$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/9cU-juTY6yPtJcZJx3x23sRcjl0.roa File: 9cU-juTY6yPtJcZJx3x23sRcjl0.roa (raw, json) Hash identifier: Ojp2nb+m9WddKosB6FNklwT5YTF78j3Abq/I4JWbpnU= Subject key identifier: F5:C5:3E:8E:E4:D8:EB:23:ED:25:C6:49:C7:7C:76:DE:C4:5C:8E:5D Certificate issuer: /CN=1C7073A6066C765842FDF07169E43518A0BB0235 Certificate serial: 0141 Authority key identifier: 1C:70:73:A6:06:6C:76:58:42:FD:F0:71:69:E4:35:18:A0:BB:02:35 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/9cU-juTY6yPtJcZJx3x23sRcjl0.roa Signing time: Mon 10 Feb 2025 13:44:29 +0000 ROA not before: Mon 10 Feb 2025 13:44:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 150755 IP address blocks: 203.175.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C7073A6066C765842FDF07169E43518A0BB0235 Validity Not Before: Feb 10 13:44:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F5C53E8EE4D8EB23ED25C649C77C76DEC45C8E5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ef:81:93:96:be:6e:e0:94:e5:fb:c4:1c:a5: 8c:61:a8:60:2b:12:51:07:f3:d3:15:ef:9a:8a:e9: e7:a9:f8:a2:93:87:cb:b9:8f:3f:74:46:ff:fd:b5: 1e:62:df:17:0a:81:53:aa:05:96:dc:a8:85:b2:c1: e1:d9:fb:50:bb:5f:62:ae:b6:76:cb:74:c5:3a:67: a4:bd:68:ea:10:a1:70:cd:12:6c:aa:d5:ce:c8:a8: 80:2f:2d:69:ec:85:80:62:25:56:9b:78:e3:9b:66: 9a:47:87:f3:11:0a:61:e9:06:7e:bc:8f:1c:2e:fd: 88:92:91:83:01:16:54:7e:33:61:de:37:40:7a:a5: 96:c9:af:eb:eb:71:c8:f8:2b:2f:8b:89:63:7c:c9: ef:ba:e5:3d:42:c3:4c:97:d6:4b:2a:d9:90:20:0c: 58:a4:a8:06:17:51:0d:66:c9:58:0f:39:54:74:81: de:96:d1:4b:c4:39:d4:03:5b:33:a2:ba:cc:f7:fb: 95:c9:ae:8e:97:92:bb:9d:80:54:7e:5b:f5:2f:05: 72:e2:ce:29:b4:00:71:32:6a:5b:03:5f:c4:4a:e9: f4:56:4f:bc:08:96:d7:1e:e5:d7:01:1f:01:5b:30: 37:ca:be:58:45:b9:5a:0a:87:46:f7:8d:74:6c:27: b9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C5:3E:8E:E4:D8:EB:23:ED:25:C6:49:C7:7C:76:DE:C4:5C:8E:5D X509v3 Authority Key Identifier: keyid:1C:70:73:A6:06:6C:76:58:42:FD:F0:71:69:E4:35:18:A0:BB:02:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/9cU-juTY6yPtJcZJx3x23sRcjl0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.175.104.0/23 Signature Algorithm: sha256WithRSAEncryption 59:c4:c1:a5:48:a6:f0:74:33:bb:7c:c2:da:c2:72:57:96:51: 22:64:46:b4:d9:3d:e4:fd:c6:ca:2b:6f:56:8c:03:ab:f6:85: 57:03:c6:0d:c7:83:3c:ea:cd:6f:9e:f2:e5:0d:ca:30:65:58: 83:4f:72:c8:28:20:21:bb:f0:c2:77:db:33:4a:03:f1:e0:a7: 85:fd:ee:bf:5e:c2:f0:ce:5b:0d:9e:8f:6f:9f:43:90:13:cb: 01:8c:58:10:fb:4d:63:a9:b8:10:4f:54:c0:5b:ce:64:e6:55: 77:b6:72:f5:b8:b8:55:d5:24:54:a3:5f:d0:63:67:8d:7b:25: f3:ca:17:3f:2e:9a:41:4c:75:30:d5:6c:9c:4b:cd:04:94:73: ff:e0:4e:03:e3:63:c4:60:fd:12:05:48:a7:1e:f7:14:4f:ed: dd:9b:e9:0c:5a:1b:96:3b:8c:8e:65:06:fe:e7:bf:3b:3c:96: e7:03:87:e2:27:f1:6b:17:4c:3e:2d:6e:59:05:be:db:d0:c9: 0c:48:05:e1:ee:43:a1:b5:32:49:b9:00:de:41:80:f8:77:fd: 28:56:6e:6b:e7:0b:78:de:f3:3b:f0:21:8a:1a:40:62:84:57: bd:71:34:ca:d3:ce:d2:55:7c:05:f1:d3:8a:da:0d:47:5c:9b: 00:a2:d2:ee -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUM3 MDczQTYwNjZDNzY1ODQyRkRGMDcxNjlFNDM1MThBMEJCMDIzNTAeFw0yNTAyMTAx MzQ0MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY1QzUzRThFRTREOEVC MjNFRDI1QzY0OUM3N0M3NkRFQzQ1QzhFNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDX74GTlr5u4JTl+8QcpYxhqGArElEH89MV75qK6eep+KKTh8u5 jz90Rv/9tR5i3xcKgVOqBZbcqIWyweHZ+1C7X2KutnbLdMU6Z6S9aOoQoXDNEmyq 1c7IqIAvLWnshYBiJVabeOObZppHh/MRCmHpBn68jxwu/YiSkYMBFlR+M2HeN0B6 pZbJr+vrccj4Ky+LiWN8ye+65T1Cw0yX1ksq2ZAgDFikqAYXUQ1myVgPOVR0gd6W 0UvEOdQDWzOiusz3+5XJro6XkrudgFR+W/UvBXLizim0AHEyalsDX8RK6fRWT7wI ltce5dcBHwFbMDfKvlhFuVoKh0b3jXRsJ7m3AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU9cU+juTY6yPtJcZJx3x23sRcjl0wHwYDVR0jBBgwFoAUHHBzpgZsdlhC/fBx aeQ1GKC7AjUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlVOTElO RS9ISEJ6cGdac2RsaENfZkJ4YWVRMUdLQzdBalUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0hIQnpwZ1pzZGxoQ19mQnhhZVExR0tDN0FqVS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05VTkxJTkUvOWNVLWp1VFk2eVB0SmNa SngzeDIzc1JjamwwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AcuvaDANBgkqhkiG9w0BAQsFAAOCAQEAWcTBpUim8HQzu3zC2sJyV5ZRImRGtNk9 5P3GyitvVowDq/aFVwPGDceDPOrNb57y5Q3KMGVYg09yyCggIbvwwnfbM0oD8eCn hf3uv17C8M5bDZ6Pb59DkBPLAYxYEPtNY6m4EE9UwFvOZOZVd7Zy9bi4VdUkVKNf 0GNnjXsl88oXPy6aQUx1MNVsnEvNBJRz/+BOA+NjxGD9EgVIpx73FE/t3ZvpDFob ljuMjmUG/ue/OzyW5wOH4ifxaxdMPi1uWQW+29DJDEgF4e5DobUySbkA3kGA+Hf9 KFZua+cLeN7zO/AhihpAYoRXvXE0ytPO0lV8BfHTitoNR1ybAKLS7g== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:42 2025 by rpki-client on console.sobornost.net