$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCETECH/ccfBSmWYHLx8ju0a14YXyamObYE.roa File: ccfBSmWYHLx8ju0a14YXyamObYE.roa (raw, json) Hash identifier: nMx4N12WJ5f89/ZKOCn2BWDB/IPiWRbtDQzPE191OPQ= Subject key identifier: 71:C7:C1:4A:65:98:1C:BC:7C:8E:ED:1A:D7:86:17:C9:A9:8E:6D:81 Certificate issuer: /CN=7E9CEF27C8DED13506B3399D992ECFF626B57951 Certificate serial: 0483 Authority key identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/ccfBSmWYHLx8ju0a14YXyamObYE.roa Signing time: Mon 10 Feb 2025 13:57:46 +0000 ROA not before: Mon 10 Feb 2025 13:57:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 208223 IP address blocks: 160.25.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 22:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1155 (0x483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E9CEF27C8DED13506B3399D992ECFF626B57951 Validity Not Before: Feb 10 13:57:46 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=71C7C14A65981CBC7C8EED1AD78617C9A98E6D81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:60:56:9a:58:43:47:22:dd:6c:c1:34:00:2f: 3e:d5:e3:15:5b:1b:19:32:e0:c6:0a:9f:18:ce:0d: 18:dc:6f:d8:ed:cb:ac:ba:e9:af:e2:21:fb:7b:ed: 73:2a:8a:bd:e5:e8:db:38:dc:9d:88:2c:c4:2e:fa: 7a:03:9e:29:82:b0:2a:20:3b:5b:9a:b2:e7:f5:61: 1f:42:d0:8a:d2:e6:f1:5d:35:94:62:4b:c7:19:35: e8:fb:be:e0:52:b0:6e:1f:79:06:23:b5:e8:aa:06: 10:15:8a:cc:8c:02:a0:a0:1d:48:ee:06:59:bf:c3: 4c:78:95:27:4d:0c:09:9e:b4:39:a2:5c:ba:37:25: 10:6e:19:40:8e:3d:1e:7d:7b:f3:b4:3c:28:60:8e: c1:cf:82:48:53:d4:16:94:90:64:0f:6c:19:22:d5: 89:45:b5:af:97:9d:3d:68:8c:52:28:a8:2e:25:0b: 89:99:27:07:32:c9:59:41:9e:c0:1d:05:c9:ad:3c: 50:e3:4b:5e:20:b1:d8:5e:15:a0:d8:9d:ef:d8:ba: ad:78:d0:19:bf:d7:d4:f2:65:6a:50:9e:57:21:44: 6d:d0:fb:7c:e6:82:84:f7:a6:5e:3e:d5:3f:45:c4: d7:d2:e6:e3:e9:ec:ba:e7:5a:ee:ac:c2:24:f3:ae: 31:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C7:C1:4A:65:98:1C:BC:7C:8E:ED:1A:D7:86:17:C9:A9:8E:6D:81 X509v3 Authority Key Identifier: keyid:7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/ccfBSmWYHLx8ju0a14YXyamObYE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.25.105.0/24 Signature Algorithm: sha256WithRSAEncryption bf:09:67:62:d1:81:85:62:fe:16:67:1a:ee:d3:b7:f8:74:de: 75:a6:52:4b:ee:df:f4:70:8e:b8:43:b1:0b:03:22:87:76:74: bb:1d:69:d5:99:57:b0:6b:78:40:e4:76:d5:e8:79:43:8e:75: 16:15:d4:bd:f3:e0:39:9a:55:e7:f7:a3:a0:b6:50:75:fb:fa: 40:69:d3:60:f5:6e:32:f1:3d:d4:3d:02:82:53:3c:de:e4:c5: ed:a0:ce:05:21:42:b1:ff:13:40:bd:5c:00:50:be:52:2c:0f: d5:60:72:71:80:8b:30:a4:15:53:74:c3:70:f1:ef:7d:2d:dc: 24:e0:77:cb:5e:23:8c:19:f1:60:09:e6:9c:d0:ae:f4:44:dd: b2:f9:f4:43:5c:47:75:e0:07:19:1d:d1:ca:a4:71:bf:37:c8: ab:c5:a4:4d:86:54:aa:07:75:3e:20:39:49:24:4f:1e:2d:98: c1:80:42:96:e8:fe:3a:e3:d7:8c:04:f8:d8:46:58:f8:e6:53: 9c:2f:17:ed:7d:5c:65:0e:70:a7:89:55:dc:a3:7b:f7:7e:f3: b1:f9:66:09:42:cb:5c:9a:68:07:17:3f:90:15:dd:a3:4d:b0: f2:3b:ae:f7:96:fb:b2:d5:18:25:21:39:10:a8:9d:0e:2b:20: 30:cf:01:28 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBIMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0U5 Q0VGMjdDOERFRDEzNTA2QjMzOTlEOTkyRUNGRjYyNkI1Nzk1MTAeFw0yNTAyMTAx MzU3NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcxQzdDMTRBNjU5ODFD QkM3QzhFRUQxQUQ3ODYxN0M5QTk4RTZEODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBYFaaWENHIt1swTQALz7V4xVbGxky4MYKnxjODRjcb9jty6y6 6a/iIft77XMqir3l6Ns43J2ILMQu+noDnimCsCogO1uasuf1YR9C0IrS5vFdNZRi S8cZNej7vuBSsG4feQYjteiqBhAVisyMAqCgHUjuBlm/w0x4lSdNDAmetDmiXLo3 JRBuGUCOPR59e/O0PChgjsHPgkhT1BaUkGQPbBki1YlFta+XnT1ojFIoqC4lC4mZ JwcyyVlBnsAdBcmtPFDjS14gsdheFaDYne/Yuq140Bm/19TyZWpQnlchRG3Q+3zm goT3pl4+1T9FxNfS5uPp7LrnWu6swiTzrjEnAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUccfBSmWYHLx8ju0a14YXyamObYEwHwYDVR0jBBgwFoAUfpzvJ8je0TUGszmd mS7P9ia1eVEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NFVEVD SC9mcHp2SjhqZTBUVUdzem1kbVM3UDlpYTFlVkUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2ZwenZKOGplMFRVR3N6bWRtUzdQOWlhMWVWRS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDRVRFQ0gvY2NmQlNtV1lITHg4anUw YTE0WVh5YW1PYllFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AKAZaTANBgkqhkiG9w0BAQsFAAOCAQEAvwlnYtGBhWL+Fmca7tO3+HTedaZSS+7f 9HCOuEOxCwMih3Z0ux1p1ZlXsGt4QOR21eh5Q451FhXUvfPgOZpV5/ejoLZQdfv6 QGnTYPVuMvE91D0CglM83uTF7aDOBSFCsf8TQL1cAFC+UiwP1WBycYCLMKQVU3TD cPHvfS3cJOB3y14jjBnxYAnmnNCu9ETdsvn0Q1xHdeAHGR3RyqRxvzfIq8WkTYZU qgd1PiA5SSRPHi2YwYBCluj+OuPXjAT42EZY+OZTnC8X7X1cZQ5wp4lV3KN7937z sflmCULLXJpoBxc/kBXdo02w8juu95b7stUYJSE5EKidDisgMM8BKA== -----END CERTIFICATE-----Generated at Wed Feb 19 22:06:44 2025 by rpki-client