqvfWp2z9QqA06cnBFJ+43QvvbmOHwl82024tZMIfcbU/arcWnz +Gz/dCHm18jkxCO7s2rG7LvCp6W0GKpGQsk87ZKbfAMaFmXxLjrtTwsjgfIkCyuC /veZKkxl459gFSGg0LdtQXjpiHfjCJZXfJsCBl2v+mhBfcHxiOmA7gTymjgmhlGl fUUA/4H2GmZBBRpIo+VavLGkKlBFQostfjz/AgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUSwf13JHWju2bxmpFCIF6LPBdXY0wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1N3ZjEzSkhXanUyYnhtcEZDSUY2TFBC ZFhZMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwB25zANBgkq hkiG9w0BAQsFAAOCAQEAdWyWWig2WT3Z3QShW22bXkM20lDCK1TMKBFDVXNM80S6 /rO5NdlQhNl8H64meBHLnjXoOJiD76A9c/5hmBaJgwuVCIQHP/hM4rhfNQedbqDQ Al1v3V6kKqWZ5CC0XgLkBEcuZ4/e1sunsgDwT6F3WnzgGtFtQOY9xfIjJnoLn4nv aks5+rONeWBv6NQrsC5PHQKvTC/jiph8/Z3dBYwM83nOfG4RbH2Ita6jgeGaMlC7 xcXOuZiCuzdY3QIdWePG3AcswvKBWknVpgAGng4puaoj6J0Z+PFF125TqmJMu/e/ BDLoSWPiU3iQ50nBtNVfPW3c7MCnjc4bqpwWHuQA0w== -----END CERTIFICATE-----Generated at Tue Apr 8 00:34:54 2025 by rpki-client