$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/cX_ysPDvfDjLkfNHRqmw1pKvFyY.roa File: cX_ysPDvfDjLkfNHRqmw1pKvFyY.roa (raw, json) Hash identifier: nd3ykN/QtauuTv0n/zcT4V0Q+SamaatfyT3lt7iQB4c= Subject key identifier: 71:7F:F2:B0:F0:EF:7C:38:CB:91:F3:47:46:A9:B0:D6:92:AF:17:26 Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Certificate serial: 0D32 Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/cX_ysPDvfDjLkfNHRqmw1pKvFyY.roa Signing time: Mon 10 Feb 2025 13:51:20 +0000 ROA not before: Mon 10 Feb 2025 13:51:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18042 IP address blocks: 61.63.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 17:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3378 (0xd32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Validity Not Before: Feb 10 13:51:20 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=717FF2B0F0EF7C38CB91F34746A9B0D692AF1726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:aa:80:56:97:60:95:71:c8:88:10:51:60:22: 05:39:f6:4d:66:c3:4e:01:6c:04:d6:6f:da:b5:44: 5a:93:40:d8:b9:f6:01:0d:a7:e3:5b:c8:85:2a:b9: ca:3f:e8:64:f5:14:17:e6:af:d7:8f:3b:90:f2:41: 3d:ca:33:25:8c:38:d2:5a:78:c8:c4:19:a4:fe:06: 58:37:35:58:82:4f:4a:9a:c3:1e:34:5e:fa:25:4b: f5:5e:78:98:c1:02:7d:74:ea:be:d6:58:7b:86:58: 24:b7:fc:a7:f4:7e:9f:a8:87:ef:23:89:10:00:5e: 58:95:b8:f1:c1:9f:82:15:1b:e3:98:85:78:7d:e5: 5b:b7:07:39:7e:b2:31:d2:69:55:1e:e0:5b:22:b5: 1b:6b:96:38:51:ce:bd:e6:5e:40:2b:f2:29:99:41: 74:93:91:0f:3a:ab:2a:97:29:2f:7c:da:cf:c3:44: 60:43:3e:a5:77:f8:ac:d4:61:5a:0c:92:30:e6:1e: 62:9b:b7:11:cd:95:b8:67:cc:b1:8f:26:c0:b4:ff: a9:84:4f:5a:5f:a7:46:3e:4f:6d:6c:ae:54:82:6c: 27:09:a2:87:38:f8:11:74:db:70:8f:a0:48:a2:08: 46:89:1d:0b:43:bf:49:36:b9:5d:29:6c:46:69:9c: 9d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7F:F2:B0:F0:EF:7C:38:CB:91:F3:47:46:A9:B0:D6:92:AF:17:26 X509v3 Authority Key Identifier: keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/cX_ysPDvfDjLkfNHRqmw1pKvFyY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.63.87.0/24 Signature Algorithm: sha256WithRSAEncryption 16:c1:f4:bf:b8:2c:6e:21:b3:c6:3f:3b:23:b9:87:5a:d3:02: 3e:00:a2:57:8f:d5:5f:28:cf:a1:33:67:e7:2a:25:74:dc:88: 61:0d:3b:d0:59:53:da:3f:7f:bd:07:63:99:11:29:b3:56:e7: b4:3d:82:73:f7:d0:34:d3:07:67:2f:96:a7:9b:11:9d:0f:91: 86:d1:3a:50:db:ea:d0:91:34:36:30:88:b5:2b:15:7a:1a:6d: af:68:19:ab:87:a8:49:cd:0a:e7:67:a0:9e:cd:cd:7e:cd:20: b1:8d:45:5e:23:f1:35:a6:8a:9b:c3:23:0c:c3:1c:99:9e:5d: 70:f2:28:33:f8:55:ee:8d:38:7e:0f:57:97:ff:75:fd:35:36: 61:f3:5c:f4:40:e1:32:70:34:cb:4c:23:cc:51:56:15:80:d8: 89:07:af:e7:21:b7:df:bb:d5:b8:6a:6b:3f:37:51:ea:d3:af: a8:27:f7:77:5a:59:a3:4c:14:21:4f:0b:91:52:47:03:ea:fe: d7:ba:a1:c0:38:89:14:92:ad:c3:26:48:e7:25:21:ea:e9:bb: f1:1b:e2:1b:9e:ca:3c:d7:d5:8d:19:21:8e:59:85:f0:b2:24: 02:02:91:4e:05:ac:38:4d:4d:b7:01:5b:29:b4:08:a5:c1:c6: d7:56:6d:e9 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDTIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRC RUQ3NTFEQThGMDE5MzA0MThFMkRFMjQzMkQwRDAzQTk3REE3QzAeFw0yNTAyMTAx MzUxMjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcxN0ZGMkIwRjBFRjdD MzhDQjkxRjM0NzQ2QTlCMEQ2OTJBRjE3MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoqoBWl2CVcciIEFFgIgU59k1mw04BbATWb9q1RFqTQNi59gEN p+NbyIUquco/6GT1FBfmr9ePO5DyQT3KMyWMONJaeMjEGaT+Blg3NViCT0qawx40 XvolS/VeeJjBAn106r7WWHuGWCS3/Kf0fp+oh+8jiRAAXliVuPHBn4IVG+OYhXh9 5Vu3Bzl+sjHSaVUe4FsitRtrljhRzr3mXkAr8imZQXSTkQ86qyqXKS982s/DRGBD PqV3+KzUYVoMkjDmHmKbtxHNlbhnzLGPJsC0/6mET1pfp0Y+T21srlSCbCcJooc4 +BF023CPoEiiCEaJHQtDv0k2uV0pbEZpnJ1PAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUcX/ysPDvfDjLkfNHRqmw1pKvFyYwHwYDVR0jBBgwFoAULb7XUdqPAZMEGOLe JDLQ0DqX2nwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL0xi N1hVZHFQQVpNRUdPTGVKRExRMERxWDJudy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TGI3WFVkcVBBWk1FR09MZUpETFEwRHFYMm53LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL2NYX3lzUER2ZkRqTGtmTkhScW13MXBL dkZ5WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9P1cwDQYJ KoZIhvcNAQELBQADggEBABbB9L+4LG4hs8Y/OyO5h1rTAj4AoleP1V8oz6EzZ+cq JXTciGENO9BZU9o/f70HY5kRKbNW57Q9gnP30DTTB2cvlqebEZ0PkYbROlDb6tCR NDYwiLUrFXoaba9oGauHqEnNCudnoJ7NzX7NILGNRV4j8TWmipvDIwzDHJmeXXDy KDP4Ve6NOH4PV5f/df01NmHzXPRA4TJwNMtMI8xRVhWA2IkHr+cht9+71bhqaz83 UerTr6gn93daWaNMFCFPC5FSRwPq/te6ocA4iRSSrcMmSOclIerpu/Eb4hueyjzX 1Y0ZIY5ZhfCyJAICkU4FrDhNTbcBWym0CKXBxtdWbek= -----END CERTIFICATE-----Generated at Sat Apr 5 17:31:00 2025 by rpki-client