$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/tIXzxmEC2CBd5NAW-7JQYMMIoC8.roa File: tIXzxmEC2CBd5NAW-7JQYMMIoC8.roa (raw, json) Hash identifier: niIM8OwKkNhZiNuAaOi0qm8RApxHXeWtYYCq01v8m2U= Subject key identifier: B4:85:F3:C6:61:02:D8:20:5D:E4:D0:16:FB:B2:50:60:C3:08:A0:2F Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1255 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/tIXzxmEC2CBd5NAW-7JQYMMIoC8.roa Signing time: Mon 10 Feb 2025 14:28:18 +0000 ROA not before: Mon 10 Feb 2025 14:28:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 210.200.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4693 (0x1255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:18 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B485F3C66102D8205DE4D016FBB25060C308A02F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5a:ca:95:ba:39:8d:ff:d2:d5:ce:33:ac:71: 0b:14:70:75:8e:13:58:b0:da:2a:8d:67:8a:ed:ae: 82:15:86:d7:91:ac:44:72:cd:a7:3d:af:b0:53:5e: dd:17:0e:99:46:b2:23:83:88:2d:52:0f:b9:49:9c: 3a:17:ce:02:09:33:17:aa:0c:91:0a:61:38:fa:6c: de:10:73:6c:95:e7:c3:e1:f4:5d:08:2c:ca:47:7e: 01:4f:af:22:71:b3:43:8c:a9:d3:fe:af:a2:c2:8d: e2:1f:0d:5b:f0:26:60:fd:5a:07:ef:c1:8b:07:6b: ff:6a:c3:0a:87:4a:f1:4b:36:b9:2d:4a:2e:93:45: 24:8f:70:29:4f:d0:f1:60:29:91:eb:6a:d5:2b:a6: 3b:2b:e0:0c:87:f3:51:5b:60:0d:18:3e:69:95:4e: 01:d5:2a:90:96:4a:8f:2f:7a:a9:b1:45:05:79:25: de:b2:43:3c:72:14:d9:48:62:21:60:b6:0c:f1:92: de:90:a5:94:a6:99:8b:5f:32:3c:3d:57:ef:97:e0: 4a:ef:b1:f6:94:3e:fa:86:ca:63:4d:5d:5b:9d:17: 0e:5e:8c:c2:47:90:70:dc:59:69:1f:13:02:82:64: 97:79:0c:cc:12:4c:7e:0e:19:33:3d:b9:89:2b:4e: f9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:85:F3:C6:61:02:D8:20:5D:E4:D0:16:FB:B2:50:60:C3:08:A0:2F X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/tIXzxmEC2CBd5NAW-7JQYMMIoC8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.192.0/18 Signature Algorithm: sha256WithRSAEncryption 98:a9:7f:ff:bf:f4:3e:93:02:02:39:99:9f:7b:e5:b6:c3:c9: ea:70:bb:52:1f:21:29:eb:f8:35:32:61:11:0d:6e:04:3d:55: 9d:55:6f:da:74:20:e9:5b:91:f8:d0:ac:39:66:cc:5d:30:ce: cc:78:a0:d6:2f:cd:be:39:54:1a:31:62:51:93:d5:9e:68:12: ac:5b:50:25:ed:cf:c9:25:d0:94:62:ad:3b:2f:51:89:07:d0: f5:ca:f4:92:ca:c3:f7:b1:8f:00:ce:cf:29:fd:5a:c8:4b:4a: c0:88:34:c6:fc:e2:86:ac:7a:52:79:94:56:ae:df:a0:66:65: 7e:ca:42:0b:86:a9:95:fc:d7:5c:9c:7c:de:d3:d4:3b:02:f5: c8:1b:d0:14:f0:49:b5:5e:90:60:4b:10:cc:2e:9f:e1:c9:7e: 4b:14:b2:db:45:7c:6d:f2:a2:d6:e6:83:07:77:10:df:24:09: 47:6b:a7:10:a9:bd:4d:55:bb:0b:76:44:4c:bf:1c:d0:8c:23: 2f:51:92:81:da:0b:90:01:71:aa:33:3f:80:fc:67:3b:89:69: 36:2c:58:06:84:84:bd:00:b7:51:3c:60:b9:03:64:53:88:1d: d5:89:59:36:48:26:f3:6a:8f:76:e1:8b:f2:e7:c5:84:2a:45: c1:7a:51:f1 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICElUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI0ODVGM0M2NjEwMkQ4 MjA1REU0RDAxNkZCQjI1MDYwQzMwOEEwMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQWsqVujmN/9LVzjOscQsUcHWOE1iw2iqNZ4rtroIVhteRrERy zac9r7BTXt0XDplGsiODiC1SD7lJnDoXzgIJMxeqDJEKYTj6bN4Qc2yV58Ph9F0I LMpHfgFPryJxs0OMqdP+r6LCjeIfDVvwJmD9WgfvwYsHa/9qwwqHSvFLNrktSi6T RSSPcClP0PFgKZHratUrpjsr4AyH81FbYA0YPmmVTgHVKpCWSo8veqmxRQV5Jd6y QzxyFNlIYiFgtgzxkt6QpZSmmYtfMjw9V++X4ErvsfaUPvqGymNNXVudFw5ejMJH kHDcWWkfEwKCZJd5DMwSTH4OGTM9uYkrTvnrAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUtIXzxmEC2CBd5NAW+7JQYMMIoC8wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3RJWHp4bUVDMkNCZDVOQVctN0pRWU1N SW9DOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSyMAwDQYJ KoZIhvcNAQELBQADggEBAJipf/+/9D6TAgI5mZ975bbDyepwu1IfISnr+DUyYREN bgQ9VZ1Vb9p0IOlbkfjQrDlmzF0wzsx4oNYvzb45VBoxYlGT1Z5oEqxbUCXtz8kl 0JRirTsvUYkH0PXK9JLKw/exjwDOzyn9WshLSsCINMb84oaselJ5lFau36BmZX7K QguGqZX811ycfN7T1DsC9cgb0BTwSbVekGBLEMwun+HJfksUsttFfG3yotbmgwd3 EN8kCUdrpxCpvU1Vuwt2REy/HNCMIy9RkoHaC5ABcaozP4D8ZzuJaTYsWAaEhL0A t1E8YLkDZFOIHdWJWTZIJvNqj3bhi/LnxYQqRcF6UfE= -----END CERTIFICATE-----Generated at Mon Apr 7 20:49:20 2025 by rpki-client