$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/wwSuuTijJPUuAIec0dMVKF0FRqE.roa File: wwSuuTijJPUuAIec0dMVKF0FRqE.roa (raw, json) Hash identifier: lUBNgdtuBu3na04yEHl8B0G+n/Og50gV34u89KMCqy0= Subject key identifier: C3:04:AE:B9:38:A3:24:F5:2E:00:87:9C:D1:D3:15:28:5D:05:46:A1 Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Certificate serial: 0D1A Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/wwSuuTijJPUuAIec0dMVKF0FRqE.roa Signing time: Mon 10 Feb 2025 14:08:20 +0000 ROA not before: Mon 10 Feb 2025 14:08:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4782 IP address blocks: 2001:4420::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3354 (0xd1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Validity Not Before: Feb 10 14:08:20 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C304AEB938A324F52E00879CD1D315285D0546A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:10:2f:df:f9:7e:f7:a9:b8:42:99:0b:f8:ff: ef:f1:df:02:71:5f:6c:f1:57:c1:cf:40:81:14:c3: 5c:a4:dd:a5:7c:9d:54:5e:e2:93:98:cc:72:8f:bf: 0f:a6:3c:14:9f:3d:c4:b9:10:cb:4b:d4:33:b4:03: aa:e5:0f:e7:b8:3d:6a:6e:75:30:eb:55:64:e7:4b: a0:dd:c3:08:3f:92:72:04:e3:a0:ee:37:2a:4f:51: 81:d3:91:14:18:03:4f:d7:e9:9c:99:4d:ef:28:67: 82:fd:9d:dc:e4:b6:3a:77:97:3a:71:19:12:fc:9f: 07:43:bd:bd:53:3d:40:3f:e3:9a:e1:1d:37:11:03: 79:f2:2e:0b:d6:e0:0d:73:25:de:54:89:dd:fe:08: e0:05:3c:a3:07:0a:88:d5:41:06:4a:50:4e:02:c0: 57:50:09:d5:10:61:0c:4b:3a:d8:96:71:57:ba:45: 75:6a:6c:34:17:3e:06:1b:25:7b:c3:d5:b8:0d:b5: 4f:39:c4:94:e3:a9:d3:5b:0c:fb:8c:8b:b1:4a:03: e3:26:54:48:f9:96:56:df:0d:6b:8a:aa:0f:6e:fa: 29:9e:69:a9:98:8a:c8:3f:b2:53:07:1e:2b:3c:ea: a2:fe:46:c9:88:68:a6:48:dd:77:e5:8a:4d:f6:75: 1f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:04:AE:B9:38:A3:24:F5:2E:00:87:9C:D1:D3:15:28:5D:05:46:A1 X509v3 Authority Key Identifier: keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/wwSuuTijJPUuAIec0dMVKF0FRqE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:4420::/32 Signature Algorithm: sha256WithRSAEncryption 7f:4b:5a:e7:b6:3e:8a:85:6c:4c:55:87:56:0e:4b:6b:33:15: ca:05:7c:3b:39:79:cf:63:b9:94:8f:3b:e1:3b:8e:23:10:91: 11:b6:45:17:dc:30:64:4e:f1:be:91:f7:bf:50:f0:dd:c8:65: 5f:0c:3f:cc:6a:1f:bf:25:61:7b:3e:77:a3:14:aa:93:71:d8: 90:0e:eb:99:9f:69:99:4a:25:f0:38:11:69:75:47:65:40:9e: 0d:f9:b9:ec:5e:87:ab:8c:5b:ee:74:86:b8:c0:eb:51:10:df: e2:dd:01:2f:9f:1e:53:76:03:37:3a:ec:0e:9d:26:77:b5:42: fd:8b:4a:e9:d0:91:b7:20:65:86:a7:a1:f3:0c:cb:54:41:14: 0e:ee:32:b2:a5:f4:7a:a6:09:64:83:55:f1:61:43:e1:09:b1: a2:9a:5b:c6:90:9d:db:5a:4d:9f:cf:24:e0:6b:a2:1c:2f:8e: 11:f6:ad:41:ec:e1:dd:8b:b6:a7:6b:16:b0:c7:5c:88:8b:db: c5:5f:50:68:25:e4:ef:3c:f7:d8:c6:92:92:90:c1:b6:24:94: 10:1c:d2:57:f7:b2:66:55:f4:80:dc:c2:7f:ec:61:f9:56:1a: 6d:73:26:30:44:ad:5e:73:86:2f:ba:c9:f0:a7:d2:b6:32:01: 58:7a:e2:6f -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICDRowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yNTAyMTAx NDA4MjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMzMDRBRUI5MzhBMzI0 RjUyRTAwODc5Q0QxRDMxNTI4NUQwNTQ2QTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCaEC/f+X73qbhCmQv4/+/x3wJxX2zxV8HPQIEUw1yk3aV8nVRe 4pOYzHKPvw+mPBSfPcS5EMtL1DO0A6rlD+e4PWpudTDrVWTnS6Ddwwg/knIE46Du NypPUYHTkRQYA0/X6ZyZTe8oZ4L9ndzktjp3lzpxGRL8nwdDvb1TPUA/45rhHTcR A3nyLgvW4A1zJd5Uid3+COAFPKMHCojVQQZKUE4CwFdQCdUQYQxLOtiWcVe6RXVq bDQXPgYbJXvD1bgNtU85xJTjqdNbDPuMi7FKA+MmVEj5llbfDWuKqg9u+imeaamY isg/slMHHis86qL+RsmIaKZI3Xflik32dR9RAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUwwSuuTijJPUuAIec0dMVKF0FRqEwHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ 7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL3d3U3V1VGlqSlBVdUFJZWMwZE1WS0Yw RlJxRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAUQgMA0G CSqGSIb3DQEBCwUAA4IBAQB/S1rntj6KhWxMVYdWDktrMxXKBXw7OXnPY7mUjzvh O44jEJERtkUX3DBkTvG+kfe/UPDdyGVfDD/Mah+/JWF7PnejFKqTcdiQDuuZn2mZ SiXwOBFpdUdlQJ4N+bnsXoerjFvudIa4wOtREN/i3QEvnx5TdgM3OuwOnSZ3tUL9 i0rp0JG3IGWGp6HzDMtUQRQO7jKypfR6pglkg1XxYUPhCbGimlvGkJ3bWk2fzyTg a6IcL44R9q1B7OHdi7anaxawx1yIi9vFX1BoJeTvPPfYxpKSkMG2JJQQHNJX97Jm VfSA3MJ/7GH5VhptcyYwRK1ec4Yvusnwp9K2MgFYeuJv -----END CERTIFICATE-----Generated at Fri Apr 18 22:37:19 2025 by rpki-client