$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/ieuknTk_x95aDPjV2I9kOuk_1u4.roa File: ieuknTk_x95aDPjV2I9kOuk_1u4.roa (raw, json) Hash identifier: s32n/uEah3qtZBNeWXYybbMMbVgKU0qJLJnOoEVdh7I= Subject key identifier: 89:EB:A4:9D:39:3F:C7:DE:5A:0C:F8:D5:D8:8F:64:3A:E9:3F:D6:EE Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA Certificate serial: 05D8 Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/ieuknTk_x95aDPjV2I9kOuk_1u4.roa Signing time: Mon 10 Feb 2025 13:57:52 +0000 ROA not before: Mon 10 Feb 2025 13:57:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 41255 IP address blocks: 103.156.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1496 (0x5d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA Validity Not Before: Feb 10 13:57:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=89EBA49D393FC7DE5A0CF8D5D88F643AE93FD6EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2c:53:6e:dc:da:91:64:b4:7f:3e:5e:c9:9c: 69:84:44:ee:ec:94:dd:ed:df:a0:2a:9e:aa:ec:78: b0:3e:36:f0:06:36:2d:3a:dc:1d:dc:c7:72:dd:a8: 0b:1e:79:c4:48:11:de:3c:e6:09:1a:d7:99:ef:3d: e4:66:48:d4:77:61:f1:24:d1:8b:9c:0e:08:fe:5e: 0f:24:68:7d:15:e9:e7:3a:78:29:1e:04:12:fb:f8: 4f:54:fd:d3:e1:a9:37:e4:25:58:47:1a:ae:d9:40: ae:2f:bf:df:f8:78:7c:e2:1c:84:10:1d:c2:74:ec: 73:e3:80:b9:11:d4:04:b8:d8:77:9b:86:87:c6:27: 4c:84:93:f7:e1:6c:9e:43:b1:0e:67:fd:81:d7:39: 57:f4:d7:49:07:6d:94:e6:4d:b0:62:46:bd:dd:d7: 06:b7:15:fe:26:a6:96:5a:67:86:e2:00:ad:b1:44: 49:6d:1f:a3:18:3d:d4:8c:81:71:90:27:04:ee:5e: 75:63:32:75:4c:05:36:75:40:20:fb:37:7b:c0:5c: a1:b6:96:2d:60:41:57:86:d9:84:3f:46:97:a2:61: 3c:6d:6f:af:ca:d3:6e:22:00:e8:d9:64:1c:00:fe: 60:a8:4c:84:f0:4f:52:33:5b:44:f5:18:18:8b:aa: df:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EB:A4:9D:39:3F:C7:DE:5A:0C:F8:D5:D8:8F:64:3A:E9:3F:D6:EE X509v3 Authority Key Identifier: keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/ieuknTk_x95aDPjV2I9kOuk_1u4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.156.184.0/24 Signature Algorithm: sha256WithRSAEncryption 87:cf:f5:1a:6b:5b:83:2b:dc:6d:25:07:da:11:af:76:7b:30: 67:5f:45:62:16:29:de:ad:ba:13:3c:11:e7:8e:ee:91:93:36: 7b:21:98:39:5e:6f:c5:23:94:da:f9:fb:f5:3a:be:f4:a1:b4: 0e:af:4b:8f:71:a8:de:99:3a:8b:4e:12:e4:3e:5e:48:d1:b5: 35:e4:f6:e7:58:00:fb:83:c1:5a:40:09:20:9d:7f:c7:56:21: ee:2b:5a:c2:e3:24:96:94:ac:52:5b:3d:bf:8c:4e:d2:d0:d3: df:19:14:e2:12:df:f9:3b:0f:44:b0:5f:9c:bb:fe:ad:9b:bc: b2:01:4c:8f:4e:90:90:6b:c4:9a:62:75:66:94:cb:24:ab:63: 64:a1:86:2d:c9:a7:85:bc:35:a8:7f:36:d3:68:36:e9:04:64: 76:bd:44:19:ec:b3:8a:51:2b:a0:81:34:d6:fe:27:4e:71:8f: ad:65:bc:c3:a1:b1:d1:68:19:96:3a:f8:1d:93:f3:a5:7b:55: e8:a3:cc:5d:b8:63:57:68:be:06:c2:9b:1e:ac:ea:2a:6d:61: 09:e8:b2:be:3a:8c:90:18:0e:5c:3f:2b:61:1d:02:c8:e3:d3: 71:24:57:aa:1a:95:92:64:c6:fe:59:a2:a8:85:cc:f3:ef:ea: 5f:0e:d9:d9 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yNTAyMTAx MzU3NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg5RUJBNDlEMzkzRkM3 REU1QTBDRjhENUQ4OEY2NDNBRTkzRkQ2RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCLFNu3NqRZLR/Pl7JnGmERO7slN3t36AqnqrseLA+NvAGNi06 3B3cx3LdqAseecRIEd485gka15nvPeRmSNR3YfEk0YucDgj+Xg8kaH0V6ec6eCke BBL7+E9U/dPhqTfkJVhHGq7ZQK4vv9/4eHziHIQQHcJ07HPjgLkR1AS42HebhofG J0yEk/fhbJ5DsQ5n/YHXOVf010kHbZTmTbBiRr3d1wa3Ff4mppZaZ4biAK2xRElt H6MYPdSMgXGQJwTuXnVjMnVMBTZ1QCD7N3vAXKG2li1gQVeG2YQ/RpeiYTxtb6/K 024iAOjZZBwA/mCoTITwT1IzW0T1GBiLqt/NAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUieuknTk/x95aDPjV2I9kOuk/1u4wHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvaWV1a25Ua194OTVhRFBq VjJJOWtPdWtfMXU0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGecuDANBgkqhkiG9w0BAQsFAAOCAQEAh8/1GmtbgyvcbSUH2hGvdnswZ19FYhYp 3q26EzwR547ukZM2eyGYOV5vxSOU2vn79Tq+9KG0Dq9Lj3Go3pk6i04S5D5eSNG1 NeT251gA+4PBWkAJIJ1/x1Yh7itawuMklpSsUls9v4xO0tDT3xkU4hLf+TsPRLBf nLv+rZu8sgFMj06QkGvEmmJ1ZpTLJKtjZKGGLcmnhbw1qH8202g26QRkdr1EGeyz ilEroIE01v4nTnGPrWW8w6Gx0WgZljr4HZPzpXtV6KPMXbhjV2i+BsKbHqzqKm1h CeiyvjqMkBgOXD8rYR0CyOPTcSRXqhqVkmTG/lmiqIXM8+/qXw7Z2Q== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:32 2025 by rpki-client on console.sobornost.net