$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/bsUxgmWJIW-emdHJLlah_iDMiRQ.roa File: bsUxgmWJIW-emdHJLlah_iDMiRQ.roa (raw, json) Hash identifier: OxQeHWJ9AfgVz5v4fP81pt8R9N0dDKbbDxWgWGmsyfM= Subject key identifier: 6E:C5:31:82:65:89:21:6F:9E:99:D1:C9:2E:56:A1:FE:20:CC:89:14 Certificate issuer: /CN=ABC8439FE19D99B038270208C94B66CA231FFED5 Certificate serial: 02FC Authority key identifier: AB:C8:43:9F:E1:9D:99:B0:38:27:02:08:C9:4B:66:CA:23:1F:FE:D5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/bsUxgmWJIW-emdHJLlah_iDMiRQ.roa Signing time: Mon 10 Feb 2025 13:57:24 +0000 ROA not before: Mon 10 Feb 2025 13:57:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38047 IP address blocks: 2400:61a0:a055::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 22:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 764 (0x2fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABC8439FE19D99B038270208C94B66CA231FFED5 Validity Not Before: Feb 10 13:57:24 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6EC531826589216F9E99D1C92E56A1FE20CC8914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:63:a5:f4:87:b3:18:98:7f:c5:87:72:54:2e: 08:0a:c0:38:47:fe:d0:bc:a7:84:0b:b2:25:6a:6c: fb:fe:1f:28:e7:92:c9:9d:6d:8c:94:be:21:f6:f4: 8b:a0:b6:77:d0:d7:85:fc:fa:6d:f3:c3:94:09:66: b1:af:cb:aa:36:60:4c:db:18:c1:f3:81:5f:9c:8c: 13:0f:6a:ad:b8:87:59:24:67:b0:9e:dd:d1:35:5b: 0c:d4:6e:ce:54:fe:ba:b8:a8:73:eb:6a:ea:51:e6: c4:aa:34:26:23:7a:86:4b:27:30:a7:c5:38:27:d3: c2:56:4f:b0:7c:88:3d:04:a6:88:e9:fe:cb:ed:85: 57:aa:e0:be:42:fb:68:a0:d8:55:0e:03:85:bc:83: 1b:2c:16:3c:ba:ce:d0:85:83:e3:89:ae:f0:3a:43: 05:6a:9b:9c:07:8e:99:22:ef:2e:6d:0e:a0:d6:b9: 21:08:99:07:8c:52:af:29:3d:fd:21:78:fa:61:c6: 56:31:54:1b:75:4c:41:ee:5b:df:72:e2:27:2b:34: 63:4b:7e:c3:df:f4:ca:12:9b:73:05:f9:c2:78:e9: c2:1a:69:43:7a:d7:71:5e:8f:af:bf:86:8c:5c:e1: 80:90:95:54:c8:2f:83:e2:b1:62:86:cc:ab:f0:1c: 3b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C5:31:82:65:89:21:6F:9E:99:D1:C9:2E:56:A1:FE:20:CC:89:14 X509v3 Authority Key Identifier: keyid:AB:C8:43:9F:E1:9D:99:B0:38:27:02:08:C9:4B:66:CA:23:1F:FE:D5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/bsUxgmWJIW-emdHJLlah_iDMiRQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:61a0:a055::/48 Signature Algorithm: sha256WithRSAEncryption 89:59:6a:02:5d:e9:e5:13:ab:1f:99:1e:d7:f9:62:0b:fd:cc: 8a:9c:cd:75:c6:f2:61:02:ce:f0:8b:90:97:15:8c:53:ba:33: 7c:bb:79:17:cd:0b:ff:01:22:d0:33:cb:07:64:66:a4:d0:27: a8:cb:ff:69:34:c3:e9:aa:25:e2:66:e2:77:99:8b:26:bc:ec: 74:9d:fb:dd:01:0b:20:94:40:22:c5:57:37:0c:d8:9f:2a:57: 5d:1f:4c:27:4d:a5:aa:7f:ed:29:cf:7d:ff:5a:05:56:5f:eb: f8:97:d4:65:6c:90:33:d0:d3:0c:e3:68:1d:45:a6:69:13:f5: dc:af:4f:95:0a:54:0b:4d:fa:3f:4f:48:9b:c4:3c:e5:61:f6: 67:1b:62:46:c1:a0:5f:51:50:7d:fd:10:d0:3d:18:65:87:ea: 95:5a:4e:74:88:d1:e7:2a:9a:ea:5f:15:b0:fe:57:29:a6:b2: c0:a0:8d:ad:51:59:5c:c3:f2:de:31:61:22:8e:ae:7e:32:d7: b0:93:d4:0d:f2:2e:a8:71:16:0a:e9:0a:4b:9f:9f:b9:8c:bf: 5c:3c:b0:09:81:9d:45:8b:28:4e:fb:82:d4:e6:86:9a:0f:8f: 0c:05:49:e2:5e:7d:82:37:04:4e:c3:4f:f1:17:48:3d:1d:84: 5a:e9:be:f3 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICAvwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJD ODQzOUZFMTlEOTlCMDM4MjcwMjA4Qzk0QjY2Q0EyMzFGRkVENTAeFw0yNTAyMTAx MzU3MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZFQzUzMTgyNjU4OTIx NkY5RTk5RDFDOTJFNTZBMUZFMjBDQzg5MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVY6X0h7MYmH/Fh3JULggKwDhH/tC8p4QLsiVqbPv+Hyjnksmd bYyUviH29IugtnfQ14X8+m3zw5QJZrGvy6o2YEzbGMHzgV+cjBMPaq24h1kkZ7Ce 3dE1WwzUbs5U/rq4qHPraupR5sSqNCYjeoZLJzCnxTgn08JWT7B8iD0Epojp/svt hVeq4L5C+2ig2FUOA4W8gxssFjy6ztCFg+OJrvA6QwVqm5wHjpki7y5tDqDWuSEI mQeMUq8pPf0hePphxlYxVBt1TEHuW99y4icrNGNLfsPf9MoSm3MF+cJ46cIaaUN6 13Fej6+/hoxc4YCQlVTIL4PisWKGzKvwHDvVAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUbsUxgmWJIW+emdHJLlah/iDMiRQwHwYDVR0jBBgwFoAUq8hDn+GdmbA4JwII yUtmyiMf/tUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJTkFU RUwvcThoRG4tR2RtYkE0SndJSXlVdG15aU1mX3RVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9xOGhEbi1HZG1iQTRKd0lJeVV0bXlpTWZfdFUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElOQVRFTC9ic1V4Z21XSklXLWVt ZEhKTGxhaF9pRE1pUlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJABhoKBVMA0GCSqGSIb3DQEBCwUAA4IBAQCJWWoCXenlE6sfmR7X+WIL/cyK nM11xvJhAs7wi5CXFYxTujN8u3kXzQv/ASLQM8sHZGak0Ceoy/9pNMPpqiXiZuJ3 mYsmvOx0nfvdAQsglEAixVc3DNifKlddH0wnTaWqf+0pz33/WgVWX+v4l9RlbJAz 0NMM42gdRaZpE/Xcr0+VClQLTfo/T0ibxDzlYfZnG2JGwaBfUVB9/RDQPRhlh+qV Wk50iNHnKprqXxWw/lcpprLAoI2tUVlcw/LeMWEijq5+Mtewk9QN8i6ocRYK6QpL n5+5jL9cPLAJgZ1FiyhO+4LU5oaaD48MBUniXn2CNwROw0/xF0g9HYRa6b7z -----END CERTIFICATE-----Generated at Sat Apr 12 20:22:32 2025 by rpki-client