$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/DcYI8ZmW1CxsHAxy75pwx3S1cSU.roa File: DcYI8ZmW1CxsHAxy75pwx3S1cSU.roa (raw, json) Hash identifier: TQC8N28nCNGyA7IfnnCNvinZsBDe/CyFjWZXwdlqIbQ= Subject key identifier: 0D:C6:08:F1:99:96:D4:2C:6C:1C:0C:72:EF:9A:70:C7:74:B5:71:25 Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0D18 Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/DcYI8ZmW1CxsHAxy75pwx3S1cSU.roa Signing time: Mon 10 Feb 2025 14:02:31 +0000 ROA not before: Mon 10 Feb 2025 14:02:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18182 IP address blocks: 61.62.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3352 (0xd18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Feb 10 14:02:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0DC608F19996D42C6C1C0C72EF9A70C774B57125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:c2:e5:c2:e8:63:f9:8f:40:a0:74:3f:b0: 7a:79:39:dd:90:92:16:f9:3a:13:d1:08:34:86:13: 1f:73:7d:e7:32:ce:63:93:5d:46:f9:ef:25:10:bd: cd:75:d8:aa:d5:69:a2:b6:34:67:35:c4:68:7b:fa: c8:e1:ce:2b:b9:3e:8b:f8:ed:07:11:ba:b6:64:62: 0c:5b:fc:29:fc:c8:f8:5e:71:cd:01:d3:0b:91:83: c5:57:ba:95:85:e0:e5:9d:b3:57:23:82:f4:07:2b: 19:25:4b:cc:34:4a:e0:eb:08:eb:20:fe:61:47:00: 0d:a0:60:06:a3:8f:9a:fb:f9:78:94:88:6c:96:03: 2c:7f:c4:f0:74:02:87:bc:ad:08:44:2d:c4:70:0f: 13:2a:d8:90:1e:55:1b:dd:bd:dc:bd:d6:6a:24:2a: 08:f6:77:5e:49:5c:bd:a6:a9:77:6f:62:84:62:39: ce:e5:c9:ed:d8:f4:70:f8:59:b5:67:56:42:02:18: 8c:f9:b5:fd:56:16:73:0e:46:47:f3:e1:8b:1a:28: 89:54:bc:66:ab:4c:a6:f8:9d:cb:c8:b8:f7:44:ab: 6f:00:b3:c4:ab:e9:0f:86:a5:cc:2f:69:f7:2f:ed: 4a:68:cc:fb:67:92:c4:dd:65:bb:62:5f:2a:d5:2c: cc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C6:08:F1:99:96:D4:2C:6C:1C:0C:72:EF:9A:70:C7:74:B5:71:25 X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/DcYI8ZmW1CxsHAxy75pwx3S1cSU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.62.0.0/16 Signature Algorithm: sha256WithRSAEncryption 99:95:81:80:22:7a:a9:44:c5:ed:ad:5b:a4:3d:49:f3:09:70: 77:af:5e:ab:7a:25:46:98:2f:79:cd:64:c5:c9:0f:96:1d:a5: e4:84:0c:d8:d6:49:90:58:1f:22:97:2f:21:68:5e:5f:10:05: da:2d:f6:3a:05:ca:0e:7b:fd:f7:0f:dd:9f:98:59:1d:e5:2f: 63:83:2c:f3:50:ca:db:df:b1:83:5e:d7:42:10:1a:61:bb:c8: 70:91:84:da:17:c9:f4:a0:64:11:4e:ea:b1:ae:bf:4d:b7:1b: a1:b2:27:ce:98:de:c1:c7:35:bf:fe:ff:25:21:47:22:68:0a: be:e9:7c:c1:c7:27:c7:3e:5a:cc:71:80:a9:06:a0:79:83:24: 58:0f:b7:dd:ed:c0:47:1c:fa:b8:f5:5d:34:ab:a9:1a:37:dc: 5d:4c:87:a0:9a:64:a8:35:4d:a2:4a:18:ca:92:df:9a:f3:4d: 46:16:a6:1b:7e:7a:cd:b5:b4:fb:6f:a2:75:fc:60:1f:9c:63: 5c:62:a3:2c:7d:f2:2e:b3:60:46:9f:7a:d6:3c:3b:b2:5f:75: bc:84:7c:00:19:d7:3d:1f:a1:a2:be:7e:03:de:e2:6a:83:18: 47:91:1e:b1:c7:df:f7:db:bc:a5:06:5d:96:11:b4:60:39:64: e7:f9:71:ca -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDRgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNTAyMTAx NDAyMzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBEQzYwOEYxOTk5NkQ0 MkM2QzFDMEM3MkVGOUE3MEM3NzRCNTcxMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3CcLlwuhj+Y9AoHQ/sHp5Od2Qkhb5OhPRCDSGEx9zfecyzmOT XUb57yUQvc112KrVaaK2NGc1xGh7+sjhziu5Pov47QcRurZkYgxb/Cn8yPhecc0B 0wuRg8VXupWF4OWds1cjgvQHKxklS8w0SuDrCOsg/mFHAA2gYAajj5r7+XiUiGyW Ayx/xPB0Aoe8rQhELcRwDxMq2JAeVRvdvdy91mokKgj2d15JXL2mqXdvYoRiOc7l ye3Y9HD4WbVnVkICGIz5tf1WFnMORkfz4YsaKIlUvGarTKb4ncvIuPdEq28As8Sr 6Q+Gpcwvafcv7UpozPtnksTdZbtiXyrVLMydAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUDcYI8ZmW1CxsHAxy75pwx3S1cSUwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9EY1lJOFptVzFDeHNIQXh5NzVw d3gzUzFjU1Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAPT4w DQYJKoZIhvcNAQELBQADggEBAJmVgYAieqlExe2tW6Q9SfMJcHevXqt6JUaYL3nN ZMXJD5YdpeSEDNjWSZBYHyKXLyFoXl8QBdot9joFyg57/fcP3Z+YWR3lL2ODLPNQ ytvfsYNe10IQGmG7yHCRhNoXyfSgZBFO6rGuv023G6GyJ86Y3sHHNb/+/yUhRyJo Cr7pfMHHJ8c+WsxxgKkGoHmDJFgPt93twEcc+rj1XTSrqRo33F1Mh6CaZKg1TaJK GMqS35rzTUYWpht+es21tPtvonX8YB+cY1xioyx98i6zYEafetY8O7JfdbyEfAAZ 1z0foaK+fgPe4mqDGEeRHrHH3/fbvKUGXZYRtGA5ZOf5cco= -----END CERTIFICATE-----Generated at Wed Apr 23 04:53:40 2025 by rpki-client