$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LEYUN/2E_1DhdgHhK60wsJ76yqfKxAzyE.roa File: 2E_1DhdgHhK60wsJ76yqfKxAzyE.roa (raw, json) Hash identifier: PwAsDZMMHxBexgsoulbx2oPmiHPkrjz5HWZGix+rMb4= Subject key identifier: D8:4F:F5:0E:17:60:1E:12:BA:D3:0B:09:EF:AC:AA:7C:AC:40:CF:21 Certificate issuer: /CN=5322E61AE8C8DD8953E1E6BDC96AE4827AFCF990 Certificate serial: 0264 Authority key identifier: 53:22:E6:1A:E8:C8:DD:89:53:E1:E6:BD:C9:6A:E4:82:7A:FC:F9:90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/2E_1DhdgHhK60wsJ76yqfKxAzyE.roa Signing time: Mon 10 Feb 2025 14:05:42 +0000 ROA not before: Mon 10 Feb 2025 14:05:42 +0000 ROA not after: Tue 14 Oct 2025 15:30:32 +0000 asID: 152616 IP address blocks: 160.191.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 612 (0x264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5322E61AE8C8DD8953E1E6BDC96AE4827AFCF990 Validity Not Before: Feb 10 14:05:42 2025 GMT Not After : Oct 14 15:30:32 2025 GMT Subject: CN=D84FF50E17601E12BAD30B09EFACAA7CAC40CF21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c7:28:85:fd:59:ba:a6:f9:50:ae:b1:cf:a0: 8a:22:ad:d2:b0:fc:fd:0f:63:b0:b3:ce:13:90:4e: f5:4b:0c:4c:ee:cb:c4:ea:8e:31:49:93:ce:99:8c: 0c:d8:3a:19:8c:10:1c:fd:1c:24:b7:19:c8:3c:8f: 77:9d:2d:63:a8:82:1f:22:c6:63:ce:e0:f0:7d:65: a8:11:c6:42:cc:16:25:67:f8:ce:e1:43:d7:b8:1d: 9b:a0:a7:a4:d8:f7:00:bd:b1:25:36:5e:01:c2:56: b6:b0:ce:8e:c4:c4:e7:91:50:3e:2a:5c:fa:4d:f4: d9:e2:ba:34:8b:d3:b2:36:15:78:e5:37:68:59:af: b7:10:2b:8e:ee:c5:a5:a2:35:82:72:f2:29:e0:c9: 9a:a8:a8:30:a5:9f:91:a1:a7:dc:c5:13:2b:03:fd: 29:10:5c:14:6f:4c:04:35:a9:be:d5:ae:19:44:18: 39:42:2a:b3:0c:1a:bd:e2:5b:3d:9e:5b:66:f3:8e: 04:fc:67:93:95:15:7e:c7:c3:d2:1e:8d:6e:07:e8: 50:b9:71:69:85:4d:61:3f:48:f3:54:c0:f7:2e:0a: 72:58:dc:ee:e5:f9:1f:f0:3b:ed:6b:20:87:58:4b: 7e:b0:e1:f8:79:38:d3:cc:d7:ff:7e:a9:55:af:33: d7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4F:F5:0E:17:60:1E:12:BA:D3:0B:09:EF:AC:AA:7C:AC:40:CF:21 X509v3 Authority Key Identifier: keyid:53:22:E6:1A:E8:C8:DD:89:53:E1:E6:BD:C9:6A:E4:82:7A:FC:F9:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/2E_1DhdgHhK60wsJ76yqfKxAzyE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.6.