$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/y0UfvEblBULmFC-0tSI1QxRB7aI.roa File: y0UfvEblBULmFC-0tSI1QxRB7aI.roa (raw, json) Hash identifier: J6V5jhtUciM4PpxIS1Kqzw6Mtx7bWVxHM7OIluUW6L0= Subject key identifier: CB:45:1F:BC:46:E5:05:42:E6:14:2F:B4:B5:22:35:43:14:41:ED:A2 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 117C Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/y0UfvEblBULmFC-0tSI1QxRB7aI.roa Signing time: Mon 10 Feb 2025 14:27:24 +0000 ROA not before: Mon 10 Feb 2025 14:27:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9674 IP address blocks: 106.64.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4476 (0x117c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:24 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CB451FBC46E50542E6142FB4B52235431441EDA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:70:59:d7:a1:0f:7c:16:f3:da:2b:d3:8e:fb: 06:ad:96:bd:ed:0f:0e:f7:62:30:fb:80:0e:4e:2b: 4b:88:35:45:30:48:24:36:23:33:b2:a9:01:e6:81: 7d:af:ca:c6:20:d3:07:1d:0f:3c:f4:80:b3:4d:eb: f7:f5:70:87:e9:5b:e0:21:ae:b9:77:33:6b:73:00: 4f:ca:47:0e:d4:63:7b:3e:59:6e:ab:db:c6:a5:ca: ad:f6:12:d8:81:54:e5:3b:95:05:7e:e8:0c:36:8c: 7d:e0:81:96:2f:b5:f0:84:3c:fa:a8:66:aa:88:75: 81:89:f7:b0:d2:4a:76:91:67:63:fe:1e:3a:59:90: 14:6f:ce:09:86:ec:c7:51:28:fc:d0:4b:42:f4:e3: 35:2b:a9:96:8c:7d:a7:7e:b8:37:32:34:d4:09:b8: f4:d6:c8:22:96:9a:a6:06:0f:99:0a:00:0b:f0:65: a6:e0:3f:67:c0:e3:6e:fa:e0:fa:ed:a8:4b:8c:10: a0:cb:6d:77:a3:dd:fc:8b:87:fe:37:e1:7d:ac:12: 90:70:56:d4:55:27:d0:9e:82:0e:53:fe:a5:8d:dc: 1e:6d:92:1a:da:ab:44:ff:78:67:53:b6:22:3c:93: 1d:bd:05:f9:0a:12:ba:53:3e:bf:ed:6d:6e:7f:97: b8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:45:1F:BC:46:E5:05:42:E6:14:2F:B4:B5:22:35:43:14:41:ED:A2 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/y0UfvEblBULmFC-0tSI1QxRB7aI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.64.0.0/15 Signature Algorithm: sha256WithRSAEncryption 15:7d:3b:81:bf:35:5a:54:af:ea:1b:c4:f0:01:6e:41:d5:8f: d7:e7:71:98:36:83:aa:55:eb:4f:f9:af:84:0c:ba:bf:dd:8d: 59:92:59:8e:9d:80:c1:08:a6:79:a2:5a:c7:86:45:c7:d0:c0: 21:b4:f2:2a:47:1e:2a:8c:c6:63:35:c4:63:bf:dc:f9:d5:68: e5:ee:0e:9e:e8:93:bd:21:ca:8c:8a:62:d3:db:e0:e2:d9:0b: 06:9e:67:8e:af:73:f0:84:75:7d:2e:e3:6a:26:69:fd:a7:9d: 5e:0e:47:a1:7b:5d:09:16:e5:89:5e:49:fb:eb:0b:cb:10:7c: 29:a9:db:9b:2b:70:9e:8a:bd:ac:e9:56:e1:33:61:e3:09:76: cc:c9:86:fe:a4:05:14:9e:e8:3a:14:4b:3d:3b:b7:43:11:f7: 90:91:ed:18:2f:63:e2:14:8e:af:73:dc:6d:8a:1b:74:80:c8: a7:ce:ad:98:6c:7b:7e:37:44:6b:f2:34:f0:5f:92:6f:0e:ed: 97:bb:e5:19:2b:e6:12:34:0e:0a:d2:d0:ce:b4:bc:f6:01:00: 33:33:b0:21:9c:5e:9f:1e:1f:ad:13:66:f4:96:69:ba:4e:cc: 6c:ab:e6:a7:3d:8e:fb:fd:5c:a6:ba:fb:65:b6:da:9e:0c:da: 20:b5:2a:26 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEXwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENCNDUxRkJDNDZFNTA1 NDJFNjE0MkZCNEI1MjIzNTQzMTQ0MUVEQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2cFnXoQ98FvPaK9OO+watlr3tDw73YjD7gA5OK0uINUUwSCQ2 IzOyqQHmgX2vysYg0wcdDzz0gLNN6/f1cIfpW+Ahrrl3M2tzAE/KRw7UY3s+WW6r 28alyq32EtiBVOU7lQV+6Aw2jH3ggZYvtfCEPPqoZqqIdYGJ97DSSnaRZ2P+HjpZ kBRvzgmG7MdRKPzQS0L04zUrqZaMfad+uDcyNNQJuPTWyCKWmqYGD5kKAAvwZabg P2fA42764PrtqEuMEKDLbXej3fyLh/434X2sEpBwVtRVJ9Cegg5T/qWN3B5tkhra q0T/eGdTtiI8kx29BfkKErpTPr/tbW5/l7iZAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUy0UfvEblBULmFC+0tSI1QxRB7aIwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3kwVWZ2RWJsQlVMbUZDLTB0U0kxUXhS QjdhSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwFqQDANBgkq hkiG9w0BAQsFAAOCAQEAFX07gb81WlSv6hvE8AFuQdWP1+dxmDaDqlXrT/mvhAy6 v92NWZJZjp2AwQimeaJax4ZFx9DAIbTyKkceKozGYzXEY7/c+dVo5e4OnuiTvSHK jIpi09vg4tkLBp5njq9z8IR1fS7jaiZp/aedXg5HoXtdCRbliV5J++sLyxB8Kanb mytwnoq9rOlW4TNh4wl2zMmG/qQFFJ7oOhRLPTu3QxH3kJHtGC9j4hSOr3PcbYob dIDIp86tmGx7fjdEa/I08F+Sbw7tl7vlGSvmEjQOCtLQzrS89gEAMzOwIZxenx4f rRNm9JZpuk7MbKvmpz2O+/1cprr7ZbbangzaILUqJg== -----END CERTIFICATE-----Generated at Mon Apr 7 20:49:23 2025 by rpki-client