$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/zoml0r3ZWfK_qyFCbkcftKlcX6Y.roa File: zoml0r3ZWfK_qyFCbkcftKlcX6Y.roa (raw, json) Hash identifier: kZb+jpWn6RebjR2BmXQkLh2ah+VTq3XIEq9ZaflJP7c= Subject key identifier: CE:89:A5:D2:BD:D9:59:F2:BF:AB:21:42:6E:47:1F:B4:A9:5C:5F:A6 Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Certificate serial: 0D5A Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/zoml0r3ZWfK_qyFCbkcftKlcX6Y.roa Signing time: Mon 10 Feb 2025 13:44:46 +0000 ROA not before: Mon 10 Feb 2025 13:44:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38047 IP address blocks: 2402:c340:eeee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 22:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3418 (0xd5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Validity Not Before: Feb 10 13:44:46 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CE89A5D2BDD959F2BFAB21426E471FB4A95C5FA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fb:df:2b:b7:b0:c8:c9:fa:fe:b8:f1:18:e5: 0c:f6:38:43:58:1b:ca:43:47:c0:2f:ce:9d:d6:2f: 0a:b2:be:2d:a4:5c:53:a0:11:6c:d7:d0:9e:93:cc: eb:0a:ab:43:b5:7d:0b:8a:8f:d7:dc:6d:89:45:83: f2:bd:be:33:c3:17:b6:3f:7b:40:92:95:5f:cc:92: d8:5e:db:0b:e1:32:f7:10:da:ef:f0:6e:2a:d9:db: b1:dc:57:ad:64:fb:dc:86:71:82:56:53:d5:7a:d2: e0:ba:43:fb:bd:cf:c9:04:61:47:81:36:0f:59:1f: 34:79:a9:fd:0d:03:01:f8:d9:86:39:11:a3:18:b1: a6:f1:c8:98:0c:42:5f:e4:02:c4:7f:c7:08:3a:dc: 01:1c:75:49:72:c4:8f:45:f3:c0:fe:8e:c7:81:07: 96:c1:bf:eb:b8:a6:da:6e:2b:ef:14:a5:95:1b:59: bb:b1:a2:06:f3:3f:34:3f:cb:0b:4c:ce:2d:e9:1b: 8b:14:c6:da:22:dd:2d:8c:4c:3f:02:9b:b8:55:47: 75:45:dc:6e:95:ff:a6:e5:75:15:5c:cb:52:75:66: 7d:88:ef:c2:3e:aa:9f:15:87:bb:0e:58:c1:b9:64: 56:65:43:c5:e1:cf:bf:68:50:49:f2:57:c9:1a:02: 9f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:89:A5:D2:BD:D9:59:F2:BF:AB:21:42:6E:47:1F:B4:A9:5C:5F:A6 X509v3 Authority Key Identifier: keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/zoml0r3ZWfK_qyFCbkcftKlcX6Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:c340:eeee::/48 Signature Algorithm: sha256WithRSAEncryption 08:d5:10:52:a6:92:d1:f7:a6:94:4e:be:32:dd:3d:dc:b6:f3: b7:e1:6a:b2:07:f3:b0:5b:6e:6b:80:8e:9e:e9:82:bb:2e:df: 93:a7:1c:fc:01:de:7f:2a:8b:2a:96:a5:66:29:e5:8e:92:92: e5:e0:b3:99:af:d1:72:cb:f8:93:7e:4b:60:4a:eb:c7:fb:af: de:da:46:89:2d:12:74:47:4e:9e:ba:cf:6d:17:08:e5:dc:d0: 95:d0:01:2b:3c:ba:d8:6a:5d:40:57:c4:15:d8:97:b2:ff:91: b1:f5:70:f4:07:a7:c4:8b:4c:a5:9b:b0:89:c2:a5:c9:c8:dc: da:72:6c:9a:a0:2a:6d:0f:14:a7:cd:e6:c7:8a:be:35:53:96: 98:24:bf:a5:d7:5d:7b:12:4a:c6:4e:97:16:27:4d:ea:58:08: 90:b6:e9:37:da:27:a3:4d:04:78:b8:24:92:0c:2c:a2:e1:a9: 76:d7:4c:96:8e:44:89:0a:6b:d1:84:4a:10:01:ea:8e:7b:da: 7a:e9:9d:e3:92:de:0f:2b:5b:f1:cc:0c:44:f3:00:20:b9:ad: 94:39:2d:6a:03:5d:cc:29:dd:82:21:03:42:e8:08:74:40:59: 66:52:6f:5b:e3:4d:a5:0f:2d:45:ff:06:65:ec:88:19:40:7b: 90:e9:26:36 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICDVowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1 NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yNTAyMTAx MzQ0NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENFODlBNUQyQkREOTU5 RjJCRkFCMjE0MjZFNDcxRkI0QTk1QzVGQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCt+98rt7DIyfr+uPEY5Qz2OENYG8pDR8Avzp3WLwqyvi2kXFOg EWzX0J6TzOsKq0O1fQuKj9fcbYlFg/K9vjPDF7Y/e0CSlV/Mkthe2wvhMvcQ2u/w birZ27HcV61k+9yGcYJWU9V60uC6Q/u9z8kEYUeBNg9ZHzR5qf0NAwH42YY5EaMY sabxyJgMQl/kAsR/xwg63AEcdUlyxI9F88D+jseBB5bBv+u4ptpuK+8UpZUbWbux ogbzPzQ/ywtMzi3pG4sUxtoi3S2MTD8Cm7hVR3VF3G6V/6bldRVcy1J1Zn2I78I+ qp8Vh7sOWMG5ZFZlQ8Xhz79oUEnyV8kaAp99AgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUzoml0r3ZWfK/qyFCbkcftKlcX6YwHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB 76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HL3pvbWwwcjNaV2ZL X3F5RkNia2NmdEtsY1g2WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAkAsNA7u4wDQYJKoZIhvcNAQELBQADggEBAAjVEFKmktH3ppROvjLdPdy2 87fharIH87BbbmuAjp7pgrsu35OnHPwB3n8qiyqWpWYp5Y6SkuXgs5mv0XLL+JN+ S2BK68f7r97aRoktEnRHTp66z20XCOXc0JXQASs8uthqXUBXxBXYl7L/kbH1cPQH p8SLTKWbsInCpcnI3NpybJqgKm0PFKfN5seKvjVTlpgkv6XXXXsSSsZOlxYnTepY CJC26TfaJ6NNBHi4JJIMLKLhqXbXTJaORIkKa9GEShAB6o572nrpneOS3g8rW/HM DETzACC5rZQ5LWoDXcwp3YIhA0LoCHRAWWZSb1vjTaUPLUX/BmXsiBlAe5DpJjY= -----END CERTIFICATE-----Generated at Sat Apr 12 20:21:54 2025 by rpki-client