$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/YVmqsNS1O_a2acCQayNemHUXSx8.roa File: YVmqsNS1O_a2acCQayNemHUXSx8.roa (raw, json) Hash identifier: Q6qcZq36JMeLfAjQjofL23gr9MFXvMOHvKIFfsp3M1Y= Subject key identifier: 61:59:AA:B0:D4:B5:3B:F6:B6:69:C0:90:6B:23:5E:98:75:17:4B:1F Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 11DF Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/YVmqsNS1O_a2acCQayNemHUXSx8.roa Signing time: Mon 10 Feb 2025 14:27:49 +0000 ROA not before: Mon 10 Feb 2025 14:27:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9674 IP address blocks: 39.8.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4575 (0x11df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:49 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6159AAB0D4B53BF6B669C0906B235E9875174B1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9b:95:00:f7:73:fe:b4:79:96:94:2a:19:f0: ca:99:81:00:e6:39:e3:14:22:2a:cf:87:33:b2:24: 86:e5:46:77:6a:37:c7:46:d9:5d:50:90:c3:41:dc: 60:4e:79:9e:1b:29:4f:74:13:74:13:20:96:0a:06: 3c:1c:c4:de:2c:a4:d7:84:d5:09:5a:fe:5b:5a:de: f4:b9:8b:1a:ea:47:ed:e3:0e:a7:8b:c0:01:f5:c7: 52:e0:fe:4e:83:0e:6b:97:96:b6:96:84:fa:6d:8a: 1d:77:78:18:31:6f:bc:58:e9:73:2f:52:f3:88:1e: 0b:21:7c:5f:81:54:9c:52:97:32:54:e5:0c:b9:8f: 20:c7:49:5d:30:79:ce:cb:2e:80:8f:bc:1c:38:5f: 62:7e:ee:c9:61:49:f8:7e:20:eb:18:23:85:26:9f: 39:ab:16:c3:99:2f:10:7e:b3:1c:14:91:44:0b:fe: d1:56:ed:9a:19:3f:2b:70:60:e3:36:0f:7c:01:d6: 3a:53:d4:ad:2a:e7:d8:5b:47:13:06:27:ac:c0:3c: ff:6a:36:6a:d1:3f:a3:06:de:f2:6a:18:36:26:b8: c0:95:6b:58:b2:d6:c0:b3:af:59:eb:40:44:ad:7c: 13:41:56:44:f3:09:4f:26:b4:1c:f8:27:67:7f:6b: 61:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:59:AA:B0:D4:B5:3B:F6:B6:69:C0:90:6B:23:5E:98:75:17:4B:1F X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/YVmqsNS1O_a2acCQayNemHUXSx8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 39.8.0.0/13 Signature Algorithm: sha256WithRSAEncryption 03:09:8f:1e:2a:dc:d4:5b:ec:a8:79:a9:90:29:af:9d:56:5b: 15:c1:f4:13:b4:66:8b:fa:4b:bb:34:77:93:99:c6:d1:8a:0b: c7:62:e9:fc:a8:f3:c7:fa:a3:b3:63:0e:09:e6:5a:dc:b8:bb: 8a:e2:21:2b:37:87:2f:e6:a7:8e:52:80:ad:d0:e3:5d:1d:dc: d4:bb:32:d2:aa:3d:be:e4:c3:89:89:79:f5:c2:96:83:ce:6d: 1e:2a:4b:f7:d8:1a:d4:1a:77:73:13:2e:9c:83:9a:9c:0b:bc: 11:8f:90:7d:a3:64:6b:29:cd:bb:84:b0:28:fa:5d:b9:7f:5e: 46:51:4b:b0:8c:e8:c4:94:18:5e:ad:5e:37:c0:00:10:68:4f: e1:5e:0d:dd:d7:ba:6d:3c:c4:24:81:14:f5:08:e2:f8:c3:34: ef:18:93:9a:0f:d2:e2:fb:df:ed:c4:16:18:c5:f0:66:37:ec: 8e:cf:cc:44:89:4b:a5:80:8d:50:86:2b:ce:1b:2f:19:3d:04: 03:cf:41:b7:e9:e7:30:01:22:f5:6a:14:4d:28:43:82:1c:12: 24:8c:f3:18:6e:7c:92:e6:0a:c0:f0:3b:04:4b:52:f0:cb:a8: 30:64:31:0b:2b:67:5c:42:29:f7:e5:40:fa:d8:80:0f:ac:77: 8d:04:3a:91 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEd8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3NDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYxNTlBQUIwRDRCNTNC RjZCNjY5QzA5MDZCMjM1RTk4NzUxNzRCMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvm5UA93P+tHmWlCoZ8MqZgQDmOeMUIirPhzOyJIblRndqN8dG 2V1QkMNB3GBOeZ4bKU90E3QTIJYKBjwcxN4spNeE1Qla/lta3vS5ixrqR+3jDqeL wAH1x1Lg/k6DDmuXlraWhPptih13eBgxb7xY6XMvUvOIHgshfF+BVJxSlzJU5Qy5 jyDHSV0wec7LLoCPvBw4X2J+7slhSfh+IOsYI4UmnzmrFsOZLxB+sxwUkUQL/tFW 7ZoZPytwYOM2D3wB1jpT1K0q59hbRxMGJ6zAPP9qNmrRP6MG3vJqGDYmuMCVa1iy 1sCzr1nrQEStfBNBVkTzCU8mtBz4J2d/a2EtAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUYVmqsNS1O/a2acCQayNemHUXSx8wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1lWbXFzTlMxT19hMmFjQ1FheU5lbUhV WFN4OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwMnCDANBgkq hkiG9w0BAQsFAAOCAQEAAwmPHirc1FvsqHmpkCmvnVZbFcH0E7Rmi/pLuzR3k5nG 0YoLx2Lp/Kjzx/qjs2MOCeZa3Li7iuIhKzeHL+anjlKArdDjXR3c1Lsy0qo9vuTD iYl59cKWg85tHipL99ga1Bp3cxMunIOanAu8EY+QfaNkaynNu4SwKPpduX9eRlFL sIzoxJQYXq1eN8AAEGhP4V4N3de6bTzEJIEU9Qji+MM07xiTmg/S4vvf7cQWGMXw Zjfsjs/MRIlLpYCNUIYrzhsvGT0EA89Bt+nnMAEi9WoUTShDghwSJIzzGG58kuYK wPA7BEtS8MuoMGQxCytnXEIp9+VA+tiAD6x3jQQ6kQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:36 2025 by rpki-client on console.sobornost.net