$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/GdMiKceMFJcEGsOX7v8JvvfeuK0.roa File: GdMiKceMFJcEGsOX7v8JvvfeuK0.roa (raw, json) Hash identifier: PeIUMFRwKo99vQiyahzZ3lcGyUanjj4p1KLRs8OizcU= Subject key identifier: 19:D3:22:29:C7:8C:14:97:04:1A:C3:97:EE:FF:09:BE:F7:DE:B8:AD Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0D56 Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/GdMiKceMFJcEGsOX7v8JvvfeuK0.roa Signing time: Mon 10 Feb 2025 14:13:12 +0000 ROA not before: Mon 10 Feb 2025 14:13:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131596 IP address blocks: 61.57.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3414 (0xd56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Feb 10 14:13:12 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=19D32229C78C1497041AC397EEFF09BEF7DEB8AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:f6:59:9a:1e:bd:5b:96:fb:c0:88:ac:12: 19:5b:f8:5c:69:c2:af:a3:58:9e:58:45:c6:82:44: f9:66:ee:04:29:b3:8d:99:11:80:92:97:63:a5:96: 68:3b:33:3b:68:2a:40:40:41:06:e0:7c:b8:0f:76: 9e:e9:f9:c2:d4:7b:e5:62:b4:5f:ed:82:de:98:55: d7:ea:5a:8c:91:e7:68:70:6b:9a:72:1f:62:af:30: fb:ed:85:c1:5c:b2:fe:cf:c4:38:b9:3c:d6:e7:a0: 8a:f1:74:7a:0f:b6:06:5c:cf:aa:77:e3:fd:24:d4: 90:27:76:6f:35:15:dc:ec:13:db:ff:25:2a:19:bd: 8b:28:5d:45:0b:84:8f:8a:bd:92:68:02:01:d8:69: 45:5a:d8:b3:19:a2:83:ad:2b:6a:39:e7:3b:bf:b6: 9f:00:56:45:1b:4b:fe:5c:f1:ce:5c:74:55:94:0a: 0c:94:fe:bc:be:c3:be:ef:a4:e0:02:3d:08:aa:cb: 32:09:c5:31:7a:48:92:a5:a3:9b:94:87:50:af:d1: 02:ae:7c:07:67:ee:05:56:28:e5:fc:27:7f:d8:5d: 0f:0d:70:24:a0:ce:95:98:0c:aa:11:81:b9:73:c8: f3:1a:b7:50:9e:41:62:96:cf:3e:56:89:f4:77:7b: 8e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D3:22:29:C7:8C:14:97:04:1A:C3:97:EE:FF:09:BE:F7:DE:B8:AD X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/GdMiKceMFJcEGsOX7v8JvvfeuK0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.57.64.0/18 Signature Algorithm: sha256WithRSAEncryption bc:44:dc:d7:ca:f3:56:7a:d2:8e:a1:f0:b0:3f:5c:ce:e1:10: 09:b4:04:2d:6b:81:a2:b1:b9:2a:86:81:c1:63:f2:95:28:10: 0f:1c:32:65:46:da:7d:42:2a:29:d0:a3:c5:9e:c7:fb:1a:95: bb:26:84:87:95:d0:ee:f1:f5:d7:6b:10:2a:b0:49:86:1f:1d: 94:fb:73:b1:f0:d1:93:41:a4:b1:4d:7f:d7:8d:b9:04:fb:a4: c4:73:63:4f:7b:e0:ff:7d:45:f6:b9:13:6e:50:b3:4b:ce:06: 9b:c6:33:73:12:11:2e:85:61:73:f1:94:0d:d9:3e:49:56:eb: c0:ce:7f:77:44:5b:b0:26:f7:d9:c0:8d:b1:37:61:e2:f1:b4: 41:35:6e:63:b1:ba:99:2e:38:9c:3f:a7:0e:a8:51:c1:62:a2: 57:52:09:69:ff:99:d9:0b:d1:01:c3:f8:eb:38:9d:cc:81:0f: 65:77:53:3c:23:03:41:f1:31:eb:37:7e:0b:fa:b3:6e:a2:fa: 63:72:59:35:9d:90:97:d0:3c:71:0c:11:c1:08:03:d3:e3:9a: 9b:94:e6:12:4a:88:cc:06:3b:37:4e:59:27:23:93:91:2a:5f: eb:b6:9a:20:3e:43:2d:ea:3c:22:3f:a0:d5:15:8d:60:ba:7e: ae:4b:29:f3 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDVYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNTAyMTAx NDEzMTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE5RDMyMjI5Qzc4QzE0 OTcwNDFBQzM5N0VFRkYwOUJFRjdERUI4QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9uPZZmh69W5b7wIisEhlb+Fxpwq+jWJ5YRcaCRPlm7gQps42Z EYCSl2Ollmg7MztoKkBAQQbgfLgPdp7p+cLUe+VitF/tgt6YVdfqWoyR52hwa5py H2KvMPvthcFcsv7PxDi5PNbnoIrxdHoPtgZcz6p34/0k1JAndm81FdzsE9v/JSoZ vYsoXUULhI+KvZJoAgHYaUVa2LMZooOtK2o55zu/tp8AVkUbS/5c8c5cdFWUCgyU /ry+w77vpOACPQiqyzIJxTF6SJKlo5uUh1Cv0QKufAdn7gVWKOX8J3/YXQ8NcCSg zpWYDKoRgblzyPMat1CeQWKWzz5WifR3e46nAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUGdMiKceMFJcEGsOX7v8JvvfeuK0wHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9HZE1pS2NlTUZKY0VHc09YN3Y4 SnZ2ZmV1SzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGPTlA MA0GCSqGSIb3DQEBCwUAA4IBAQC8RNzXyvNWetKOofCwP1zO4RAJtAQta4Gisbkq hoHBY/KVKBAPHDJlRtp9Qiop0KPFnsf7GpW7JoSHldDu8fXXaxAqsEmGHx2U+3Ox 8NGTQaSxTX/XjbkE+6TEc2NPe+D/fUX2uRNuULNLzgabxjNzEhEuhWFz8ZQN2T5J VuvAzn93RFuwJvfZwI2xN2Hi8bRBNW5jsbqZLjicP6cOqFHBYqJXUglp/5nZC9EB w/jrOJ3MgQ9ld1M8IwNB8THrN34L+rNuovpjclk1nZCX0DxxDBHBCAPT45qblOYS SojMBjs3TlknI5ORKl/rtpogPkMt6jwiP6DVFY1gun6uSynz -----END CERTIFICATE-----Generated at Fri Apr 18 22:28:35 2025 by rpki-client