$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/AIMxA13HCjWBeMsxkalVywGvKc4.roa File: AIMxA13HCjWBeMsxkalVywGvKc4.roa (raw, json) Hash identifier: H/+NoE53vOtYgy5Mx5CieOE/AUZBSgePh+5qjENkK6A= Subject key identifier: 00:83:31:03:5D:C7:0A:35:81:78:CB:31:91:A9:55:CB:01:AF:29:CE Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 01BC Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/AIMxA13HCjWBeMsxkalVywGvKc4.roa Signing time: Mon 12 May 2025 09:45:11 +0000 ROA not before: Mon 12 May 2025 09:45:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 152609 IP address blocks: 157.20.248.250/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 08:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: May 12 09:45:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=008331035DC70A358178CB3191A955CB01AF29CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:77:88:c7:31:7e:b9:db:a0:58:3e:e5:93:cd: 78:cf:68:7e:79:6a:89:9d:14:75:10:28:c4:b6:18: a3:97:a6:51:67:b2:fb:06:ea:ff:9d:83:58:83:fc: f5:21:1d:23:67:73:10:26:57:c5:99:91:5d:ea:7a: ec:6c:b2:5e:48:53:db:02:0e:ea:1f:8a:14:34:b6: b1:89:f4:36:cc:79:27:41:5e:22:4e:be:37:cd:16: b1:b7:00:6e:d1:58:59:e5:5d:50:e0:d2:28:bd:24: 68:fd:65:1a:79:5a:17:8e:5a:07:94:99:70:60:ba: e9:d8:42:2e:3d:b0:09:f2:d6:2a:05:5f:4d:ac:da: 29:8b:2d:53:ff:b1:8e:1a:8e:95:93:dd:6d:a0:85: 9c:e0:4c:cd:7f:d0:87:17:cf:9e:3e:59:80:8b:f0: 46:68:c3:78:32:39:2b:78:e0:73:3e:d0:99:ce:75: 80:84:65:89:e9:e0:24:73:31:1c:f9:03:8e:6b:e1: e2:5a:ac:3e:6a:20:5d:9f:51:2a:eb:3d:dd:eb:2f: 4c:29:69:32:84:0e:f1:8e:59:5d:10:a3:8d:cc:68: 16:72:06:70:53:c3:53:76:b4:9e:1f:db:c6:c2:29: cb:6f:22:c7:b9:d7:5e:56:45:94:80:75:0d:9e:12: a2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:83:31:03:5D:C7:0A:35:81:78:CB:31:91:A9:55:CB:01:AF:29:CE X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/AIMxA13HCjWBeMsxkalVywGvKc4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.248.250/32 Signature Algorithm: sha256WithRSAEncryption 45:ed:43:7a:37:29:9b:ad:e7:4f:e4:b1:19:8a:31:87:0f:a9: 6c:77:29:33:41:ad:8b:ac:48:0f:0a:ed:5d:f8:1f:d0:50:0e: 74:dd:10:a9:90:c3:9b:98:5b:c9:02:f0:5f:99:2c:65:e1:7a: 6a:6b:51:af:ec:d5:10:7a:42:db:86:a4:c2:4f:a3:75:91:85: 0e:8e:8b:b0:0d:f3:a5:91:ad:37:b8:09:36:68:a2:23:d4:f3: f5:f8:10:15:c3:bb:e1:9b:0c:fa:c8:7a:0b:94:bf:6b:ab:af: 50:bc:d8:d2:19:9a:1f:9a:90:bd:18:3e:5c:73:3d:88:05:9e: 2b:2d:88:9a:5c:24:12:04:5b:8d:88:77:75:53:16:fa:3a:87: 49:6b:ff:b5:3f:1d:70:9a:b6:0e:db:e3:5f:bf:03:65:7e:e5: 49:87:e4:00:c0:62:80:eb:cb:02:c0:f8:29:e1:f1:3c:1b:49: 2c:a9:e8:69:94:2f:5a:7c:c1:5a:43:b4:58:0f:8e:4d:13:c3: 9a:52:80:fe:8e:e5:6d:2b:ae:2c:fb:e1:f6:f9:db:c1:d3:44: 5f:85:ca:cd:7c:3a:b2:d5:4c:d3:b9:a4:d0:1e:28:2e:4f:72: 50:29:cc:8e:1f:b5:54:66:da:8a:bd:13:d0:19:1e:56:d4:cd: 79:2f:2e:25 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTA1MTIw OTQ1MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAwODMzMTAzNURDNzBB MzU4MTc4Q0IzMTkxQTk1NUNCMDFBRjI5Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9d4jHMX6526BYPuWTzXjPaH55aomdFHUQKMS2GKOXplFnsvsG 6v+dg1iD/PUhHSNncxAmV8WZkV3qeuxssl5IU9sCDuofihQ0trGJ9DbMeSdBXiJO vjfNFrG3AG7RWFnlXVDg0ii9JGj9ZRp5WheOWgeUmXBguunYQi49sAny1ioFX02s 2imLLVP/sY4ajpWT3W2ghZzgTM1/0IcXz54+WYCL8EZow3gyOSt44HM+0JnOdYCE ZYnp4CRzMRz5A45r4eJarD5qIF2fUSrrPd3rL0wpaTKEDvGOWV0Qo43MaBZyBnBT w1N2tJ4f28bCKctvIse5115WRZSAdQ2eEqJtAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUAIMxA13HCjWBeMsxkalVywGvKc4wHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvQUlNeEExM0hDaldCZU1zeGthbFZ5 d0d2S2M0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFAJ0U+Pow DQYJKoZIhvcNAQELBQADggEBAEXtQ3o3KZut50/ksRmKMYcPqWx3KTNBrYusSA8K 7V34H9BQDnTdEKmQw5uYW8kC8F+ZLGXhemprUa/s1RB6QtuGpMJPo3WRhQ6Oi7AN 86WRrTe4CTZooiPU8/X4EBXDu+GbDPrIeguUv2urr1C82NIZmh+akL0YPlxzPYgF nistiJpcJBIEW42Id3VTFvo6h0lr/7U/HXCatg7b41+/A2V+5UmH5ADAYoDrywLA +Cnh8TwbSSyp6GmUL1p8wVpDtFgPjk0Tw5pSgP6O5W0rriz74fb528HTRF+Fys18 OrLVTNO5pNAeKC5PclApzI4ftVRm2oq9E9AZHlbUzXkvLiU= -----END CERTIFICATE-----Generated at Mon May 19 07:02:41 2025 by rpki-client