$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/RyXq5zFArAgV_onp7mtOqe1aclQ.roa File: RyXq5zFArAgV_onp7mtOqe1aclQ.roa (raw, json) Hash identifier: WpjPMKhixorMI1NzBX+0gDi1zLIRURRwuV4xnjNxaFk= Subject key identifier: 47:25:EA:E7:31:40:AC:08:15:FE:89:E9:EE:6B:4E:A9:ED:5A:72:54 Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0EF2 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RyXq5zFArAgV_onp7mtOqe1aclQ.roa Signing time: Tue 18 Feb 2025 06:32:37 +0000 ROA not before: Tue 18 Feb 2025 06:32:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17716 IP address blocks: 140.129.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 10:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3826 (0xef2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Feb 18 06:32:37 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4725EAE73140AC0815FE89E9EE6B4EA9ED5A7254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:23:bb:f0:98:18:05:72:b1:15:72:51:40: ee:db:db:a8:3e:12:f3:fb:93:d7:3f:71:11:85:61: 71:5f:ef:a7:cb:b1:73:e3:94:56:c5:a0:0e:d1:85: 08:0b:46:fd:b9:8c:55:59:b0:87:f6:ac:25:9f:5c: 69:58:33:e2:fe:2a:51:56:7b:4c:12:40:13:f2:5e: a3:80:61:19:70:10:bb:ec:b0:1a:04:02:a7:35:82: 42:82:61:99:02:7c:a3:17:0e:3d:65:c2:8b:96:62: 70:86:9c:2d:f1:ee:77:57:c8:4a:11:a4:01:64:2d: 75:09:43:d5:2a:dc:c4:4d:c3:11:d7:62:47:71:c6: 5d:71:ad:e1:ec:f6:f7:bb:88:1c:d0:0e:f5:14:ff: 63:95:ae:1e:17:ee:42:cd:45:10:8d:63:b1:85:68: 0a:75:c1:40:27:81:21:48:e2:cc:09:3a:fb:77:e4: 90:c3:9c:37:22:0e:ef:99:14:21:ce:99:7e:64:35: f0:4a:43:1c:89:a1:3d:4f:67:9e:83:15:49:13:0b: 18:7d:93:e1:16:d5:2d:6b:04:59:72:cf:ac:15:47: 7a:8c:2a:58:42:fa:a1:ca:44:eb:4d:8e:eb:88:d1: 46:e8:83:cf:d8:e1:98:6f:bf:9b:87:19:92:f2:25: a7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:25:EA:E7:31:40:AC:08:15:FE:89:E9:EE:6B:4E:A9:ED:5A:72:54 X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RyXq5zFArAgV_onp7mtOqe1aclQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.129.96.0/20 Signature Algorithm: sha256WithRSAEncryption 96:7c:eb:39:f1:9f:62:b6:27:33:f4:82:09:5b:cf:45:01:85: 7d:b8:3c:49:f4:d6:10:1c:62:c5:25:f6:7f:83:e6:a3:eb:a2: ca:56:10:cf:6b:1a:2f:2b:35:90:a7:77:2e:c0:19:7d:a9:8e: 55:32:09:c4:9a:d7:da:e8:1d:16:90:91:f9:43:cd:5c:9d:43: 5c:cc:f4:ab:a4:3d:18:d0:c7:80:09:a4:22:40:ff:ee:1e:52: d6:8d:a4:f0:cc:51:cc:58:20:79:4f:a9:d3:33:22:53:5c:f3: a5:23:5a:1c:d0:b7:9f:f4:6e:58:a2:5e:db:60:56:33:f1:8c: 26:50:d9:a2:14:22:44:4c:dc:bc:ee:42:05:a5:fb:6d:78:af: 02:10:d3:d4:58:24:99:fc:af:0f:5f:15:4a:e6:6e:e1:52:f3: b8:2c:16:1d:dc:00:ce:5f:25:33:dc:59:28:a9:aa:c0:ef:75: 34:af:12:d3:9f:c1:c1:79:7f:a9:83:ce:b5:82:ee:90:0b:99: 42:14:d0:fe:6b:5f:ad:78:86:cb:7f:7e:22:f3:32:eb:54:87: 87:83:ef:71:41:67:83:85:72:a2:7f:f7:e2:92:b0:8c:77:36: 56:29:11:93:ed:4e:07:81:2a:50:c9:32:5e:f7:0d:2a:53:3b: f7:5f:92:2d -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDvIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNTAyMTgw NjMyMzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ3MjVFQUU3MzE0MEFD MDgxNUZFODlFOUVFNkI0RUE5RUQ1QTcyNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAgyO78JgYBXKxFXJRQO7b26g+EvP7k9c/cRGFYXFf76fLsXPj lFbFoA7RhQgLRv25jFVZsIf2rCWfXGlYM+L+KlFWe0wSQBPyXqOAYRlwELvssBoE Aqc1gkKCYZkCfKMXDj1lwouWYnCGnC3x7ndXyEoRpAFkLXUJQ9Uq3MRNwxHXYkdx xl1xreHs9ve7iBzQDvUU/2OVrh4X7kLNRRCNY7GFaAp1wUAngSFI4swJOvt35JDD nDciDu+ZFCHOmX5kNfBKQxyJoT1PZ56DFUkTCxh9k+EW1S1rBFlyz6wVR3qMKlhC +qHKROtNjuuI0Ubog8/Y4Zhvv5uHGZLyJad3AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQURyXq5zFArAgV/onp7mtOqe1aclQwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9SeVhxNXpGQXJBZ1Zfb25wN210 T3FlMWFjbFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjIFg MA0GCSqGSIb3DQEBCwUAA4IBAQCWfOs58Z9iticz9IIJW89FAYV9uDxJ9NYQHGLF JfZ/g+aj66LKVhDPaxovKzWQp3cuwBl9qY5VMgnEmtfa6B0WkJH5Q81cnUNczPSr pD0Y0MeACaQiQP/uHlLWjaTwzFHMWCB5T6nTMyJTXPOlI1oc0Lef9G5Yol7bYFYz 8YwmUNmiFCJETNy87kIFpftteK8CENPUWCSZ/K8PXxVK5m7hUvO4LBYd3ADOXyUz 3FkoqarA73U0rxLTn8HBeX+pg861gu6QC5lCFND+a1+teIbLf34i8zLrVIeHg+9x QWeDhXKif/fikrCMdzZWKRGT7U4HgSpQyTJe9w0qUzv3X5It -----END CERTIFICATE-----Generated at Mon Apr 7 09:20:33 2025 by rpki-client