$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/Jm65ZX1THYNAUFvGYC9QknZvg0w.roa File: Jm65ZX1THYNAUFvGYC9QknZvg0w.roa (raw, json) Hash identifier: Gg9OLbjHZOg9LJuUO0nQzhrRZfDZ9xU/EGysNz91Ip0= Subject key identifier: 26:6E:B9:65:7D:53:1D:83:40:50:5B:C6:60:2F:50:92:76:6F:83:4C Certificate issuer: /CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Certificate serial: 0ED7 Authority key identifier: A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/Jm65ZX1THYNAUFvGYC9QknZvg0w.roa Signing time: Mon 10 Feb 2025 14:12:01 +0000 ROA not before: Mon 10 Feb 2025 14:12:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 10103 IP address blocks: 103.135.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 02:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3799 (0xed7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Validity Not Before: Feb 10 14:12:01 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=266EB9657D531D8340505BC6602F5092766F834C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:73:c9:94:bb:14:d6:84:d3:bc:02:d9:29:4a: c7:eb:0c:87:cf:b3:69:a6:e2:fa:c8:53:ce:51:7d: 25:78:f1:96:33:e4:29:20:99:71:5f:46:7e:e5:be: 5f:4a:a7:ba:8b:11:0c:a3:eb:de:ff:4a:53:b4:b2: ab:ef:33:40:95:8e:f6:ef:c5:e6:17:9c:f7:f7:94: af:09:a9:fe:63:93:9b:bb:7f:7a:f5:d1:b7:47:f7: b6:5d:52:4b:b2:15:37:19:f5:85:b7:75:54:b1:08: 46:7c:e3:24:e3:0b:c1:93:ab:88:b4:92:07:5f:3c: ef:18:7f:e7:3d:87:79:bf:3e:78:4c:86:48:ea:df: 40:1f:cc:ed:a6:d0:ec:3c:ac:a5:d9:45:6c:5d:55: fa:af:c8:d4:85:90:f6:4a:27:f3:4c:07:28:bc:d4: f5:42:c5:e8:6e:7a:a2:e5:b2:56:63:b5:9b:80:42: 97:57:90:a6:e3:03:cd:c8:bb:96:ab:01:a7:29:aa: 05:22:b1:53:71:34:82:30:e1:a5:c8:98:83:c6:c9: 0b:0a:e9:c8:d3:c9:51:91:cc:4e:58:0b:24:16:97: 92:9e:a8:22:a4:4c:9f:cd:a5:88:9e:17:31:8a:de: 00:b0:f3:f1:b4:22:be:7b:e7:88:b4:f5:b4:4b:d4: cc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6E:B9:65:7D:53:1D:83:40:50:5B:C6:60:2F:50:92:76:6F:83:4C X509v3 Authority Key Identifier: keyid:A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/Jm65ZX1THYNAUFvGYC9QknZvg0w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.135.22.0/23 Signature Algorithm: sha256WithRSAEncryption 99:46:16:66:02:52:f4:eb:35:89:73:d2:65:a4:af:83:a5:4f: 45:50:18:ff:12:2f:fd:c3:eb:98:d1:71:b2:af:e8:7b:62:21: 67:bc:df:e9:7e:9e:71:15:45:55:c9:9b:bb:14:48:8f:73:ff: 5d:3e:22:41:b0:70:ec:a6:1f:99:70:92:d8:5f:57:da:44:95: 54:cf:8a:7a:7f:88:ea:59:74:16:39:ae:a8:4f:fa:61:cf:9a: 71:f7:6a:b6:9b:a1:e4:1f:98:b6:3e:1d:9b:11:1f:2a:5e:19: 5b:1e:58:f9:2b:6e:43:a0:e0:60:5a:32:60:b5:5a:70:81:5d: ca:31:4e:75:06:a3:fa:b5:07:09:fc:d8:c1:84:a4:e0:f0:4e: 83:9f:db:28:93:f8:2b:0b:d8:de:c0:10:c3:43:ee:30:8f:44: cd:8b:e2:03:6a:25:9c:22:bc:62:cb:1c:f7:97:f4:a6:79:55: d2:81:d7:d4:1f:6b:c7:a0:d6:f5:30:b0:60:44:b1:96:75:78: 3d:8d:11:67:71:be:ff:aa:ad:97:53:7b:b4:1a:cb:01:24:ba: 81:73:9f:6c:38:b1:c9:b4:14:08:54:2e:2f:27:2c:d5:82:77: 02:03:9f:50:3c:3e:9d:66:4f:17:24:d6:97:30:a3:50:bd:71: 1e:2d:bb:e1 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDtcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTE4 RUIzNzdERDAzMThBRTQ2NUQ4RjNGN0Q2RTBBRDBBNEU5RUQxRTAeFw0yNTAyMTAx NDEyMDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI2NkVCOTY1N0Q1MzFE ODM0MDUwNUJDNjYwMkY1MDkyNzY2RjgzNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDac8mUuxTWhNO8AtkpSsfrDIfPs2mm4vrIU85RfSV48ZYz5Ckg mXFfRn7lvl9Kp7qLEQyj697/SlO0sqvvM0CVjvbvxeYXnPf3lK8Jqf5jk5u7f3r1 0bdH97ZdUkuyFTcZ9YW3dVSxCEZ84yTjC8GTq4i0kgdfPO8Yf+c9h3m/PnhMhkjq 30AfzO2m0Ow8rKXZRWxdVfqvyNSFkPZKJ/NMByi81PVCxehueqLlslZjtZuAQpdX kKbjA83Iu5arAacpqgUisVNxNIIw4aXImIPGyQsK6cjTyVGRzE5YCyQWl5KeqCKk TJ/NpYieFzGK3gCw8/G0Ir5754i09bRL1My3AgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUJm65ZX1THYNAUFvGYC9QknZvg0wwHwYDVR0jBBgwFoAUoY6zd90DGK5GXY8/ fW4K0KTp7R4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ TkdFTi9vWTZ6ZDkwREdLNUdYWThfZlc0SzBLVHA3UjQuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL29ZNnpkOTBER0s1R1hZOF9mVzRLMEtUcDdSNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL01JTkdKSU5HRU4vSm02NVpYMVRI WU5BVUZ2R1lDOVFrblp2ZzB3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWeHFjANBgkqhkiG9w0BAQsFAAOCAQEAmUYWZgJS9Os1iXPSZaSvg6VP RVAY/xIv/cPrmNFxsq/oe2IhZ7zf6X6ecRVFVcmbuxRIj3P/XT4iQbBw7KYfmXCS 2F9X2kSVVM+Ken+I6ll0FjmuqE/6Yc+acfdqtpuh5B+Ytj4dmxEfKl4ZWx5Y+Stu Q6DgYFoyYLVacIFdyjFOdQaj+rUHCfzYwYSk4PBOg5/bKJP4KwvY3sAQw0PuMI9E zYviA2olnCK8Yssc95f0pnlV0oHX1B9rx6DW9TCwYESxlnV4PY0RZ3G+/6qtl1N7 tBrLASS6gXOfbDixybQUCFQuLycs1YJ3AgOfUDw+nWZPFyTWlzCjUL1xHi274Q== -----END CERTIFICATE-----Generated at Sat Apr 5 23:12:27 2025 by rpki-client