$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/jHUtSNvkMDLKjm4txXdrMjiv378.roa File: jHUtSNvkMDLKjm4txXdrMjiv378.roa (raw, json) Hash identifier: rbOyEHP0ZIHvLeA+r35RUBJTRrpv/uOrHiFcTmKCOf8= Subject key identifier: 8C:75:2D:48:DB:E4:30:32:CA:8E:6E:2D:C5:77:6B:32:38:AF:DF:BF Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Certificate serial: 0D35 Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/jHUtSNvkMDLKjm4txXdrMjiv378.roa Signing time: Mon 10 Feb 2025 13:51:21 +0000 ROA not before: Mon 10 Feb 2025 13:51:21 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18042 IP address blocks: 58.86.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 17:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3381 (0xd35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Validity Not Before: Feb 10 13:51:21 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8C752D48DBE43032CA8E6E2DC5776B3238AFDFBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2e:3d:38:93:30:36:69:4a:9e:93:fd:cf:6c: 4f:ca:87:6b:9c:21:cc:08:c8:a0:1f:e0:27:6f:33: 1b:aa:9e:ac:a2:68:eb:65:30:39:42:81:b2:a0:33: 54:f6:81:b0:c1:f5:36:fa:0a:df:69:be:b1:d4:2f: 1f:9c:cf:af:fd:47:05:37:20:3d:bb:5c:8b:e8:c1: 56:75:c0:e5:07:53:c4:ae:a2:7b:48:df:c6:c7:41: ae:a2:7b:e5:59:4e:ef:19:d6:3e:fe:9d:22:13:c3: 1f:a3:1a:1c:40:47:bb:c3:c4:08:b2:6f:3b:dd:aa: ae:16:52:b8:cf:4e:57:81:88:74:28:f5:52:0f:56: 97:07:b3:3a:d6:43:f8:c6:c7:a7:8e:ab:2a:3a:46: 8b:f7:7e:fd:1d:d6:7c:cc:2a:06:77:1f:9e:1a:4d: 3d:9d:c3:f6:a7:e8:6f:fd:97:60:ed:4f:5f:0b:cb: 39:a7:f4:f3:f1:8b:b6:ac:70:da:a3:e6:85:37:8a: 04:e1:71:a1:4d:dd:21:aa:12:ea:fe:09:64:20:dd: 94:04:a8:7a:35:7b:b0:fd:cd:7a:4f:fd:41:c8:87: 18:6e:22:32:3f:3e:78:d3:b2:ca:77:c9:c9:65:7d: 53:98:4f:fc:eb:d0:1e:61:39:00:ec:cf:a6:76:a1: ba:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:75:2D:48:DB:E4:30:32:CA:8E:6E:2D:C5:77:6B:32:38:AF:DF:BF X509v3 Authority Key Identifier: keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/jHUtSNvkMDLKjm4txXdrMjiv378.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 58.86.46.0/24 Signature Algorithm: sha256WithRSAEncryption ae:da:39:1d:c8:2f:dd:57:35:56:36:f3:dc:8e:56:ed:1e:d3: e2:16:06:0a:d5:65:2c:34:67:cf:8b:f8:2a:66:0f:a7:22:49: 71:9d:22:1d:3a:64:3c:d2:b0:f4:be:c4:91:95:cf:bb:54:7c: ba:90:3f:70:0f:27:90:31:c3:19:73:b6:a8:91:c9:05:dc:99: cb:66:cc:3d:cf:62:36:98:83:9b:be:81:65:cd:0b:86:7e:a4: 25:ae:90:72:d3:fc:2e:6e:68:1a:16:e8:42:63:ea:bb:0b:89: 68:50:8c:7d:6e:6f:b5:0e:22:8e:22:f3:71:d4:65:90:a3:0a: b5:73:51:73:12:21:b4:56:99:d7:f7:d9:04:1f:24:13:29:19: 69:22:af:3c:f4:94:22:f2:4b:c8:1a:f2:47:3f:3d:b0:44:32: e6:15:0a:eb:6d:dd:a8:6e:37:03:07:53:9e:f8:d0:63:a0:9c: 02:b0:0c:c4:86:15:b4:65:f5:c4:f4:c6:a4:c2:3d:3d:16:a6: 73:93:6c:1e:70:47:ea:21:27:e9:94:4e:b5:83:43:b0:ec:dd: a1:6c:60:33:cf:ff:54:5b:63:35:52:3d:89:b2:9e:f6:06:fd: 85:6f:af:8e:83:85:f1:f8:40:d1:85:8c:f0:4d:6e:8e:9e:fc: 92:39:6c:7a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDTUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRC RUQ3NTFEQThGMDE5MzA0MThFMkRFMjQzMkQwRDAzQTk3REE3QzAeFw0yNTAyMTAx MzUxMjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhDNzUyRDQ4REJFNDMw MzJDQThFNkUyREM1Nzc2QjMyMzhBRkRGQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJLj04kzA2aUqek/3PbE/Kh2ucIcwIyKAf4CdvMxuqnqyiaOtl MDlCgbKgM1T2gbDB9Tb6Ct9pvrHULx+cz6/9RwU3ID27XIvowVZ1wOUHU8SuontI 38bHQa6ie+VZTu8Z1j7+nSITwx+jGhxAR7vDxAiybzvdqq4WUrjPTleBiHQo9VIP VpcHszrWQ/jGx6eOqyo6Rov3fv0d1nzMKgZ3H54aTT2dw/an6G/9l2DtT18Lyzmn 9PPxi7ascNqj5oU3igThcaFN3SGqEur+CWQg3ZQEqHo1e7D9zXpP/UHIhxhuIjI/ PnjTssp3ycllfVOYT/zr0B5hOQDsz6Z2obrBAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUjHUtSNvkMDLKjm4txXdrMjiv378wHwYDVR0jBBgwFoAULb7XUdqPAZMEGOLe JDLQ0DqX2nwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL0xi N1hVZHFQQVpNRUdPTGVKRExRMERxWDJudy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TGI3WFVkcVBBWk1FR09MZUpETFEwRHFYMm53LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL2pIVXRTTnZrTURMS2ptNHR4WGRyTWpp djM3OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA6Vi4wDQYJ KoZIhvcNAQELBQADggEBAK7aOR3IL91XNVY289yOVu0e0+IWBgrVZSw0Z8+L+Cpm D6ciSXGdIh06ZDzSsPS+xJGVz7tUfLqQP3APJ5AxwxlztqiRyQXcmctmzD3PYjaY g5u+gWXNC4Z+pCWukHLT/C5uaBoW6EJj6rsLiWhQjH1ub7UOIo4i83HUZZCjCrVz UXMSIbRWmdf32QQfJBMpGWkirzz0lCLyS8ga8kc/PbBEMuYVCutt3ahuNwMHU574 0GOgnAKwDMSGFbRl9cT0xqTCPT0WpnOTbB5wR+ohJ+mUTrWDQ7Ds3aFsYDPP/1Rb YzVSPYmynvYG/YVvr46DhfH4QNGFjPBNbo6e/JI5bHo= -----END CERTIFICATE-----Generated at Sat Apr 5 17:22:35 2025 by rpki-client