$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/ug2ewxKtJa3GO2zTODrw7Im0dGk.roa File: ug2ewxKtJa3GO2zTODrw7Im0dGk.roa (raw, json) Hash identifier: ApKKuZYFEhGIjW82Rv7jzVFB96OjxPf+56E7aMxTvu4= Subject key identifier: BA:0D:9E:C3:12:AD:25:AD:C6:3B:6C:D3:38:3A:F0:EC:89:B4:74:69 Certificate issuer: /CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5 Certificate serial: 019B Authority key identifier: 02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/ug2ewxKtJa3GO2zTODrw7Im0dGk.roa Signing time: Mon 10 Feb 2025 13:42:38 +0000 ROA not before: Mon 10 Feb 2025 13:42:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 134823 IP address blocks: 103.123.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5 Validity Not Before: Feb 10 13:42:38 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BA0D9EC312AD25ADC63B6CD3383AF0EC89B47469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:90:42:1c:e8:62:a2:8a:89:3d:5c:cc:48:b2: 32:76:c6:3f:60:4f:c5:b3:d4:5b:5a:e2:a9:10:43: c8:91:83:6e:ff:ad:29:11:ba:f8:fb:dd:0e:98:c0: 88:b6:68:fb:92:69:28:10:45:28:54:cc:f2:24:6f: 7d:52:00:cc:d4:32:f2:8a:f3:a7:bf:1a:2b:34:dd: f7:82:b4:67:15:bc:75:24:38:28:68:88:b7:71:84: c3:93:5f:c6:66:6d:1b:cf:d3:44:dd:da:e1:f4:4e: 59:13:a9:35:bb:6d:05:4c:68:e4:81:98:e0:19:0e: 9d:da:bb:8c:d7:64:4f:d1:9c:ad:fe:b2:48:ea:8f: e4:b9:ec:73:51:d7:e2:6b:88:55:4e:73:bb:ed:35: 24:66:d3:b2:9a:a3:36:e3:83:ae:83:37:42:ec:78: b2:2a:ec:48:4d:82:da:c1:53:e6:bb:6b:67:d7:17: c4:d9:59:30:54:0d:66:04:1f:47:a5:cf:23:c7:05: 2c:d9:94:a7:0b:aa:b3:53:a6:e6:8a:2c:e0:d8:8a: b7:09:d0:fb:b8:63:cd:bf:f0:91:94:45:5d:01:91: d6:e4:38:37:e8:28:48:f2:14:26:5d:f9:70:b2:c3: ae:88:38:05:44:2b:9b:7e:29:f3:a6:dc:30:2c:99: fe:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0D:9E:C3:12:AD:25:AD:C6:3B:6C:D3:38:3A:F0:EC:89:B4:74:69 X509v3 Authority Key Identifier: keyid:02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/ug2ewxKtJa3GO2zTODrw7Im0dGk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.132.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:8a:aa:e5:51:c2:45:26:d9:7a:92:6c:6e:3a:be:be:10:57: 1f:2f:8b:2e:fd:02:e8:7b:bb:ef:6c:ff:9f:27:53:d4:fc:25: 0a:09:b5:33:aa:93:48:98:7c:99:95:c8:21:38:ce:02:41:34: 64:4e:b4:07:a8:f1:7f:e8:09:b5:5e:07:c0:00:d2:ef:a9:75: fd:4b:04:84:3b:01:2d:fb:42:df:07:ba:07:e2:14:41:19:7f: fd:91:95:0c:d7:0f:63:d2:cd:b3:7a:53:6b:b1:e5:08:8e:12: 6e:cc:cd:55:34:56:6d:c7:44:a0:89:fe:92:38:12:90:13:c7: 08:9c:4c:e7:1d:cd:57:5f:72:2c:91:7c:9c:dc:11:7e:1f:37: e3:61:c1:89:5a:88:43:22:31:a6:30:97:a4:5c:9e:e1:2e:21: 19:bf:44:b1:1b:4b:45:79:d1:45:e8:81:da:40:7c:24:c3:82: 38:35:d8:72:ad:6a:2b:36:36:d0:72:41:1c:54:16:9b:07:bc: 54:61:7b:8e:da:32:e0:ba:f9:bb:d6:29:de:9e:ab:d0:ca:78: 9d:79:f7:b1:d0:44:a2:a8:29:76:d1:24:20:df:f1:40:8b:d7: d5:6d:ea:d6:80:7e:f5:00:fc:c4:d5:6b:8d:c6:f5:94:fb:17: de:82:c1:1f -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDI2 NEE0MUE3NDFFNUYwMEFFRDJCRDdFNEE3QTQyRjVCMUQ3NThENTAeFw0yNTAyMTAx MzQyMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJBMEQ5RUMzMTJBRDI1 QURDNjNCNkNEMzM4M0FGMEVDODlCNDc0NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMkEIc6GKiiok9XMxIsjJ2xj9gT8Wz1Fta4qkQQ8iRg27/rSkR uvj73Q6YwIi2aPuSaSgQRShUzPIkb31SAMzUMvKK86e/Gis03feCtGcVvHUkOCho iLdxhMOTX8ZmbRvP00Td2uH0TlkTqTW7bQVMaOSBmOAZDp3au4zXZE/RnK3+skjq j+S57HNR1+JriFVOc7vtNSRm07Kaozbjg66DN0LseLIq7EhNgtrBU+a7a2fXF8TZ WTBUDWYEH0elzyPHBSzZlKcLqrNTpuaKLODYircJ0Pu4Y82/8JGURV0BkdbkODfo KEjyFCZd+XCyw66IOAVEK5t+KfOm3DAsmf7dAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUug2ewxKtJa3GO2zTODrw7Im0dGkwHwYDVR0jBBgwFoAUAmSkGnQeXwCu0r1+ SnpC9bHXWNUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0RDTC1U Vy9BbVNrR25RZVh3Q3UwcjEtU25wQzliSFhXTlUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FtU2tHblFlWHdDdTByMS1TbnBDOWJIWFdOVS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NEQ0wtVFcvdWcyZXd4S3RKYTNHTzJ6 VE9Ecnc3SW0wZEdrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME Amd7hDANBgkqhkiG9w0BAQsFAAOCAQEAC4qq5VHCRSbZepJsbjq+vhBXHy+LLv0C 6Hu772z/nydT1PwlCgm1M6qTSJh8mZXIITjOAkE0ZE60B6jxf+gJtV4HwADS76l1 /UsEhDsBLftC3we6B+IUQRl//ZGVDNcPY9LNs3pTa7HlCI4SbszNVTRWbcdEoIn+ kjgSkBPHCJxM5x3NV19yLJF8nNwRfh8342HBiVqIQyIxpjCXpFye4S4hGb9EsRtL RXnRReiB2kB8JMOCODXYcq1qKzY20HJBHFQWmwe8VGF7jtoy4Lr5u9Yp3p6r0Mp4 nXn3sdBEoqgpdtEkIN/xQIvX1W3q1oB+9QD8xNVrjcb1lPsX3oLBHw== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net