$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/J9EkP74q_plSqzzNH0Vt54J-188.roa File: J9EkP74q_plSqzzNH0Vt54J-188.roa (raw, json) Hash identifier: m3Af3gBKc4GACX17zdxHzfuROMWCFkMtNEQTsJ+zRIM= Subject key identifier: 27:D1:24:3F:BE:2A:FE:99:52:AB:3C:CD:1F:45:6D:E7:82:7E:D7:CF Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0EED Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/J9EkP74q_plSqzzNH0Vt54J-188.roa Signing time: Tue 18 Feb 2025 01:50:54 +0000 ROA not before: Tue 18 Feb 2025 01:50:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17712 IP address blocks: 140.125.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3821 (0xeed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Feb 18 01:50:54 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=27D1243FBE2AFE9952AB3CCD1F456DE7827ED7CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ba:31:15:5f:ee:1e:d3:95:3f:92:7d:55:e2: 4a:89:56:a4:f8:ba:aa:89:00:17:72:76:ae:95:c4: 2b:e9:26:2d:a9:3c:89:be:38:3a:3b:32:79:86:a5: 2c:31:d0:37:d3:77:42:63:58:4c:10:41:1b:69:db: 0d:b3:74:ee:fd:8c:9e:05:2c:80:b6:73:84:27:c2: c1:78:04:aa:8d:1e:63:a1:0b:10:09:f3:b7:7d:0e: 52:9b:dc:8a:66:75:81:df:fd:c0:b6:c7:78:f8:66: cd:01:18:05:2c:c4:d0:d3:d7:6f:06:5e:a7:68:f6: e3:02:00:8e:11:48:1c:a3:ea:6f:03:ae:c9:42:bf: 10:15:ce:b1:1d:24:dc:17:52:e8:9b:2c:4d:44:7b: d5:05:96:02:c1:8d:85:91:bc:c7:29:3f:2f:6f:aa: d9:56:fe:ec:61:a7:52:82:78:f4:3a:44:4f:be:90: cf:e4:ba:50:19:b5:d7:f3:c9:00:61:59:c2:d5:43: 67:01:93:72:99:8f:61:0e:24:f6:2a:34:0e:58:9f: d1:34:15:71:8f:62:ea:07:e4:5e:7d:75:f4:a8:3b: 12:cd:e5:46:2b:56:39:82:42:9c:74:4a:54:3d:1d: 89:dd:0d:21:21:2d:1d:21:c0:e1:ad:6c:ba:a4:dd: d5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D1:24:3F:BE:2A:FE:99:52:AB:3C:CD:1F:45:6D:E7:82:7E:D7:CF X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/J9EkP74q_plSqzzNH0Vt54J-188.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.125.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8a:aa:f6:80:8c:5e:1b:0f:17:69:a1:a6:42:f9:74:58:5e:a4: 00:68:10:74:45:d9:91:2b:89:51:fa:ac:09:1f:3b:68:12:91: 42:cc:34:9f:00:63:b0:f7:aa:00:a9:8c:67:e1:1b:97:f3:6b: 88:61:0e:54:4c:af:87:36:97:62:85:7a:f8:ba:c8:52:af:ed: 13:3b:74:03:48:ef:1e:99:bb:49:db:3d:3b:68:27:83:ea:97: 3b:30:24:cf:0a:6a:a3:61:6e:93:99:f2:5f:ca:1a:a1:59:e0: ce:79:ee:e1:8a:50:92:e4:84:5a:9b:ca:15:34:9c:fc:53:00: b8:8c:5e:b1:81:40:f0:de:bd:56:49:2c:f7:8b:75:e8:a3:22: fe:d8:27:cb:e9:34:33:b4:2f:15:46:bb:ed:0c:e4:df:a1:b7: f6:3a:18:d1:15:fb:24:b5:0a:df:28:07:f9:a3:e3:a9:bc:6b: c7:81:63:32:17:52:a5:79:b0:10:86:16:b0:17:80:35:7f:65: 17:a4:bf:26:5c:56:07:12:6b:a7:4a:12:83:71:9c:f3:f0:65: 69:f5:85:fb:cd:8a:e3:ec:3b:dc:a2:ec:3d:70:2b:c1:e1:56: d2:30:08:08:fe:b1:1a:e3:37:f1:9b:62:69:c4:79:80:d9:ad: cd:76:14:c7 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDu0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNTAyMTgw MTUwNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI3RDEyNDNGQkUyQUZF OTk1MkFCM0NDRDFGNDU2REU3ODI3RUQ3Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXujEVX+4e05U/kn1V4kqJVqT4uqqJABdydq6VxCvpJi2pPIm+ ODo7MnmGpSwx0DfTd0JjWEwQQRtp2w2zdO79jJ4FLIC2c4QnwsF4BKqNHmOhCxAJ 87d9DlKb3IpmdYHf/cC2x3j4Zs0BGAUsxNDT128GXqdo9uMCAI4RSByj6m8DrslC vxAVzrEdJNwXUuibLE1Ee9UFlgLBjYWRvMcpPy9vqtlW/uxhp1KCePQ6RE++kM/k ulAZtdfzyQBhWcLVQ2cBk3KZj2EOJPYqNA5Yn9E0FXGPYuoH5F59dfSoOxLN5UYr VjmCQpx0SlQ9HYndDSEhLR0hwOGtbLqk3dWvAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUJ9EkP74q/plSqzzNH0Vt54J+188wHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9KOUVrUDc0cV9wbFNxenpOSDBW dDU0Si0xODgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjH0w DQYJKoZIhvcNAQELBQADggEBAIqq9oCMXhsPF2mhpkL5dFhepABoEHRF2ZEriVH6 rAkfO2gSkULMNJ8AY7D3qgCpjGfhG5fza4hhDlRMr4c2l2KFevi6yFKv7RM7dANI 7x6Zu0nbPTtoJ4PqlzswJM8KaqNhbpOZ8l/KGqFZ4M557uGKUJLkhFqbyhU0nPxT ALiMXrGBQPDevVZJLPeLdeijIv7YJ8vpNDO0LxVGu+0M5N+ht/Y6GNEV+yS1Ct8o B/mj46m8a8eBYzIXUqV5sBCGFrAXgDV/ZRekvyZcVgcSa6dKEoNxnPPwZWn1hfvN iuPsO9yi7D1wK8HhVtIwCAj+sRrjN/GbYmnEeYDZrc12FMc= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net