$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HST/1hhcD62HiVSrkyxPdW665ezFmpw.roa File: 1hhcD62HiVSrkyxPdW665ezFmpw.roa (raw, json) Hash identifier: mSYuLKBXHlZmHNcI4IZR+FP/NnNjrF2NzjWDKKEaIhw= Subject key identifier: D6:18:5C:0F:AD:87:89:54:AB:93:2C:4F:75:6E:BA:E5:EC:C5:9A:9C Certificate issuer: /CN=833D5BF79B45C730ED141CB539A508D01AA30908 Certificate serial: 0A83 Authority key identifier: 83:3D:5B:F7:9B:45:C7:30:ED:14:1C:B5:39:A5:08:D0:1A:A3:09:08 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gz1b95tFxzDtFBy1OaUI0BqjCQg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/1hhcD62HiVSrkyxPdW665ezFmpw.roa Signing time: Fri 14 Mar 2025 06:33:02 +0000 ROA not before: Fri 14 Mar 2025 06:33:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131666 IP address blocks: 2405:6440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/gz1b95tFxzDtFBy1OaUI0BqjCQg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/gz1b95tFxzDtFBy1OaUI0BqjCQg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gz1b95tFxzDtFBy1OaUI0BqjCQg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2691 (0xa83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833D5BF79B45C730ED141CB539A508D01AA30908 Validity Not Before: Mar 14 06:33:02 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D6185C0FAD878954AB932C4F756EBAE5ECC59A9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c7:6b:9b:35:7b:4a:ae:d6:2a:ea:90:c4:9e: a2:75:b5:57:35:8c:65:16:b1:55:87:70:f7:6b:73: f2:cb:e9:c8:da:1e:54:f7:28:27:0b:83:34:ab:4c: 29:49:00:ce:aa:b6:63:79:37:b8:0e:e2:dc:8b:22: f2:c7:a6:73:c6:4e:45:06:d6:52:fc:f9:5b:cc:26: 3d:99:f3:b2:6e:2a:86:a5:1c:19:bd:5c:3d:19:fd: 78:48:00:90:23:87:f9:db:49:0b:c7:fa:ca:03:67: a8:19:90:a8:f5:cd:ce:26:c1:de:c1:5b:80:5e:83: b0:1f:fb:59:62:cb:aa:f3:e3:33:64:c4:d9:81:d6: b5:07:69:3e:86:55:21:48:7a:6f:22:e7:f0:9e:b7: 8b:e9:5d:84:6c:32:83:d7:c2:1a:db:62:73:1e:9a: 69:23:f8:26:f8:fa:a4:53:7f:ac:f4:c9:13:b6:32: 2b:04:51:ec:89:43:75:57:33:31:ec:90:d0:ae:99: 1a:3d:34:22:2e:8d:ab:62:bb:32:80:ba:c1:f0:2c: 5f:24:32:ca:ff:9e:ad:a7:a5:f5:1c:60:82:9b:da: 02:1a:19:6f:4f:f3:fb:07:62:36:cb:58:c8:de:05: 5d:76:08:cd:3e:b6:71:ee:9d:7f:a6:f0:15:92:82: 16:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:18:5C:0F:AD:87:89:54:AB:93:2C:4F:75:6E:BA:E5:EC:C5:9A:9C X509v3 Authority Key Identifier: keyid:83:3D:5B:F7:9B:45:C7:30:ED:14:1C:B5:39:A5:08:D0:1A:A3:09:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/gz1b95tFxzDtFBy1OaUI0BqjCQg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gz1b95tFxzDtFBy1OaUI0BqjCQg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/1hhcD62HiVSrkyxPdW665ezFmpw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:6440::/32 