$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/_ss9YYZwAskgkMTZ-L-DBWaRppk.roa File: _ss9YYZwAskgkMTZ-L-DBWaRppk.roa (raw, json) Hash identifier: 5rymb7YOMAkMbi/0QmnGXNBWlRLo3X7c4Ji5COJJmN4= Subject key identifier: FE:CB:3D:61:86:70:02:C9:20:90:C4:D9:F8:BF:83:05:66:91:A6:99 Certificate issuer: /CN=75BD930C745D23E9EA585C04D6B99F95A96322E5 Certificate serial: 0C4E Authority key identifier: 75:BD:93:0C:74:5D:23:E9:EA:58:5C:04:D6:B9:9F:95:A9:63:22:E5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/db2TDHRdI-nqWFwE1rmflaljIuU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/_ss9YYZwAskgkMTZ-L-DBWaRppk.roa Signing time: Mon 10 Feb 2025 14:25:48 +0000 ROA not before: Mon 10 Feb 2025 14:25:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131143 IP address blocks: 2405:3300::/32 maxlen: 96 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/db2TDHRdI-nqWFwE1rmflaljIuU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/db2TDHRdI-nqWFwE1rmflaljIuU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/db2TDHRdI-nqWFwE1rmflaljIuU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 22:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3150 (0xc4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75BD930C745D23E9EA585C04D6B99F95A96322E5 Validity Not Before: Feb 10 14:25:48 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FECB3D61867002C92090C4D9F8BF83056691A699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9a:27:67:c4:95:08:be:a3:9e:32:8d:ca:b5: db:fc:82:03:af:bf:29:8a:4b:15:c3:5e:e2:49:a1: 8c:1b:b8:86:99:66:8a:30:1a:a5:e1:33:e1:42:bb: 71:03:e6:fc:24:ea:a0:56:17:41:b6:ac:dd:e0:c9: 25:90:40:a9:37:43:0c:b4:8a:9d:6b:9b:bb:a0:5c: 97:72:11:6e:2f:96:37:cb:9d:f9:1b:4b:0b:c9:de: 1a:ef:ba:ef:01:41:06:03:0c:61:82:1c:77:05:fb: 17:47:cf:91:02:f5:60:1d:13:76:81:70:3b:61:c8: fc:7c:9c:e3:e8:0a:32:1e:3d:e2:1d:5f:6f:da:12: ee:0d:59:08:2f:32:f2:3c:96:fc:64:10:f0:4a:8c: cc:09:b0:5c:c9:3c:43:79:35:0e:ab:22:ce:4d:7b: 77:cd:4c:ad:3f:e8:7c:62:31:70:74:cf:cd:6c:4d: ab:8f:ff:44:c9:bb:9b:a9:24:e3:a6:61:46:6f:fb: 4b:8e:dc:77:9d:a8:5e:dc:4b:3e:5f:de:c6:50:0f: 02:f5:d8:66:be:ad:ef:b3:a8:45:f6:c8:70:3a:35: 58:d6:a7:63:03:9f:40:fc:18:08:1e:cc:44:11:38: 87:31:32:22:39:01:e5:6d:fa:bb:2d:ef:fa:f1:1c: ec:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CB:3D:61:86:70:02:C9:20:90:C4:D9:F8:BF:83:05:66:91:A6:99 X509v3 Authority Key Identifier: keyid:75:BD:93:0C:74:5D:23:E9:EA:58:5C:04:D6:B9:9F:95:A9:63:22:E5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/db2TDHRdI-nqWFwE1rmflaljIuU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/db2TDHRdI-nqWFwE1rmflaljIuU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/_ss9YYZwAskgkMTZ-L-DBWaRppk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:3300::/32 