$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWT/kY7w4ePE63TKmfr6gJqVnI--Ofc.roa File: kY7w4ePE63TKmfr6gJqVnI--Ofc.roa (raw, json) Hash identifier: hynhkqMc44PnwwyFMmaSvi/X8AZnFON/Lr1tNJRVc1w= Subject key identifier: 91:8E:F0:E1:E3:C4:EB:74:CA:99:FA:FA:80:9A:95:9C:8F:BE:39:F7 Certificate issuer: /CN=7EC7F1677BB492380282153BB77EC2EBE3185378 Certificate serial: 0CC6 Authority key identifier: 7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/kY7w4ePE63TKmfr6gJqVnI--Ofc.roa Signing time: Mon 10 Feb 2025 14:23:22 +0000 ROA not before: Mon 10 Feb 2025 14:23:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38851 IP address blocks: 103.229.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3270 (0xcc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EC7F1677BB492380282153BB77EC2EBE3185378 Validity Not Before: Feb 10 14:23:22 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=918EF0E1E3C4EB74CA99FAFA809A959C8FBE39F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dd:11:ec:ef:28:f5:1c:55:0b:23:57:8e:61: 13:f0:03:39:99:72:7f:97:83:a5:95:26:ec:74:5b: 7b:60:31:e6:c5:be:fc:82:97:d6:e1:8e:03:1a:6b: cb:0b:63:2e:c5:22:bf:89:63:d3:e3:13:74:35:08: 24:b0:c9:16:43:27:d5:78:9a:60:ba:0b:aa:82:3a: a6:b3:21:ae:f4:f8:f0:27:bd:31:83:41:de:c2:55: 61:48:25:86:5f:fe:fa:59:4a:25:49:83:21:13:51: de:2b:d8:48:db:d9:b4:39:32:ae:85:33:2b:a6:0e: 56:76:76:6f:ed:24:a0:27:61:e7:77:a0:46:04:a8: 7c:2a:47:14:a6:80:fc:35:1e:ce:f9:0f:4f:e3:30: b9:8c:3a:6b:ee:ac:54:16:a7:e3:54:f2:0b:82:29: f2:2b:28:41:99:bb:98:f1:62:43:a3:69:59:67:26: 1d:02:3b:52:57:ea:07:d8:d7:37:16:74:a3:52:79: 61:66:62:4d:36:f7:f9:96:dc:31:75:e4:6f:9f:0a: 09:8b:7b:bd:ab:07:43:9e:63:36:93:56:ce:6b:9c: e1:eb:59:a0:d9:22:ea:dd:45:b1:01:5e:9a:d7:91: 05:2e:62:a5:af:0c:74:86:ae:05:66:a7:1f:b5:02: e0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8E:F0:E1:E3:C4:EB:74:CA:99:FA:FA:80:9A:95:9C:8F:BE:39:F7 X509v3 Authority Key Identifier: keyid:7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/kY7w4ePE63TKmfr6gJqVnI--Ofc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.229.100.0/23 Signature Algorithm: sha256WithRSAEncryption 70:15:20:13:55:81:be:c4:45:20:41:5d:b4:82:84:2b:d6:db: 87:07:5e:1f:e7:f1:df:3b:47:41:0a:74:de:00:6f:ea:a5:e1: cc:25:70:22:72:7b:d7:d9:f1:26:90:81:86:be:67:ef:8c:db: 23:95:20:48:2e:28:f8:0f:8a:41:d4:98:d9:41:38:55:c5:2f: f4:8c:56:5c:1d:75:a1:d4:b9:9c:64:1d:d4:aa:3b:1f:e2:45: ef:b4:6c:fe:a8:72:4a:01:10:2d:5a:e4:30:ed:7b:34:0b:d3: 55:2a:4d:e0:d0:de:0d:3c:2d:c6:f4:6a:08:fa:b6:85:13:d3: f3:e1:a9:a5:12:48:3a:96:67:04:bb:93:84:d5:b9:3c:0a:99: 60:cf:b5:c7:25:bc:30:d1:01:e0:e2:8a:87:39:75:c5:a4:30: e8:16:1b:aa:86:88:7d:12:f7:4b:d5:71:f5:74:7b:c5:0d:04: 36:f1:f2:b8:8d:cf:66:be:ae:e1:1d:75:c6:93:52:11:59:fd: 51:55:f0:93:4d:f2:57:33:34:c9:31:89:96:46:ba:7f:16:40: ba:af:b3:b2:53:8e:40:e5:1a:0c:fc:ae:31:b8:81:f7:3a:2c: a8:89:ad:db:e8:80:26:5e:78:86:f8:67:61:38:dd:d1:53:bb: b6:db:b6:05 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDMYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0VD N0YxNjc3QkI0OTIzODAyODIxNTNCQjc3RUMyRUJFMzE4NTM3ODAeFw0yNTAyMTAx NDIzMjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkxOEVGMEUxRTNDNEVC NzRDQTk5RkFGQTgwOUE5NTlDOEZCRTM5RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDX3RHs7yj1HFULI1eOYRPwAzmZcn+Xg6WVJux0W3tgMebFvvyC l9bhjgMaa8sLYy7FIr+JY9PjE3Q1CCSwyRZDJ9V4mmC6C6qCOqazIa70+PAnvTGD Qd7CVWFIJYZf/vpZSiVJgyETUd4r2Ejb2bQ5Mq6FMyumDlZ2dm/tJKAnYed3oEYE qHwqRxSmgPw1Hs75D0/jMLmMOmvurFQWp+NU8guCKfIrKEGZu5jxYkOjaVlnJh0C O1JX6gfY1zcWdKNSeWFmYk029/mW3DF15G+fCgmLe72rB0OeYzaTVs5rnOHrWaDZ IurdRbEBXprXkQUuYqWvDHSGrgVmpx+1AuBZAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUkY7w4ePE63TKmfr6gJqVnI++OfcwHwYDVR0jBBgwFoAUfsfxZ3u0kjgCghU7 t37C6+MYU3gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdUL2Zz ZnhaM3Uwa2pnQ2doVTd0MzdDNi1NWVUzZy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZnNmeFozdTBramdDZ2hVN3QzN0M2LU1ZVTNnLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVFdUL2tZN3c0ZVBFNjNUS21mcjZnSnFWbkkt LU9mYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn5WQwDQYJ KoZIhvcNAQELBQADggEBAHAVIBNVgb7ERSBBXbSChCvW24cHXh/n8d87R0EKdN4A b+ql4cwlcCJye9fZ8SaQgYa+Z++M2yOVIEguKPgPikHUmNlBOFXFL/SMVlwddaHU uZxkHdSqOx/iRe+0bP6ockoBEC1a5DDtezQL01UqTeDQ3g08Lcb0agj6toUT0/Ph qaUSSDqWZwS7k4TVuTwKmWDPtcclvDDRAeDiioc5dcWkMOgWG6qGiH0S90vVcfV0 e8UNBDbx8riNz2a+ruEddcaTUhFZ/VFV8JNN8lczNMkxiZZGun8WQLqvs7JTjkDl Ggz8rjG4gfc6LKiJrdvogCZeeIb4Z2E43dFTu7bbtgU= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:53 2025 by rpki-client on console.sobornost.net