$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/clQZx6MxMQ97irQH7u9uXJtZigE.roa File: clQZx6MxMQ97irQH7u9uXJtZigE.roa (raw, json) Hash identifier: MF1EjFBkg0/2EeBe3V+dkeJimOFSfyJXReoydd+poEA= Subject key identifier: 72:54:19:C7:A3:31:31:0F:7B:8A:B4:07:EE:EF:6E:5C:9B:59:8A:01 Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA Certificate serial: 06A9 Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/clQZx6MxMQ97irQH7u9uXJtZigE.roa Signing time: Thu 03 Jul 2025 17:35:14 +0000 ROA not before: Thu 03 Jul 2025 17:35:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 197537 IP address blocks: 103.156.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 00:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1705 (0x6a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA Validity Not Before: Jul 3 17:35:14 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=725419C7A331310F7B8AB407EEEF6E5C9B598A01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:78:14:c6:b5:02:e0:89:53:9b:34:4f:a4:de: 66:26:b3:a3:3f:76:b9:e5:c4:87:d4:4d:57:91:7b: c1:4d:79:69:6d:e1:23:dc:9d:18:d1:cd:8e:30:b5: 27:ad:fa:9c:7c:aa:94:f1:97:9c:b6:a9:d6:47:9d: 0b:dc:75:18:dc:a8:fd:e8:03:d5:e1:d1:70:e5:b0: db:40:5d:d5:98:b3:03:9c:72:2a:29:f6:e9:c8:02: 86:f0:b4:4e:42:9c:cd:cf:08:2b:77:c3:58:46:d5: 56:b4:27:3c:68:7f:32:ed:d6:6e:3a:99:89:8c:6b: 7d:21:d4:f3:58:d6:02:3f:08:41:58:df:02:f2:cd: 37:0b:a5:62:9f:21:ca:98:75:b7:e1:5c:39:6a:65: 55:c9:9a:bf:d8:9d:c5:1b:9f:94:59:3a:2f:c6:95: 84:82:26:b9:bf:8a:91:d5:21:fe:33:9d:44:79:46: 89:4a:a2:6a:9b:bc:37:b4:52:df:52:9f:94:93:84: 08:2a:34:d3:04:e2:da:54:c3:cf:7c:6e:90:b3:da: bf:bb:e2:8d:58:3e:54:6b:37:b9:b8:10:f7:6e:27: 68:c1:d8:af:89:d8:40:c7:d6:ef:52:c0:c6:2a:11: 85:20:a8:c4:25:9d:ea:82:86:e4:78:d5:64:63:69: a7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:54:19:C7:A3:31:31:0F:7B:8A:B4:07:EE:EF:6E:5C:9B:59:8A:01 X509v3 Authority Key Identifier: keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/clQZx6MxMQ97irQH7u9uXJtZigE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.156.185.0/24 Signature Algorithm: sha256WithRSAEncryption 49:72:2a:11:1b:d1:a3:ed:10:5f:44:10:32:93:c1:25:dc:36: 07:ab:d6:c1:90:a5:4e:4a:e4:e1:ab:bf:cf:ba:3e:3d:2b:e7: 37:b2:b2:11:09:c7:56:c4:9d:c3:5b:3e:90:ae:c2:03:03:c2: 2c:e8:62:42:3f:60:a4:7d:8a:f6:10:3c:30:bd:6e:bf:12:c4: 15:f1:6e:cd:11:09:fa:65:ab:6a:ee:c1:24:f2:b9:c5:81:c9: 45:37:87:b4:6d:a6:12:a8:54:cc:d6:55:58:48:c0:97:37:f6: d0:e5:bc:58:20:97:1f:30:3e:28:99:d5:0f:6d:19:b9:43:51: e2:65:ab:95:f5:6c:31:c8:65:23:10:06:24:ef:8d:bf:6d:56: 70:ad:96:aa:76:63:59:43:04:c8:71:c9:ce:a1:d7:11:4b:1f: 01:ed:c8:41:d9:c6:1e:a3:f2:e0:d6:0a:26:65:98:7d:e2:a5: 46:9e:4c:9d:43:39:7f:dd:5b:ec:e3:63:af:48:88:f6:8f:68: 21:a2:49:35:f8:07:64:ec:94:5f:11:37:99:c0:48:d4:6e:76: b9:80:13:14:93:2f:70:11:00:2b:1f:e9:65:2a:33:f3:40:a9: 80:cf:69:d2:84:40:3a:04:ff:a4:ed:29:17:8f:80:62:90:d1: 76:60:c5:28 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBqkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yNTA3MDMx NzM1MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcyNTQxOUM3QTMzMTMx MEY3QjhBQjQwN0VFRUY2RTVDOUI1OThBMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVeBTGtQLgiVObNE+k3mYms6M/drnlxIfUTVeRe8FNeWlt4SPc nRjRzY4wtSet+px8qpTxl5y2qdZHnQvcdRjcqP3oA9Xh0XDlsNtAXdWYswOcciop 9unIAobwtE5CnM3PCCt3w1hG1Va0JzxofzLt1m46mYmMa30h1PNY1gI/CEFY3wLy zTcLpWKfIcqYdbfhXDlqZVXJmr/YncUbn5RZOi/GlYSCJrm/ipHVIf4znUR5RolK omqbvDe0Ut9Sn5SThAgqNNME4tpUw898bpCz2r+74o1YPlRrN7m4EPduJ2jB2K+J 2EDH1u9SwMYqEYUgqMQlneqChuR41WRjaadxAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUclQZx6MxMQ97irQH7u9uXJtZigEwHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvY2xRWng2TXhNUTk3aXJR SDd1OXVYSnRaaWdFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGecuTANBgkqhkiG9w0BAQsFAAOCAQEASXIqERvRo+0QX0QQMpPBJdw2B6vWwZCl Tkrk4au/z7o+PSvnN7KyEQnHVsSdw1s+kK7CAwPCLOhiQj9gpH2K9hA8ML1uvxLE FfFuzREJ+mWrau7BJPK5xYHJRTeHtG2mEqhUzNZVWEjAlzf20OW8WCCXHzA+KJnV D20ZuUNR4mWrlfVsMchlIxAGJO+Nv21WcK2WqnZjWUMEyHHJzqHXEUsfAe3IQdnG HqPy4NYKJmWYfeKlRp5MnUM5f91b7ONjr0iI9o9oIaJJNfgHZOyUXxE3mcBI1G52 uYATFJMvcBEAKx/pZSoz80CpgM9p0oRAOgT/pO0pF4+AYpDRdmDFKA== -----END CERTIFICATE-----Generated at Fri Jul 4 20:51:15 2025 by rpki-client