$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1kR-yITaHu34J2DHalWbP_GwEYg.roa File: 1kR-yITaHu34J2DHalWbP_GwEYg.roa (raw, json) Hash identifier: dp0sktjUEd0VuoBeAPISN0c/87ECwrm7CxluZ86ITEI= Subject key identifier: D6:44:7E:C8:84:DA:1E:ED:F8:27:60:C7:6A:55:9B:3F:F1:B0:11:88 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 12AF Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1kR-yITaHu34J2DHalWbP_GwEYg.roa Signing time: Mon 10 Feb 2025 14:15:08 +0000 ROA not before: Mon 10 Feb 2025 14:15:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38851 IP address blocks: 103.5.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4783 (0x12af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:15:08 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D6447EC884DA1EEDF82760C76A559B3FF1B01188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4f:24:e0:89:52:8e:b5:09:24:90:bd:11:ab: 24:5a:d5:db:54:b7:92:ba:09:a4:d4:ff:41:1e:54: dd:1d:05:3b:a3:95:bc:38:f2:13:2c:5e:ee:34:db: 46:55:f0:23:d3:0b:ef:62:d5:b8:94:08:92:f1:f8: da:3f:2c:21:50:ac:16:3e:93:11:93:bd:eb:f0:a4: 81:a1:87:47:7d:3a:35:4d:4a:03:eb:34:3b:99:93: 0f:16:44:91:b1:53:4b:9d:c6:5b:fe:f6:41:d9:14: ec:7a:8f:31:e9:a7:19:c1:68:b1:32:39:7a:3a:40: 2f:d9:fd:a0:a9:a6:6a:27:de:29:8b:12:a3:98:60: bf:67:a3:0b:0b:1c:d5:7c:0f:cf:1e:83:b5:70:f9: 4b:8c:11:83:59:1f:0e:bb:f9:54:38:d1:e5:72:e1: f3:2c:35:ac:64:f4:06:f6:bf:21:7d:22:01:6c:9f: 37:a6:2b:84:96:24:45:37:51:12:05:70:be:91:a3: cd:c5:05:45:8f:e0:ff:b6:f9:22:dd:e7:69:f8:18: 14:cd:9d:5f:a9:c8:33:77:57:62:73:9d:0b:a4:dc: 9f:c5:35:ef:a5:10:83:ac:c1:8c:94:82:fb:10:fe: 5a:9b:56:fb:e0:20:52:35:a0:12:3d:c6:5b:15:b5: 0f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:44:7E:C8:84:DA:1E:ED:F8:27:60:C7:6A:55:9B:3F:F1:B0:11:88 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1kR-yITaHu34J2DHalWbP_GwEYg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.5.100.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:57:76:f2:14:67:a2:ce:55:6c:78:4f:05:19:24:f6:9b:dc: d7:c2:a3:f9:e1:27:df:a4:65:16:39:7a:f0:ec:3c:7a:3f:e6: 9e:31:43:70:e9:d0:66:e9:af:a5:06:50:c2:b5:2b:21:3d:9a: 42:ec:d4:c7:13:8b:b8:99:aa:1e:fd:58:54:77:48:d7:3f:49: 0c:01:33:88:b7:e4:62:85:e5:b7:f6:a8:b2:ef:7c:f2:62:6f: 9a:31:e2:77:82:58:6a:a8:0b:70:0d:2f:77:b2:9e:1e:41:f2: cb:db:51:ad:09:52:8f:09:d0:62:c6:d8:8d:91:d8:d4:a9:67: 54:48:00:a5:b1:20:07:1a:52:a5:e7:d3:38:60:8c:ef:38:d5: e5:70:68:dc:49:ab:c3:3c:07:d3:bb:97:ec:4d:f9:eb:c3:f8: ff:c1:b9:28:c1:2a:e2:9f:19:d4:b6:f0:c8:de:c3:c9:1d:8e: cc:a6:a8:97:7e:e3:d1:90:bf:25:90:24:a6:ce:6f:99:13:08: d7:d4:c1:0b:a3:12:6f:58:d4:e6:39:72:71:7c:8b:c3:d6:3a: ef:28:35:73:ac:ce:b2:7a:a4:06:5e:de:f7:1e:5a:27:54:0c: 41:ac:1d:a3:bc:73:75:e2:cd:68:30:3e:17:9f:d1:63:f9:85: a2:b6:a3:a2 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEq8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE1MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ2NDQ3RUM4ODREQTFF RURGODI3NjBDNzZBNTU5QjNGRjFCMDExODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/TyTgiVKOtQkkkL0RqyRa1dtUt5K6CaTU/0EeVN0dBTujlbw4 8hMsXu4020ZV8CPTC+9i1biUCJLx+No/LCFQrBY+kxGTvevwpIGhh0d9OjVNSgPr NDuZkw8WRJGxU0udxlv+9kHZFOx6jzHppxnBaLEyOXo6QC/Z/aCppmon3imLEqOY YL9nowsLHNV8D88eg7Vw+UuMEYNZHw67+VQ40eVy4fMsNaxk9Ab2vyF9IgFsnzem K4SWJEU3URIFcL6Ro83FBUWP4P+2+SLd52n4GBTNnV+pyDN3V2JznQuk3J/FNe+l EIOswYyUgvsQ/lqbVvvgIFI1oBI9xlsVtQ8pAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU1kR+yITaHu34J2DHalWbP/GwEYgwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy8xa1IteUlUYUh1MzRK MkRIYWxXYlBfR3dFWWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZwVkMA0GCSqGSIb3DQEBCwUAA4IBAQCaV3byFGeizlVseE8FGST2m9zXwqP5 4SffpGUWOXrw7Dx6P+aeMUNw6dBm6a+lBlDCtSshPZpC7NTHE4u4maoe/VhUd0jX P0kMATOIt+RiheW39qiy73zyYm+aMeJ3glhqqAtwDS93sp4eQfLL21GtCVKPCdBi xtiNkdjUqWdUSAClsSAHGlKl59M4YIzvONXlcGjcSavDPAfTu5fsTfnrw/j/wbko wSrinxnUtvDI3sPJHY7MpqiXfuPRkL8lkCSmzm+ZEwjX1MELoxJvWNTmOXJxfIvD 1jrvKDVzrM6yeqQGXt73HlonVAxBrB2jvHN14s1oMD4Xn9Fj+YWitqOi -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:34 2025 by rpki-client on console.sobornost.net