$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/4iOQBhifAbh401hNq4auVyeCm-s.roa File: 4iOQBhifAbh401hNq4auVyeCm-s.roa (raw, json) Hash identifier: rIZ/ys+hzLIgKaCs8KQyp/JUB8UL+spLIFbjQZ0uxMs= Subject key identifier: E2:23:90:06:18:9F:01:B8:78:D3:58:4D:AB:86:AE:57:27:82:9B:EB Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Certificate serial: 0DC1 Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/4iOQBhifAbh401hNq4auVyeCm-s.roa Signing time: Thu 24 Apr 2025 06:12:43 +0000 ROA not before: Thu 24 Apr 2025 06:12:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18046 IP address blocks: 101.3.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3521 (0xdc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Validity Not Before: Apr 24 06:12:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E2239006189F01B878D3584DAB86AE5727829BEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:47:1d:79:7c:72:86:b3:94:5f:79:60:e7:ea: 9f:8f:f9:af:db:d8:55:ad:80:76:4f:e9:5a:85:81: 70:62:e5:d1:af:62:f0:45:a1:8d:c2:6e:a7:3f:22: ce:cd:01:08:24:d1:d9:3a:5c:7b:f5:98:51:fc:b0: 6a:dc:41:4f:ac:1d:d6:43:e1:c2:93:b4:d6:5d:6d: 7a:97:7d:57:1e:0b:c3:8b:a1:2d:a7:db:ef:84:0c: 33:16:c1:8b:8f:45:7b:86:18:c0:d8:f0:b0:9a:f7: c0:cc:19:40:df:d9:67:4f:68:80:08:1c:ad:ae:37: 34:78:17:15:ff:cf:f6:e6:37:5b:5c:82:cd:d5:59: cd:4c:54:66:ca:37:51:92:a6:67:9e:5b:34:4a:d7: da:5f:40:7a:9a:66:45:6c:43:31:ad:d4:b5:1a:c6: 01:a6:e9:bc:f5:ae:6f:5d:b6:b8:21:51:e1:2a:c5: 39:59:07:02:65:03:df:85:5e:bb:0b:aa:b8:44:d5: 45:c0:7b:65:49:a4:4f:6e:3d:8a:83:5c:1a:a6:e4: b7:b1:6c:03:92:c1:b5:a9:2c:1c:12:e3:49:76:6e: 66:c4:bc:b4:02:56:c0:80:38:0f:25:b8:cc:77:9b: 18:08:88:d0:05:d9:79:76:79:fb:1b:5f:70:b6:7e: 5a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:23:90:06:18:9F:01:B8:78:D3:58:4D:AB:86:AE:57:27:82:9B:EB X509v3 Authority Key Identifier: keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/4iOQBhifAbh401hNq4auVyeCm-s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.3.192.0/20 Signature Algorithm: sha256WithRSAEncryption 72:82:e6:e8:98:6c:8d:b4:c5:92:b3:64:23:54:3f:de:3d:d6: fa:59:74:69:16:70:3f:44:9b:9c:fd:9a:82:3a:38:29:6a:50: 38:83:63:c3:c5:eb:00:e2:ca:89:22:bb:f1:23:a0:7c:c1:cd: 57:7e:5f:c7:ad:ad:b2:32:12:2d:19:1f:ba:cd:96:05:24:11: 02:2b:12:5d:d0:06:17:6e:16:b5:fe:ec:f8:01:4d:eb:9d:8f: a0:10:97:e1:c3:88:9a:0d:f8:98:0d:20:29:6f:3c:cb:7f:2c: 01:0c:47:ff:cd:ad:d1:9e:d8:87:74:f1:79:90:d6:2d:e6:85: 5b:66:1b:e6:63:d8:39:d8:a1:90:68:8f:ad:bd:36:81:8b:f2: 0d:ed:cf:89:53:2d:0f:c3:3d:4d:6f:7e:2f:ab:0a:31:f5:f4: 98:a3:b2:61:cf:2d:11:3f:a3:8e:d0:a5:5f:c2:b9:89:af:00: bf:df:5c:fc:9f:7b:8a:01:0a:79:59:c4:dd:9d:6a:98:0f:fb: 63:1a:43:d1:53:5f:b1:be:f9:ac:be:de:ac:d4:74:7e:2e:42: f2:46:51:ca:dc:31:2c:6d:6c:9c:f2:d5:cd:75:24:79:a3:3c: 78:42:f6:78:b9:a6:36:e6:12:65:41:74:8b:e5:ba:2a:5c:31: 5f:c4:f1:f0 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDcEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1 NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yNTA0MjQw NjEyNDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUyMjM5MDA2MTg5RjAx Qjg3OEQzNTg0REFCODZBRTU3Mjc4MjlCRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNRx15fHKGs5RfeWDn6p+P+a/b2FWtgHZP6VqFgXBi5dGvYvBF oY3Cbqc/Is7NAQgk0dk6XHv1mFH8sGrcQU+sHdZD4cKTtNZdbXqXfVceC8OLoS2n 2++EDDMWwYuPRXuGGMDY8LCa98DMGUDf2WdPaIAIHK2uNzR4FxX/z/bmN1tcgs3V Wc1MVGbKN1GSpmeeWzRK19pfQHqaZkVsQzGt1LUaxgGm6bz1rm9dtrghUeEqxTlZ BwJlA9+FXrsLqrhE1UXAe2VJpE9uPYqDXBqm5LexbAOSwbWpLBwS40l2bmbEvLQC VsCAOA8luMx3mxgIiNAF2Xl2efsbX3C2floLAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU4iOQBhifAbh401hNq4auVyeCm+swHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83 NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2LzRpT1FCaGlmQWJo NDAxaE5xNGF1VnllQ20tcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARlA8AwDQYJKoZIhvcNAQELBQADggEBAHKC5uiYbI20xZKzZCNUP9491vpZ dGkWcD9Em5z9moI6OClqUDiDY8PF6wDiyokiu/EjoHzBzVd+X8etrbIyEi0ZH7rN lgUkEQIrEl3QBhduFrX+7PgBTeudj6AQl+HDiJoN+JgNIClvPMt/LAEMR//NrdGe 2Id08XmQ1i3mhVtmG+Zj2DnYoZBoj629NoGL8g3tz4lTLQ/DPU1vfi+rCjH19Jij smHPLRE/o47QpV/CuYmvAL/fXPyfe4oBCnlZxN2dapgP+2MaQ9FTX7G++ay+3qzU dH4uQvJGUcrcMSxtbJzy1c11JHmjPHhC9ni5pjbmEmVBdIvluipcMV/E8fA= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net