$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/NYvWCTwT3nhcXC6zID9QloCMa84.roa File: NYvWCTwT3nhcXC6zID9QloCMa84.roa (raw, json) Hash identifier: qAkU8P2Y6TMRz046hl5lPc5IArQTmun/ItyZzaQa9sE= Subject key identifier: 35:8B:D6:09:3C:13:DE:78:5C:5C:2E:B3:20:3F:50:96:80:8C:6B:CE Certificate issuer: /CN=2C20881A0EFD0664A591AF3095D29935EF9BC361 Certificate serial: 036F Authority key identifier: 2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/NYvWCTwT3nhcXC6zID9QloCMa84.roa Signing time: Mon 10 Feb 2025 14:00:26 +0000 ROA not before: Mon 10 Feb 2025 14:00:26 +0000 ROA not after: Thu 28 Aug 2025 15:30:19 +0000 asID: 396982 IP address blocks: 2401:bf60:4ff5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 879 (0x36f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C20881A0EFD0664A591AF3095D29935EF9BC361 Validity Not Before: Feb 10 14:00:26 2025 GMT Not After : Aug 28 15:30:19 2025 GMT Subject: CN=358BD6093C13DE785C5C2EB3203F5096808C6BCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bf:ee:0a:40:e6:fa:0e:11:9d:80:6f:ae:14: d1:05:b0:34:1e:1c:b7:22:a9:0d:17:ac:1e:e0:65: f8:01:5a:f8:39:9e:cc:22:8b:4e:84:d4:1c:9c:2f: 04:9d:ef:c0:f2:1d:08:8c:8b:d5:99:03:9f:81:d9: 4f:30:52:75:7c:d2:a9:a6:75:1c:66:2b:1d:8b:e2: 02:43:69:e3:9c:72:61:a3:7e:05:ae:28:3b:ed:8a: 6c:33:9f:f9:d2:59:fd:a6:0a:39:b0:96:ba:ac:dd: d1:cb:5d:1a:cb:84:69:b3:05:fd:90:c0:03:c1:12: 9a:9e:83:7c:ab:49:02:92:69:bf:1a:b5:12:49:3a: 32:56:c1:55:5b:a2:5e:98:c5:ee:5f:68:d5:fd:3e: b6:89:22:58:d3:5d:a3:b1:2c:89:2e:25:55:9f:cf: df:83:b5:9c:c0:b4:cb:ef:17:7d:4e:69:09:4a:08: ce:fe:3c:1c:7c:f4:c8:10:66:80:07:f3:26:99:03: e3:e4:bc:9f:9f:18:6d:1f:40:a2:32:33:e2:93:99: 82:41:3c:c1:4f:3f:06:01:42:9a:51:4f:08:ef:97: aa:09:7d:25:e0:19:d3:a9:ca:2f:0b:54:58:06:f1: a7:db:1d:12:c9:51:49:71:21:eb:4f:3a:f3:9d:d0: 6c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8B:D6:09:3C:13:DE:78:5C:5C:2E:B3:20:3F:50:96:80:8C:6B:CE X509v3 Authority Key Identifier: keyid:2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/NYvWCTwT3nhcXC6zID9QloCMa84.