$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/rJDRowhC9ipX2gL5sIVSvIFXgbM.roa File: rJDRowhC9ipX2gL5sIVSvIFXgbM.roa (raw, json) Hash identifier: 21lVvK0YFANqReFk55AFjGD5A7uQtcJF9J67EbXaU2s= Subject key identifier: AC:90:D1:A3:08:42:F6:2A:57:DA:02:F9:B0:85:52:BC:81:57:81:B3 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0EA7 Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/rJDRowhC9ipX2gL5sIVSvIFXgbM.roa Signing time: Mon 10 Feb 2025 13:59:45 +0000 ROA not before: Mon 10 Feb 2025 13:59:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38843 IP address blocks: 223.27.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3751 (0xea7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Feb 10 13:59:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AC90D1A30842F62A57DA02F9B08552BC815781B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fc:9a:ba:c6:8e:23:a5:04:38:0f:21:e5:7a: 3e:f3:d1:9c:cf:3a:7e:38:4a:f0:bf:2f:d0:27:c7: d6:20:4d:a4:74:3b:6a:d0:27:45:a6:d4:65:55:a8: eb:64:4d:9d:e4:b7:06:9c:ad:7c:0c:98:24:53:a1: 8c:5e:ad:78:58:bf:e0:04:08:be:d3:b6:da:72:04: 64:df:87:cd:81:b8:1c:c4:71:c9:66:3f:b7:fe:dc: 26:88:21:d0:fc:01:17:f5:a6:e4:f4:df:62:e7:40: 0f:5f:bc:06:82:82:b4:85:7d:07:db:7d:fe:23:fa: b7:f2:11:fe:ba:30:a6:52:66:d4:dc:c8:ad:7f:c5: 93:7e:8c:8f:68:bb:f7:66:8b:db:f0:12:82:48:70: 62:29:36:10:5d:41:99:c0:e1:46:d6:c4:4f:40:80: 4a:f9:14:5a:8e:e0:90:de:18:8b:e7:67:64:f0:05: 68:c0:1d:03:97:82:bd:40:0f:5e:a0:4b:6d:3d:54: dd:7e:75:11:d4:f6:58:55:31:08:06:eb:cb:d3:c1: 4e:d4:6f:66:3b:97:17:89:bb:d0:6f:64:cb:1e:61: f3:e7:38:42:4f:31:04:da:83:71:b5:2b:87:81:3f: a0:82:3f:de:a4:53:33:bb:34:21:9d:0c:bc:55:f8: ac:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:90:D1:A3:08:42:F6:2A:57:DA:02:F9:B0:85:52:BC:81:57:81:B3 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/rJDRowhC9ipX2gL5sIVSvIFXgbM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.27.51.0/24 Signature Algorithm: sha256WithRSAEncryption a1:24:df:1d:61:ef:a8:af:25:34:da:04:fb:8c:07:83:3f:ae: c4:2c:c4:3d:62:56:c2:38:c5:35:bf:c4:6a:b2:80:09:99:35: 28:60:f5:94:fa:a3:9c:e5:d9:e8:c0:69:29:30:46:59:fb:cd: 63:9f:f8:ae:b1:43:ff:8b:f8:f1:d5:c4:95:bd:f4:6a:bd:5a: a0:aa:b9:e9:8f:5f:c9:69:7d:0b:33:ff:80:37:65:76:55:3a: 90:11:2c:84:f4:61:35:a5:30:10:9d:ed:c2:1a:10:00:53:c6: 83:5b:54:a3:d7:5f:66:90:91:2d:f6:f4:e4:cc:54:d5:87:93: 8d:7c:5c:76:1e:15:39:c4:01:64:bc:42:d4:38:bc:b3:6f:66: 0b:9c:3a:7e:24:1f:b4:2c:3b:a4:73:4c:de:a2:62:cd:62:39: 14:0a:13:eb:9c:1f:5f:3e:21:dc:b3:d9:2f:ad:f7:6e:96:cc: 43:6f:95:a2:18:9d:55:51:c1:48:b4:c5:71:4d:71:39:51:36: 3d:a1:79:0d:ad:35:9d:5f:c8:50:6e:26:c6:4d:bc:57:6e:73: 71:b4:96:37:0c:91:c2:fd:59:d7:ec:f7:74:cb:07:41:6e:f8: e5:8f:54:25:f8:86:1a:10:6a:da:ab:82:89:bd:45:50:2c:a4: 58:85:b2:53 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDqcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNTAyMTAx MzU5NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFDOTBEMUEzMDg0MkY2 MkE1N0RBMDJGOUIwODU1MkJDODE1NzgxQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa/Jq6xo4jpQQ4DyHlej7z0ZzPOn44SvC/L9Anx9YgTaR0O2rQ J0Wm1GVVqOtkTZ3ktwacrXwMmCRToYxerXhYv+AECL7TttpyBGTfh82BuBzEcclm P7f+3CaIIdD8ARf1puT032LnQA9fvAaCgrSFfQfbff4j+rfyEf66MKZSZtTcyK1/ xZN+jI9ou/dmi9vwEoJIcGIpNhBdQZnA4UbWxE9AgEr5FFqO4JDeGIvnZ2TwBWjA HQOXgr1AD16gS209VN1+dRHU9lhVMQgG68vTwU7Ub2Y7lxeJu9BvZMseYfPnOEJP MQTag3G1K4eBP6CCP96kUzO7NCGdDLxV+Kx9AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUrJDRowhC9ipX2gL5sIVSvIFXgbMwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vckpEUm93aEM5aXBYMmdMNXNJVlN2 SUZYZ2JNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAN8bMzAN BgkqhkiG9w0BAQsFAAOCAQEAoSTfHWHvqK8lNNoE+4wHgz+uxCzEPWJWwjjFNb/E arKACZk1KGD1lPqjnOXZ6MBpKTBGWfvNY5/4rrFD/4v48dXElb30ar1aoKq56Y9f yWl9CzP/gDdldlU6kBEshPRhNaUwEJ3twhoQAFPGg1tUo9dfZpCRLfb05MxU1YeT jXxcdh4VOcQBZLxC1Di8s29mC5w6fiQftCw7pHNM3qJizWI5FAoT65wfXz4h3LPZ L633bpbMQ2+VohidVVHBSLTFcU1xOVE2PaF5Da01nV/IUG4mxk28V25zcbSWNwyR wv1Z1+z3dMsHQW745Y9UJfiGGhBq2quCib1FUCykWIWyUw== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net