$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/5CVnIL2kuIKAxgE1N3hbo8OxsJo.roa File: 5CVnIL2kuIKAxgE1N3hbo8OxsJo.roa (raw, json) Hash identifier: +FYNd3jwFNVbqYhZcFnt5DYjF/pEHER7Ve/BJZjpnys= Subject key identifier: E4:25:67:20:BD:A4:B8:82:80:C6:01:35:37:78:5B:A3:C3:B1:B0:9A Certificate issuer: /CN=6016EF41F321C9AA6C1E13D115B5B60A3029C8E5 Certificate serial: 017C Authority key identifier: 60:16:EF:41:F3:21:C9:AA:6C:1E:13:D1:15:B5:B6:0A:30:29:C8:E5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YBbvQfMhyapsHhPRFbW2CjApyOU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/5CVnIL2kuIKAxgE1N3hbo8OxsJo.roa Signing time: Mon 10 Feb 2025 13:43:27 +0000 ROA not before: Mon 10 Feb 2025 13:43:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 200213 IP address blocks: 103.69.80.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/YBbvQfMhyapsHhPRFbW2CjApyOU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/YBbvQfMhyapsHhPRFbW2CjApyOU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/YBbvQfMhyapsHhPRFbW2CjApyOU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6016EF41F321C9AA6C1E13D115B5B60A3029C8E5 Validity Not Before: Feb 10 13:43:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E4256720BDA4B88280C6013537785BA3C3B1B09A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5b:49:60:60:47:e4:96:b2:86:82:0c:12:db: bd:88:8f:b6:84:05:9f:b6:5f:99:03:7f:fe:95:bc: 9a:c2:05:d7:fd:0c:c5:71:1d:a1:fd:c9:6c:cc:a3: 65:00:8b:9e:a9:4d:05:25:4d:e5:ed:80:2e:0a:eb: 3a:33:c9:c9:a6:92:31:00:c6:cc:75:8c:7b:f9:ff: 96:d7:3b:57:06:87:66:a1:6b:73:ae:65:8d:ef:f9: 54:a3:7d:12:50:00:09:e8:67:5e:1f:cc:52:94:d9: fe:ab:cd:26:db:cd:cc:3b:78:1e:75:9d:46:79:a6: 23:bf:e9:a3:34:49:ba:b0:e5:7f:5c:46:ac:82:33: 60:7c:1a:3e:4f:73:53:90:3f:69:1c:40:93:a6:7e: 47:f7:6c:3b:65:6e:63:00:21:22:d6:72:f1:0f:36: 63:58:e1:5d:7b:1b:1e:09:5d:09:b6:7c:b9:4a:c7: 9e:88:02:8a:cb:62:8f:e0:44:d0:19:46:5e:1a:56: 3b:8c:d3:c0:e8:78:2f:cf:2e:59:9e:06:2b:28:5a: cb:a9:b3:1a:ee:15:3c:c0:1f:40:24:41:be:d6:67: e0:27:fa:6e:bb:26:25:88:80:68:06:89:f3:87:86: 6c:d3:55:8e:7e:80:6f:7d:7a:2f:c5:f8:0a:11:f4: aa:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:25:67:20:BD:A4:B8:82:80:C6:01:35:37:78:5B:A3:C3:B1:B0:9A X509v3 Authority Key Identifier: keyid:60:16:EF:41:F3:21:C9:AA:6C:1E:13:D1:15:B5:B6:0A:30:29:C8:E5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/YBbvQfMhyapsHhPRFbW2CjApyOU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YBbvQfMhyapsHhPRFbW2CjApyOU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/5CVnIL2kuIKAxgE1N3hbo8OxsJo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.69.80.0/23 