$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/se7FJWD_woURmKPXQawb96dUemw.roa File: se7FJWD_woURmKPXQawb96dUemw.roa (raw, json) Hash identifier: emadz6fOTyJp9nw7Ndopx0Zm4+LVYoYR1Q3HY/KcwF4= Subject key identifier: B1:EE:C5:25:60:FF:C2:85:11:98:A3:D7:41:AC:1B:F7:A7:54:7A:6C Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 1358 Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/se7FJWD_woURmKPXQawb96dUemw.roa Signing time: Mon 10 Feb 2025 14:03:38 +0000 ROA not before: Mon 10 Feb 2025 14:03:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 16509 IP address blocks: 2001:dc1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 08:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4952 (0x1358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Feb 10 14:03:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B1EEC52560FFC2851198A3D741AC1BF7A7547A6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cb:74:6b:05:bc:68:a1:d1:42:5d:16:d6:80: ee:b5:78:87:78:a9:e4:d5:af:24:0d:d1:ba:da:a8: 7b:68:a3:81:d6:27:25:18:05:ae:19:b9:fb:06:5a: 0f:8e:be:e8:a4:06:2b:8e:31:9e:d5:a0:4e:69:64: ec:33:81:b4:e9:c7:f0:48:8d:c7:76:70:2c:ac:6c: c2:d5:0e:b3:b4:8f:f0:dd:17:a9:da:4e:28:25:75: 53:bd:da:86:eb:0d:a4:a4:64:dd:20:74:ac:53:6c: fc:ca:76:c4:59:e5:51:14:9d:51:74:1b:eb:61:7e: ff:2b:73:d0:9d:11:90:72:47:a0:dd:e5:30:7f:82: 79:c1:89:bb:2e:e9:37:87:d4:48:86:5e:1c:51:fd: 47:61:1e:b1:3c:9d:b5:1b:75:34:23:07:de:07:c8: bf:62:a7:a6:bc:82:83:9f:d7:e9:20:b7:05:5a:ff: 2f:54:b1:c4:d9:cc:43:ad:39:18:21:70:23:91:70: 06:72:d7:e6:b1:e6:db:a2:5d:f7:5b:1c:4c:e3:59: 9a:11:2f:64:47:8c:8f:48:85:70:5e:ab:ef:f1:e9: 98:0a:af:29:f4:09:82:28:de:25:29:94:7f:1e:21: 03:27:7f:30:29:ca:06:b1:db:20:b4:81:56:50:56: 16:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EE:C5:25:60:FF:C2:85:11:98:A3:D7:41:AC:1B:F7:A7:54:7A:6C X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/se7FJWD_woURmKPXQawb96dUemw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:dc1::/48 Signature Algorithm: sha256WithRSAEncryption 75:f7:33:76:23:da:fe:ff:ec:3f:09:ee:23:4e:f7:70:48:7f: 76:50:6c:1a:4e:eb:74:01:cc:8e:5a:5f:a2:f0:60:5e:0b:82: 19:c5:47:13:b8:96:e7:12:a4:cb:93:2a:1c:91:94:76:c6:16: ae:98:f3:9c:05:30:64:22:f2:40:1b:5a:7d:46:fa:ec:0d:1a: 5a:d3:1f:79:5c:d4:39:d9:9f:5a:10:6e:78:4a:8a:ef:87:aa: 71:ac:b9:81:3c:f6:d1:90:d1:30:d9:dd:6e:fb:4c:33:86:b4: e1:f8:21:f4:63:ec:28:6c:3f:02:a2:cb:30:68:6c:e2:c8:5e: 64:78:12:da:c5:43:a2:e7:e8:47:a1:f6:23:ce:70:12:13:c0: 77:fc:35:5e:06:e3:6d:53:52:76:a3:ce:7b:f3:62:df:65:5c: 52:cc:d3:7b:16:c7:80:84:ed:97:08:f9:ef:fb:ae:92:f6:5b: c8:bd:e9:9f:ca:a0:f5:8c:55:7c:ff:40:80:32:f9:c6:d5:90: 9e:8e:07:04:e5:84:96:32:41:10:4d:96:c7:10:d4:32:ab:06: 7e:4b:2b:a7:58:cb:93:0c:77:e3:53:1c:1a:0c:1f:bb:18:f3: de:56:35:e0:b7:da:33:c3:97:db:da:d8:41:75:96:a5:c5:6b: 0e:3f:04:37 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICE1gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNTAyMTAx NDAzMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIxRUVDNTI1NjBGRkMy ODUxMTk4QTNENzQxQUMxQkY3QTc1NDdBNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCly3RrBbxoodFCXRbWgO61eId4qeTVryQN0braqHtoo4HWJyUY Ba4ZufsGWg+OvuikBiuOMZ7VoE5pZOwzgbTpx/BIjcd2cCysbMLVDrO0j/DdF6na TigldVO92obrDaSkZN0gdKxTbPzKdsRZ5VEUnVF0G+thfv8rc9CdEZByR6Dd5TB/ gnnBibsu6TeH1EiGXhxR/UdhHrE8nbUbdTQjB94HyL9ip6a8goOf1+kgtwVa/y9U scTZzEOtORghcCORcAZy1+ax5tuiXfdbHEzjWZoRL2RHjI9IhXBeq+/x6ZgKryn0 CYIo3iUplH8eIQMnfzApygax2yC0gVZQVhanAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUse7FJWD/woURmKPXQawb96dUemwwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9zZTdGSldEX3dvVVJtS1BYUWF3 Yjk2ZFVlbXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN wQAAMA0GCSqGSIb3DQEBCwUAA4IBAQB19zN2I9r+/+w/Ce4jTvdwSH92UGwaTut0 AcyOWl+i8GBeC4IZxUcTuJbnEqTLkyockZR2xhaumPOcBTBkIvJAG1p9RvrsDRpa 0x95XNQ52Z9aEG54Sorvh6pxrLmBPPbRkNEw2d1u+0wzhrTh+CH0Y+wobD8Cossw aGziyF5keBLaxUOi5+hHofYjznASE8B3/DVeBuNtU1J2o85782LfZVxSzNN7FseA hO2XCPnv+66S9lvIvemfyqD1jFV8/0CAMvnG1ZCejgcE5YSWMkEQTZbHENQyqwZ+ SyunWMuTDHfjUxwaDB+7GPPeVjXgt9ozw5fb2thBdZalxWsOPwQ3 -----END CERTIFICATE-----Generated at Sat Apr 5 08:24:16 2025 by rpki-client