$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/gFGmyiV2VDAG4OISYDC6F01F034.roa File: gFGmyiV2VDAG4OISYDC6F01F034.roa (raw, json) Hash identifier: s71g+pyJEK+StblvqYFJDsLJm2wIHy/XEB5/qLw0Ino= Subject key identifier: 80:51:A6:CA:25:76:54:30:06:E0:E2:12:60:30:BA:17:4D:45:D3:7E Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0F64 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/gFGmyiV2VDAG4OISYDC6F01F034.roa Signing time: Tue 18 Feb 2025 01:35:43 +0000 ROA not before: Tue 18 Feb 2025 01:35:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 120.109.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3940 (0xf64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Feb 18 01:35:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8051A6CA2576543006E0E2126030BA174D45D37E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:44:a4:7b:fc:f9:a4:14:bc:59:68:53:85:58: dc:b9:9a:0e:83:4c:d5:16:7d:25:a0:ff:4d:7f:43: e8:bc:f9:b6:39:36:21:67:3a:ce:ef:9c:74:06:f0: bd:0b:f6:98:8d:60:b6:f5:b6:16:65:54:84:81:1d: 39:98:aa:59:c7:3d:dd:21:36:ad:f3:1c:3a:a3:36: f7:5e:33:eb:c9:51:df:31:ad:05:55:79:4f:82:45: 9c:22:d5:e7:3a:f4:a6:8d:56:96:8e:aa:54:09:ce: 19:cf:52:70:f0:50:cf:0e:83:9b:41:04:6e:9a:24: bf:04:74:a0:21:e6:a8:59:41:39:be:0c:bd:b5:7c: ec:f8:54:e4:52:e2:74:90:d5:b4:8e:f3:f4:ad:8e: 0a:01:94:ce:10:22:1b:29:b2:64:75:cd:53:a0:fc: 09:12:44:10:94:db:12:42:23:3d:8c:92:33:65:c2: f1:ac:73:36:52:e9:82:b6:76:bd:80:24:74:7c:6c: bc:5f:ac:ad:dc:8f:3d:fb:59:e7:06:8c:b4:e8:65: bd:fb:bf:fd:37:64:27:e9:c2:5d:f1:2c:23:c4:40: 53:64:0e:a1:82:7b:e2:07:ea:2e:44:91:a3:e2:52: b8:a0:d2:49:81:34:5c:fb:6e:e4:19:6b:a8:48:67: 1d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:51:A6:CA:25:76:54:30:06:E0:E2:12:60:30:BA:17:4D:45:D3:7E X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/gFGmyiV2VDAG4OISYDC6F01F034.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.109.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5c:f8:8a:1a:c4:74:4e:87:f3:53:90:79:0b:06:74:ee:a3:cb: 1c:94:95:94:23:5c:37:86:58:6c:82:32:43:c1:89:d4:75:db: 5b:3d:4c:c6:db:71:a2:db:63:80:7f:f7:2d:25:f7:1b:4f:77: f0:a5:7c:77:5e:c6:d9:82:17:51:56:bc:d3:6d:bd:7f:04:c9: 99:fd:17:8f:9d:24:25:cc:91:bb:5f:9e:2c:9f:16:34:d1:36: 59:b3:e4:c9:00:0c:48:b9:32:77:7a:81:0c:08:5e:a4:b9:6f: 55:c7:28:04:63:28:51:db:e5:99:60:d6:21:75:57:61:36:92: 8e:9d:3e:4d:de:0e:a6:cc:21:a6:60:fa:b1:e2:68:f1:75:6e: 3e:10:1d:7b:50:f6:51:18:ef:f0:2c:f0:cc:9b:0c:9a:25:11: ee:bd:64:92:36:61:e2:92:04:f1:c3:63:47:7f:88:21:de:98: ab:9d:1a:f2:f3:96:25:12:62:e6:03:dd:a3:17:67:22:ec:82: 2e:d2:f3:aa:fa:0f:fb:c2:ff:54:b8:b0:3b:3b:8e:4e:c5:be: d5:e4:f7:5d:5e:2b:10:e9:61:81:04:18:95:64:2c:3d:a6:bd: 3d:09:f5:d9:9b:17:de:50:19:2a:e0:f4:b2:ca:39:44:cb:e9: c4:cb:12:a2 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD2QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTgw MTM1NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgwNTFBNkNBMjU3NjU0 MzAwNkUwRTIxMjYwMzBCQTE3NEQ0NUQzN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgRKR7/PmkFLxZaFOFWNy5mg6DTNUWfSWg/01/Q+i8+bY5NiFn Os7vnHQG8L0L9piNYLb1thZlVISBHTmYqlnHPd0hNq3zHDqjNvdeM+vJUd8xrQVV eU+CRZwi1ec69KaNVpaOqlQJzhnPUnDwUM8Og5tBBG6aJL8EdKAh5qhZQTm+DL21 fOz4VORS4nSQ1bSO8/StjgoBlM4QIhspsmR1zVOg/AkSRBCU2xJCIz2MkjNlwvGs czZS6YK2dr2AJHR8bLxfrK3cjz37WecGjLToZb37v/03ZCfpwl3xLCPEQFNkDqGC e+IH6i5EkaPiUrig0kmBNFz7buQZa6hIZx3JAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUgFGmyiV2VDAG4OISYDC6F01F034wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9nRkdteWlWMlZEQUc0T0lTWURD NkYwMUYwMzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAeG0w DQYJKoZIhvcNAQELBQADggEBAFz4ihrEdE6H81OQeQsGdO6jyxyUlZQjXDeGWGyC MkPBidR121s9TMbbcaLbY4B/9y0l9xtPd/ClfHdextmCF1FWvNNtvX8EyZn9F4+d JCXMkbtfniyfFjTRNlmz5MkADEi5Mnd6gQwIXqS5b1XHKARjKFHb5Zlg1iF1V2E2 ko6dPk3eDqbMIaZg+rHiaPF1bj4QHXtQ9lEY7/As8MybDJolEe69ZJI2YeKSBPHD Y0d/iCHemKudGvLzliUSYuYD3aMXZyLsgi7S86r6D/vC/1S4sDs7jk7FvtXk911e KxDpYYEEGJVkLD2mvT0J9dmbF95QGSrg9LLKOUTL6cTLEqI= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net