Signature Algorithm: sha256WithRSAEncryption 94:2a:81:b6:f0:87:84:ad:ef:9c:57:a8:aa:68:e2:52:88:9e: 78:8a:2b:1b:6c:a1:8a:67:61:a3:56:26:ae:45:2f:c3:91:f2: 2d:0c:af:76:62:40:8e:55:a0:49:f5:38:b6:8d:8c:86:a0:01: 60:a0:a7:c9:fe:8b:99:71:17:f4:bf:27:45:e5:2a:60:4c:b6: 49:34:6b:7e:00:ff:62:6f:60:8d:19:b3:ab:1f:bc:80:c9:2a: dd:51:79:25:5c:c8:21:3e:bd:d6:0d:ee:2b:17:4f:b3:c1:5b: f6:d6:a0:59:9e:c2:59:cb:4d:ce:5a:5f:2c:81:96:f5:48:49: a9:86:77:9b:e0:09:79:b0:1f:26:8b:90:97:dc:a5:81:83:96: ee:a5:23:39:13:a3:87:93:9c:bc:aa:cc:7d:de:46:b8:57:67: c5:e4:0f:19:96:97:31:67:51:29:c1:f9:19:c6:7c:11:f6:01: eb:72:4c:6e:60:d6:66:26:10:20:69:6d:a2:7a:30:aa:7c:3f: bf:05:42:37:f3:ba:e3:dc:41:34:09:f0:c6:02:2d:f7:99:d4: 76:7a:50:93:55:a3:0a:9d:c9:6b:9e:d5:16:45:5f:41:99:f6: b1:05:18:76:54:69:dc:ec:3d:5b:b9:7e:a2:2d:5a:3c:fc:21: e9:1a:9b:2a -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICCoMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMz RDVCRjc5QjQ1QzczMEVEMTQxQ0I1MzlBNTA4RDAxQUEzMDkwODAeFw0yNTAzMTQw NjMzMDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ2MTg1QzBGQUQ4Nzg5 NTRBQjkzMkM0Rjc1NkVCQUU1RUNDNTlBOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKx2ubNXtKrtYq6pDEnqJ1tVc1jGUWsVWHcPdrc/LL6cjaHlT3 KCcLgzSrTClJAM6qtmN5N7gO4tyLIvLHpnPGTkUG1lL8+VvMJj2Z87JuKoalHBm9 XD0Z/XhIAJAjh/nbSQvH+soDZ6gZkKj1zc4mwd7BW4Beg7Af+1liy6rz4zNkxNmB 1rUHaT6GVSFIem8i5/Cet4vpXYRsMoPXwhrbYnMemmkj+Cb4+qRTf6z0yRO2MisE UeyJQ3VXMzHskNCumRo9NCIujatiuzKAusHwLF8kMsr/nq2npfUcYIKb2gIaGW9P 8/sHYjbLWMjeBV12CM0+tnHunX+m8BWSghYRAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQU1hhcD62HiVSrkyxPdW665ezFmpwwHwYDVR0jBBgwFoAUgz1b95tFxzDtFBy1 OaUI0BqjCQgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFNUL2d6 MWI5NXRGeHpEdEZCeTFPYVVJMEJxakNRZy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev Z3oxYjk1dEZ4ekR0RkJ5MU9hVUkwQnFqQ1FnLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSFNULzFoaGNENjJIaVZTcmt5eFBkVzY2NWV6 Rm1wdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBWRAMA0G CSqGSIb3DQEBCwUAA4IBAQCUKoG28IeEre+cV6iqaOJSiJ54iisbbKGKZ2GjViau RS/DkfItDK92YkCOVaBJ9Ti2jYyGoAFgoKfJ/ouZcRf0vydF5SpgTLZJNGt+AP9i b2CNGbOrH7yAySrdUXklXMghPr3WDe4rF0+zwVv21qBZnsJZy03OWl8sgZb1SEmp hneb4Al5sB8mi5CX3KWBg5bupSM5E6OHk5y8qsx93ka4V2fF5A8ZlpcxZ1EpwfkZ xnwR9gHrckxuYNZmJhAgaW2iejCqfD+/BUI387rj3EE0CfDGAi33mdR2elCTVaMK nclrntUWRV9BmfaxBRh2VGnc7D1buX6iLVo8/CHpGpsq -----END CERTIFICATE-----Generated at Fri Apr 18 23:52:53 2025 by rpki-client