$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATHDD/6zYyJp9Bj6qki_ExnIB5O4Zp2DE.roa File: 6zYyJp9Bj6qki_ExnIB5O4Zp2DE.roa (raw, json) Hash identifier: gMh0wwac41YhfDMiHEE90LF+AKmpSFWvauo0beidvCc= Subject key identifier: EB:36:32:26:9F:41:8F:AA:A4:8B:F1:31:9C:80:79:3B:86:69:D8:31 Certificate issuer: /CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE Certificate serial: 027C Authority key identifier: 20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/6zYyJp9Bj6qki_ExnIB5O4Zp2DE.roa Signing time: Mon 10 Feb 2025 14:05:31 +0000 ROA not before: Mon 10 Feb 2025 14:05:31 +0000 ROA not after: Wed 15 Oct 2025 15:30:20 +0000 asID: 150766 IP address blocks: 160.191.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 636 (0x27c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE Validity Not Before: Feb 10 14:05:31 2025 GMT Not After : Oct 15 15:30:20 2025 GMT Subject: CN=EB3632269F418FAAA48BF1319C80793B8669D831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fc:12:2e:7a:8b:9d:6d:1e:c3:78:74:76:7e: 33:66:4f:1b:63:4d:ba:0c:2c:71:4d:9d:22:7d:b7: 29:f6:3d:88:f7:9c:1b:62:19:68:4b:e0:27:94:bf: de:dd:f1:17:53:d5:c9:09:d9:58:35:cb:8e:7b:a1: 8c:b3:57:4b:a6:4a:8d:af:6e:15:1e:36:b4:b3:38: 84:99:af:09:02:0b:92:1a:b6:7b:6e:d1:49:e7:f7: 2e:9a:ef:b3:03:6c:10:8e:6c:fb:c6:79:28:61:37: 5f:3b:bf:ce:bc:8c:c1:11:df:ea:55:59:e1:1f:6c: c2:24:0b:f0:c2:63:8a:7e:b9:5b:94:b9:6a:18:bc: 73:6e:4e:16:df:96:8a:3d:1c:03:c7:ae:02:7d:b7: 9c:61:26:a4:be:e1:da:25:87:a9:32:1b:df:7a:2a: c7:f7:38:cd:87:61:53:8f:0c:cc:0c:b1:6c:64:43: 48:57:57:7e:a0:d2:aa:b4:f6:b3:ff:31:e4:24:1b: 96:3f:c3:eb:2d:ac:b6:57:68:0b:b8:e9:86:c5:6d: 04:fe:6a:b8:f7:d7:62:44:4f:81:3f:2f:b4:97:8d: 2f:f2:2a:a9:a8:f2:7a:5a:d7:42:13:5f:72:f8:bd: 42:2d:56:95:86:d2:85:05:6d:b6:20:c7:97:80:c4: 1c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:36:32:26:9F:41:8F:AA:A4:8B:F1:31:9C:80:79:3B:86:69:D8:31 X509v3 Authority Key Identifier: keyid:20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/6zYyJp9Bj6qki_ExnIB5O4Zp2DE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.8.0/24 Signature Algorithm: sha256WithRSAEncryption 76:8a:5d:d7:c3:b6:91:19:8a:f7:57:75:06:9c:a6:f4:34:e0: a6:4a:1c:6b:46:46:e7:c0:6b:c2:d5:54:de:a8:06:b6:92:b3: 13:e1:d9:66:10:99:52:ba:74:d9:14:ad:b3:22:06:fe:51:cc: f7:49:b1:ff:65:e2:0d:2e:e5:ed:a0:78:dc:74:51:7e:bc:28: 77:f5:20:ce:1d:f6:55:cf:ff:3a:d4:42:47:32:7a:2a:e9:97: 95:f0:ca:aa:f7:13:d1:db:29:28:32:ca:81:b6:5b:e6:c1:f4: 8a:20:5c:dc:34:b8:a5:a6:0c:76:1e:1c:51:dd:68:53:92:be: d8:42:7a:06:be:db:08:44:d8:3b:ff:55:4f:cc:a7:ff:5c:8c: 52:18:c4:91:77:16:fb:21:86:68:e0:d3:27:e6:bb:46:34:34: c6:c8:bb:5d:81:8c:49:7e:66:16:7a:70:3a:9a:1c:42:ea:a2: 89:11:2c:11:2d:ed:b4:f9:77:e8:5a:55:9e:04:a3:04:d9:d6: c6:9f:6a:9e:49:b9:ab:2a:aa:1d:02:f8:dc:25:bf:74:5a:aa: 8b:32:ed:55:a4:27:50:2f:01:74:c5:56:a8:cf:8a:36:32:fa: d9:3d:10:b7:6b:1a:39:d6:38:2e:52:92:b6:6f:f2:12:24:62: e3:b1:7f:58 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjBB Q0NBODcxODUwMDM3M0FGRjc3QjQxNEIyM0RDNkE1RjE0NzRFRTAeFw0yNTAyMTAx NDA1MzFaFw0yNTEwMTUxNTMwMjBaMDMxMTAvBgNVBAMTKEVCMzYzMjI2OUY0MThG QUFBNDhCRjEzMTlDODA3OTNCODY2OUQ4MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7/BIueoudbR7DeHR2fjNmTxtjTboMLHFNnSJ9tyn2PYj3nBti GWhL4CeUv97d8RdT1ckJ2Vg1y457oYyzV0umSo2vbhUeNrSzOISZrwkCC5Iatntu 0Unn9y6a77MDbBCObPvGeShhN187v868jMER3+pVWeEfbMIkC/DCY4p+uVuUuWoY vHNuThbfloo9HAPHrgJ9t5xhJqS+4dolh6kyG996Ksf3OM2HYVOPDMwMsWxkQ0hX V36g0qq09rP/MeQkG5Y/w+strLZXaAu46YbFbQT+arj312JET4E/L7SXjS/yKqmo 8npa10ITX3L4vUItVpWG0oUFbbYgx5eAxBzbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU6zYyJp9Bj6qki/ExnIB5O4Zp2DEwHwYDVR0jBBgwFoAUIKzKhxhQA3Ov93tB SyPcal8UdO4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FUSERE L0lLektoeGhRQTNPdjkzdEJTeVBjYWw4VWRPNC5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSUt6S2h4aFFBM092OTN0QlN5UGNhbDhVZE80LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FUSERELzZ6WXlKcDlCajZxa2lfRXhu SUI1TzRacDJERS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACg vwgwDQYJKoZIhvcNAQELBQADggEBAHaKXdfDtpEZivdXdQacpvQ04KZKHGtGRufA a8LVVN6oBraSsxPh2WYQmVK6dNkUrbMiBv5RzPdJsf9l4g0u5e2geNx0UX68KHf1 IM4d9lXP/zrUQkcyeirpl5Xwyqr3E9HbKSgyyoG2W+bB9IogXNw0uKWmDHYeHFHd aFOSvthCega+2whE2Dv/VU/Mp/9cjFIYxJF3Fvshhmjg0yfmu0Y0NMbIu12BjEl+ ZhZ6cDqaHELqookRLBEt7bT5d+haVZ4EowTZ1safap5Juasqqh0C+Nwlv3Raqosy 7VWkJ1AvAXTFVqjPijYy+tk9ELdrGjnWOC5SkrZv8hIkYuOxf1g= -----END CERTIFICATE-----Generated at Fri Apr 18 17:49:55 2025 by rpki-client