Signature Algorithm: sha256WithRSAEncryption 1c:be:11:29:a7:47:a0:5d:4f:8a:1f:c0:ec:48:63:60:b4:28: 26:7b:b7:d0:36:cc:7c:6f:57:0c:04:28:df:f0:74:3e:f2:5e: db:78:29:5a:a7:f5:2b:4e:da:34:6e:e7:c2:de:09:ab:59:3d: 46:09:d6:7f:af:5d:f3:59:92:c0:df:04:d0:86:0a:40:75:4f: 19:66:b9:a0:c1:ac:9b:3b:31:5f:4b:90:f6:82:13:56:ed:d6: c3:8d:b6:9e:da:97:61:08:19:e0:40:10:12:ef:06:84:c5:12: a2:a0:dd:f2:1a:74:e7:aa:76:5e:18:63:0c:22:73:17:19:83: 4e:1d:0b:aa:32:d8:a5:7e:e4:58:eb:8c:8e:13:87:e0:81:8f: 33:7f:ee:56:42:75:42:07:dc:48:07:2f:a2:1e:24:d0:12:dd: 4e:04:ab:d2:1e:03:88:54:6d:9e:fc:8f:bd:b4:31:28:91:81: 19:b6:6f:3b:4b:9b:a1:cf:a2:bf:a0:d7:99:44:16:3e:6c:dc: e5:94:41:5f:ab:58:de:40:44:06:b6:48:93:8b:65:73:bb:ef: 05:93:a6:73:ba:22:a1:1e:6b:54:fa:0b:90:d7:49:ed:c2:ae: 95:4f:bc:c8:e4:47:0b:b7:ab:e2:14:d3:df:8a:0a:ef:95:f5: b4:3f:38:73 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICDE4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC RDkzMEM3NDVEMjNFOUVBNTg1QzA0RDZCOTlGOTVBOTYzMjJFNTAeFw0yNTAyMTAx NDI1NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZFQ0IzRDYxODY3MDAy QzkyMDkwQzREOUY4QkY4MzA1NjY5MUE2OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPmidnxJUIvqOeMo3Ktdv8ggOvvymKSxXDXuJJoYwbuIaZZoow GqXhM+FCu3ED5vwk6qBWF0G2rN3gySWQQKk3Qwy0ip1rm7ugXJdyEW4vljfLnfkb SwvJ3hrvuu8BQQYDDGGCHHcF+xdHz5EC9WAdE3aBcDthyPx8nOPoCjIePeIdX2/a Eu4NWQgvMvI8lvxkEPBKjMwJsFzJPEN5NQ6rIs5Ne3fNTK0/6HxiMXB0z81sTauP /0TJu5upJOOmYUZv+0uO3HedqF7cSz5f3sZQDwL12Ga+re+zqEX2yHA6NVjWp2MD n0D8GAgezEQROIcxMiI5AeVt+rst7/rxHOw3AgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQU/ss9YYZwAskgkMTZ+L+DBWaRppkwHwYDVR0jBBgwFoAUdb2TDHRdI+nqWFwE 1rmflaljIuUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJTkFU UlVTVC9kYjJUREhSZEktbnFXRndFMXJtZmxhbGpJdVUuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL2RiMlRESFJkSS1ucVdGd0Uxcm1mbGFsakl1VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NISU5BVFJVU1QvX3NzOVlZWndB c2tna01UWi1MLURCV2FScHBrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQFMwAwDQYJKoZIhvcNAQELBQADggEBABy+ESmnR6BdT4ofwOxIY2C0 KCZ7t9A2zHxvVwwEKN/wdD7yXtt4KVqn9StO2jRu58LeCatZPUYJ1n+vXfNZksDf BNCGCkB1TxlmuaDBrJs7MV9LkPaCE1bt1sONtp7al2EIGeBAEBLvBoTFEqKg3fIa dOeqdl4YYwwicxcZg04dC6oy2KV+5FjrjI4Th+CBjzN/7lZCdUIH3EgHL6IeJNAS 3U4Eq9IeA4hUbZ78j720MSiRgRm2bztLm6HPor+g15lEFj5s3OWUQV+rWN5ARAa2 SJOLZXO77wWTpnO6IqEea1T6C5DXSe3CrpVPvMjkRwu3q+IU09+KCu+V9bQ/OHM= -----END CERTIFICATE-----Generated at Wed Feb 19 22:04:04 2025 by rpki-client