$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Y2kirxQw8xwAbvFm2xQyEmaqYbo.roa File: Y2kirxQw8xwAbvFm2xQyEmaqYbo.roa (raw, json) Hash identifier: ZNQ+leeiyE0k26MstDC8a9AuFvnh4AN5XRK8qeuInH4= Subject key identifier: 63:69:22:AF:14:30:F3:1C:00:6E:F1:66:DB:14:32:12:66:AA:61:BA Certificate issuer: /CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6 Certificate serial: 0C81 Authority key identifier: 32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Y2kirxQw8xwAbvFm2xQyEmaqYbo.roa Signing time: Mon 10 Feb 2025 13:50:39 +0000 ROA not before: Mon 10 Feb 2025 13:50:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18046 IP address blocks: 103.197.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 16:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3201 (0xc81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6 Validity Not Before: Feb 10 13:50:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=636922AF1430F31C006EF166DB14321266AA61BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:81:ff:c6:d2:3b:10:ae:98:7e:c7:44:41:03: 80:d0:08:20:2f:d5:bd:9d:b1:2a:c5:9b:dd:96:b7: 1d:a9:12:e7:b6:6a:c7:02:3c:0d:24:a5:1f:5d:3d: af:1b:26:d0:62:4c:55:ed:ea:41:6e:b2:f8:1e:8a: f2:e7:82:5d:16:80:00:6a:19:00:46:98:b9:6f:17: 19:e2:23:ba:3f:53:81:a4:18:57:5c:33:9c:04:9d: 8e:d3:c8:7f:94:a5:75:8f:f1:fa:cf:27:8e:ff:11: 9d:07:0a:0c:f8:e9:f9:57:9d:f4:29:87:f2:aa:0a: 20:c5:4a:04:9b:65:ff:cc:46:63:a7:82:63:a8:c1: e5:90:a4:54:46:70:29:45:61:a4:e7:09:cb:b5:34: dd:34:8a:f9:c6:45:85:79:b1:b8:11:e7:ac:3a:08: 70:b4:e6:64:a9:e7:1e:57:c0:70:77:80:07:33:91: b1:03:66:03:e4:74:d7:2e:4a:b1:b5:ca:78:e7:f3: 7b:09:f6:ba:40:25:6b:ae:21:54:e4:43:1f:9f:34: 9b:89:b2:0b:01:01:ea:ed:12:eb:0c:c4:79:86:e7: f1:50:9a:9d:75:dc:6b:17:26:9e:dc:99:fe:86:50: 52:96:7b:2c:e0:02:d8:9d:c5:fb:0b:00:2a:88:2c: b4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:69:22:AF:14:30:F3:1C:00:6E:F1:66:DB:14:32:12:66:AA:61:BA X509v3 Authority Key Identifier: keyid:32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Y2kirxQw8xwAbvFm2xQyEmaqYbo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.197.172.0/23 Signature Algorithm: sha256WithRSAEncryption 25:e7:bf:af:01:da:07:fc:b7:98:ad:a5:61:c2:2c:25:4a:4e: 09:c2:b3:bc:ac:30:26:30:96:62:49:e5:fd:5d:8d:d8:ca:a3: b2:a8:c0:b4:09:c7:d7:97:7d:32:60:eb:89:a5:9d:4e:18:0a: bb:66:cd:40:97:bf:47:af:4d:fe:39:e1:05:96:e7:43:52:5a: 2b:f1:22:44:d2:e1:f6:3c:37:d6:b3:d0:d8:66:d1:e7:f4:32: 52:e9:c2:aa:d0:d4:dc:a4:fb:99:c3:39:e5:0d:45:3a:9b:46: 16:33:96:c1:9c:fe:c9:92:2a:c9:ee:56:6f:aa:b0:79:42:41: 2a:8f:43:41:f4:a1:f9:ec:ea:d7:43:ce:5e:53:63:9b:c4:db: 16:ba:d7:c4:d0:8c:dd:c4:78:91:45:2a:b5:42:48:bf:b5:29: 7e:2c:ea:28:a6:43:23:92:9e:dd:06:fb:9f:6f:50:57:a7:06: be:f7:c0:31:61:60:99:01:68:3a:d3:1c:24:9d:52:c8:ec:52: d0:30:8e:a7:6e:14:c9:0c:17:2e:25:ea:3f:f1:e7:d6:bf:bd: 13:8c:f0:6f:ed:ed:fb:e1:ff:17:bd:4d:08:9b:d7:7c:3a:70: 8c:5c:b7:86:c7:d8:8c:a2:64:ab:b6:20:d3:37:b2:0f:8d:32: aa:a3:a1:55 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzI0 QTdFNkVCRjY3OEY5OEI4NzIyOEVDODQ2NkMzNjkwQTQzRERCNjAeFw0yNTAyMTAx MzUwMzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYzNjkyMkFGMTQzMEYz MUMwMDZFRjE2NkRCMTQzMjEyNjZBQTYxQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDegf/G0jsQrph+x0RBA4DQCCAv1b2dsSrFm92Wtx2pEue2ascC PA0kpR9dPa8bJtBiTFXt6kFusvgeivLngl0WgABqGQBGmLlvFxniI7o/U4GkGFdc M5wEnY7TyH+UpXWP8frPJ47/EZ0HCgz46flXnfQph/KqCiDFSgSbZf/MRmOngmOo weWQpFRGcClFYaTnCcu1NN00ivnGRYV5sbgR56w6CHC05mSp5x5XwHB3gAczkbED ZgPkdNcuSrG1ynjn83sJ9rpAJWuuIVTkQx+fNJuJsgsBAertEusMxHmG5/FQmp11 3GsXJp7cmf6GUFKWeyzgAtidxfsLACqILLSLAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUY2kirxQw8xwAbvFm2xQyEmaqYbowHwYDVR0jBBgwFoAUMkp+br9nj5i4cijs hGbDaQpD3bYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0pB WS9Na3AtYnI5bmo1aTRjaWpzaEdiRGFRcEQzYlkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL01rcC1icjluajVpNGNpanNoR2JEYVFwRDNiWS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hPTkdKQVkvWTJraXJ4UXc4eHdBYnZG bTJ4UXlFbWFxWWJvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWfFrDANBgkqhkiG9w0BAQsFAAOCAQEAJee/rwHaB/y3mK2lYcIsJUpOCcKzvKww JjCWYknl/V2N2MqjsqjAtAnH15d9MmDriaWdThgKu2bNQJe/R69N/jnhBZbnQ1Ja K/EiRNLh9jw31rPQ2GbR5/QyUunCqtDU3KT7mcM55Q1FOptGFjOWwZz+yZIqye5W b6qweUJBKo9DQfSh+ezq10POXlNjm8TbFrrXxNCM3cR4kUUqtUJIv7UpfizqKKZD I5Ke3Qb7n29QV6cGvvfAMWFgmQFoOtMcJJ1SyOxS0DCOp24UyQwXLiXqP/Hn1r+9 E4zwb+3t++H/F71NCJvXfDpwjFy3hsfYjKJkq7Yg0zeyD40yqqOhVQ== -----END CERTIFICATE-----Generated at Sun Apr 6 14:27:04 2025 by rpki-client