$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/tdTA8GWKN249A61iP7qLq3-LMLQ.roa File: tdTA8GWKN249A61iP7qLq3-LMLQ.roa (raw, json) Hash identifier: +VcngFzr/CYXFu7EAmp7039fb4218jFlyVzttQ+6Go8= Subject key identifier: B5:D4:C0:F0:65:8A:37:6E:3D:03:AD:62:3F:BA:8B:AB:7F:8B:30:B4 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0F6E Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/tdTA8GWKN249A61iP7qLq3-LMLQ.roa Signing time: Tue 18 Feb 2025 01:39:24 +0000 ROA not before: Tue 18 Feb 2025 01:39:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18177 IP address blocks: 120.116.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3950 (0xf6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Feb 18 01:39:24 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B5D4C0F0658A376E3D03AD623FBA8BAB7F8B30B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:06:9a:74:cc:68:83:46:c6:80:04:bd:c8:a9: 19:2c:0d:af:e0:1c:40:f8:96:9a:4b:ab:99:40:2a: f9:dd:50:40:ca:33:ec:a4:20:21:9e:11:2b:7e:64: c0:c2:17:a3:f7:9b:63:b0:4b:53:1b:e3:42:73:e6: 8b:c1:28:7c:78:ef:39:63:69:3e:a5:86:8f:c1:02: 70:dc:c7:57:30:ec:13:4c:20:69:ca:2a:67:6a:ac: 1b:3c:1d:e1:89:a2:3b:7b:37:dd:da:96:bf:51:59: c2:b2:d3:5f:f7:10:90:9d:a4:00:98:a3:ce:b6:43: d8:da:a0:81:84:98:7c:1b:09:95:96:86:ec:e6:77: 7c:71:a8:53:3e:0a:cb:2a:b1:d1:f6:a8:f1:0f:8d: 68:89:44:39:3e:78:96:ff:45:92:dc:ca:88:04:77: 1b:81:82:46:f5:36:c5:12:65:7a:56:f9:b9:49:a0: 22:64:19:c1:42:3b:54:1d:b3:cf:4a:82:ff:7c:8c: df:69:bb:32:96:d7:ae:84:69:de:d6:ed:42:61:be: 86:71:1f:42:86:d2:b5:64:93:c9:3a:10:ee:cf:07: 92:53:b1:6b:04:ac:41:47:88:ec:ad:b5:53:03:7e: ee:58:08:77:d3:96:73:66:35:f8:2a:44:f2:1c:d2: 27:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D4:C0:F0:65:8A:37:6E:3D:03:AD:62:3F:BA:8B:AB:7F:8B:30:B4 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/tdTA8GWKN249A61iP7qLq3-LMLQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.116.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7c:e6:0d:bb:81:29:7d:22:2f:33:a6:05:ce:74:2d:21:85:2c: 5e:4b:b5:0e:b7:08:04:e0:e4:52:68:24:0b:47:f8:50:b3:39: 5c:0d:77:83:db:75:b0:4b:56:12:73:3c:82:70:9a:b7:a8:b6: f9:38:d8:0d:9f:4f:2b:79:e4:39:00:da:8e:5a:8d:9b:d4:93: 3b:b2:a8:5c:e5:78:b5:21:5b:84:49:0a:b8:f1:7f:c9:46:80: 68:9f:f3:37:6c:d3:3f:04:7f:5b:42:18:f0:ca:74:d1:1d:a7: bd:c4:3a:05:5b:5d:91:02:7c:52:86:68:73:6f:46:ec:8d:04: c1:5e:45:5e:e0:3a:21:cb:03:f1:e7:86:17:f8:81:18:06:84: e9:b9:89:4f:02:01:bd:7d:5c:ca:39:b2:16:11:ad:c1:0b:b7: 27:a1:b5:13:7f:c5:cf:a7:86:a1:19:91:e6:93:2a:73:6e:25: b5:85:43:18:a6:00:a7:63:08:4b:71:c1:0c:55:4e:bd:91:0c: 6b:45:1d:11:c0:14:cd:fb:32:ff:3a:b8:13:56:43:88:25:d8: 13:95:63:7e:e7:39:46:a0:95:0f:7e:3c:c2:e5:b7:52:db:84: c7:c5:77:c1:1f:51:f4:ec:5b:f6:13:28:44:ad:76:d9:b1:c2: f5:c1:9e:15 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD24wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTgw MTM5MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI1RDRDMEYwNjU4QTM3 NkUzRDAzQUQ2MjNGQkE4QkFCN0Y4QjMwQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2Bpp0zGiDRsaABL3IqRksDa/gHED4lppLq5lAKvndUEDKM+yk ICGeESt+ZMDCF6P3m2OwS1Mb40Jz5ovBKHx47zljaT6lho/BAnDcx1cw7BNMIGnK KmdqrBs8HeGJojt7N93alr9RWcKy01/3EJCdpACYo862Q9jaoIGEmHwbCZWWhuzm d3xxqFM+CssqsdH2qPEPjWiJRDk+eJb/RZLcyogEdxuBgkb1NsUSZXpW+blJoCJk GcFCO1Qds89Kgv98jN9puzKW166Ead7W7UJhvoZxH0KG0rVkk8k6EO7PB5JTsWsE rEFHiOyttVMDfu5YCHfTlnNmNfgqRPIc0ic/AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUtdTA8GWKN249A61iP7qLq3+LMLQwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC90ZFRBOEdXS04yNDlBNjFpUDdx THEzLUxNTFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAeHQw DQYJKoZIhvcNAQELBQADggEBAHzmDbuBKX0iLzOmBc50LSGFLF5LtQ63CATg5FJo JAtH+FCzOVwNd4PbdbBLVhJzPIJwmreotvk42A2fTyt55DkA2o5ajZvUkzuyqFzl eLUhW4RJCrjxf8lGgGif8zds0z8Ef1tCGPDKdNEdp73EOgVbXZECfFKGaHNvRuyN BMFeRV7gOiHLA/Hnhhf4gRgGhOm5iU8CAb19XMo5shYRrcELtyehtRN/xc+nhqEZ keaTKnNuJbWFQximAKdjCEtxwQxVTr2RDGtFHRHAFM37Mv86uBNWQ4gl2BOVY37n OUaglQ9+PMLlt1LbhMfFd8EfUfTsW/YTKEStdtmxwvXBnhU= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net