$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/nDTizWNduxTTG0hVLtZext4ufa0.roa File: nDTizWNduxTTG0hVLtZext4ufa0.roa (raw, json) Hash identifier: o4sq6lTmX192xTeloxGYa2ggWwUb49rapbjbSF84VPw= Subject key identifier: 9C:34:E2:CD:63:5D:BB:14:D3:1B:48:55:2E:D6:5E:C6:DE:2E:7D:AD Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0EF9 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/nDTizWNduxTTG0hVLtZext4ufa0.roa Signing time: Mon 10 Feb 2025 14:16:16 +0000 ROA not before: Mon 10 Feb 2025 14:16:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 203.68.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3833 (0xef9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Feb 10 14:16:16 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9C34E2CD635DBB14D31B48552ED65EC6DE2E7DAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ff:1d:f9:6a:b6:b1:54:6c:cd:ae:90:e6:03: f6:dc:7b:69:3a:b4:4a:17:57:a2:66:d1:0a:70:e2: ff:9e:81:08:ef:35:af:b1:16:c6:28:14:30:7f:21: ca:ea:7b:d4:3c:77:b3:83:4f:00:04:d8:7f:42:74: 73:2e:99:68:23:cc:fd:50:15:32:20:ae:b0:50:89: 96:8e:e6:77:ce:47:c4:f2:ec:91:ab:02:74:44:f2: fe:0a:43:28:e7:27:cf:8b:ac:32:1a:2e:71:4a:95: 45:f1:1f:da:5f:07:1f:8f:c2:fb:d5:74:82:87:a5: b0:93:c0:ae:1c:a2:e3:43:65:fe:32:f6:18:95:a9: 39:50:d0:83:46:b1:3e:1f:e3:0c:71:e9:62:33:dd: da:f9:97:e2:81:6e:cf:30:c0:77:11:8f:30:96:df: 43:c4:e2:8d:45:ca:69:ec:40:48:85:11:eb:1d:1c: 41:38:e7:4a:57:ac:32:75:65:25:71:9d:77:28:88: 7a:0a:f6:6f:0d:22:99:87:04:2b:96:4f:55:2f:7c: c5:97:aa:30:da:18:33:b4:82:ab:c8:df:03:cb:11: 6d:82:51:5f:52:8e:a2:e5:be:a4:e4:28:ea:73:a5: 3c:91:3d:b1:ca:c4:b0:de:95:16:e9:71:7d:3e:01: 80:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:34:E2:CD:63:5D:BB:14:D3:1B:48:55:2E:D6:5E:C6:DE:2E:7D:AD X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/nDTizWNduxTTG0hVLtZext4ufa0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.68.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3e:8c:05:ff:81:23:e6:ea:99:cf:da:2d:20:56:72:ab:00:2e: 30:c7:56:fa:a5:1d:6f:0d:84:cf:74:92:10:56:bd:ea:a9:a5: 27:45:b6:35:bc:0c:e1:63:21:b3:88:83:c5:e8:c2:8e:5a:7f: 95:58:f0:ed:78:91:71:98:18:3c:fa:5a:85:b5:f9:c4:a1:c1: 69:1a:c3:c2:a4:c0:37:51:6a:85:38:4d:e5:d7:a9:60:7e:e1: 86:1c:df:4f:88:38:f9:c6:4d:53:cc:32:bf:d9:0c:17:4f:03: 54:25:b5:90:05:c5:d5:23:84:e5:0a:58:95:77:eb:b4:45:b0: 69:3b:48:3b:94:eb:41:ea:9a:7b:7e:94:4e:71:ce:39:58:90: 4a:c4:db:1f:68:72:87:05:23:3f:5d:49:10:5e:36:8e:f6:aa: cb:b8:1a:0b:00:b7:85:71:be:5c:00:c4:81:d9:03:98:22:50: 41:2b:2b:a5:aa:37:43:d9:fc:e0:6f:ff:95:a3:b2:09:34:2a: 86:8d:df:8e:94:d5:95:cb:b4:be:a5:e5:63:1a:b4:f4:db:b6: b5:0f:00:3c:8d:b2:24:fe:0c:e4:b0:dd:24:1a:e2:5b:d6:8e: 91:d5:77:a0:ff:59:d2:00:9d:74:a7:48:5d:a6:ec:e3:37:c9: 19:83:35:4e -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDvkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTAx NDE2MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlDMzRFMkNENjM1REJC MTREMzFCNDg1NTJFRDY1RUM2REUyRTdEQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCs/x35araxVGzNrpDmA/bce2k6tEoXV6Jm0Qpw4v+egQjvNa+x FsYoFDB/Icrqe9Q8d7ODTwAE2H9CdHMumWgjzP1QFTIgrrBQiZaO5nfOR8Ty7JGr AnRE8v4KQyjnJ8+LrDIaLnFKlUXxH9pfBx+PwvvVdIKHpbCTwK4couNDZf4y9hiV qTlQ0INGsT4f4wxx6WIz3dr5l+KBbs8wwHcRjzCW30PE4o1FymnsQEiFEesdHEE4 50pXrDJ1ZSVxnXcoiHoK9m8NIpmHBCuWT1UvfMWXqjDaGDO0gqvI3wPLEW2CUV9S jqLlvqTkKOpzpTyRPbHKxLDelRbpcX0+AYDZAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUnDTizWNduxTTG0hVLtZext4ufa0wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9uRFRpeldOZHV4VFRHMGhWTHRa ZXh0NHVmYTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAy0Qw DQYJKoZIhvcNAQELBQADggEBAD6MBf+BI+bqmc/aLSBWcqsALjDHVvqlHW8NhM90 khBWveqppSdFtjW8DOFjIbOIg8Xowo5af5VY8O14kXGYGDz6WoW1+cShwWkaw8Kk wDdRaoU4TeXXqWB+4YYc30+IOPnGTVPMMr/ZDBdPA1QltZAFxdUjhOUKWJV367RF sGk7SDuU60Hqmnt+lE5xzjlYkErE2x9ococFIz9dSRBeNo72qsu4GgsAt4VxvlwA xIHZA5giUEErK6WqN0PZ/OBv/5Wjsgk0KoaN346U1ZXLtL6l5WMatPTbtrUPADyN siT+DOSw3SQa4lvWjpHVd6D/WdIAnXSnSF2m7OM3yRmDNU4= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net