$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/q8YYIUJbbq96tABmvhWXwbgS_Cw.roa File: q8YYIUJbbq96tABmvhWXwbgS_Cw.roa (raw, json) Hash identifier: AJw6fd34gefMVvKxvJPEq+fVdG9iIGETeTYFQ0gcDbo= Subject key identifier: AB:C6:18:21:42:5B:6E:AF:7A:B4:00:66:BE:15:97:C1:B8:12:FC:2C Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Certificate serial: 0D21 Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/q8YYIUJbbq96tABmvhWXwbgS_Cw.roa Signing time: Mon 10 Feb 2025 14:23:29 +0000 ROA not before: Mon 10 Feb 2025 14:23:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 101.3.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3361 (0xd21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Validity Not Before: Feb 10 14:23:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=ABC61821425B6EAF7AB40066BE1597C1B812FC2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:00:60:c4:34:05:91:27:5f:5d:ac:f3:99:84: d4:72:fb:7e:cd:d3:4f:c1:d3:87:b6:e2:2d:0b:57: 2a:9f:ee:05:09:a6:48:51:e9:a7:12:78:ac:ea:95: 86:24:38:ae:3f:42:cd:33:6a:9d:89:f6:f5:77:d1: fc:42:24:31:df:54:de:a2:29:3f:cc:a7:ab:2f:ff: 5b:95:28:3b:f2:d5:c2:39:6c:72:2d:5e:99:13:23: e8:1a:d3:3f:08:e6:69:20:d5:f9:fd:19:75:a7:4b: 0a:34:b9:19:9d:f7:e0:8b:5f:ed:be:96:6e:7b:c5: 07:b0:4c:39:07:e6:9e:e0:65:75:fd:b6:dd:99:ce: 9c:36:44:d3:8d:2e:9f:75:50:45:d9:7d:79:8a:8c: 32:90:b8:f7:eb:11:cf:14:5a:75:ee:a7:b9:84:c6: 7b:35:47:a2:6a:30:b8:76:20:1f:f9:a5:d6:57:a3: 07:d9:f1:ab:92:e6:3f:18:6e:76:2d:38:83:c5:7c: c7:20:45:b7:30:d0:1a:70:4e:4a:cd:4e:b0:16:2c: 44:3c:f0:05:b6:fa:07:9c:10:e5:d4:a4:f7:63:b2: af:c8:3d:82:b1:d5:cc:b9:a8:5e:44:f8:d9:5e:be: 40:8c:d1:c9:23:e1:40:25:47:b4:81:fa:cf:bc:92: c1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C6:18:21:42:5B:6E:AF:7A:B4:00:66:BE:15:97:C1:B8:12:FC:2C X509v3 Authority Key Identifier: keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/q8YYIUJbbq96tABmvhWXwbgS_Cw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.3.128.0/19 Signature Algorithm: sha256WithRSAEncryption 9c:0a:31:af:81:38:1c:d6:93:f8:01:b0:3c:fb:d4:e8:92:d9: 58:18:66:a9:73:85:02:12:2b:ee:f5:37:18:0e:b2:2b:65:19: 78:d8:12:bd:b1:33:1c:b2:c0:25:27:97:f7:8b:86:50:6f:e1: a5:49:8e:6e:d0:a8:cc:51:c9:eb:79:2e:63:ed:f6:7c:12:87: 2c:bf:37:9e:aa:0a:cd:ec:6f:1b:13:f7:7d:a6:d5:8f:b4:ad: ad:6d:89:0f:27:f8:d4:e3:41:55:52:24:5a:3f:60:bb:69:fe: a3:43:cc:fd:a5:57:4e:50:7b:42:dd:75:a5:23:3e:45:77:e3: 23:3c:85:75:30:7c:f8:25:b4:70:f1:cf:9b:c3:35:8d:4c:c1: b7:fb:70:71:63:73:1f:68:f3:7e:a8:9a:11:a1:ff:77:44:29: 6f:32:4e:01:0a:30:84:06:25:4c:f1:44:63:a7:65:6d:a9:63: af:79:9c:90:07:b9:9b:36:02:a4:76:18:43:08:4b:94:f2:c8: 20:de:86:b5:d9:5a:25:16:48:2e:c6:e6:5e:c1:2a:79:ad:cd: 0e:20:22:86:3f:c0:aa:9d:0d:28:c2:1b:69:8b:6b:8c:3d:d4: 4e:76:c8:9b:21:e0:57:8c:62:fe:f9:3c:a8:97:c1:53:42:38: 79:47:8d:3e -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDSEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1 NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yNTAyMTAx NDIzMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFCQzYxODIxNDI1QjZF QUY3QUI0MDA2NkJFMTU5N0MxQjgxMkZDMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJAGDENAWRJ19drPOZhNRy+37N00/B04e24i0LVyqf7gUJpkhR 6acSeKzqlYYkOK4/Qs0zap2J9vV30fxCJDHfVN6iKT/Mp6sv/1uVKDvy1cI5bHIt XpkTI+ga0z8I5mkg1fn9GXWnSwo0uRmd9+CLX+2+lm57xQewTDkH5p7gZXX9tt2Z zpw2RNONLp91UEXZfXmKjDKQuPfrEc8UWnXup7mExns1R6JqMLh2IB/5pdZXowfZ 8auS5j8YbnYtOIPFfMcgRbcw0BpwTkrNTrAWLEQ88AW2+gecEOXUpPdjsq/IPYKx 1cy5qF5E+NlevkCM0ckj4UAlR7SB+s+8ksHRAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUq8YYIUJbbq96tABmvhWXwbgS/CwwHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83 NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2L3E4WVlJVUpiYnE5 NnRBQm12aFdYd2JnU19Ddy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVlA4AwDQYJKoZIhvcNAQELBQADggEBAJwKMa+BOBzWk/gBsDz71OiS2VgY ZqlzhQISK+71NxgOsitlGXjYEr2xMxyywCUnl/eLhlBv4aVJjm7QqMxRyet5LmPt 9nwShyy/N56qCs3sbxsT932m1Y+0ra1tiQ8n+NTjQVVSJFo/YLtp/qNDzP2lV05Q e0LddaUjPkV34yM8hXUwfPgltHDxz5vDNY1Mwbf7cHFjcx9o836omhGh/3dEKW8y TgEKMIQGJUzxRGOnZW2pY695nJAHuZs2AqR2GEMIS5TyyCDehrXZWiUWSC7G5l7B KnmtzQ4gIoY/wKqdDSjCG2mLa4w91E52yJsh4FeMYv75PKiXwVNCOHlHjT4= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net