$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/h8BoRBPJrXSdcsTXWlcNuwvxPEQ.roa File: h8BoRBPJrXSdcsTXWlcNuwvxPEQ.roa (raw, json) Hash identifier: Z6AQt6xQ5QR0RFWPEK3frwqBYLFJw+ohKJ5LnKlkaw8= Subject key identifier: 87:C0:68:44:13:C9:AD:74:9D:72:C4:D7:5A:57:0D:BB:0B:F1:3C:44 Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Certificate serial: 0E1A Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/h8BoRBPJrXSdcsTXWlcNuwvxPEQ.roa Signing time: Mon 10 Feb 2025 14:22:10 +0000 ROA not before: Mon 10 Feb 2025 14:22:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18424 IP address blocks: 121.50.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3610 (0xe1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Validity Not Before: Feb 10 14:22:10 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=87C0684413C9AD749D72C4D75A570DBB0BF13C44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d0:04:da:3d:c5:4e:fb:4d:e9:97:d6:85:72: 7b:da:23:9e:85:ac:d9:10:2a:c2:a4:fd:9f:3a:36: 25:c9:6a:99:fe:77:bb:60:e4:76:33:22:3e:ce:10: 83:ec:31:60:58:0a:86:6f:af:9f:f2:d8:73:a0:65: 23:56:a8:72:63:39:94:57:d0:c6:9b:a4:72:22:57: f4:26:5f:c7:ca:5f:73:2e:0c:d3:c9:94:be:52:21: 4d:6b:d5:88:77:90:33:66:40:df:f7:13:f8:31:f5: bc:30:68:6b:78:8a:97:c4:09:14:ae:03:84:b9:ad: f1:f0:18:53:15:a0:29:9c:c1:64:3c:34:3d:43:86: 16:ab:5a:51:7b:3d:02:16:06:3b:49:6c:cd:b2:59: 08:b7:a5:ea:fa:1c:28:59:ec:aa:0e:da:20:92:f3: 5b:32:df:75:d4:08:f2:23:d8:0d:dc:73:0b:47:80: a3:ab:b8:0c:d0:a3:79:05:85:50:ba:a8:3a:b0:92: a6:a1:ae:0f:9c:2d:45:ff:7d:ce:e4:57:8a:40:bd: 89:53:7b:6a:de:20:19:60:00:d8:54:42:1e:a5:f6: 75:ca:57:5a:e1:80:e1:15:86:d1:5e:26:cf:78:68: 52:ff:3d:4e:22:a9:60:a3:71:fb:87:4a:62:96:9f: 57:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C0:68:44:13:C9:AD:74:9D:72:C4:D7:5A:57:0D:BB:0B:F1:3C:44 X509v3 Authority Key Identifier: keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/h8BoRBPJrXSdcsTXWlcNuwvxPEQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.50.149.0/24 Signature Algorithm: sha256WithRSAEncryption 63:b0:74:d8:66:2c:7b:cd:5b:11:71:f0:84:d0:0b:4f:04:e0: ba:17:e5:a4:f4:ef:1e:64:4e:62:38:0f:e5:1d:2f:49:f5:30: 3d:f4:e6:b5:6d:54:3d:27:ca:3d:5a:1c:17:a9:a0:1f:f1:0c: c1:d3:0c:8d:b7:66:c7:c1:20:a9:21:2f:2c:69:0e:51:eb:ca: c9:4b:9f:fd:09:28:13:b1:cb:b0:a9:31:de:48:e4:7f:f6:ff: 61:80:23:bf:88:22:42:37:a4:cf:f4:32:5b:0f:72:90:f1:fb: a0:f8:b5:c7:43:c5:67:5c:19:95:73:e8:65:bc:87:5b:e0:31: 20:29:33:01:a0:94:90:a8:8d:ad:c0:f1:5c:b4:5e:cc:b4:d1: b1:b7:0c:c7:8a:40:46:5e:59:a6:86:71:4b:be:37:93:0a:d5: a2:b6:9f:c4:9b:96:b0:17:4b:56:d1:63:57:cf:85:d7:cf:dd: ac:13:e9:d0:d5:e9:b2:13:ea:9e:29:67:5d:e6:64:28:ea:d4: 25:4c:4b:07:f1:ba:f1:d5:e4:b1:e6:60:18:ba:75:52:77:5d: f4:9c:08:0d:87:18:26:11:f0:af:d7:24:45:97:60:fb:27:91: 52:45:32:30:00:87:6f:6f:40:fd:a9:a8:d4:e6:7f:11:22:50: e2:18:41:32 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDhowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3 RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yNTAyMTAx NDIyMTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg3QzA2ODQ0MTNDOUFE NzQ5RDcyQzRENzVBNTcwREJCMEJGMTNDNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCy0ATaPcVO+03pl9aFcnvaI56FrNkQKsKk/Z86NiXJapn+d7tg 5HYzIj7OEIPsMWBYCoZvr5/y2HOgZSNWqHJjOZRX0MabpHIiV/QmX8fKX3MuDNPJ lL5SIU1r1Yh3kDNmQN/3E/gx9bwwaGt4ipfECRSuA4S5rfHwGFMVoCmcwWQ8ND1D hharWlF7PQIWBjtJbM2yWQi3per6HChZ7KoO2iCS81sy33XUCPIj2A3ccwtHgKOr uAzQo3kFhVC6qDqwkqahrg+cLUX/fc7kV4pAvYlTe2reIBlgANhUQh6l9nXKV1rh gOEVhtFeJs94aFL/PU4iqWCjcfuHSmKWn1eFAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUh8BoRBPJrXSdcsTXWlcNuwvxPEQwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL2g4Qm9SQlBKclhT ZGNzVFhXbGNOdXd2eFBFUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAB5MpUwDQYJKoZIhvcNAQELBQADggEBAGOwdNhmLHvNWxFx8ITQC08E4LoX 5aT07x5kTmI4D+UdL0n1MD305rVtVD0nyj1aHBepoB/xDMHTDI23ZsfBIKkhLyxp DlHryslLn/0JKBOxy7CpMd5I5H/2/2GAI7+IIkI3pM/0MlsPcpDx+6D4tcdDxWdc GZVz6GW8h1vgMSApMwGglJCoja3A8Vy0Xsy00bG3DMeKQEZeWaaGcUu+N5MK1aK2 n8SblrAXS1bRY1fPhdfP3awT6dDV6bIT6p4pZ13mZCjq1CVMSwfxuvHV5LHmYBi6 dVJ3XfScCA2HGCYR8K/XJEWXYPsnkVJFMjAAh29vQP2pqNTmfxEiUOIYQTI= -----END CERTIFICATE-----Generated at Wed Apr 23 04:38:35 2025 by rpki-client