$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/BK3AWdCqzOiHMubiZggS1QOsyfo.roa File: BK3AWdCqzOiHMubiZggS1QOsyfo.roa (raw, json) Hash identifier: Qvijy0VMfYClJFi/IsDcmFR0yqI9zbjyPvRNfsB51u8= Subject key identifier: 04:AD:C0:59:D0:AA:CC:E8:87:32:E6:E2:66:08:12:D5:03:AC:C9:FA Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Certificate serial: 0D16 Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/BK3AWdCqzOiHMubiZggS1QOsyfo.roa Signing time: Mon 10 Feb 2025 14:08:19 +0000 ROA not before: Mon 10 Feb 2025 14:08:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4782 IP address blocks: 117.56.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3350 (0xd16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Validity Not Before: Feb 10 14:08:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=04ADC059D0AACCE88732E6E2660812D503ACC9FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fc:ff:80:47:0d:08:b9:c8:d1:d5:b6:f7:2d: 44:b5:99:24:15:eb:29:a9:e8:21:d9:87:df:1b:b7: 83:c6:85:f1:83:a3:04:b4:ef:49:c0:e5:18:a1:ce: a7:47:b2:a9:58:b6:4a:b5:36:ae:5b:75:9a:31:c0: 30:1e:57:45:f1:fe:1b:aa:99:27:51:8b:2a:58:15: 3b:a0:a8:5d:bb:1b:ed:8a:61:6b:c5:84:16:d8:03: 29:f6:f2:08:62:9b:13:b5:2a:b5:f8:07:36:5d:ad: 4b:33:05:8e:84:7b:4f:00:ff:c7:2e:0c:94:55:ff: 00:2c:36:9f:aa:32:74:84:b8:74:3b:09:14:7e:67: d9:5f:d1:5b:83:20:6e:c5:fc:24:20:de:b5:09:96: be:85:4f:20:fe:10:f7:eb:ca:d1:fc:c0:dd:14:f7: 31:1c:be:25:a7:1d:19:79:12:38:d4:f2:6d:45:2c: 06:36:c7:47:4d:a5:d8:0b:6a:07:16:c5:a7:23:21: 10:33:20:0b:00:ef:0b:a8:04:7a:cd:de:ac:ca:3d: 48:a4:70:63:7f:c2:44:cd:67:40:3d:d4:f7:56:28: 20:01:69:91:60:ec:24:18:e8:84:d1:ec:70:a7:d2: 2c:23:b7:01:17:5e:4f:2f:72:98:dd:bd:b9:c9:9a: 09:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AD:C0:59:D0:AA:CC:E8:87:32:E6:E2:66:08:12:D5:03:AC:C9:FA X509v3 Authority Key Identifier: keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/BK3AWdCqzOiHMubiZggS1QOsyfo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 117.56.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3a:5a:7a:50:f2:a4:0f:df:f6:f6:67:79:f4:86:9f:3e:16:5a: 69:e7:77:7a:00:f2:cc:45:f3:c6:bf:9e:ce:7c:ed:cb:7a:8f: 86:b4:b1:27:6f:5d:a7:75:3c:92:09:f7:05:44:79:7a:00:6c: ec:89:d9:e5:01:4f:20:5a:d5:b6:98:67:cf:cc:05:b9:c3:33: 27:3e:7d:65:8e:7e:51:cb:14:44:ff:fe:6b:df:39:07:20:7d: ef:4d:fd:18:90:e7:53:81:c5:96:47:96:bf:b1:50:44:64:d4: 47:4a:89:a0:fa:3e:46:89:09:04:2c:d9:e7:dd:14:ac:f2:b9: 94:ee:bc:de:0f:f8:8a:68:79:8e:82:ce:79:47:8d:44:7e:6f: ca:81:1b:47:1d:7f:83:66:b0:05:9d:73:75:3d:d2:fe:30:37: 56:5c:64:58:2d:c0:1f:25:57:f6:c0:db:a2:3f:bf:5c:61:94: 46:28:af:5e:9f:d5:98:6d:d1:3c:bf:b1:b9:f0:e7:c2:48:86: 5a:d9:47:bc:dd:76:4e:5d:c9:da:b3:36:9a:d2:de:d5:ff:6d: 8b:15:46:0a:bb:e9:8f:5e:c9:09:2d:ed:ef:33:ab:0b:9e:54: 63:85:53:26:de:01:f3:6b:a4:43:ea:4a:99:09:2e:d3:26:1e: c0:61:dd:a9 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICDRYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yNTAyMTAx NDA4MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA0QURDMDU5RDBBQUND RTg4NzMyRTZFMjY2MDgxMkQ1MDNBQ0M5RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0/P+ARw0IucjR1bb3LUS1mSQV6ymp6CHZh98bt4PGhfGDowS0 70nA5RihzqdHsqlYtkq1Nq5bdZoxwDAeV0Xx/huqmSdRiypYFTugqF27G+2KYWvF hBbYAyn28ghimxO1KrX4BzZdrUszBY6Ee08A/8cuDJRV/wAsNp+qMnSEuHQ7CRR+ Z9lf0VuDIG7F/CQg3rUJlr6FTyD+EPfrytH8wN0U9zEcviWnHRl5EjjU8m1FLAY2 x0dNpdgLagcWxacjIRAzIAsA7wuoBHrN3qzKPUikcGN/wkTNZ0A91PdWKCABaZFg 7CQY6ITR7HCn0iwjtwEXXk8vcpjdvbnJmglhAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUBK3AWdCqzOiHMubiZggS1QOsyfowHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ 7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL0JLM0FXZENxek9pSE11YmlaZ2dTMVFP c3lmby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwB1ODANBgkq hkiG9w0BAQsFAAOCAQEAOlp6UPKkD9/29md59IafPhZaaed3egDyzEXzxr+eznzt y3qPhrSxJ29dp3U8kgn3BUR5egBs7InZ5QFPIFrVtphnz8wFucMzJz59ZY5+UcsU RP/+a985ByB97039GJDnU4HFlkeWv7FQRGTUR0qJoPo+RokJBCzZ590UrPK5lO68 3g/4imh5joLOeUeNRH5vyoEbRx1/g2awBZ1zdT3S/jA3VlxkWC3AHyVX9sDboj+/ XGGURiivXp/VmG3RPL+xufDnwkiGWtlHvN12Tl3J2rM2mtLe1f9tixVGCrvpj17J CS3t7zOrC55UY4VTJt4B82ukQ+pKmQku0yYewGHdqQ== -----END CERTIFICATE-----Generated at Fri Apr 18 22:20:40 2025 by rpki-client