$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/7fd3UOIfktXxCeuBJ7ehkt2Ouac.roa File: 7fd3UOIfktXxCeuBJ7ehkt2Ouac.roa (raw, json) Hash identifier: lO0EaVTx9XqMcpdHfVDkZMp8N56c+Ca7RSJruVSEtKE= Subject key identifier: ED:F7:77:50:E2:1F:92:D5:F1:09:EB:81:27:B7:A1:92:DD:8E:B9:A7 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0DF8 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/7fd3UOIfktXxCeuBJ7ehkt2Ouac.roa Signing time: Mon 10 Feb 2025 13:59:17 +0000 ROA not before: Mon 10 Feb 2025 13:59:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131602 IP address blocks: 211.78.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3576 (0xdf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Feb 10 13:59:17 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EDF77750E21F92D5F109EB8127B7A192DD8EB9A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fc:81:70:21:1d:8f:9b:41:95:e3:40:05:c5: 1f:43:6f:af:af:cd:99:58:63:3d:3e:97:9d:0b:6a: 7e:f1:39:6c:6f:49:64:af:fa:a7:88:99:05:41:3b: b0:46:1e:cd:33:61:44:e5:56:c2:a1:ee:fb:e2:d5: f8:8c:2c:57:7b:ea:3c:f7:ad:47:b5:eb:af:27:3a: fa:d2:88:37:94:ae:3d:36:3c:8f:24:eb:9a:38:1a: 08:a0:93:fe:c6:90:7d:68:72:f2:5e:67:81:47:92: 90:87:cf:7c:7f:ec:37:99:bd:fe:b6:19:77:ac:70: 09:8c:01:98:e6:16:ee:2a:be:ea:5f:da:fb:9b:b0: 21:05:95:12:ee:98:a6:d3:b1:ab:31:8e:c3:61:f1: dd:4d:1a:ef:9f:21:b8:36:bf:cf:68:2e:c1:d8:8d: 37:ee:10:a1:33:ee:7d:f1:2a:11:07:ca:8a:79:99: 74:c4:2c:31:ed:85:77:08:37:b0:b3:4b:1f:44:93: ce:0b:09:62:2c:a9:c7:64:2f:31:50:ab:ae:1e:1e: 77:ac:ee:5f:60:0d:d3:20:0c:bc:20:0f:b5:c0:2d: 93:1d:22:89:78:a4:93:28:ca:c0:7f:d7:64:dc:47: 08:73:a6:e3:bf:77:d5:cb:63:24:ba:1c:5f:60:fd: 5c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F7:77:50:E2:1F:92:D5:F1:09:EB:81:27:B7:A1:92:DD:8E:B9:A7 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/7fd3UOIfktXxCeuBJ7ehkt2Ouac.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.8.0/22 Signature Algorithm: sha256WithRSAEncryption 09:18:78:2c:09:42:58:e1:8d:fb:c9:52:ca:29:df:cf:81:ce: ca:cd:0a:09:1d:3b:3c:d1:fa:40:e3:89:15:f2:49:81:b5:9c: 11:14:20:8e:16:83:34:d0:5a:65:49:6a:cb:7b:95:3e:42:bb: 2f:75:d7:ee:32:2f:50:ef:dc:a8:3c:b0:86:53:42:fc:31:c6: 72:a6:70:2f:be:2c:f9:34:20:cd:86:6b:37:3a:81:60:db:02: df:cd:08:3c:00:97:6f:53:f4:e5:42:8e:87:d2:21:dc:0d:2f: d0:b0:25:a1:60:1e:38:37:61:8d:e6:74:36:0c:91:5c:ed:bc: 7d:1a:0e:b7:7e:6b:ec:a5:b8:41:a8:b5:a5:a5:e0:26:12:07: 74:95:a2:25:9d:cb:5d:3e:d1:49:03:e5:33:7a:6c:22:1d:41: b1:b4:4f:e3:cc:61:44:ea:97:0b:42:65:e5:c4:b2:37:be:1f: 87:6e:65:99:be:13:fc:e4:e9:6e:c2:e3:02:dc:6c:f9:69:24: b9:97:01:bf:de:b5:39:e4:e5:65:12:e6:3c:10:46:ed:1d:50: 5c:41:af:60:60:bb:4b:14:61:7a:c7:aa:32:6a:89:09:82:91: 88:a2:f7:fb:48:fd:c7:ec:1a:e7:66:13:5b:4d:d1:b6:25:04: 79:70:5a:aa -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDfgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTAyMTAx MzU5MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVERjc3NzUwRTIxRjky RDVGMTA5RUI4MTI3QjdBMTkyREQ4RUI5QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0/IFwIR2Pm0GV40AFxR9Db6+vzZlYYz0+l50Lan7xOWxvSWSv +qeImQVBO7BGHs0zYUTlVsKh7vvi1fiMLFd76jz3rUe1668nOvrSiDeUrj02PI8k 65o4Ggigk/7GkH1ocvJeZ4FHkpCHz3x/7DeZvf62GXescAmMAZjmFu4qvupf2vub sCEFlRLumKbTsasxjsNh8d1NGu+fIbg2v89oLsHYjTfuEKEz7n3xKhEHyop5mXTE LDHthXcIN7CzSx9Ek84LCWIsqcdkLzFQq64eHnes7l9gDdMgDLwgD7XALZMdIol4 pJMoysB/12TcRwhzpuO/d9XLYyS6HF9g/VzLAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU7fd3UOIfktXxCeuBJ7ehkt2OuacwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dULzdmZDNVT0lma3RYeENldUJKN2Voa3Qy T3VhYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALTTggwDQYJ KoZIhvcNAQELBQADggEBAAkYeCwJQljhjfvJUsop38+BzsrNCgkdOzzR+kDjiRXy SYG1nBEUII4WgzTQWmVJast7lT5Cuy911+4yL1Dv3Kg8sIZTQvwxxnKmcC++LPk0 IM2Gazc6gWDbAt/NCDwAl29T9OVCjofSIdwNL9CwJaFgHjg3YY3mdDYMkVztvH0a Drd+a+yluEGotaWl4CYSB3SVoiWdy10+0UkD5TN6bCIdQbG0T+PMYUTqlwtCZeXE sje+H4duZZm+E/zk6W7C4wLcbPlpJLmXAb/etTnk5WUS5jwQRu0dUFxBr2Bgu0sU YXrHqjJqiQmCkYii9/tI/cfsGudmE1tN0bYlBHlwWqo= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:39 2025 by rpki-client on console.sobornost.net