$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/1qUzyfR9fWcPt0h2mjgYDUOEdWE.roa File: 1qUzyfR9fWcPt0h2mjgYDUOEdWE.roa (raw, json) Hash identifier: IWxUqsM+4IplvbyCAGJLlD+6l1TQGTdaSB8VOlHJZ+k= Subject key identifier: D6:A5:33:C9:F4:7D:7D:67:0F:B7:48:76:9A:38:18:0D:43:84:75:61 Certificate issuer: /CN=ABC8439FE19D99B038270208C94B66CA231FFED5 Certificate serial: 02FD Authority key identifier: AB:C8:43:9F:E1:9D:99:B0:38:27:02:08:C9:4B:66:CA:23:1F:FE:D5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/1qUzyfR9fWcPt0h2mjgYDUOEdWE.roa Signing time: Mon 10 Feb 2025 13:57:24 +0000 ROA not before: Mon 10 Feb 2025 13:57:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38047 IP address blocks: 2400:61a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 22:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 765 (0x2fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABC8439FE19D99B038270208C94B66CA231FFED5 Validity Not Before: Feb 10 13:57:24 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D6A533C9F47D7D670FB748769A38180D43847561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:14:75:b4:d9:7b:c4:1d:b4:00:91:62:6b:2d: ea:c6:db:4b:57:18:9b:4c:7d:54:1a:56:3d:a8:d5: e2:7a:cd:92:11:7c:cd:8a:2a:02:12:e0:3c:05:67: f7:97:50:07:44:2c:8d:76:9c:68:2f:a4:dd:0e:d8: b1:e6:5d:b4:24:43:86:99:71:7f:90:8d:7f:35:32: 15:69:ba:be:40:fb:4c:a5:f6:a0:ce:c2:b0:d7:aa: a0:0c:55:3c:18:c7:01:32:36:a7:b7:22:85:82:66: 59:ff:ab:dc:33:dc:de:61:2e:87:b0:80:2e:f1:fd: d5:d3:be:41:0a:4b:90:bb:97:9f:7f:6e:ea:75:f3: 5b:26:a4:a4:e8:b8:d1:34:a2:58:78:90:7e:b2:cd: ed:3d:43:03:12:83:08:a0:37:57:2a:23:e6:06:bc: bc:42:39:c2:3f:ee:3a:b8:77:61:7b:fb:74:78:32: 19:60:b5:dc:f4:61:96:d1:a2:f2:0a:d3:92:df:89: 27:05:2e:35:a5:36:37:bd:c5:8f:55:e9:d3:fc:fc: a0:11:d9:db:8e:61:b1:39:99:50:46:bc:2b:4d:3a: b0:93:ff:32:ff:62:67:83:83:90:ba:40:72:ae:a6: 28:85:21:b2:ed:28:87:58:5d:6d:d3:7d:c5:79:b7: cd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A5:33:C9:F4:7D:7D:67:0F:B7:48:76:9A:38:18:0D:43:84:75:61 X509v3 Authority Key Identifier: keyid:AB:C8:43:9F:E1:9D:99:B0:38:27:02:08:C9:4B:66:CA:23:1F:FE:D5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/1qUzyfR9fWcPt0h2mjgYDUOEdWE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:61a0::/32 Signature Algorithm: sha256WithRSAEncryption 74:b8:02:39:cd:df:a4:3e:26:1a:49:b0:26:83:11:43:c7:c4: 2d:cb:63:3c:a8:d2:7b:c3:ee:8a:18:91:c0:48:9e:47:c7:8d: 28:66:24:18:95:fd:24:de:2e:69:62:10:b6:47:0f:73:c6:8d: 24:1d:09:69:69:93:1e:f2:45:1a:82:77:f8:b9:3c:2c:d2:9c: c9:00:c8:eb:52:f1:f7:ba:92:0c:84:4c:5f:39:5a:05:46:15: c5:ba:ec:61:c7:4d:b0:84:04:26:da:09:a3:ca:8a:36:4d:94: 54:3c:ac:1e:b5:84:5c:8e:56:6e:c4:6c:04:9c:6a:59:57:c8: bd:f1:23:0a:97:d4:04:76:e0:ad:1a:a4:68:71:da:06:99:84: d6:cf:fa:df:bd:f1:7e:0d:2b:84:f4:7e:6a:26:09:20:6c:7b: 03:eb:af:e9:b1:02:65:d6:c1:e1:01:ef:3c:a9:78:4a:21:da: a0:5d:9c:e4:8a:17:76:3a:68:01:80:02:48:da:03:b4:b8:18: 0b:8c:45:27:1d:68:c9:39:62:3b:75:6b:62:91:09:11:f7:21: 75:76:fa:81:e1:f9:53:ba:c2:5d:db:6e:ae:e7:85:be:e0:9a: ec:36:5e:23:e0:17:e3:2c:aa:ba:2d:c0:c4:d2:d7:22:53:74: 2d:33:b9:66 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAv0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJD ODQzOUZFMTlEOTlCMDM4MjcwMjA4Qzk0QjY2Q0EyMzFGRkVENTAeFw0yNTAyMTAx MzU3MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ2QTUzM0M5RjQ3RDdE NjcwRkI3NDg3NjlBMzgxODBENDM4NDc1NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAFHW02XvEHbQAkWJrLerG20tXGJtMfVQaVj2o1eJ6zZIRfM2K KgIS4DwFZ/eXUAdELI12nGgvpN0O2LHmXbQkQ4aZcX+QjX81MhVpur5A+0yl9qDO wrDXqqAMVTwYxwEyNqe3IoWCZln/q9wz3N5hLoewgC7x/dXTvkEKS5C7l59/bup1 81smpKTouNE0olh4kH6yze09QwMSgwigN1cqI+YGvLxCOcI/7jq4d2F7+3R4Mhlg tdz0YZbRovIK05LfiScFLjWlNje9xY9V6dP8/KAR2duOYbE5mVBGvCtNOrCT/zL/ YmeDg5C6QHKupiiFIbLtKIdYXW3TfcV5t803AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU1qUzyfR9fWcPt0h2mjgYDUOEdWEwHwYDVR0jBBgwFoAUq8hDn+GdmbA4JwII yUtmyiMf/tUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJTkFU RUwvcThoRG4tR2RtYkE0SndJSXlVdG15aU1mX3RVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9xOGhEbi1HZG1iQTRKd0lJeVV0bXlpTWZfdFUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElOQVRFTC8xcVV6eWZSOWZXY1B0 MGgybWpnWURVT0VkV0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJABhoDANBgkqhkiG9w0BAQsFAAOCAQEAdLgCOc3fpD4mGkmwJoMRQ8fELctj PKjSe8PuihiRwEieR8eNKGYkGJX9JN4uaWIQtkcPc8aNJB0JaWmTHvJFGoJ3+Lk8 LNKcyQDI61Lx97qSDIRMXzlaBUYVxbrsYcdNsIQEJtoJo8qKNk2UVDysHrWEXI5W bsRsBJxqWVfIvfEjCpfUBHbgrRqkaHHaBpmE1s/6373xfg0rhPR+aiYJIGx7A+uv 6bECZdbB4QHvPKl4SiHaoF2c5IoXdjpoAYACSNoDtLgYC4xFJx1oyTliO3VrYpEJ EfchdXb6geH5U7rCXdturueFvuCa7DZeI+AX4yyqui3AxNLXIlN0LTO5Zg== -----END CERTIFICATE-----Generated at Sat Apr 12 20:22:33 2025 by rpki-client