$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/hzv4EEas43jCwLzp0wSnoo8akNY.roa File: hzv4EEas43jCwLzp0wSnoo8akNY.roa (raw, json) Hash identifier: 3Zz2yW5Phvvn17gFA8E8Wtat3uxbHG4VkB6LDgpXznI= Subject key identifier: 87:3B:F8:10:46:AC:E3:78:C2:C0:BC:E9:D3:04:A7:A2:8F:1A:90:D6 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1289 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/hzv4EEas43jCwLzp0wSnoo8akNY.roa Signing time: Mon 10 Feb 2025 14:28:31 +0000 ROA not before: Mon 10 Feb 2025 14:28:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 218.35.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4745 (0x1289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=873BF81046ACE378C2C0BCE9D304A7A28F1A90D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bd:ea:43:51:33:2f:77:fd:9e:9d:e7:29:2c: d7:58:f8:c6:30:c9:66:db:a8:e3:46:9e:55:ff:75: 7f:46:20:55:16:4f:ed:2a:82:bb:1b:f7:ee:db:2b: 6d:88:1f:6c:c5:c9:05:da:1d:32:a8:dc:88:f8:bf: ce:48:7b:ae:03:13:10:e2:1d:cc:91:57:d1:b9:54: ff:89:7d:d5:ad:f1:41:be:77:c9:6b:f3:01:5b:8f: 39:0c:dd:bd:96:a7:a8:0b:95:2e:87:1c:b1:f5:a3: 48:28:b6:5a:b1:f9:d0:36:98:49:dc:8b:d1:d8:94: 55:a9:50:7c:04:01:e7:a2:c0:68:47:21:6b:d3:39: b2:a0:72:d5:09:c9:63:a9:f5:e4:27:91:c7:b2:37: 5e:a6:4f:f8:61:3d:75:2d:7b:e2:bd:6e:7e:50:e7: 81:5a:24:35:e1:8b:21:2b:76:2a:c8:fe:e6:5c:97: 39:a2:8d:28:e0:9e:a1:5a:4e:e7:c2:c7:98:a5:13: 78:a9:72:ca:34:1b:d5:9e:2c:04:9e:f5:9f:8f:c8: 77:d7:9b:31:a7:c2:1e:dc:b0:1a:e5:45:c6:67:fe: 65:1f:8d:48:57:2c:2f:05:cc:d5:d0:13:ff:75:6e: 06:c5:c8:25:42:4a:3d:b2:0e:12:f5:81:2c:68:87: 2f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3B:F8:10:46:AC:E3:78:C2:C0:BC:E9:D3:04:A7:A2:8F:1A:90:D6 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/hzv4EEas43jCwLzp0wSnoo8akNY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.35.24.0/23 Signature Algorithm: sha256WithRSAEncryption a2:c9:d0:1d:eb:13:e4:78:72:7f:56:a6:04:8e:6d:2b:89:b0: 60:d3:d0:ac:68:be:87:f3:7c:ec:79:58:d9:c8:8f:c5:3e:1f: 7a:c6:24:30:49:4b:5d:88:ec:f0:15:b8:6e:b7:c3:71:7a:4f: 32:b7:3e:00:16:b5:c2:a1:7a:53:b7:08:02:c5:fb:bf:fe:c2: 7a:dc:15:54:dc:f7:56:ca:b0:04:e8:16:cb:8b:44:b2:00:0f: 76:f1:c6:96:aa:fe:08:b8:04:51:59:ea:35:18:33:65:39:51: d6:ab:7b:c3:e6:a9:fc:3d:5f:59:65:bc:51:24:05:76:9c:21: 25:2d:fc:6b:bc:34:41:4e:4e:52:8e:d6:ea:47:3f:87:22:f3: 04:23:19:31:ec:21:dc:fc:93:ee:2c:44:ad:e2:ba:65:b6:8c: 77:89:c1:5d:0d:d2:02:e0:02:b9:54:2b:6f:0f:94:44:4f:ea: d9:2a:97:63:46:d9:43:7b:03:c6:9b:4f:d2:0a:98:a5:cf:75: 58:06:86:53:41:f5:23:e5:19:58:c8:6c:85:e2:9a:5b:80:07: 8e:f6:31:27:97:a1:ee:a6:57:11:5e:a4:58:ac:24:87:e7:af: 90:5c:a6:9a:51:95:8a:17:b5:0b:55:e3:c3:c2:3b:9e:c9:f7: 3a:68:23:fb -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEokwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg3M0JGODEwNDZBQ0Uz NzhDMkMwQkNFOUQzMDRBN0EyOEYxQTkwRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEvepDUTMvd/2enecpLNdY+MYwyWbbqONGnlX/dX9GIFUWT+0q grsb9+7bK22IH2zFyQXaHTKo3Ij4v85Ie64DExDiHcyRV9G5VP+JfdWt8UG+d8lr 8wFbjzkM3b2Wp6gLlS6HHLH1o0gotlqx+dA2mEnci9HYlFWpUHwEAeeiwGhHIWvT ObKgctUJyWOp9eQnkceyN16mT/hhPXUte+K9bn5Q54FaJDXhiyErdirI/uZclzmi jSjgnqFaTufCx5ilE3ipcso0G9WeLASe9Z+PyHfXmzGnwh7csBrlRcZn/mUfjUhX LC8FzNXQE/91bgbFyCVCSj2yDhL1gSxohy8tAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUhzv4EEas43jCwLzp0wSnoo8akNYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2h6djRFRWFzNDNqQ3dMenAwd1Nub284 YWtOWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHaIxgwDQYJ KoZIhvcNAQELBQADggEBAKLJ0B3rE+R4cn9WpgSObSuJsGDT0KxovofzfOx5WNnI j8U+H3rGJDBJS12I7PAVuG63w3F6TzK3PgAWtcKhelO3CALF+7/+wnrcFVTc91bK sAToFsuLRLIAD3bxxpaq/gi4BFFZ6jUYM2U5Udare8Pmqfw9X1llvFEkBXacISUt /Gu8NEFOTlKO1upHP4ci8wQjGTHsIdz8k+4sRK3iumW2jHeJwV0N0gLgArlUK28P lERP6tkql2NG2UN7A8abT9IKmKXPdVgGhlNB9SPlGVjIbIXimluAB472MSeXoe6m VxFepFisJIfnr5BcpppRlYoXtQtV48PCO57J9zpoI/s= -----END CERTIFICATE-----Generated at Mon Apr 7 20:56:42 2025 by rpki-client