$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/whTzVAp3GmNkhn8stzQGz-0es48.roa File: whTzVAp3GmNkhn8stzQGz-0es48.roa (raw, json) Hash identifier: q6KjinddlUW/GxutVfxJ5USBn0zKEc+Y5hgIl89ARrc= Subject key identifier: C2:14:F3:54:0A:77:1A:63:64:86:7F:2C:B7:34:06:CF:ED:1E:B3:8F Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Certificate serial: 0CC0 Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/whTzVAp3GmNkhn8stzQGz-0es48.roa Signing time: Mon 10 Feb 2025 13:58:25 +0000 ROA not before: Mon 10 Feb 2025 13:58:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4781 IP address blocks: 210.63.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3264 (0xcc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Validity Not Before: Feb 10 13:58:25 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C214F3540A771A6364867F2CB73406CFED1EB38F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:d4:ca:d8:44:f8:66:82:ac:74:35:0a:98: ea:39:f5:6d:de:f4:71:43:15:50:58:a2:9c:88:95: 7b:20:f0:36:ad:d5:82:76:d6:fd:ad:41:09:80:5b: 46:0a:58:d8:5f:87:1d:b6:af:42:6d:b6:ad:75:5f: 97:dd:c0:a4:87:ec:3e:cb:1d:9d:5c:65:e3:93:91: 94:e2:e0:52:6e:a8:7d:91:e7:3c:d1:11:c2:56:12: 17:53:e5:45:d5:8c:bf:d5:35:e1:0d:d9:11:9e:d4: 66:13:b1:d9:3f:b8:82:77:38:6c:ee:d9:9c:0b:9f: 5c:7d:2b:fe:54:af:23:7c:f2:ae:07:d0:23:84:a7: d4:58:ae:1f:cd:3e:7d:e9:79:87:a8:10:3a:90:10: fe:b5:37:1a:68:34:e1:2c:b9:6c:2f:1d:c8:45:3e: ee:ee:f4:19:29:20:d0:f6:eb:a9:56:00:d7:b8:b6: ac:0b:98:01:3a:05:01:95:0a:89:9a:e1:51:3b:f6: d0:41:b9:1b:51:45:94:2c:1e:2b:16:66:0d:27:ff: 02:9f:05:e9:c8:22:d0:fd:c8:bf:f8:7c:67:18:45: 94:ae:03:50:27:6d:cf:8b:09:e1:bd:a1:4e:5f:5b: f2:78:03:02:cf:92:90:fc:ea:f5:20:b6:95:91:97: 7e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:14:F3:54:0A:77:1A:63:64:86:7F:2C:B7:34:06:CF:ED:1E:B3:8F X509v3 Authority Key Identifier: keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/whTzVAp3GmNkhn8stzQGz-0es48.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.100.0/24 Signature Algorithm: sha256WithRSAEncryption 72:93:67:f0:97:02:c7:2f:ed:d2:b0:65:15:e1:75:49:07:4b: dc:c1:ae:18:4b:05:5f:36:b3:3d:c7:f1:aa:57:ed:57:26:9f: a7:ac:60:19:5a:09:2b:fc:d5:82:a6:d9:a1:b3:8b:bc:77:f7: 3d:87:57:64:2a:55:cf:79:14:d4:94:5c:20:8c:59:95:1c:c6: 0b:3d:f7:ae:02:fa:5f:7b:a5:97:2b:9a:da:d9:f1:82:6f:35: c7:83:de:70:6c:69:6e:6c:c6:90:43:70:82:ef:71:3a:8c:6a: 00:e0:08:f1:e3:8e:1b:34:a3:ca:6c:31:68:47:b3:03:e3:16: 2b:a3:4a:c2:f4:b4:db:32:b2:17:93:0e:1b:34:d0:bd:f4:20: c2:f6:b8:0d:b5:12:1d:14:a1:9b:56:85:9f:1f:4b:02:18:21: 1d:d5:bf:60:04:11:68:57:2b:c9:c9:89:f1:cb:74:c9:50:e0: d0:64:a0:05:fe:99:12:a6:5d:05:63:33:ba:ed:42:c8:4a:27: f9:78:3a:b8:ec:88:97:11:32:e1:30:82:94:7d:3c:65:83:e9: 81:bd:72:fa:d8:80:bd:e2:ac:a1:ed:8a:3b:96:91:d9:e4:fd: 16:37:b9:d4:2a:4f:ba:81:ed:f4:2f:c9:c2:e9:27:d5:39:36: 8f:86:aa:04 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTI5 QjYwNkRCODYyODNCRDRBMDhBRjdFQjMzRUYzOEEyNTY2MzFCQjAeFw0yNTAyMTAx MzU4MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMyMTRGMzU0MEE3NzFB NjM2NDg2N0YyQ0I3MzQwNkNGRUQxRUIzOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5DdTK2ET4ZoKsdDUKmOo59W3e9HFDFVBYopyIlXsg8Dat1YJ2 1v2tQQmAW0YKWNhfhx22r0Jttq11X5fdwKSH7D7LHZ1cZeOTkZTi4FJuqH2R5zzR EcJWEhdT5UXVjL/VNeEN2RGe1GYTsdk/uIJ3OGzu2ZwLn1x9K/5UryN88q4H0COE p9RYrh/NPn3peYeoEDqQEP61NxpoNOEsuWwvHchFPu7u9BkpIND266lWANe4tqwL mAE6BQGVComa4VE79tBBuRtRRZQsHisWZg0n/wKfBenIItD9yL/4fGcYRZSuA1An bc+LCeG9oU5fW/J4AwLPkpD86vUgtpWRl35BAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUwhTzVAp3GmNkhn8stzQGz+0es48wHwYDVR0jBBgwFoAUUptgbbhig71KCK9+ sz7ziiVmMbswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFHSUMv VXB0Z2JiaGlnNzFLQ0s5LXN6N3ppaVZtTWJzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9VcHRnYmJoaWc3MUtDSzktc3o3emlpVm1NYnMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQUdJQy93aFR6VkFwM0dtTmtobjhzdHpR R3otMGVzNDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j9k MA0GCSqGSIb3DQEBCwUAA4IBAQByk2fwlwLHL+3SsGUV4XVJB0vcwa4YSwVfNrM9 x/GqV+1XJp+nrGAZWgkr/NWCptmhs4u8d/c9h1dkKlXPeRTUlFwgjFmVHMYLPfeu Avpfe6WXK5ra2fGCbzXHg95wbGlubMaQQ3CC73E6jGoA4Ajx444bNKPKbDFoR7MD 4xYro0rC9LTbMrIXkw4bNNC99CDC9rgNtRIdFKGbVoWfH0sCGCEd1b9gBBFoVyvJ yYnxy3TJUODQZKAF/pkSpl0FYzO67ULISif5eDq47IiXETLhMIKUfTxlg+mBvXL6 2IC94qyh7Yo7lpHZ5P0WN7nUKk+6ge30L8nC6SfVOTaPhqoE -----END CERTIFICATE-----Generated at Fri Apr 18 23:58:34 2025 by rpki-client