$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/g5lqS9gh2jdNy4-gBlkXqkNlb20.roa File: g5lqS9gh2jdNy4-gBlkXqkNlb20.roa (raw, json) Hash identifier: 64WxhEbotKoRJOtgxVyQWdTtLid8/n3q0EeTEMYuEnA= Subject key identifier: 83:99:6A:4B:D8:21:DA:37:4D:CB:8F:A0:06:59:17:AA:43:65:6F:6D Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0D64 Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/g5lqS9gh2jdNy4-gBlkXqkNlb20.roa Signing time: Mon 10 Feb 2025 14:13:16 +0000 ROA not before: Mon 10 Feb 2025 14:13:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131596 IP address blocks: 61.58.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3428 (0xd64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Feb 10 14:13:16 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=83996A4BD821DA374DCB8FA0065917AA43656F6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ea:94:06:10:f0:01:b2:55:ac:5c:65:2f:fa: 91:72:9e:08:43:c8:88:c4:55:c4:c4:d3:c2:1a:6f: c1:33:51:9d:c3:ed:ec:80:55:ff:5b:5e:f4:cc:e4: 76:13:6c:34:58:f7:de:ae:49:1b:db:5c:34:6c:d3: 5e:8d:e3:49:d1:15:bc:0a:14:ba:4b:20:cd:46:9b: be:90:16:7d:cd:3f:eb:da:d7:16:9a:c6:5b:1a:36: 0c:36:13:02:37:6e:58:c3:ec:bb:9e:ca:d8:a7:35: df:48:01:aa:e4:11:e1:45:3e:83:ef:d8:46:a8:e9: 80:e8:e3:18:89:4f:44:4b:64:13:57:ce:e5:3e:17: 84:7f:15:89:15:e7:c0:ee:b1:57:31:e6:49:91:21: 07:8b:af:8d:f8:12:a6:a1:a5:a6:d6:8f:19:a7:2f: 53:2b:d0:46:b3:63:ac:21:57:d7:ad:e8:37:f9:22: 94:87:96:3d:35:6d:6f:c0:7e:bb:a7:f0:89:50:58: df:ba:a6:ad:8c:d4:dc:d0:ed:2a:12:57:90:02:8c: f7:55:74:a5:c4:7c:5e:87:78:a1:f5:9f:76:d2:4f: f9:8c:05:d9:da:ac:a3:94:86:2a:be:60:28:7b:c5: 86:06:90:32:23:f7:e8:5f:88:ce:e5:c7:b9:e4:95: 83:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:99:6A:4B:D8:21:DA:37:4D:CB:8F:A0:06:59:17:AA:43:65:6F:6D X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/g5lqS9gh2jdNy4-gBlkXqkNlb20.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.80.0/20 Signature Algorithm: sha256WithRSAEncryption 62:62:9b:3b:f5:71:46:fd:a4:68:c2:1d:42:74:16:93:c7:63: de:6f:9a:b7:c3:af:2e:77:00:48:34:f8:01:ae:8f:07:b0:a0: 7e:76:ac:25:32:29:b3:86:6d:d5:83:08:44:60:d3:ce:d7:97: d4:30:a7:f8:9e:ee:4f:e8:c2:56:1b:59:fb:05:e0:07:e8:9b: ba:da:62:6b:f2:b1:f1:69:82:41:36:d7:c7:40:11:25:8e:0f: 78:c5:75:98:34:2d:2a:e3:97:83:dc:a8:66:f2:10:7e:93:0d: 69:8c:d8:71:83:ff:07:e4:1c:2f:c2:9f:eb:e9:97:f5:47:66: d7:f1:ee:50:92:af:93:0f:6c:7f:2f:7b:61:bf:f3:e1:f4:f9: 20:db:3b:fe:c4:a0:16:1c:01:12:a5:56:ba:00:31:e1:1b:66: 5b:d7:d4:c9:79:cf:51:0a:c4:86:e3:72:1c:71:01:99:e0:83: 31:84:12:5b:a0:60:b9:db:ab:b9:92:08:b6:eb:98:37:ee:aa: 1a:b3:49:e5:b7:06:ee:a4:26:be:13:1a:53:5d:46:93:a8:f4: a7:76:fb:74:b5:e9:44:35:f1:5d:7b:26:71:75:12:95:fa:35: 1c:5e:af:10:dc:df:16:9d:7c:a2:b1:20:05:a7:5e:1a:c7:3d: 02:c3:e1:d4 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNTAyMTAx NDEzMTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgzOTk2QTRCRDgyMURB Mzc0RENCOEZBMDA2NTkxN0FBNDM2NTZGNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV6pQGEPABslWsXGUv+pFynghDyIjEVcTE08Iab8EzUZ3D7eyA Vf9bXvTM5HYTbDRY996uSRvbXDRs016N40nRFbwKFLpLIM1Gm76QFn3NP+va1xaa xlsaNgw2EwI3bljD7LueytinNd9IAarkEeFFPoPv2Eao6YDo4xiJT0RLZBNXzuU+ F4R/FYkV58DusVcx5kmRIQeLr434EqahpabWjxmnL1Mr0EazY6whV9et6Df5IpSH lj01bW/Afrun8IlQWN+6pq2M1NzQ7SoSV5ACjPdVdKXEfF6HeKH1n3bST/mMBdna rKOUhiq+YCh7xYYGkDIj9+hfiM7lx7nklYN/AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUg5lqS9gh2jdNy4+gBlkXqkNlb20wHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9nNWxxUzlnaDJqZE55NC1nQmxr WHFrTmxiMjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPTpQ MA0GCSqGSIb3DQEBCwUAA4IBAQBiYps79XFG/aRowh1CdBaTx2Peb5q3w68udwBI NPgBro8HsKB+dqwlMimzhm3VgwhEYNPO15fUMKf4nu5P6MJWG1n7BeAH6Ju62mJr 8rHxaYJBNtfHQBEljg94xXWYNC0q45eD3Khm8hB+kw1pjNhxg/8H5Bwvwp/r6Zf1 R2bX8e5Qkq+TD2x/L3thv/Ph9Pkg2zv+xKAWHAESpVa6ADHhG2Zb19TJec9RCsSG 43IccQGZ4IMxhBJboGC526u5kgi265g37qoas0nltwbupCa+ExpTXUaTqPSndvt0 telENfFdeyZxdRKV+jUcXq8Q3N8WnXyisSAFp14axz0Cw+HU -----END CERTIFICATE-----Generated at Fri Apr 18 23:15:26 2025 by rpki-client