$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWDS/MMMKnn7N6SmBZeH33YapWKrGdls.roa File: MMMKnn7N6SmBZeH33YapWKrGdls.roa (raw, json) Hash identifier: 5owRQ2rBOCJaV1YP9MdQqpIBns98XEz8gPoyV5FuGRU= Subject key identifier: 30:C3:0A:9E:7E:CD:E9:29:81:65:E1:F7:DD:86:A9:58:AA:C6:76:5B Certificate issuer: /CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB Certificate serial: 0A47 Authority key identifier: 29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/MMMKnn7N6SmBZeH33YapWKrGdls.roa Signing time: Mon 10 Feb 2025 14:13:26 +0000 ROA not before: Mon 10 Feb 2025 14:13:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18041 IP address blocks: 2405:a640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 22:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2631 (0xa47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB Validity Not Before: Feb 10 14:13:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=30C30A9E7ECDE9298165E1F7DD86A958AAC6765B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b7:d2:50:e8:b2:26:15:d2:a8:a5:fd:27:fb: 62:4b:dd:3d:5e:c5:fb:40:41:33:c9:85:25:fb:de: 20:d1:fd:43:bf:75:18:29:e5:fc:23:ea:af:b7:51: 9f:01:2f:9e:9e:00:fd:48:c5:96:26:98:f4:aa:24: 0f:48:f8:9d:89:ea:b7:48:b8:89:18:56:12:31:18: 36:9a:27:9c:c7:08:7e:d8:2d:bb:b2:98:f7:4a:72: 7c:15:db:ac:cd:34:62:3a:c6:6d:f5:d1:1b:4b:77: 23:2d:d9:1d:c8:61:26:72:8f:56:35:f9:d7:12:30: e8:58:1d:76:88:d8:fd:57:82:f9:f3:e4:08:2e:05: 12:a9:c2:5a:a3:5a:b0:30:e1:36:b1:38:f5:ea:b2: 04:a5:19:62:fa:32:dc:3b:46:84:3b:57:e9:fa:6a: aa:76:2f:70:f9:d7:c8:14:e7:80:07:11:41:32:85: 52:c4:d0:b1:d0:5b:d4:8c:7a:5a:5f:58:45:26:95: 18:15:56:b4:f3:e0:a9:96:a2:db:d8:e3:c2:b0:6b: 2f:ae:ab:88:9e:66:8e:f9:46:24:78:3e:1c:ac:8e: 3f:a7:14:b5:59:54:3e:25:7e:82:36:d4:08:db:e8: 39:1b:cd:90:51:97:d3:ce:2f:58:94:73:dc:14:f4: 16:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C3:0A:9E:7E:CD:E9:29:81:65:E1:F7:DD:86:A9:58:AA:C6:76:5B X509v3 Authority Key Identifier: keyid:29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/MMMKnn7N6SmBZeH33YapWKrGdls.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:a640::/32 Signature Algorithm: sha256WithRSAEncryption 79:7e:48:99:db:da:3e:1a:22:48:b4:93:8d:0f:21:2e:3f:d7: 0b:d7:24:f5:a0:11:86:51:cc:83:90:c9:07:98:e8:ef:13:b2: 8c:db:b4:93:20:2e:15:06:78:be:f9:69:63:86:ef:ca:50:64: 82:cd:38:6b:50:fc:19:fe:91:53:b2:cb:6f:e9:bb:89:9d:36: a4:90:0b:32:99:1b:08:b5:51:cc:66:e5:1a:17:c8:c2:ed:18: 86:e7:a0:b0:b9:86:86:99:80:eb:ef:4d:27:96:67:d2:34:95: 69:e8:88:a6:75:2c:95:c8:1f:ea:d0:c3:43:94:75:76:c6:38: fa:ef:eb:1a:db:3d:d2:70:b7:63:96:62:db:c4:65:4c:4d:7c: 21:79:bd:2b:fc:29:13:92:33:51:39:3b:e2:1d:80:85:e7:da: e5:23:ed:08:98:2c:db:69:a6:17:1e:d3:22:50:8e:59:ed:12: bd:50:64:0a:dc:cc:c5:06:c9:ea:f5:6e:50:d0:f0:b2:5f:ca: 92:d8:a3:b3:11:84:e9:31:79:e7:ef:bc:2c:83:6c:bf:0a:66: b0:07:7b:c8:a9:2f:f0:79:03:99:6f:59:3f:f2:85:ca:ed:07: 96:6b:1c:3b:12:0e:74:36:72:e4:85:47:7c:ab:45:e2:99:18: 40:8e:70:4f -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICCkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjkx QkFGNkEwQzE3NkNFMEEzMjQyMzY2NkJDRTc4RjlEOTE4MjRDQjAeFw0yNTAyMTAx NDEzMjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMwQzMwQTlFN0VDREU5 Mjk4MTY1RTFGN0REODZBOTU4QUFDNjc2NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTt9JQ6LImFdKopf0n+2JL3T1exftAQTPJhSX73iDR/UO/dRgp 5fwj6q+3UZ8BL56eAP1IxZYmmPSqJA9I+J2J6rdIuIkYVhIxGDaaJ5zHCH7YLbuy mPdKcnwV26zNNGI6xm310RtLdyMt2R3IYSZyj1Y1+dcSMOhYHXaI2P1Xgvnz5Agu BRKpwlqjWrAw4TaxOPXqsgSlGWL6Mtw7RoQ7V+n6aqp2L3D518gU54AHEUEyhVLE 0LHQW9SMelpfWEUmlRgVVrTz4KmWotvY48Kway+uq4ieZo75RiR4Physjj+nFLVZ VD4lfoI21Ajb6DkbzZBRl9POL1iUc9wU9BavAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUMMMKnn7N6SmBZeH33YapWKrGdlswHwYDVR0jBBgwFoAUKRuvagwXbOCjJCNm a854+dkYJMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdEUy9L UnV2YWd3WGJPQ2pKQ05tYTg1NC1ka1lKTXMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0tSdXZhZ3dYYk9DakpDTm1hODU0LWRrWUpNcy5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RXRFMvTU1NS25uN042U21CWmVIMzNZYXBX S3JHZGxzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFpkAw DQYJKoZIhvcNAQELBQADggEBAHl+SJnb2j4aIki0k40PIS4/1wvXJPWgEYZRzIOQ yQeY6O8TsozbtJMgLhUGeL75aWOG78pQZILNOGtQ/Bn+kVOyy2/pu4mdNqSQCzKZ Gwi1Ucxm5RoXyMLtGIbnoLC5hoaZgOvvTSeWZ9I0lWnoiKZ1LJXIH+rQw0OUdXbG OPrv6xrbPdJwt2OWYtvEZUxNfCF5vSv8KROSM1E5O+IdgIXn2uUj7QiYLNtpphce 0yJQjlntEr1QZArczMUGyer1blDQ8LJfypLYo7MRhOkxeefvvCyDbL8KZrAHe8ip L/B5A5lvWT/yhcrtB5ZrHDsSDnQ2cuSFR3yrReKZGECOcE8= -----END CERTIFICATE-----Generated at Wed Feb 19 20:39:12 2025 by rpki-client