$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/vEABdh9QnNyKGLllW8gMaYux36U.roa File: vEABdh9QnNyKGLllW8gMaYux36U.roa (raw, json) Hash identifier: mgujBs6ejGeJNsujhXWhV77MSQB3Z4fas5aWBgv0rPo= Subject key identifier: BC:40:01:76:1F:50:9C:DC:8A:18:B9:65:5B:C8:0C:69:8B:B1:DF:A5 Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Certificate serial: 0DB0 Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/vEABdh9QnNyKGLllW8gMaYux36U.roa Signing time: Mon 10 Feb 2025 14:06:12 +0000 ROA not before: Mon 10 Feb 2025 14:06:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9416 IP address blocks: 115.43.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 03:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3504 (0xdb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Validity Not Before: Feb 10 14:06:12 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BC4001761F509CDC8A18B9655BC80C698BB1DFA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:db:69:2d:0e:64:4f:57:77:3d:5b:b8:95:30: ff:19:9f:a5:27:02:d5:ff:3b:ac:61:67:4d:bf:3a: 5f:cf:5c:23:7f:af:44:2b:af:2f:5a:98:02:5b:cd: 78:05:73:dd:3a:98:71:54:85:37:98:fb:8e:65:7a: 8e:ce:22:40:8e:1f:e9:c6:92:49:0b:95:40:71:2f: 25:f7:d1:ae:65:e2:cc:14:a7:bf:b8:02:35:d5:1d: 81:cc:d3:69:7b:1c:ef:38:54:50:24:d7:c0:7b:28: 39:20:55:30:b2:fd:c9:82:9a:c0:50:18:76:cb:c1: 3f:26:ec:0d:d5:c3:1a:7d:ec:8e:45:10:57:a0:de: 86:20:61:cd:16:b5:57:83:70:a8:56:cf:4d:08:a5: 5e:fc:7e:db:61:4c:bb:17:eb:c3:93:d0:d5:80:40: 5c:8a:fd:89:60:81:ce:96:f9:e8:bf:f7:18:cd:20: 22:ce:66:34:2f:41:14:9d:b2:af:b6:bd:94:19:4f: bd:4e:f2:80:47:1d:9b:7f:a2:a9:f7:8b:01:15:a8: e3:ab:fd:60:7e:58:d1:8e:4e:b6:89:02:5a:ee:bd: c5:6e:7b:7d:a4:a6:14:56:c1:2c:b5:b0:b1:f5:fa: 97:40:f2:6c:87:5d:53:67:c2:29:a4:2c:f3:91:23: b6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:40:01:76:1F:50:9C:DC:8A:18:B9:65:5B:C8:0C:69:8B:B1:DF:A5 X509v3 Authority Key Identifier: keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/vEABdh9QnNyKGLllW8gMaYux36U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.43.128.0/17 Signature Algorithm: sha256WithRSAEncryption 6c:b1:dd:2e:8b:2c:6c:4b:b9:29:02:a3:1e:c7:fc:11:00:af: 8f:77:1c:eb:04:b7:49:00:03:a0:6b:8e:5e:c4:8c:07:52:f4: 4f:e8:5f:ed:55:06:f2:a2:3a:0b:2f:7a:81:db:b9:9d:79:4f: 9b:59:e2:7f:d7:0b:4f:eb:42:7e:6c:1d:d3:c9:8a:d2:48:71: ea:f6:79:b4:55:a5:a2:21:fa:af:72:20:77:0b:65:31:08:62: dd:6d:5a:65:d1:e8:37:a6:e1:14:07:ce:f9:b2:ad:2a:3f:10: 70:88:a1:85:51:77:91:4d:b2:a4:9e:84:f5:e2:57:7f:98:8a: f3:e6:f6:f4:34:92:52:f6:17:c6:11:ce:f2:22:9b:17:3d:5a: 11:1e:d0:c0:b2:b5:44:20:80:d7:ce:da:40:07:87:2c:08:a1: b0:56:2d:39:2e:1a:a4:0c:80:fa:6a:8e:94:50:96:54:e1:48: b0:4f:15:84:7c:ee:b1:16:51:b5:64:8a:05:63:f5:f3:6b:c3: 8d:1c:03:87:ae:8d:18:06:76:07:f5:bf:c8:40:2a:b2:c9:df: 25:75:34:48:c3:b3:2e:49:7d:a8:2b:4d:2f:ca:c0:4d:b0:d3: 32:21:43:f1:42:29:4d:1e:53:31:11:23:77:9b:e2:11:d2:eb: 3d:ab:37:20 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5 QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yNTAyMTAx NDA2MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJDNDAwMTc2MUY1MDlD REM4QTE4Qjk2NTVCQzgwQzY5OEJCMURGQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI22ktDmRPV3c9W7iVMP8Zn6UnAtX/O6xhZ02/Ol/PXCN/r0Qr ry9amAJbzXgFc906mHFUhTeY+45leo7OIkCOH+nGkkkLlUBxLyX30a5l4swUp7+4 AjXVHYHM02l7HO84VFAk18B7KDkgVTCy/cmCmsBQGHbLwT8m7A3Vwxp97I5FEFeg 3oYgYc0WtVeDcKhWz00IpV78ftthTLsX68OT0NWAQFyK/Ylggc6W+ei/9xjNICLO ZjQvQRSdsq+2vZQZT71O8oBHHZt/oqn3iwEVqOOr/WB+WNGOTraJAlruvcVue32k phRWwSy1sLH1+pdA8myHXVNnwimkLPORI7YzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvEABdh9QnNyKGLllW8gMaYux36UwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL3ZFQUJkaDlRbk55S0dMbGxX OGdNYVl1eDM2VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAdz K4AwDQYJKoZIhvcNAQELBQADggEBAGyx3S6LLGxLuSkCox7H/BEAr493HOsEt0kA A6Brjl7EjAdS9E/oX+1VBvKiOgsveoHbuZ15T5tZ4n/XC0/rQn5sHdPJitJIcer2 ebRVpaIh+q9yIHcLZTEIYt1tWmXR6Dem4RQHzvmyrSo/EHCIoYVRd5FNsqSehPXi V3+YivPm9vQ0klL2F8YRzvIimxc9WhEe0MCytUQggNfO2kAHhywIobBWLTkuGqQM gPpqjpRQllThSLBPFYR87rEWUbVkigVj9fNrw40cA4eujRgGdgf1v8hAKrLJ3yV1 NEjDsy5JfagrTS/KwE2w0zIhQ/FCKU0eUzERI3eb4hHS6z2rNyA= -----END CERTIFICATE-----Generated at Fri Apr 18 02:26:05 2025 by rpki-client