$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/eRWE6a5vfoWCWCMJwlWwTqzGFMM.roa File: eRWE6a5vfoWCWCMJwlWwTqzGFMM.roa (raw, json) Hash identifier: XihPeSndSy61JAi+Zwro9P2JuemF+3b89GbgcsvmWok= Subject key identifier: 79:15:84:E9:AE:6F:7E:85:82:58:23:09:C2:55:B0:4E:AC:C6:14:C3 Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Certificate serial: 0F97 Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/eRWE6a5vfoWCWCMJwlWwTqzGFMM.roa Signing time: Mon 10 Feb 2025 14:30:53 +0000 ROA not before: Mon 10 Feb 2025 14:30:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131641 IP address blocks: 103.136.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3991 (0xf97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Validity Not Before: Feb 10 14:30:53 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=791584E9AE6F7E8582582309C255B04EACC614C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3f:d5:1e:96:62:39:13:9e:3d:72:86:0f:03: aa:e5:b9:8f:45:08:c5:6f:aa:e8:c5:3e:ec:8c:b6: bf:fc:b4:71:35:a1:3e:61:ac:58:b8:58:bb:58:72: dd:ca:b5:e2:d8:bc:96:27:13:ee:ab:76:73:59:63: aa:33:6e:82:32:83:fc:89:a2:1a:b6:dd:f4:2a:ca: 8d:5c:33:7f:86:8b:c9:5c:af:71:71:3b:55:e8:be: 14:f9:56:5e:c2:93:30:05:b6:f7:88:1b:ce:ff:28: 8a:cf:ea:d8:1b:7a:52:01:b1:97:e7:f4:87:46:07: ee:6c:e2:42:62:87:c6:b7:c8:78:5b:8c:1b:81:72: c5:37:89:87:5b:94:d8:ce:05:9b:14:1a:3a:fc:2f: 04:c3:95:6c:ad:82:c4:05:70:77:60:f4:85:e6:2f: b5:a0:31:7a:b1:ed:9f:6a:20:c2:57:66:da:c3:61: c6:3e:9a:10:60:3e:36:87:5a:69:6a:30:c4:4a:69: b6:2e:3c:d2:23:61:bd:87:a5:06:f4:ca:9a:d2:12: 04:60:27:ad:b2:14:88:02:ad:87:ab:cd:f8:be:b8: 93:22:d3:4a:47:0b:c4:fa:b0:68:d5:bd:0b:e1:6b: e0:bc:ab:e3:66:61:70:b1:75:9a:56:36:db:3c:9a: 65:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:15:84:E9:AE:6F:7E:85:82:58:23:09:C2:55:B0:4E:AC:C6:14:C3 X509v3 Authority Key Identifier: keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/eRWE6a5vfoWCWCMJwlWwTqzGFMM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.136.61.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:88:59:6d:45:b0:00:13:e6:39:61:fd:3c:79:b0:7e:b4:99: 02:21:cb:7e:70:34:21:de:d0:1d:50:83:5c:b3:3e:d4:9c:32: 38:35:78:de:89:a7:c0:6e:8c:77:78:c1:8f:2e:09:a1:2c:dd: 28:88:2b:38:e1:f5:56:d3:cc:f1:a9:a2:df:31:ed:e9:03:f1: cc:0c:0e:35:15:99:e8:f9:67:fa:6c:36:b4:c7:4e:7f:fa:8b: 55:05:b4:24:45:48:98:c6:30:c0:66:00:9c:95:ac:fd:50:66: 97:f7:a1:42:3a:20:8f:5d:3a:78:0d:15:9e:92:49:76:98:00: df:bd:67:d1:9b:90:7d:3e:9d:dd:54:c8:06:01:9a:fa:72:2d: 3e:72:b2:5f:d8:01:66:fc:b2:82:92:a5:b7:18:d8:bc:e5:bc: 8e:ba:be:14:dc:e7:b0:19:e7:7f:98:2e:de:d9:30:b8:eb:ab: e1:3d:06:7b:09:0a:9d:ea:d4:96:c7:9c:71:89:93:93:8b:51: 32:aa:23:27:22:12:e1:0f:3a:ee:66:89:a0:5e:68:46:f6:dd: fd:3d:02:2b:c7:6d:7f:3d:b0:3f:79:c8:9d:c0:a4:87:14:dd: 14:38:c4:a0:af:81:57:13:8e:59:1e:9c:59:75:45:ae:f1:8d: 7e:bf:c4:ab -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICD5cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDRG MEREMEY0RkI4MDEwMjVENTg2RUY5OTlDNUVFRTAyRDdDMjA1OTAeFw0yNTAyMTAx NDMwNTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc5MTU4NEU5QUU2RjdF ODU4MjU4MjMwOUMyNTVCMDRFQUNDNjE0QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCP9UelmI5E549coYPA6rluY9FCMVvqujFPuyMtr/8tHE1oT5h rFi4WLtYct3KteLYvJYnE+6rdnNZY6ozboIyg/yJohq23fQqyo1cM3+Gi8lcr3Fx O1XovhT5Vl7CkzAFtveIG87/KIrP6tgbelIBsZfn9IdGB+5s4kJih8a3yHhbjBuB csU3iYdblNjOBZsUGjr8LwTDlWytgsQFcHdg9IXmL7WgMXqx7Z9qIMJXZtrDYcY+ mhBgPjaHWmlqMMRKabYuPNIjYb2HpQb0yprSEgRgJ62yFIgCrYerzfi+uJMi00pH C8T6sGjVvQvha+C8q+NmYXCxdZpWNts8mmXZAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUeRWE6a5vfoWCWCMJwlWwTqzGFMMwHwYDVR0jBBgwFoAU1PDdD0+4AQJdWG75 mcXu4C18IFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdULzFQ RGREMC00QVFKZFdHNzVtY1h1NEMxOElGay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev MVBEZEQwLTRBUUpkV0c3NW1jWHU0QzE4SUZrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRFdUL2VSV0U2YTV2Zm9XQ1dDTUp3bFd3VHF6 R0ZNTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABniD0wDQYJ KoZIhvcNAQELBQADggEBAF2IWW1FsAAT5jlh/Tx5sH60mQIhy35wNCHe0B1Qg1yz PtScMjg1eN6Jp8BujHd4wY8uCaEs3SiIKzjh9VbTzPGpot8x7ekD8cwMDjUVmej5 Z/psNrTHTn/6i1UFtCRFSJjGMMBmAJyVrP1QZpf3oUI6II9dOngNFZ6SSXaYAN+9 Z9GbkH0+nd1UyAYBmvpyLT5ysl/YAWb8soKSpbcY2LzlvI66vhTc57AZ53+YLt7Z MLjrq+E9BnsJCp3q1JbHnHGJk5OLUTKqIyciEuEPOu5miaBeaEb23f09AivHbX89 sD95yJ3ApIcU3RQ4xKCvgVcTjlkenFl1Ra7xjX6/xKs= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:35 2025 by rpki-client on console.sobornost.net