$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/CLwtPe6dxpPdYZBnwzjMs3ix0zE.roa File: CLwtPe6dxpPdYZBnwzjMs3ix0zE.roa (raw, json) Hash identifier: dg/9stOZnuTQLs8ru/+P7gpFJSLhaSSNzn0gg/eMIq0= Subject key identifier: 08:BC:2D:3D:EE:9D:C6:93:DD:61:90:67:C3:38:CC:B3:78:B1:D3:31 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0DFA Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/CLwtPe6dxpPdYZBnwzjMs3ix0zE.roa Signing time: Mon 10 Feb 2025 13:59:17 +0000 ROA not before: Mon 10 Feb 2025 13:59:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 211.78.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3578 (0xdfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Feb 10 13:59:17 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=08BC2D3DEE9DC693DD619067C338CCB378B1D331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b7:b2:39:39:19:f8:b7:39:e9:66:a0:e0:7c: 60:bc:1b:63:ab:eb:74:08:1f:50:8e:d8:e0:4a:73: cf:92:8b:1c:b6:3c:4a:9e:b7:a1:2e:14:9b:f8:9c: e1:65:b7:22:e6:cd:47:7a:52:0b:da:67:69:86:60: a3:ac:44:22:3d:1d:3e:3a:6c:12:65:ad:c0:a8:cb: 37:e6:af:35:01:39:76:57:ab:6b:1d:b0:3f:12:99: 31:65:b2:80:c4:e1:23:83:a6:84:43:9c:9b:89:c0: ea:e7:ed:09:81:03:db:50:e8:dd:ec:6d:90:94:f4: c7:ca:57:75:0d:17:2c:9d:d5:fd:ed:c9:1d:7d:dc: b4:56:68:fe:16:70:8d:e6:b4:b9:3a:f3:ab:f7:99: e8:7b:e0:ca:43:8e:1f:54:0c:e3:f0:31:fa:cc:83: 86:29:39:62:f5:10:6c:25:4a:a8:c2:7f:d7:c3:55: 13:c5:28:8c:6b:87:2c:98:22:26:cd:68:a8:95:1c: fe:00:98:11:07:95:bf:3c:a1:6d:58:72:6f:73:da: fc:76:d3:1a:07:e2:55:17:95:d2:3a:a5:ab:46:27: 7a:a5:80:6e:13:58:d1:c3:65:35:6c:37:54:8a:46: 1d:27:4b:1a:30:22:8a:6f:a5:03:44:50:97:5d:1b: 70:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BC:2D:3D:EE:9D:C6:93:DD:61:90:67:C3:38:CC:B3:78:B1:D3:31 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/CLwtPe6dxpPdYZBnwzjMs3ix0zE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.8.0/22 Signature Algorithm: sha256WithRSAEncryption 79:a3:91:a3:c6:dd:2a:5f:2e:1e:e7:78:45:01:99:ca:41:a6: 15:6d:37:76:d6:1a:87:28:0e:b9:6b:34:c5:08:68:cf:9c:ba: 87:d6:e1:5a:fd:65:9d:37:89:51:58:ed:d2:c0:fa:88:75:ce: 41:95:8d:43:46:f9:71:c4:4d:64:47:24:c0:52:26:4d:f9:ec: c6:60:53:ef:6d:44:18:85:d4:38:04:a6:0b:cd:45:70:cb:54: 3c:ef:e1:ec:45:fa:ce:e6:fe:02:7f:14:0e:06:26:cf:48:71: ec:fa:cb:bf:0b:5b:27:94:5d:c5:f4:1c:4b:3b:33:9d:db:85: 6a:a8:e1:83:0c:85:98:14:fb:1b:58:bc:ef:6e:74:76:bd:e6: f8:e6:de:63:a1:4c:0c:7f:a7:e8:b2:82:93:50:70:08:d5:04: 7a:1f:e8:41:79:5d:a8:eb:cf:c2:0b:f6:40:28:46:02:6d:5c: d2:6c:03:a8:f1:f5:a2:c6:1c:e9:02:5a:ab:f6:05:fc:55:de: 1c:98:86:c7:76:35:e7:dd:1c:00:91:39:74:23:73:16:f8:ff: 8b:d8:3c:74:e7:9e:eb:ba:0d:e4:70:6e:3e:20:1e:2c:7f:43: ac:e1:a7:c3:c4:a9:02:8b:e1:48:c7:3c:79:3b:40:71:1d:f5: de:e1:04:89 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDfowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTAyMTAx MzU5MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA4QkMyRDNERUU5REM2 OTNERDYxOTA2N0MzMzhDQ0IzNzhCMUQzMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCst7I5ORn4tznpZqDgfGC8G2Or63QIH1CO2OBKc8+Sixy2PEqe t6EuFJv4nOFltyLmzUd6UgvaZ2mGYKOsRCI9HT46bBJlrcCoyzfmrzUBOXZXq2sd sD8SmTFlsoDE4SODpoRDnJuJwOrn7QmBA9tQ6N3sbZCU9MfKV3UNFyyd1f3tyR19 3LRWaP4WcI3mtLk686v3meh74MpDjh9UDOPwMfrMg4YpOWL1EGwlSqjCf9fDVRPF KIxrhyyYIibNaKiVHP4AmBEHlb88oW1Ycm9z2vx20xoH4lUXldI6patGJ3qlgG4T WNHDZTVsN1SKRh0nSxowIopvpQNEUJddG3AFAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUCLwtPe6dxpPdYZBnwzjMs3ix0zEwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL0NMd3RQZTZkeHBQZFlaQm53empNczNp eDB6RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALTTggwDQYJ KoZIhvcNAQELBQADggEBAHmjkaPG3SpfLh7neEUBmcpBphVtN3bWGocoDrlrNMUI aM+cuofW4Vr9ZZ03iVFY7dLA+oh1zkGVjUNG+XHETWRHJMBSJk357MZgU+9tRBiF 1DgEpgvNRXDLVDzv4exF+s7m/gJ/FA4GJs9Icez6y78LWyeUXcX0HEs7M53bhWqo 4YMMhZgU+xtYvO9udHa95vjm3mOhTAx/p+iygpNQcAjVBHof6EF5Xajrz8IL9kAo RgJtXNJsA6jx9aLGHOkCWqv2BfxV3hyYhsd2NefdHACROXQjcxb4/4vYPHTnnuu6 DeRwbj4gHix/Q6zhp8PEqQKL4UjHPHk7QHEd9d7hBIk= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:39 2025 by rpki-client on console.sobornost.net