$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/9a-z2A39NLe2pUVzU4tMRx6wujA.roa File: 9a-z2A39NLe2pUVzU4tMRx6wujA.roa (raw, json) Hash identifier: MfS5gzZw8yeMRD8+Hth4vlawOedk5UWwsAVIoR8d51I= Subject key identifier: F5:AF:B3:D8:0D:FD:34:B7:B6:A5:45:73:53:8B:4C:47:1E:B0:BA:30 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0F68 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/9a-z2A39NLe2pUVzU4tMRx6wujA.roa Signing time: Tue 18 Feb 2025 01:37:00 +0000 ROA not before: Tue 18 Feb 2025 01:37:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17712 IP address blocks: 120.113.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3944 (0xf68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Feb 18 01:37:00 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F5AFB3D80DFD34B7B6A54573538B4C471EB0BA30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6c:55:96:cf:26:fc:87:5d:0e:e6:e2:a3:98: ba:0b:35:46:bd:5c:b8:82:3c:4a:1f:9f:90:3b:e0: 79:c0:68:1d:ae:1c:8f:42:af:9a:48:b1:07:b4:4f: 7b:c7:1e:8e:97:b3:9f:3f:d7:e6:b3:90:d7:83:aa: 89:1a:e7:53:c7:8c:f4:a1:0c:b1:d6:b3:a8:74:a0: 2a:f8:54:81:55:bc:f9:c4:ba:77:2a:5c:43:2f:d1: 2a:a9:66:29:e4:71:f5:63:ce:2f:70:e7:03:ea:9a: da:33:02:b9:8c:df:55:7e:88:3a:90:32:3c:2e:68: 23:9c:3f:6d:a3:c7:39:06:be:a2:29:8e:73:0f:a1: 2a:72:0a:84:76:3b:a2:99:14:8f:cc:3c:4b:df:b6: fc:b1:85:cb:3b:46:10:ca:df:f1:eb:96:bf:1a:e0: e7:28:de:a6:ee:56:ec:7d:ab:0b:b0:f9:88:42:94: cf:81:68:c9:e7:90:b5:9f:df:4a:bc:52:20:a2:52: 62:01:ff:d2:e2:af:ad:87:39:b1:12:40:7f:54:ce: 4e:d2:bd:96:0d:07:fd:34:70:93:6f:f5:49:b0:01: 1c:d9:70:e1:2b:bb:dc:18:d1:82:dc:42:70:86:1f: 11:7a:77:b3:08:a2:8b:a8:fb:23:20:9a:88:7b:c8: 7b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AF:B3:D8:0D:FD:34:B7:B6:A5:45:73:53:8B:4C:47:1E:B0:BA:30 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/9a-z2A39NLe2pUVzU4tMRx6wujA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.113.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4a:07:01:bb:6a:f8:84:1b:f7:36:91:d1:ea:67:cc:e6:24:b0: 10:3d:3b:80:c6:0f:ca:22:41:eb:30:3c:e0:7f:70:be:e9:fe: 0d:27:cf:8a:8b:7d:1a:d9:95:ef:f2:08:6f:42:e0:ca:03:64: cd:d6:09:89:bf:45:52:b0:e1:10:f0:36:d6:60:fd:7d:8e:bb: 32:ff:6f:92:99:47:80:0e:31:6c:0c:de:f0:cf:01:96:76:4c: a4:5a:de:2c:a2:14:44:5c:8f:25:d5:66:f0:21:6e:9d:95:7c: 7d:7d:34:b8:1b:9a:34:39:ad:f3:32:71:fa:fb:03:30:69:8b: e1:39:89:2c:7d:5e:68:e1:81:53:56:1d:3f:ac:a3:f5:2b:88: f0:b7:6e:5d:89:f4:4c:56:7f:26:0c:c8:da:d1:6c:45:89:a5: a2:90:6f:29:47:df:b7:98:c5:0a:29:d4:4b:70:91:b2:9e:06: 2f:7b:5c:b6:58:c2:a4:47:0d:75:0a:ae:a8:b4:a8:a7:11:5a: ec:2b:6a:63:3b:a9:c6:cf:c0:28:c3:4d:91:1d:6c:0b:19:70: 3f:5b:ce:8c:29:45:66:72:a9:71:82:4c:e2:78:66:f4:75:f7: 14:d2:b6:f0:31:38:fa:f9:e2:82:2e:3d:b8:8b:7c:13:15:46: 3d:c8:14:28 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD2gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTgw MTM3MDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY1QUZCM0Q4MERGRDM0 QjdCNkE1NDU3MzUzOEI0QzQ3MUVCMEJBMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgbFWWzyb8h10O5uKjmLoLNUa9XLiCPEofn5A74HnAaB2uHI9C r5pIsQe0T3vHHo6Xs58/1+azkNeDqoka51PHjPShDLHWs6h0oCr4VIFVvPnEuncq XEMv0SqpZinkcfVjzi9w5wPqmtozArmM31V+iDqQMjwuaCOcP22jxzkGvqIpjnMP oSpyCoR2O6KZFI/MPEvftvyxhcs7RhDK3/Hrlr8a4Oco3qbuVux9qwuw+YhClM+B aMnnkLWf30q8UiCiUmIB/9Lir62HObESQH9Uzk7SvZYNB/00cJNv9UmwARzZcOEr u9wY0YLcQnCGHxF6d7MIoouo+yMgmoh7yHtlAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU9a+z2A39NLe2pUVzU4tMRx6wujAwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC85YS16MkEzOU5MZTJwVVZ6VTR0 TVJ4Nnd1akEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAeHEw DQYJKoZIhvcNAQELBQADggEBAEoHAbtq+IQb9zaR0epnzOYksBA9O4DGD8oiQesw POB/cL7p/g0nz4qLfRrZle/yCG9C4MoDZM3WCYm/RVKw4RDwNtZg/X2OuzL/b5KZ R4AOMWwM3vDPAZZ2TKRa3iyiFERcjyXVZvAhbp2VfH19NLgbmjQ5rfMycfr7AzBp i+E5iSx9XmjhgVNWHT+so/UriPC3bl2J9ExWfyYMyNrRbEWJpaKQbylH37eYxQop 1EtwkbKeBi97XLZYwqRHDXUKrqi0qKcRWuwramM7qcbPwCjDTZEdbAsZcD9bzowp RWZyqXGCTOJ4ZvR19xTStvAxOPr54oIuPbiLfBMVRj3IFCg= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net