$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/gD5X77Z549QweS7og66H9Jo3Ph8.roa File: gD5X77Z549QweS7og66H9Jo3Ph8.roa (raw, json) Hash identifier: S6xdjNLO52Aclu5M42zVXQFFCDmQqHa7ec3Tvs0oc/g= Subject key identifier: 80:3E:57:EF:B6:79:E3:D4:30:79:2E:E8:83:AE:87:F4:9A:37:3E:1F Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0F3E Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/gD5X77Z549QweS7og66H9Jo3Ph8.roa Signing time: Mon 17 Feb 2025 09:01:19 +0000 ROA not before: Mon 17 Feb 2025 09:01:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17716 IP address blocks: 120.96.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3902 (0xf3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Feb 17 09:01:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=803E57EFB679E3D430792EE883AE87F49A373E1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:32:68:6b:d0:ed:67:d0:8f:84:01:e1:91:04: e1:cc:41:d8:41:91:b8:19:ef:94:10:33:98:77:24: 07:6a:36:27:3d:ff:32:3b:e3:82:dd:a4:ac:5c:22: 35:60:2d:9c:e0:b4:17:c7:e5:e0:e2:38:ed:3f:7d: 6b:f5:cb:83:02:97:32:f1:81:16:63:91:d1:7a:7d: 77:78:87:e9:76:54:30:94:64:00:0a:9f:b9:a0:2c: a3:93:50:29:41:d0:75:25:d7:fc:15:ca:de:46:4c: 46:de:42:fb:5d:1e:c8:12:40:73:aa:35:df:0d:1d: 2d:ae:9f:9c:94:d9:47:6d:f3:53:5a:e7:6a:b4:08: 37:16:db:aa:b8:90:7e:6e:07:f1:b1:6f:96:bf:5c: 3b:79:c4:ef:31:6d:75:3f:de:9b:8f:bc:79:f1:57: f9:20:b3:2a:27:25:a8:bb:d6:ea:de:ce:57:b4:cf: c3:6a:e7:81:09:f8:77:92:21:56:f0:0a:dc:3a:94: 2a:bd:b6:12:53:94:4f:f4:40:46:5d:9c:72:44:d2: b9:60:96:e0:2c:ac:e8:78:ef:37:fd:be:86:ad:3f: 63:df:85:ed:f8:3c:a0:34:c3:03:85:b4:8e:5d:2a: e6:37:ba:e2:31:cb:6b:a0:6b:20:5c:a6:db:29:98: c9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3E:57:EF:B6:79:E3:D4:30:79:2E:E8:83:AE:87:F4:9A:37:3E:1F X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/gD5X77Z549QweS7og66H9Jo3Ph8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.96.0.0/15 Signature Algorithm: sha256WithRSAEncryption 37:d6:e5:ce:81:01:57:7e:c5:ac:af:da:5f:4f:46:8a:73:3f: 34:b0:08:ee:e4:ba:b9:7e:94:96:1d:74:5f:ec:c2:6c:80:e0: 26:94:65:4f:e0:36:34:ae:d1:ab:45:38:5c:4f:43:28:fd:bb: d2:2f:3a:b5:f3:8b:88:63:0f:e8:f9:cb:c1:51:a4:8d:6c:8d: 64:e0:82:8b:9a:d0:3f:69:c2:15:bb:c0:7d:fd:ab:04:71:be: 3a:16:1e:db:17:2c:2e:c5:80:c2:fc:dc:07:7b:4d:a9:06:d8: 23:dd:d8:e6:93:71:60:77:d1:f9:15:39:4d:be:d6:10:7c:da: 47:7d:7d:ca:f8:e3:5b:32:2d:a3:6e:0b:5f:b0:47:c9:38:e0: e5:c7:9d:97:a8:90:83:ac:bd:a8:71:e6:0d:fb:cf:cb:e3:20: 73:af:4d:a3:17:df:f8:30:80:71:f8:0c:6c:28:cb:44:7f:79: 46:6e:e6:31:a1:f6:f5:6c:38:b6:ce:d7:9e:ad:cd:8e:6e:94: 3b:6d:99:b8:ad:f8:90:f1:75:db:f4:f8:71:04:be:a3:c9:c2: 72:62:88:c7:1d:37:5b:03:f5:15:2d:15:90:39:be:33:63:60: fc:43:15:dd:03:8d:cf:c9:7c:88:66:4d:f6:43:a4:2d:fc:15: 40:b3:ca:40 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDz4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTcw OTAxMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgwM0U1N0VGQjY3OUUz RDQzMDc5MkVFODgzQUU4N0Y0OUEzNzNFMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYMmhr0O1n0I+EAeGRBOHMQdhBkbgZ75QQM5h3JAdqNic9/zI7 44LdpKxcIjVgLZzgtBfH5eDiOO0/fWv1y4MClzLxgRZjkdF6fXd4h+l2VDCUZAAK n7mgLKOTUClB0HUl1/wVyt5GTEbeQvtdHsgSQHOqNd8NHS2un5yU2Udt81Na52q0 CDcW26q4kH5uB/Gxb5a/XDt5xO8xbXU/3puPvHnxV/kgsyonJai71urezle0z8Nq 54EJ+HeSIVbwCtw6lCq9thJTlE/0QEZdnHJE0rlgluAsrOh47zf9voatP2Pfhe34 PKA0wwOFtI5dKuY3uuIxy2ugayBcptspmMm7AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUgD5X77Z549QweS7og66H9Jo3Ph8wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9nRDVYNzdaNTQ5UXdlUzdvZzY2 SDlKbzNQaDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBeGAw DQYJKoZIhvcNAQELBQADggEBADfW5c6BAVd+xayv2l9PRopzPzSwCO7kurl+lJYd dF/swmyA4CaUZU/gNjSu0atFOFxPQyj9u9IvOrXzi4hjD+j5y8FRpI1sjWTggoua 0D9pwhW7wH39qwRxvjoWHtsXLC7FgML83Ad7TakG2CPd2OaTcWB30fkVOU2+1hB8 2kd9fcr441syLaNuC1+wR8k44OXHnZeokIOsvahx5g37z8vjIHOvTaMX3/gwgHH4 DGwoy0R/eUZu5jGh9vVsOLbO156tzY5ulDttmbit+JDxddv0+HEEvqPJwnJiiMcd N1sD9RUtFZA5vjNjYPxDFd0Djc/JfIhmTfZDpC38FUCzykA= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net