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:bf60:4ff5::/48 Signature Algorithm: sha256WithRSAEncryption 84:50:a5:13:b2:71:53:d6:7b:bd:57:30:f3:e1:15:1f:09:50: 03:44:4d:74:01:cd:f6:ef:da:cc:b0:b4:b1:92:cc:bf:aa:1e: 11:7e:b1:81:22:e1:12:14:d0:b9:f4:a2:f3:02:d1:5b:f7:bf: 79:2e:f8:ef:d9:8c:7d:a4:55:25:65:59:43:af:2a:97:d5:9d: 2e:44:b5:5c:b5:50:d9:b8:98:46:a9:ab:f9:e8:19:c8:b4:bc: d1:c1:6e:ab:c0:da:96:0e:8b:29:61:8d:b2:0f:fe:f1:22:0d: 56:56:9f:ce:a2:cf:fe:ef:04:aa:01:90:e8:ea:48:89:ff:7b: 28:27:63:01:ed:f9:ed:f1:be:40:95:c2:cd:8b:5b:29:08:5d: af:66:e8:01:b8:a7:3c:c5:cf:b8:8f:b9:ef:5c:c8:08:a3:f0: 20:40:31:03:a8:5a:45:72:8f:1d:91:69:4e:4b:c1:97:cc:cb: ea:07:6c:15:a2:b9:b4:04:3d:17:2d:d8:68:cc:9e:3a:8b:2a: 66:8f:f3:f6:05:5a:da:4f:e9:d9:d3:31:34:58:39:f9:a1:f1: c3:7d:eb:fb:b0:90:f1:aa:e7:62:ee:99:c6:72:7f:53:75:95: d5:c7:c9:b0:fd:94:ff:29:4d:b6:de:79:b0:59:23:77:1d:e0: 6a:9c:eb:38 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgICA28wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMy MDg4MUEwRUZEMDY2NEE1OTFBRjMwOTVEMjk5MzVFRjlCQzM2MTAeFw0yNTAyMTAx NDAwMjZaFw0yNTA4MjgxNTMwMTlaMDMxMTAvBgNVBAMTKDM1OEJENjA5M0MxM0RF Nzg1QzVDMkVCMzIwM0Y1MDk2ODA4QzZCQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8v+4KQOb6DhGdgG+uFNEFsDQeHLciqQ0XrB7gZfgBWvg5nswi i06E1BycLwSd78DyHQiMi9WZA5+B2U8wUnV80qmmdRxmKx2L4gJDaeOccmGjfgWu KDvtimwzn/nSWf2mCjmwlrqs3dHLXRrLhGmzBf2QwAPBEpqeg3yrSQKSab8atRJJ OjJWwVVbol6Yxe5faNX9PraJIljTXaOxLIkuJVWfz9+DtZzAtMvvF31OaQlKCM7+ PBx89MgQZoAH8yaZA+PkvJ+fGG0fQKIyM+KTmYJBPMFPPwYBQppRTwjvl6oJfSXg GdOpyi8LVFgG8afbHRLJUUlxIetPOvOd0GxfAgMBAAGjggH5MIIB9TAdBgNVHQ4E FgQUNYvWCTwT3nhcXC6zID9QloCMa84wHwYDVR0jBBgwFoAULCCIGg79BmSlka8w ldKZNe+bw2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09ERVVQ VEVDSC9MQ0NJR2c3OUJtU2xrYTh3bGRLWk5lLWJ3MkUuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0xDQ0lHZzc5Qm1TbGthOHdsZEtaTmUtYncyRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NPREVVUFRFQ0gvTll2V0NUd1Qz bmhjWEM2eklEOVFsb0NNYTg0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQC AAIwCQMHACQBv2BP9TANBgkqhkiG9w0BAQsFAAOCAQEAhFClE7JxU9Z7vVcw8+EV HwlQA0RNdAHN9u/azLC0sZLMv6oeEX6xgSLhEhTQufSi8wLRW/e/eS7479mMfaRV JWVZQ68ql9WdLkS1XLVQ2biYRqmr+egZyLS80cFuq8Dalg6LKWGNsg/+8SINVlaf zqLP/u8EqgGQ6OpIif97KCdjAe357fG+QJXCzYtbKQhdr2boAbinPMXPuI+571zI CKPwIEAxA6haRXKPHZFpTkvBl8zL6gdsFaK5tAQ9Fy3YaMyeOosqZo/z9gVa2k/p 2dMxNFg5+aHxw33r+7CQ8arnYu6ZxnJ/U3WV1cfJsP2U/ylNtt55sFkjdx3gapzr OA== -----END CERTIFICATE-----Generated at Fri Apr 11 23:34:57 2025 by rpki-client