$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cmGn4-wZjUiYCgQbV0K0capbpz4.roa File: cmGn4-wZjUiYCgQbV0K0capbpz4.roa (raw, json) Hash identifier: u9PXfbu7+qAeqO1u5LbTbXj0VTokLUrfbG5l+utfQ4o= Subject key identifier: 72:61:A7:E3:EC:19:8D:48:98:0A:04:1B:57:42:B4:71:AA:5B:A7:3E Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 12BB Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cmGn4-wZjUiYCgQbV0K0capbpz4.roa Signing time: Mon 10 Feb 2025 14:15:10 +0000 ROA not before: Mon 10 Feb 2025 14:15:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17408 IP address blocks: 119.31.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 08:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4795 (0x12bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:15:10 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7261A7E3EC198D48980A041B5742B471AA5BA73E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:78:cd:52:5b:bb:53:db:6b:fb:3a:f2:1a:17: a3:f4:b1:61:27:20:3b:a7:a1:fe:ed:0f:32:33:87: dc:89:d3:ca:7d:40:15:f6:4b:7b:1a:5f:bf:44:0b: dd:bb:a4:68:9d:75:7b:ca:23:21:31:56:7e:ff:ef: 51:f6:ba:a2:92:4c:5c:3a:34:79:9c:9a:c3:7b:6b: 15:40:ea:51:d6:0c:35:5b:94:17:ee:99:d7:01:7b: 5d:a0:f8:2e:a9:ef:8b:b9:5f:02:7f:16:69:e6:bb: ec:c5:e5:e6:66:8d:c5:3c:28:6a:12:07:6c:c6:06: 21:73:0d:b6:d6:48:73:9c:f7:5c:aa:8a:49:5b:12: 65:61:a4:6e:7c:96:c1:1d:e6:dc:e8:07:8d:5e:c1: 8c:01:8b:ca:1e:cb:7c:b6:e2:2f:9b:7d:da:7b:db: 9c:da:88:b9:f5:6d:aa:73:6a:aa:c8:01:53:af:cd: b9:36:97:b0:18:55:c2:07:7f:67:7f:8d:5e:2f:d4: 9e:fa:88:8c:d0:62:61:45:ed:75:1c:4f:9c:3e:78: 1a:b4:1d:69:51:35:f1:0a:73:0c:07:aa:7d:45:47: 55:fa:b0:f6:d4:f3:2e:db:67:5a:f6:0e:fd:b5:7c: f7:24:5b:38:8f:23:53:96:f5:5c:b7:9b:95:b2:2a: f4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:61:A7:E3:EC:19:8D:48:98:0A:04:1B:57:42:B4:71:AA:5B:A7:3E X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cmGn4-wZjUiYCgQbV0K0capbpz4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.31.176.0/20 Signature Algorithm: sha256WithRSAEncryption 38:5f:c4:38:1a:e5:9d:a2:97:4d:0b:4d:f3:d0:aa:3c:e1:0d: b1:d1:37:15:33:e6:4d:33:f5:96:b4:9e:82:6d:6d:3d:aa:bd: cb:65:5a:16:a6:5e:3a:3e:22:71:97:0a:74:53:6c:6f:5c:c8: 09:b4:1c:c1:73:de:4d:5a:f1:e9:a8:74:64:2e:f5:cc:5f:25: c4:09:1c:58:19:38:6c:ba:14:a6:77:40:b3:86:fd:b4:12:c7: 95:c5:dc:d7:bd:f3:d4:12:12:f8:06:bc:95:33:ab:f1:d2:2d: f8:99:8e:fd:25:52:26:71:43:8e:d0:2a:7b:f7:27:01:74:54: b2:8e:9a:7c:31:a2:aa:98:57:59:48:ba:05:10:a8:ac:3f:c1: 2b:90:80:2d:49:74:45:94:1c:75:5d:e2:b2:9b:25:d5:66:66: 6c:6f:fd:52:86:a5:5b:43:30:f7:7c:0b:4a:04:81:e1:3b:ff: cd:13:da:15:2b:27:cd:ec:0e:81:d2:03:5f:5c:7d:94:80:c6: c0:7d:f4:40:33:a5:03:4d:4d:29:7f:cc:31:2a:69:57:de:0b: 31:e5:a2:85:39:08:1d:64:06:78:84:c6:90:b1:ec:e8:60:87: 30:1f:0a:07:34:f3:62:c9:e6:19:aa:4a:38:d6:61:31:0a:bf: 20:f0:8f:de -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICErswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE1MTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcyNjFBN0UzRUMxOThE NDg5ODBBMDQxQjU3NDJCNDcxQUE1QkE3M0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDweM1SW7tT22v7OvIaF6P0sWEnIDunof7tDzIzh9yJ08p9QBX2 S3saX79EC927pGiddXvKIyExVn7/71H2uqKSTFw6NHmcmsN7axVA6lHWDDVblBfu mdcBe12g+C6p74u5XwJ/Fmnmu+zF5eZmjcU8KGoSB2zGBiFzDbbWSHOc91yqiklb EmVhpG58lsEd5tzoB41ewYwBi8oey3y24i+bfdp725zaiLn1bapzaqrIAVOvzbk2 l7AYVcIHf2d/jV4v1J76iIzQYmFF7XUcT5w+eBq0HWlRNfEKcwwHqn1FR1X6sPbU 8y7bZ1r2Dv21fPckWziPI1OW9Vy3m5WyKvR1AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUcmGn4+wZjUiYCgQbV0K0capbpz4wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9jbUduNC13WmpVaVlD Z1FiVjBLMGNhcGJwejQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQEdx+wMA0GCSqGSIb3DQEBCwUAA4IBAQA4X8Q4GuWdopdNC03z0Ko84Q2x0TcV M+ZNM/WWtJ6CbW09qr3LZVoWpl46PiJxlwp0U2xvXMgJtBzBc95NWvHpqHRkLvXM XyXECRxYGThsuhSmd0Czhv20EseVxdzXvfPUEhL4BryVM6vx0i34mY79JVImcUOO 0Cp79ycBdFSyjpp8MaKqmFdZSLoFEKisP8ErkIAtSXRFlBx1XeKymyXVZmZsb/1S hqVbQzD3fAtKBIHhO//NE9oVKyfN7A6B0gNfXH2UgMbAffRAM6UDTU0pf8wxKmlX 3gsx5aKFOQgdZAZ4hMaQsezoYIcwHwoHNPNiyeYZqko41mExCr8g8I/e -----END CERTIFICATE-----Generated at Mon Apr 28 06:07:09 2025 by rpki-client on console.sobornost.net