$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/fqWeM62k-hoLHFpjIbaZcQ-UEok.roa File: fqWeM62k-hoLHFpjIbaZcQ-UEok.roa (raw, json) Hash identifier: oMVfEaKh9v+B4JwmKhbQgmSk9eP8s80sxObdtqbM8Lc= Subject key identifier: 7E:A5:9E:33:AD:A4:FA:1A:0B:1C:5A:63:21:B6:99:71:0F:94:12:89 Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Certificate serial: 0E0A Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/fqWeM62k-hoLHFpjIbaZcQ-UEok.roa Signing time: Mon 10 Feb 2025 14:22:06 +0000 ROA not before: Mon 10 Feb 2025 14:22:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18424 IP address blocks: 121.50.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 10:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3594 (0xe0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Validity Not Before: Feb 10 14:22:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7EA59E33ADA4FA1A0B1C5A6321B699710F941289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:aa:15:16:0a:80:7d:49:67:74:89:18:01: 2b:2c:52:54:c6:f4:54:0a:c4:c4:02:24:9d:c8:64: 63:cb:c1:35:3f:81:60:6c:41:d2:2a:50:c9:d0:7b: 06:d9:74:62:5a:f0:e3:64:af:a1:38:b3:ce:cb:4c: ec:f8:51:5b:58:95:9e:11:c1:ec:de:96:c6:95:3a: 53:99:5b:b6:5c:36:37:28:09:37:76:a1:0a:37:ce: 38:cf:2f:ba:16:bd:c0:c9:07:22:f7:82:d2:b3:e8: 30:2c:cd:c8:b4:b4:15:fd:02:9a:44:c0:ab:85:1c: a1:4b:56:f1:2c:d1:cf:ff:fe:4c:bc:92:0d:37:f1: b9:51:37:b1:39:36:54:e3:55:ac:c1:21:4f:10:f4: ae:fa:23:62:fe:8c:fd:be:99:25:39:79:b5:d1:79: 93:05:a0:51:6e:3a:65:15:d7:55:a4:97:08:09:de: 30:26:04:64:2c:2b:a5:12:dc:50:eb:09:56:3a:a1: 46:fc:f5:a6:97:0c:1d:62:f5:8c:a6:0b:8d:e7:a9: c1:32:6b:f3:4f:ec:14:27:f5:b9:ac:61:99:89:df: 2b:f0:4c:b7:89:6a:df:31:09:7f:72:b5:ff:fb:b8: d4:94:e6:2d:af:c2:ec:df:5b:62:34:6e:b1:0f:d0: 60:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A5:9E:33:AD:A4:FA:1A:0B:1C:5A:63:21:B6:99:71:0F:94:12:89 X509v3 Authority Key Identifier: keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/fqWeM62k-hoLHFpjIbaZcQ-UEok.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.50.146.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:0f:d9:83:74:3b:f1:c0:c8:b1:42:4d:85:7e:c9:ee:ff:c6: b7:43:68:79:85:e0:3c:6b:af:03:de:2f:51:2a:c2:ad:2a:b7: 17:d1:0f:6f:43:1f:e7:23:47:dd:c4:dc:a3:28:5f:f6:74:f6: 61:ed:bb:a5:1e:65:7e:5d:43:c2:3d:62:36:7d:aa:d7:2b:45: 4a:a2:a0:0f:0a:4a:79:32:7d:8b:b6:34:78:1b:e5:f4:c8:c7: fe:f4:7c:47:c0:d6:ea:e8:02:73:ec:5d:cc:ce:29:9e:f5:27: b9:d7:23:ee:44:0b:16:24:41:66:1f:c0:f2:f0:a6:9d:34:2d: 57:4e:39:ab:cc:e0:16:53:0b:f5:05:e4:f7:c3:f5:a9:41:2c: 69:ca:51:25:61:f2:1b:95:7e:4b:c8:fb:0e:de:d6:51:e8:a4: 89:67:e7:20:68:bf:b3:a4:e7:ee:17:ce:6b:42:91:c0:f7:13: 6f:f8:e7:4d:af:3f:9a:c1:97:dd:30:49:c7:ca:6c:f2:ed:39: 3d:75:a0:86:22:a6:ac:ae:57:e7:8c:3f:df:29:a5:74:14:86: df:b3:f2:de:1e:6f:e2:ff:14:38:e0:8f:89:9d:9c:3e:ef:c6: a3:42:ef:23:d1:4c:fb:cc:a4:dd:0f:21:3c:7e:cd:82:8b:b3: e9:8a:3f:83 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDgowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3 RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yNTAyMTAx NDIyMDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdFQTU5RTMzQURBNEZB MUEwQjFDNUE2MzIxQjY5OTcxMEY5NDEyODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1eKoVFgqAfUlndIkYASssUlTG9FQKxMQCJJ3IZGPLwTU/gWBs QdIqUMnQewbZdGJa8ONkr6E4s87LTOz4UVtYlZ4RwezelsaVOlOZW7ZcNjcoCTd2 oQo3zjjPL7oWvcDJByL3gtKz6DAszci0tBX9AppEwKuFHKFLVvEs0c///ky8kg03 8blRN7E5NlTjVazBIU8Q9K76I2L+jP2+mSU5ebXReZMFoFFuOmUV11WklwgJ3jAm BGQsK6US3FDrCVY6oUb89aaXDB1i9YymC43nqcEya/NP7BQn9bmsYZmJ3yvwTLeJ at8xCX9ytf/7uNSU5i2vwuzfW2I0brEP0GD/AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUfqWeM62k+hoLHFpjIbaZcQ+UEokwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL2ZxV2VNNjJrLWhv TEhGcGpJYmFaY1EtVUVvay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAB5MpIwDQYJKoZIhvcNAQELBQADggEBAHoP2YN0O/HAyLFCTYV+ye7/xrdD aHmF4DxrrwPeL1Eqwq0qtxfRD29DH+cjR93E3KMoX/Z09mHtu6UeZX5dQ8I9YjZ9 qtcrRUqioA8KSnkyfYu2NHgb5fTIx/70fEfA1uroAnPsXczOKZ71J7nXI+5ECxYk QWYfwPLwpp00LVdOOavM4BZTC/UF5PfD9alBLGnKUSVh8huVfkvI+w7e1lHopIln 5yBov7Ok5+4XzmtCkcD3E2/4502vP5rBl90wScfKbPLtOT11oIYipqyuV+eMP98p pXQUht+z8t4eb+L/FDjgj4mdnD7vxqNC7yPRTPvMpN0PITx+zYKLs+mKP4M= -----END CERTIFICATE-----Generated at Wed Apr 23 08:49:10 2025 by rpki-client