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:d2:14:52:8d:03:50:b4:e4:11:0e:eb:a0:15:85:2a:d9:99: df:6c:b8:64:38:00:51:52:ac:08:05:60:93:95:34:04:5e:fb: f1:93:09:22:c1:b6:44:c9:b6:ae:9b:eb:5b:5b:e9:e4:dd:42: 8f:d1:d4:24:d5:51:ac:8f:46:1c:27:03:24:a6:c4:8c:bc:33: 99:10:5b:e5:a8:9e:0a:8e:6a:70:6e:6d:0f:03:5f:32:13:3d: 5f:16:00:23:49:00:af:29:ee:a3:dc:3c:02:36:95:4d:c4:b9: a4:0a:37:7e:e7:c1:f4:61:e0:7b:53:6c:09:1f:86:31:c8:a5: 2b:c0:69:7e:0a:10:cc:64:16:47:55:75:eb:64:91:51:80:67: 89:ff:7d:6a:5a:23:0a:43:7b:76:0b:be:5f:65:39:2a:6e:4b: a7:1f:98:3f:6a:00:91:94:05:92:c2:db:36:b5:9c:0f:e0:e8: 0c:38:fb:25:01:f9:80:50:a5:65:0c:ca:dd:4b:cc:e9:a1:1e: 12:7b:18:e1:3c:1a:34:89:c6:c1:98:27:3a:6a:1d:da:f9:d6: f0:9f:96:5f:c2:bf:47:c5:93:88:41:9d:57:8f:e7:e3:88:3d: 62:63:fc:3e:b0:6c:b1:90:76:99:74:0d:5e:6d:31:fd:29:cb: dd:46:dc:66 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICAmQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTMy MkU2MUFFOEM4REQ4OTUzRTFFNkJEQzk2QUU0ODI3QUZDRjk5MDAeFw0yNTAyMTAx NDA1NDJaFw0yNTEwMTQxNTMwMzJaMDMxMTAvBgNVBAMTKEQ4NEZGNTBFMTc2MDFF MTJCQUQzMEIwOUVGQUNBQTdDQUM0MENGMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoxyiF/Vm6pvlQrrHPoIoirdKw/P0PY7CzzhOQTvVLDEzuy8Tq jjFJk86ZjAzYOhmMEBz9HCS3Gcg8j3edLWOogh8ixmPO4PB9ZagRxkLMFiVn+M7h Q9e4HZugp6TY9wC9sSU2XgHCVrawzo7ExOeRUD4qXPpN9NniujSL07I2FXjlN2hZ r7cQK47uxaWiNYJy8ingyZqoqDCln5Ghp9zFEysD/SkQXBRvTAQ1qb7VrhlEGDlC KrMMGr3iWz2eW2bzjgT8Z5OVFX7Hw9IejW4H6FC5cWmFTWE/SPNUwPcuCnJY3O7l +R/wO+1rIIdYS36w4fh5ONPM1/9+qVWvM9epAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU2E/1DhdgHhK60wsJ76yqfKxAzyEwHwYDVR0jBBgwFoAUUyLmGujI3YlT4ea9 yWrkgnr8+ZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVZVU4v VXlMbUd1akkzWWxUNGVhOXlXcmtnbnI4LVpBLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9VeUxtR3VqSTNZbFQ0ZWE5eVdya2ducjgtWkEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MRVlVTi8yRV8xRGhkZ0hoSzYwd3NKNzZ5 cWZLeEF6eUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoL8G MA0GCSqGSIb3DQEBCwUAA4IBAQBq0hRSjQNQtOQRDuugFYUq2ZnfbLhkOABRUqwI BWCTlTQEXvvxkwkiwbZEybaum+tbW+nk3UKP0dQk1VGsj0YcJwMkpsSMvDOZEFvl qJ4Kjmpwbm0PA18yEz1fFgAjSQCvKe6j3DwCNpVNxLmkCjd+58H0YeB7U2wJH4Yx yKUrwGl+ChDMZBZHVXXrZJFRgGeJ/31qWiMKQ3t2C75fZTkqbkunH5g/agCRlAWS wts2tZwP4OgMOPslAfmAUKVlDMrdS8zpoR4SexjhPBo0icbBmCc6ah3a+dbwn5Zf wr9HxZOIQZ1Xj+fjiD1iY/w+sGyxkHaZdA1ebTH9KcvdRtxm -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:39 2025 by rpki-client on console.sobornost.net