$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/b4hlV8qFlrpSUKAOBXdY2yaRA0Q.roa File: b4hlV8qFlrpSUKAOBXdY2yaRA0Q.roa (raw, json) Hash identifier: Z1p/fiE5Lefp6RjxkW6cJUgy/tB5fpU3DAy22i3tyz4= Subject key identifier: 6F:88:65:57:CA:85:96:BA:52:50:A0:0E:05:77:58:DB:26:91:03:44 Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Certificate serial: 0D22 Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/b4hlV8qFlrpSUKAOBXdY2yaRA0Q.roa Signing time: Mon 10 Feb 2025 14:23:29 +0000 ROA not before: Mon 10 Feb 2025 14:23:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131584 IP address blocks: 2400:4e80::/32 maxlen: 124 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3362 (0xd22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Validity Not Before: Feb 10 14:23:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6F886557CA8596BA5250A00E057758DB26910344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:e5:1f:aa:f1:3b:50:8a:cd:40:7c:88:6b: ff:2f:f8:20:21:99:e3:44:0e:a7:bf:86:b1:51:89: 6a:c9:62:b1:19:a2:66:7a:ba:d5:99:78:88:ba:b5: e5:3c:b3:38:ed:c2:c0:a9:73:04:00:9d:db:bc:b8: 74:be:52:3d:08:20:99:1f:a0:52:7a:c1:09:87:8b: 7c:86:fa:5a:b9:00:e0:e2:92:80:50:79:9d:54:d2: 72:7e:90:c2:88:30:39:c4:52:5d:f7:e4:f2:7f:7f: ff:40:15:43:37:79:28:c0:fa:2c:c5:c3:77:09:da: b9:b6:88:07:ea:47:1f:e3:ba:77:53:e0:9d:4f:72: 24:e2:71:d4:e6:c6:cc:20:ae:66:9c:d9:46:13:13: ed:d6:40:88:69:0e:c4:4c:cf:ed:c1:a7:d4:be:8f: ae:3b:83:3e:65:b2:33:59:8a:a4:ab:51:6d:d6:1f: 7c:98:0d:be:a8:a6:c3:73:c6:bb:e2:1a:e5:73:e0: 6c:f6:77:79:f2:74:32:fd:a4:74:dc:e9:0e:3a:ac: a6:45:7a:38:ad:9f:45:c0:eb:8d:59:56:80:60:ee: a5:38:4a:b7:4d:b9:a7:6c:73:5b:7a:ee:5d:ba:0d: d1:78:24:1e:76:7c:9a:85:56:46:9f:d0:22:9a:7e: 1b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:88:65:57:CA:85:96:BA:52:50:A0:0E:05:77:58:DB:26:91:03:44 X509v3 Authority Key Identifier: keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/b4hlV8qFlrpSUKAOBXdY2yaRA0Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:4e80::/32 Signature Algorithm: sha256WithRSAEncryption 4c:ed:c7:c4:e2:b8:48:d8:d4:4c:7e:6d:8f:1b:2b:7d:32:b0: 02:7c:14:26:d4:53:d3:2f:88:7b:12:5e:58:29:29:d0:a5:d9: 83:53:10:a5:84:e2:e5:76:81:87:68:7c:34:a2:2f:4f:ad:78: c3:7e:55:04:9e:89:f4:7d:b2:39:e8:0b:ca:9a:5a:43:ba:33: 17:e6:dc:71:33:63:d8:ce:fb:0e:39:a4:15:c8:6c:dd:ca:85: 34:2f:39:5d:c0:02:6e:87:c4:6d:77:72:b0:45:37:15:05:6e: 86:27:24:31:43:5b:3c:24:45:d5:38:ba:91:f0:85:89:2a:96: b4:5d:32:f6:00:56:ec:2b:b5:95:7e:78:ae:fd:d7:ee:a0:38: 81:a4:d6:33:64:58:83:59:6b:6b:2e:24:bc:be:01:6e:65:ca: bc:fc:bc:70:bd:4f:01:9b:d3:63:f9:82:a3:7f:da:f3:00:cd: 44:34:67:8f:4a:88:9b:8f:49:4f:f8:d1:c1:fc:88:fd:75:27: 89:f0:2f:29:8a:a2:24:45:2d:66:67:29:88:ab:b7:d2:86:ec: 96:30:d5:5f:14:5c:c7:f8:5d:f4:71:79:75:97:47:b2:bd:c2: 0d:cf:fb:63:70:0c:9b:b0:a1:8c:71:85:a1:9c:36:8e:08:1d: 30:ff:a8:97 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICDSIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1 NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yNTAyMTAx NDIzMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZGODg2NTU3Q0E4NTk2 QkE1MjUwQTAwRTA1Nzc1OERCMjY5MTAzNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2QOUfqvE7UIrNQHyIa/8v+CAhmeNEDqe/hrFRiWrJYrEZomZ6 utWZeIi6teU8szjtwsCpcwQAndu8uHS+Uj0IIJkfoFJ6wQmHi3yG+lq5AODikoBQ eZ1U0nJ+kMKIMDnEUl335PJ/f/9AFUM3eSjA+izFw3cJ2rm2iAfqRx/jundT4J1P ciTicdTmxswgrmac2UYTE+3WQIhpDsRMz+3Bp9S+j647gz5lsjNZiqSrUW3WH3yY Db6opsNzxrviGuVz4Gz2d3nydDL9pHTc6Q46rKZFejitn0XA641ZVoBg7qU4SrdN uadsc1t67l26DdF4JB52fJqFVkaf0CKafhuxAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUb4hlV8qFlrpSUKAOBXdY2yaRA0QwHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83 NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2L2I0aGxWOHFGbHJw U1VLQU9CWGRZMnlhUkEwUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkAE6AMA0GCSqGSIb3DQEBCwUAA4IBAQBM7cfE4rhI2NRMfm2PGyt9MrAC fBQm1FPTL4h7El5YKSnQpdmDUxClhOLldoGHaHw0oi9PrXjDflUEnon0fbI56AvK mlpDujMX5txxM2PYzvsOOaQVyGzdyoU0LzldwAJuh8Rtd3KwRTcVBW6GJyQxQ1s8 JEXVOLqR8IWJKpa0XTL2AFbsK7WVfniu/dfuoDiBpNYzZFiDWWtrLiS8vgFuZcq8 /LxwvU8Bm9Nj+YKjf9rzAM1ENGePSoibj0lP+NHB/Ij9dSeJ8C8piqIkRS1mZymI q7fShuyWMNVfFFzH+F30cXl1l0eyvcINz/tjcAybsKGMcYWhnDaOCB0w/6iX -----END CERTIFICATE-----Generated at Mon Apr 7 17:48:39 2025 by rpki-client