$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/1brI50nLcAK2cgT42tQ18maS3f0.roa File: 1brI50nLcAK2cgT42tQ18maS3f0.roa (raw, json) Hash identifier: MuqUPyWjDhw+L1N6COLHQGK12vnRCrgEFjKVoFV3aag= Subject key identifier: D5:BA:C8:E7:49:CB:70:02:B6:72:04:F8:DA:D4:35:F2:66:92:DD:FD Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8 Certificate serial: 0C63 Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/1brI50nLcAK2cgT42tQ18maS3f0.roa Signing time: Mon 10 Feb 2025 14:02:17 +0000 ROA not before: Mon 10 Feb 2025 14:02:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 135293 IP address blocks: 103.104.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3171 (0xc63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8 Validity Not Before: Feb 10 14:02:17 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D5BAC8E749CB7002B67204F8DAD435F26692DDFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:16:20:4a:8f:93:b5:0d:d0:15:7a:d3:f8:75: a9:86:a5:4c:e3:65:49:c1:60:15:0b:1c:19:39:f7: 99:23:52:82:69:2f:a4:3e:62:13:fa:0a:1f:34:03: c5:32:72:cf:51:09:fa:f7:31:77:23:98:73:68:72: 15:98:fe:4b:48:4f:36:97:49:47:36:90:8a:1c:77: 7d:b3:b6:16:0e:8f:f3:4c:cf:a6:71:88:7b:08:97: 82:fc:65:71:c3:33:ad:6f:14:32:a0:c3:84:8d:72: df:d6:33:cd:35:8d:fb:fe:60:c2:e7:40:86:22:83: 69:6b:ca:a1:9e:d3:14:cb:fc:fa:3a:3b:6d:b8:5b: bd:23:09:de:d6:1c:b3:a5:54:f1:20:25:e6:6e:00: b9:93:c6:55:7a:87:79:92:8d:b4:c2:eb:7d:66:c9: 57:6d:07:dc:40:ca:f6:23:44:08:94:93:54:35:0e: 1c:52:9a:70:03:ee:5c:b8:60:6a:0f:5c:ce:f3:09: 32:71:1b:79:34:d0:20:c0:03:96:08:5e:4a:a0:a3: b2:1e:eb:64:81:05:3a:78:df:70:04:20:54:0d:f8: 2d:fb:4e:db:f6:16:e8:8e:d4:fc:20:22:b7:e2:84: 7a:ee:93:2f:fd:70:64:a1:44:05:df:0a:b2:28:eb: 00:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BA:C8:E7:49:CB:70:02:B6:72:04:F8:DA:D4:35:F2:66:92:DD:FD X509v3 Authority Key Identifier: keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/1brI50nLcAK2cgT42tQ18maS3f0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.104.148.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:a0:6e:e6:c4:d7:e2:cd:4f:15:f7:79:24:8b:5d:22:96:63: 9e:62:c0:dc:2a:d9:8c:01:10:e8:14:14:aa:e4:40:e2:ac:3d: eb:50:6d:76:94:9d:0a:c3:8c:5a:27:d4:52:50:ee:84:25:6f: 26:93:c8:38:93:90:9b:00:5a:46:b2:0a:bb:9a:39:2b:81:16: 21:87:03:51:3c:ba:82:3e:07:06:37:69:8c:aa:ed:ca:a6:e7: 76:8d:d2:97:81:7c:9f:a8:bf:0a:12:41:73:56:1c:8b:b6:f4: 6e:d9:a5:b9:a7:70:ef:ec:a2:15:35:cd:e6:af:23:f9:52:6b: 20:63:e9:52:5a:6d:22:28:cf:8b:9a:c2:fa:b3:de:aa:97:d0: ab:8b:6d:6c:b2:bf:9b:62:3f:9b:4e:a6:f1:08:b3:a4:0c:49: 5b:f8:fa:25:61:45:65:94:b4:b1:fe:38:d6:0a:a6:56:f1:3a: e7:4f:1d:60:b6:29:2c:f4:3f:27:49:21:0d:ac:a7:a8:fb:6f: 0f:87:20:fd:bd:64:ca:70:ba:bd:2d:68:48:33:9e:47:b2:27: 58:6d:a9:37:c6:46:b6:1e:e1:80:4d:95:3e:4e:63:a6:a5:71: 7b:40:f8:75:80:41:f4:8f:e0:ac:ab:9b:1c:66:fc:e5:d4:ab: 08:58:a0:53 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDGMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzk1 QTkxRUQ0MEFBQTE1QjlBQkNBMjFDMjA1QjM2RUM3NDk0OUZDODAeFw0yNTAyMTAx NDAyMTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ1QkFDOEU3NDlDQjcw MDJCNjcyMDRGOERBRDQzNUYyNjY5MkRERkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVFiBKj5O1DdAVetP4damGpUzjZUnBYBULHBk595kjUoJpL6Q+ YhP6Ch80A8Uycs9RCfr3MXcjmHNochWY/ktITzaXSUc2kIocd32zthYOj/NMz6Zx iHsIl4L8ZXHDM61vFDKgw4SNct/WM801jfv+YMLnQIYig2lryqGe0xTL/Po6O224 W70jCd7WHLOlVPEgJeZuALmTxlV6h3mSjbTC631myVdtB9xAyvYjRAiUk1Q1DhxS mnAD7ly4YGoPXM7zCTJxG3k00CDAA5YIXkqgo7Ie62SBBTp433AEIFQN+C37Ttv2 FuiO1PwgIrfihHruky/9cGShRAXfCrIo6wAZAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU1brI50nLcAK2cgT42tQ18maS3f0wHwYDVR0jBBgwFoAUeVqR7UCqoVuavKIc IFs27HSUn8gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0VOVFJP SUQvZVZxUjdVQ3FvVnVhdktJY0lGczI3SFNVbjhnLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9lVnFSN1VDcW9WdWF2S0ljSUZzMjdIU1VuOGcuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DRU5UUk9JRC8xYnJJNTBuTGNBSzJj Z1Q0MnRRMThtYVMzZjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ2iUMA0GCSqGSIb3DQEBCwUAA4IBAQA/oG7mxNfizU8V93kki10ilmOeYsDc KtmMARDoFBSq5EDirD3rUG12lJ0Kw4xaJ9RSUO6EJW8mk8g4k5CbAFpGsgq7mjkr gRYhhwNRPLqCPgcGN2mMqu3Kpud2jdKXgXyfqL8KEkFzVhyLtvRu2aW5p3Dv7KIV Nc3mryP5UmsgY+lSWm0iKM+LmsL6s96ql9Cri21ssr+bYj+bTqbxCLOkDElb+Pol YUVllLSx/jjWCqZW8TrnTx1gtiks9D8nSSENrKeo+28PhyD9vWTKcLq9LWhIM55H sidYbak3xka2HuGATZU+TmOmpXF7QPh1gEH0j+Csq5scZvzl1KsIWKBT -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:09 2025 by rpki-client