$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/uJpumMUjqFjTEJhu6qmoJSSyhhM.roa File: uJpumMUjqFjTEJhu6qmoJSSyhhM.roa (raw, json) Hash identifier: zfH9kjsiz6+rmXSvViQOkHYMndvCkCEZGt7dPOnTfsU= Subject key identifier: B8:9A:6E:98:C5:23:A8:58:D3:10:98:6E:EA:A9:A8:25:24:B2:86:13 Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Certificate serial: 0D11 Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/uJpumMUjqFjTEJhu6qmoJSSyhhM.roa Signing time: Mon 10 Feb 2025 14:08:18 +0000 ROA not before: Mon 10 Feb 2025 14:08:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4782 IP address blocks: 223.200.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 21:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3345 (0xd11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Validity Not Before: Feb 10 14:08:18 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B89A6E98C523A858D310986EEAA9A82524B28613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4e:b5:1c:14:13:3f:72:1f:0e:e2:5c:39:6c: 92:ea:50:6a:de:20:72:c7:5b:b8:35:1f:67:0f:0d: d7:10:30:14:16:ad:3e:45:6b:06:3d:a0:5a:4f:62: 14:74:da:35:60:4b:85:6b:c6:05:15:4f:c1:20:4e: 38:9f:0f:be:69:87:dc:2d:1e:3b:b3:67:ca:59:1a: 47:a2:3b:0c:08:76:e2:67:c3:7b:0b:d5:63:db:bb: bb:e2:58:bf:cd:d6:d1:ad:85:7f:87:fb:ce:af:39: 8d:b8:0f:c1:7b:2f:d7:cc:02:90:04:5a:b7:e2:cc: 61:e6:c5:84:0d:82:c3:d2:b6:08:ea:c9:b8:fa:24: 77:4e:5e:01:7e:20:a1:04:c6:38:5e:e0:41:83:31: 4b:10:c0:7b:53:39:01:55:48:bb:36:3c:a2:dd:6e: c7:67:b8:e0:37:74:77:28:f2:cb:b5:62:a4:39:e4: 7e:2f:11:04:5b:0e:8d:d2:8d:83:79:3c:eb:a3:f0: ca:e9:b4:a0:c7:93:06:71:82:7e:86:79:ba:8a:e4: 7d:c0:5e:62:35:d2:50:bc:1e:37:6f:b2:45:a6:08: d4:2e:e5:8f:af:08:cd:cd:95:dd:5f:1b:6f:9c:0a: fd:e2:fe:d8:cc:92:42:2d:ca:30:a2:b2:8c:f6:95: eb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9A:6E:98:C5:23:A8:58:D3:10:98:6E:EA:A9:A8:25:24:B2:86:13 X509v3 Authority Key Identifier: keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/uJpumMUjqFjTEJhu6qmoJSSyhhM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.200.0.0/16 Signature Algorithm: sha256WithRSAEncryption 40:94:fa:66:00:8a:82:97:9b:4f:57:fb:da:6d:9b:cc:be:f9: b7:31:7b:10:d8:82:52:d9:4e:3b:36:eb:b2:25:32:11:ac:15: bd:ff:ed:4b:e9:f6:28:32:7d:2b:47:72:98:66:1e:84:2b:f1: db:ab:1d:92:9c:78:6f:b8:d6:3c:fa:44:a3:54:e5:b6:14:de: dd:c7:73:9f:74:46:0e:1d:2a:b4:17:51:4e:0d:62:53:c5:fd: f1:5b:79:94:cc:30:9d:a0:fd:f9:91:79:3d:7b:e6:9a:f7:66: 41:ad:16:2c:ef:01:9e:52:36:51:e2:d4:54:c0:02:e0:d7:f1: 27:38:3c:a2:44:4f:73:2f:f0:3e:d5:e0:6f:cb:5a:87:9a:f3: c4:9e:44:2b:56:ff:10:26:5b:d0:a1:c1:47:17:96:2a:36:8e: f9:3b:0b:05:e0:bb:d7:82:19:87:e1:d2:ae:a1:7e:19:c1:aa: 42:80:e2:3d:f4:4e:b7:54:e0:b0:2c:18:12:fd:fa:30:89:4f: ee:27:46:31:f8:80:56:9f:dc:cb:b2:5f:77:e5:16:d6:a2:e2: b1:26:f6:2e:b5:62:34:dd:0e:a1:50:46:0f:47:e8:e0:fc:bc: 5f:27:a7:f0:65:4c:ca:dd:8d:8a:47:da:37:d6:c6:13:dd:36: cb:87:e7:a3 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICDREwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yNTAyMTAx NDA4MThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI4OUE2RTk4QzUyM0E4 NThEMzEwOTg2RUVBQTlBODI1MjRCMjg2MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhTrUcFBM/ch8O4lw5bJLqUGreIHLHW7g1H2cPDdcQMBQWrT5F awY9oFpPYhR02jVgS4VrxgUVT8EgTjifD75ph9wtHjuzZ8pZGkeiOwwIduJnw3sL 1WPbu7viWL/N1tGthX+H+86vOY24D8F7L9fMApAEWrfizGHmxYQNgsPStgjqybj6 JHdOXgF+IKEExjhe4EGDMUsQwHtTOQFVSLs2PKLdbsdnuOA3dHco8su1YqQ55H4v EQRbDo3SjYN5POuj8MrptKDHkwZxgn6GebqK5H3AXmI10lC8HjdvskWmCNQu5Y+v CM3Nld1fG2+cCv3i/tjMkkItyjCisoz2leuxAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUuJpumMUjqFjTEJhu6qmoJSSyhhMwHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ 7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL3VKcHVtTVVqcUZqVEVKaHU2cW1vSlNT eWhoTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDfyDANBgkq hkiG9w0BAQsFAAOCAQEAQJT6ZgCKgpebT1f72m2bzL75tzF7ENiCUtlOOzbrsiUy EawVvf/tS+n2KDJ9K0dymGYehCvx26sdkpx4b7jWPPpEo1TlthTe3cdzn3RGDh0q tBdRTg1iU8X98Vt5lMwwnaD9+ZF5PXvmmvdmQa0WLO8BnlI2UeLUVMAC4NfxJzg8 okRPcy/wPtXgb8tah5rzxJ5EK1b/ECZb0KHBRxeWKjaO+TsLBeC714IZh+HSrqF+ GcGqQoDiPfROt1TgsCwYEv36MIlP7idGMfiAVp/cy7Jfd+UW1qLisSb2LrViNN0O oVBGD0fo4Py8Xyen8GVMyt2NikfaN9bGE902y4fnow== -----END CERTIFICATE-----Generated at Tue Apr 22 20:32:58 2025 by rpki-client