Signature Algorithm: sha256WithRSAEncryption 25:aa:fb:f7:5c:2a:9b:5e:4a:d1:d1:fa:23:3c:f9:d2:a2:7b: 4a:fa:0f:f9:33:43:87:df:01:c7:95:a2:24:18:4c:60:86:52: 46:94:45:63:66:9d:5d:35:6f:67:00:f6:6b:56:dd:9c:0e:8e: 85:b4:15:af:ad:84:d3:e5:0c:b7:66:85:51:67:de:3c:67:d0: 16:9c:1f:93:34:24:3f:db:e2:f5:78:c0:55:9b:76:94:b6:54: c9:e5:c8:e5:ea:3f:f6:d6:80:b9:15:4c:16:60:62:6a:36:6e: 98:b3:c9:e6:0d:e8:a7:4f:63:11:b1:ca:bf:77:27:a9:a7:7e: a8:b8:8b:68:b6:69:09:0f:5c:ff:ba:b4:42:b1:9c:70:d9:a8: 9c:2a:4f:49:58:f6:ad:01:1d:2a:b0:16:0f:56:1b:97:2b:f9: 42:88:6e:34:00:22:74:37:9f:71:b4:1c:44:df:cb:6b:da:33: 64:b8:d0:2d:6e:42:51:84:b1:42:88:30:8c:b9:47:d7:6b:03: ff:ab:0a:22:fe:69:37:cf:7a:d1:06:a0:8c:56:ba:9d:96:e6: 8d:d9:c4:3a:cc:a2:ae:39:06:0d:b7:31:ec:54:fa:b2:be:26: d4:ce:e4:8a:54:60:40:ca:57:d8:8b:0e:79:4d:01:7f:47:8c: dd:9e:d7:16 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjAx NkVGNDFGMzIxQzlBQTZDMUUxM0QxMTVCNUI2MEEzMDI5QzhFNTAeFw0yNTAyMTAx MzQzMjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU0MjU2NzIwQkRBNEI4 ODI4MEM2MDEzNTM3Nzg1QkEzQzNCMUIwOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvW0lgYEfklrKGggwS272Ij7aEBZ+2X5kDf/6VvJrCBdf9DMVx HaH9yWzMo2UAi56pTQUlTeXtgC4K6zozycmmkjEAxsx1jHv5/5bXO1cGh2aha3Ou ZY3v+VSjfRJQAAnoZ14fzFKU2f6rzSbbzcw7eB51nUZ5piO/6aM0Sbqw5X9cRqyC M2B8Gj5Pc1OQP2kcQJOmfkf3bDtlbmMAISLWcvEPNmNY4V17Gx4JXQm2fLlKx56I AorLYo/gRNAZRl4aVjuM08DoeC/PLlmeBisoWsupsxruFTzAH0AkQb7WZ+An+m67 JiWIgGgGifOHhmzTVY5+gG99ei/F+AoR9KpZAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU5CVnIL2kuIKAxgE1N3hbo8OxsJowHwYDVR0jBBgwFoAUYBbvQfMhyapsHhPR FbW2CjApyOUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hBTkdT SEVOL1lCYnZRZk1oeWFwc0hoUFJGYlcyQ2pBcHlPVS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvWUJidlFmTWh5YXBzSGhQUkZiVzJDakFweU9VLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hBTkdTSEVOLzVDVm5JTDJrdUlL QXhnRTFOM2hibzhPeHNKby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnRVAwDQYJKoZIhvcNAQELBQADggEBACWq+/dcKpteStHR+iM8+dKie0r6 D/kzQ4ffAceVoiQYTGCGUkaURWNmnV01b2cA9mtW3ZwOjoW0Fa+thNPlDLdmhVFn 3jxn0BacH5M0JD/b4vV4wFWbdpS2VMnlyOXqP/bWgLkVTBZgYmo2bpizyeYN6KdP YxGxyr93J6mnfqi4i2i2aQkPXP+6tEKxnHDZqJwqT0lY9q0BHSqwFg9WG5cr+UKI bjQAInQ3n3G0HETfy2vaM2S40C1uQlGEsUKIMIy5R9drA/+rCiL+aTfPetEGoIxW up2W5o3ZxDrMoq45Bg23MexU+rK+JtTO5IpUYEDKV9iLDnlNAX9HjN2e1xY= -----END CERTIFICATE-----Generated at Wed Feb 19 22:04:55 2025 by rpki-client