$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWT/4sqWLVQsJVV_tQIdbTSTXZL6xmM.roa File: 4sqWLVQsJVV_tQIdbTSTXZL6xmM.roa (raw, json) Hash identifier: UHa3y3sVuw5kO1RpYSpEa+E98XVHXFiGK4bdXVhvV4Y= Subject key identifier: E2:CA:96:2D:54:2C:25:55:7F:B5:02:1D:6D:34:93:5D:92:FA:C6:63 Certificate issuer: /CN=7EC7F1677BB492380282153BB77EC2EBE3185378 Certificate serial: 0CC4 Authority key identifier: 7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/4sqWLVQsJVV_tQIdbTSTXZL6xmM.roa Signing time: Mon 10 Feb 2025 14:23:21 +0000 ROA not before: Mon 10 Feb 2025 14:23:21 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38851 IP address blocks: 43.250.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3268 (0xcc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EC7F1677BB492380282153BB77EC2EBE3185378 Validity Not Before: Feb 10 14:23:21 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E2CA962D542C25557FB5021D6D34935D92FAC663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:34:17:85:3f:42:9f:a6:e7:68:a7:08:00: db:8c:1f:94:c6:65:e7:e9:93:8a:f4:73:8b:10:71: 8a:76:d8:0b:39:10:fb:81:b1:08:1f:da:00:0d:b7: 48:91:64:16:24:1e:53:cc:41:79:71:ba:be:32:11: 91:b9:d9:9f:2a:56:bf:c2:65:5b:b7:85:07:ef:12: 7e:aa:53:06:3f:83:e9:a8:5e:ad:db:fa:80:bb:1b: 62:9d:8c:19:56:1e:2d:87:51:ea:e2:33:89:d7:b5: 36:12:f8:c7:eb:57:96:b2:a0:b6:79:09:62:02:79: 82:40:23:7f:5f:e9:b3:c3:d2:64:72:2f:95:77:2b: f3:30:d1:03:ea:eb:2b:ad:82:a9:1c:62:3b:b1:70: e5:f9:78:55:c8:80:2c:28:ce:96:91:1e:0a:77:c4: a4:e2:62:14:42:f5:a3:44:24:55:f5:c4:ea:ec:dd: 0d:e4:f8:e4:c2:12:76:3a:1b:6b:dc:db:21:fd:f5: fd:4e:03:eb:93:07:62:d5:5e:18:db:27:06:f2:2e: 03:bd:83:09:b2:61:05:ab:39:05:ec:a2:17:e1:ef: 89:ed:cc:9e:44:ac:ca:89:12:a7:3b:62:97:2b:0f: d6:ed:ba:5a:fd:a6:82:5d:fd:ec:c1:78:97:79:cd: 35:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CA:96:2D:54:2C:25:55:7F:B5:02:1D:6D:34:93:5D:92:FA:C6:63 X509v3 Authority Key Identifier: keyid:7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/4sqWLVQsJVV_tQIdbTSTXZL6xmM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.250.44.0/22 Signature Algorithm: sha256WithRSAEncryption 39:6d:a2:57:ef:95:6a:b4:3d:79:b4:1c:47:36:59:76:48:a3: bb:2f:1d:44:95:4e:00:5a:cb:e1:03:ae:b3:08:1a:56:34:b5: ef:81:05:7f:8a:b9:0d:8d:d4:8a:5c:9c:23:c7:0b:1d:83:78: 42:87:57:be:e7:ee:7b:3b:d4:85:e5:99:77:8b:e0:f9:69:5e: cd:d4:97:96:2f:35:88:0b:9e:9e:9c:56:87:2a:cd:ad:dc:a2: f7:66:42:36:37:84:e6:37:1e:18:61:f1:1e:49:c1:e7:02:73: d9:fb:93:61:9c:b4:99:13:23:61:96:20:e0:65:82:f1:21:08: bd:1c:15:44:c0:ef:6b:0c:8b:b4:1c:d4:db:38:4d:ed:16:7a: 6f:ea:c1:95:42:2f:bb:92:c2:9c:7f:1b:be:99:8c:90:2e:0a: 5b:60:b7:0d:a9:fa:28:71:ab:2d:64:07:f2:8d:96:a3:ac:27: e8:be:4a:8d:20:08:26:b9:f4:0f:be:45:a1:6c:28:fb:f0:ff: b6:38:43:c6:7d:ab:6a:ef:24:56:30:58:f8:2d:4d:de:c3:f9: 38:ae:39:0d:73:ca:14:27:df:c9:6f:38:c5:35:2b:14:4d:14: 3d:60:cd:32:e9:f8:82:07:48:c4:7c:09:0c:b5:9d:43:98:92: f9:28:f4:ce -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0VD N0YxNjc3QkI0OTIzODAyODIxNTNCQjc3RUMyRUJFMzE4NTM3ODAeFw0yNTAyMTAx NDIzMjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUyQ0E5NjJENTQyQzI1 NTU3RkI1MDIxRDZEMzQ5MzVEOTJGQUM2NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5TTQXhT9Cn6bnaKcIANuMH5TGZefpk4r0c4sQcYp22As5EPuB sQgf2gANt0iRZBYkHlPMQXlxur4yEZG52Z8qVr/CZVu3hQfvEn6qUwY/g+moXq3b +oC7G2KdjBlWHi2HUeriM4nXtTYS+MfrV5ayoLZ5CWICeYJAI39f6bPD0mRyL5V3 K/Mw0QPq6yutgqkcYjuxcOX5eFXIgCwozpaRHgp3xKTiYhRC9aNEJFX1xOrs3Q3k +OTCEnY6G2vc2yH99f1OA+uTB2LVXhjbJwbyLgO9gwmyYQWrOQXsohfh74ntzJ5E rMqJEqc7YpcrD9btulr9poJd/ezBeJd5zTX3AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU4sqWLVQsJVV/tQIdbTSTXZL6xmMwHwYDVR0jBBgwFoAUfsfxZ3u0kjgCghU7 t37C6+MYU3gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdUL2Zz ZnhaM3Uwa2pnQ2doVTd0MzdDNi1NWVUzZy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZnNmeFozdTBramdDZ2hVN3QzN0M2LU1ZVTNnLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVFdULzRzcVdMVlFzSlZWX3RRSWRiVFNUWFpM NnhtTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr+iwwDQYJ KoZIhvcNAQELBQADggEBADltolfvlWq0PXm0HEc2WXZIo7svHUSVTgBay+EDrrMI GlY0te+BBX+KuQ2N1IpcnCPHCx2DeEKHV77n7ns71IXlmXeL4PlpXs3Ul5YvNYgL np6cVocqza3covdmQjY3hOY3Hhhh8R5JwecCc9n7k2GctJkTI2GWIOBlgvEhCL0c FUTA72sMi7Qc1Ns4Te0Wem/qwZVCL7uSwpx/G76ZjJAuCltgtw2p+ihxqy1kB/KN lqOsJ+i+So0gCCa59A++RaFsKPvw/7Y4Q8Z9q2rvJFYwWPgtTd7D+TiuOQ1zyhQn 38lvOMU1KxRNFD1gzTLp+IIHSMR8CQy1nUOYkvko9M4= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:53 2025 by rpki-client on console.sobornost.net