$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/-fDkZXqt3dAc4fMnouKy3INXr4A.roa File: -fDkZXqt3dAc4fMnouKy3INXr4A.roa (raw, json) Hash identifier: 6bfVqJPkJqV01udiYnpa8uz+Fk3aDyCbx/lJj/V2V5M= Subject key identifier: F9:F0:E4:65:7A:AD:DD:D0:1C:E1:F3:27:A2:E2:B2:DC:83:57:AF:80 Certificate issuer: /CN=6E398C52CC2A079DA90148210AC85328C11BBE96 Certificate serial: 0A13 Authority key identifier: 6E:39:8C:52:CC:2A:07:9D:A9:01:48:21:0A:C8:53:28:C1:1B:BE:96 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/-fDkZXqt3dAc4fMnouKy3INXr4A.roa Signing time: Mon 10 Feb 2025 14:09:49 +0000 ROA not before: Mon 10 Feb 2025 14:09:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131674 IP address blocks: 2405:b8c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 23:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2579 (0xa13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E398C52CC2A079DA90148210AC85328C11BBE96 Validity Not Before: Feb 10 14:09:49 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F9F0E4657AADDDD01CE1F327A2E2B2DC8357AF80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b5:2c:12:61:7b:60:f1:e3:87:43:00:40:67: 4f:c8:8c:d6:99:3d:ec:f4:95:9c:4e:3d:90:ae:4d: 10:a5:25:19:3c:16:f1:dc:50:51:d3:23:53:16:c2: 49:dd:e2:ac:e1:93:26:ea:58:31:94:33:73:b0:ac: f2:8f:37:8e:35:46:d6:62:9d:84:fa:1c:b0:0a:c1: 27:71:74:10:19:7a:72:87:47:5b:48:1d:6e:c5:d0: 1b:4b:9c:99:c2:7a:99:6a:9f:81:fd:5e:e7:da:a3: be:00:b3:0f:92:6b:86:ff:25:33:ba:70:2b:d2:14: 19:cf:26:34:d2:a9:4d:6f:25:fa:56:dd:70:40:07: 2b:57:ab:01:48:ee:59:75:01:6b:9f:87:42:54:24: b8:df:d9:c8:90:d9:6d:6c:cb:99:8f:9e:09:39:d4: e6:da:e7:e5:1c:98:34:44:90:fb:17:b2:00:94:c3: 08:ec:a6:9e:77:b5:b4:8d:ce:e8:7b:f8:8c:07:76: 57:b2:78:49:cb:79:95:92:5d:da:6d:cb:96:73:7c: d0:09:a9:67:b0:aa:36:b2:45:93:40:58:48:21:8f: ae:05:e1:f6:cf:ea:36:31:9d:db:a6:22:a7:fe:df: ac:43:5b:66:41:7c:82:dc:17:d9:6d:37:59:3e:0d: 31:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F0:E4:65:7A:AD:DD:D0:1C:E1:F3:27:A2:E2:B2:DC:83:57:AF:80 X509v3 Authority Key Identifier: keyid:6E:39:8C:52:CC:2A:07:9D:A9:01:48:21:0A:C8:53:28:C1:1B:BE:96 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/-fDkZXqt3dAc4fMnouKy3INXr4A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:b8c0::/32 Signature Algorithm: sha256WithRSAEncryption 88:66:65:53:c7:ed:5b:0d:03:13:f2:65:0b:c2:b2:f3:15:20: 12:75:fa:83:f4:8c:45:39:3b:67:85:e6:dd:bb:51:3a:e2:98: 4c:24:a4:52:54:c0:8f:88:0c:23:ec:3d:94:67:d7:90:03:6f: 9e:9d:06:8f:69:d2:6d:6b:b9:59:e0:65:ef:ad:ec:a0:aa:0b: 21:49:a1:7d:2f:49:dc:33:d8:61:d4:46:fd:5b:c0:8d:76:4b: b9:75:be:be:7d:c7:32:8e:f9:1e:1f:7e:16:c0:1c:6d:5d:44: 6d:a2:2d:9c:f8:1c:74:56:5b:a0:06:e2:6a:1e:c6:0c:08:7c: 34:2a:d7:48:bc:8d:41:b3:9a:d3:a5:c9:af:d1:97:43:d2:70: 5d:e1:cc:41:be:45:97:c6:ad:0a:d7:7d:a1:99:3e:57:a1:fa: 93:bb:91:39:f3:96:7f:1b:1d:ab:6f:3d:f3:a8:f5:ba:3e:7f: 30:50:59:c5:1d:8c:6e:50:58:3e:1e:94:d7:09:ab:06:16:9b: f4:93:c5:fc:61:6e:22:31:38:7e:b4:c2:6f:00:6a:e4:57:45: f9:b6:1d:2e:1e:9f:5c:ae:db:b3:f2:be:bf:6b:68:c6:38:a3: 3f:4d:2f:0b:53:44:11:7f:e6:e5:90:2a:67:ca:75:53:09:80: fb:3c:9b:d8 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICChMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkUz OThDNTJDQzJBMDc5REE5MDE0ODIxMEFDODUzMjhDMTFCQkU5NjAeFw0yNTAyMTAx NDA5NDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY5RjBFNDY1N0FBRERE RDAxQ0UxRjMyN0EyRTJCMkRDODM1N0FGODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCttSwSYXtg8eOHQwBAZ0/IjNaZPez0lZxOPZCuTRClJRk8FvHc UFHTI1MWwknd4qzhkybqWDGUM3OwrPKPN441RtZinYT6HLAKwSdxdBAZenKHR1tI HW7F0BtLnJnCeplqn4H9Xufao74Asw+Sa4b/JTO6cCvSFBnPJjTSqU1vJfpW3XBA BytXqwFI7ll1AWufh0JUJLjf2ciQ2W1sy5mPngk51Oba5+UcmDREkPsXsgCUwwjs pp53tbSNzuh7+IwHdleyeEnLeZWSXdpty5ZzfNAJqWewqjayRZNAWEghj64F4fbP 6jYxndumIqf+36xDW2ZBfILcF9ltN1k+DTEFAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU+fDkZXqt3dAc4fMnouKy3INXr4AwHwYDVR0jBBgwFoAUbjmMUswqB52pAUgh CshTKMEbvpYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT1BFTlJJ Q0gvYmptTVVzd3FCNTJwQVVnaENzaFRLTUVidnBZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9iam1NVXN3cUI1MnBBVWdoQ3NoVEtNRWJ2cFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9PUEVOUklDSC8tZkRrWlhxdDNkQWM0 Zk1ub3VLeTNJTlhyNEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAW4wDANBgkqhkiG9w0BAQsFAAOCAQEAiGZlU8ftWw0DE/JlC8Ky8xUgEnX6 g/SMRTk7Z4Xm3btROuKYTCSkUlTAj4gMI+w9lGfXkANvnp0Gj2nSbWu5WeBl763s oKoLIUmhfS9J3DPYYdRG/VvAjXZLuXW+vn3HMo75Hh9+FsAcbV1EbaItnPgcdFZb oAbiah7GDAh8NCrXSLyNQbOa06XJr9GXQ9JwXeHMQb5Fl8atCtd9oZk+V6H6k7uR OfOWfxsdq28986j1uj5/MFBZxR2MblBYPh6U1wmrBhab9JPF/GFuIjE4frTCbwBq 5FdF+bYdLh6fXK7bs/K+v2toxjijP00vC1NEEX/m5ZAqZ8p1UwmA+zyb2A== -----END CERTIFICATE-----Generated at Wed Feb 19 22:07:55 2025 by rpki-client