$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PNI/xKhiBJ9biVkoqrjLsrKmIheEWtU.roa File: xKhiBJ9biVkoqrjLsrKmIheEWtU.roa (raw, json) Hash identifier: GZjlSB2X23fUaAnUweXpltVQWlSbbNthnJPMvmBtz4o= Subject key identifier: C4:A8:62:04:9F:5B:89:59:28:AA:B8:CB:B2:B2:A6:22:17:84:5A:D5 Certificate issuer: /CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF Certificate serial: 08E7 Authority key identifier: 31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/xKhiBJ9biVkoqrjLsrKmIheEWtU.roa Signing time: Mon 10 Feb 2025 14:10:47 +0000 ROA not before: Mon 10 Feb 2025 14:10:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 103.137.62.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 22:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2279 (0x8e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF Validity Not Before: Feb 10 14:10:47 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C4A862049F5B895928AAB8CBB2B2A62217845AD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bf:a9:9c:d7:e1:4f:81:99:c3:ed:cd:55:68: 31:a3:44:2c:01:ab:3f:3d:dc:b2:a8:3e:5d:d2:12: fa:72:0a:a3:b0:34:f1:48:e7:da:e4:45:ac:63:c4: 56:be:aa:48:f1:ed:c7:ef:09:73:21:be:a7:84:87: 99:49:aa:2d:47:be:fb:b5:8f:be:9e:15:a4:ed:4b: 9d:14:81:bd:89:b6:1c:38:e4:64:73:4e:8c:37:aa: a1:b8:37:c3:e7:55:af:e2:92:cb:02:17:13:ad:65: 2a:fe:09:79:62:c7:ba:97:f8:04:f5:0f:2b:f7:91: 3e:f2:7e:de:d8:6d:5d:69:c2:a6:97:2e:82:02:97: 20:43:02:ee:93:c3:5d:d1:50:b1:1d:08:4d:2d:2a: e2:67:8e:95:be:b1:3e:7d:ba:c8:e6:5c:b8:a6:75: 8f:46:ca:55:1f:4b:f0:89:57:7f:a3:d0:6b:25:b7: c3:5e:e5:1c:59:cf:ca:c9:e9:13:b1:ce:a9:71:44: 2f:ad:07:7e:2e:23:d6:79:75:cb:95:b0:f4:fe:d5: a1:12:3a:82:6b:3d:62:a8:dd:c0:3c:e3:96:60:c4: d8:48:9f:c1:39:eb:60:94:4b:42:88:af:aa:c9:e7: b2:41:4d:46:de:20:d6:fe:f5:88:4c:58:b7:4b:ea: 6c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A8:62:04:9F:5B:89:59:28:AA:B8:CB:B2:B2:A6:22:17:84:5A:D5 X509v3 Authority Key Identifier: keyid:31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/xKhiBJ9biVkoqrjLsrKmIheEWtU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.137.62.0/23 Signature Algorithm: sha256WithRSAEncryption 71:8a:b4:c3:51:e5:f6:ff:c2:f2:0a:45:ff:cd:5a:9a:a8:11: d1:2b:ba:68:4c:68:9b:51:db:c7:58:a1:79:80:63:f9:c9:07: 30:23:bb:29:1e:30:14:63:d1:3d:4f:95:12:a2:26:dc:19:b9: c6:78:62:d4:22:a0:62:92:1d:ac:9e:be:b8:1a:9d:e6:aa:32: 30:7a:92:0b:8a:6d:1d:b3:e5:72:33:0a:d8:52:20:22:be:23: 4c:01:33:a7:3b:9f:9b:a0:11:ba:1a:a5:5e:da:53:2c:9d:64: 6b:fa:d3:af:65:7f:67:30:79:57:74:64:ce:e2:25:a9:b2:92: 90:b1:f3:0f:b3:83:2e:29:dd:a6:6f:4a:8b:fb:c0:ae:59:98: a0:3f:2d:15:a3:fd:81:e1:3e:13:59:0a:3f:61:35:7f:c4:3a: 88:31:57:0f:a3:99:b6:8c:b0:49:8d:13:2c:b5:d0:1b:f4:ac: 34:cf:e1:79:30:31:43:ce:40:3e:f6:c9:93:df:31:42:60:98: a7:d1:f7:b5:2c:85:29:08:a9:f9:ea:9f:f1:e7:af:0b:f6:56: c0:09:a6:90:75:d8:41:1f:4b:21:8a:22:16:dd:ef:6d:48:6e: 43:57:c8:1d:52:7e:97:93:e4:fb:96:56:55:e9:93:72:59:c4: 9c:b7:31:37 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICCOcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzEx OEMzMzREQTU4RDdDMDAyMURDQUFDQTg4MURGQjlEQzgzNjVGRjAeFw0yNTAyMTAx NDEwNDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM0QTg2MjA0OUY1Qjg5 NTkyOEFBQjhDQkIyQjJBNjIyMTc4NDVBRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFv6mc1+FPgZnD7c1VaDGjRCwBqz893LKoPl3SEvpyCqOwNPFI 59rkRaxjxFa+qkjx7cfvCXMhvqeEh5lJqi1Hvvu1j76eFaTtS50Ugb2Jthw45GRz Tow3qqG4N8PnVa/ikssCFxOtZSr+CXlix7qX+AT1Dyv3kT7yft7YbV1pwqaXLoIC lyBDAu6Tw13RULEdCE0tKuJnjpW+sT59usjmXLimdY9GylUfS/CJV3+j0Gslt8Ne 5RxZz8rJ6ROxzqlxRC+tB34uI9Z5dcuVsPT+1aESOoJrPWKo3cA845ZgxNhIn8E5 62CUS0KIr6rJ57JBTUbeINb+9YhMWLdL6mztAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUxKhiBJ9biVkoqrjLsrKmIheEWtUwHwYDVR0jBBgwFoAUMRjDNNpY18ACHcqs qIHfudyDZf8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUE5JL01S akROTnBZMThBQ0hjcXNxSUhmdWR5RFpmOC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TVJqRE5OcFkxOEFDSGNxc3FJSGZ1ZHlEWmY4LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvUE5JL3hLaGlCSjliaVZrb3FyakxzckttSWhl RVd0VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFniT4wDQYJ KoZIhvcNAQELBQADggEBAHGKtMNR5fb/wvIKRf/NWpqoEdErumhMaJtR28dYoXmA Y/nJBzAjuykeMBRj0T1PlRKiJtwZucZ4YtQioGKSHayevrganeaqMjB6kguKbR2z 5XIzCthSICK+I0wBM6c7n5ugEboapV7aUyydZGv6069lf2cweVd0ZM7iJamykpCx 8w+zgy4p3aZvSov7wK5ZmKA/LRWj/YHhPhNZCj9hNX/EOogxVw+jmbaMsEmNEyy1 0Bv0rDTP4XkwMUPOQD72yZPfMUJgmKfR97UshSkIqfnqn/Hnrwv2VsAJppB12EEf SyGKIhbd721IbkNXyB1SfpeT5PuWVlXpk3JZxJy3MTc= -----END CERTIFICATE-----Generated at Wed Feb 19 22:03:30 2025 by rpki-client