$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/MY6rHjjnNbodAPk2IV2OQNxxd1I.roa File: MY6rHjjnNbodAPk2IV2OQNxxd1I.roa (raw, json) Hash identifier: 8odsaJMxsNHJdNikkg7MQe+JF6kxpg8uFIqw6Q8Q3+Q= Subject key identifier: 31:8E:AB:1E:38:E7:35:BA:1D:00:F9:36:21:5D:8E:40:DC:71:77:52 Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 01CC Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/MY6rHjjnNbodAPk2IV2OQNxxd1I.roa Signing time: Tue 13 May 2025 04:14:46 +0000 ROA not before: Tue 13 May 2025 04:14:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 152609 IP address blocks: 157.20.248.34/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 08:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: May 13 04:14:46 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=318EAB1E38E735BA1D00F936215D8E40DC717752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:23:4f:50:eb:9b:03:4a:02:b1:9d:51:49:a5: b3:e2:c4:ff:09:df:51:36:5e:09:2e:b5:67:dd:73: d9:95:be:1a:97:58:c0:bd:28:4e:f1:7a:6c:18:28: 72:9f:18:47:6b:30:7e:9b:ba:c7:cd:67:db:7e:a3: 91:39:df:0e:8b:ba:cb:4f:47:e0:12:ce:01:12:5f: 2c:24:29:2a:56:b6:b3:af:97:7a:53:9c:c5:56:c7: 97:5a:ba:24:4a:f2:53:50:df:b3:3a:b2:52:90:a0: 2f:dd:e6:23:67:97:5f:1b:91:57:84:7e:3c:7c:3f: 02:74:50:b4:df:94:2f:36:c4:c2:db:c4:9b:8c:14: b2:6a:56:7b:58:21:ca:1d:0e:34:f2:b6:e4:d9:cd: 46:a5:b8:ea:38:2b:d9:de:aa:26:cc:ba:ed:1c:7a: d1:ec:03:87:31:e7:ba:de:6f:ed:8f:f9:c4:f7:72: f8:81:d0:39:af:74:5a:93:e2:98:7f:2a:02:41:96: 8f:22:fb:be:e1:ae:86:b1:db:05:90:ea:96:b1:f6: 09:6f:2f:08:4a:ec:66:bd:4e:bf:94:33:20:8f:43: 7e:65:54:c3:24:16:88:78:b3:9d:cc:b9:b5:72:4b: 24:04:01:12:af:73:01:db:13:28:e2:8a:0a:d3:8e: 0e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8E:AB:1E:38:E7:35:BA:1D:00:F9:36:21:5D:8E:40:DC:71:77:52 X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/MY6rHjjnNbodAPk2IV2OQNxxd1I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.248.34/32 Signature Algorithm: sha256WithRSAEncryption 7c:82:12:23:ba:a6:b4:37:35:b4:d8:7d:67:db:04:a1:6d:e4: fd:11:bb:65:fb:66:8a:b6:26:3b:ac:b5:bc:0b:fe:ea:cf:70: 0c:d1:2d:f1:bb:f3:3c:d3:41:7f:36:f2:1f:21:84:67:bb:70: 76:5f:e6:32:10:44:33:59:a8:f1:86:6e:8b:ac:7c:b1:6e:a8: f5:51:99:24:68:f1:33:9a:2f:01:df:7b:04:0a:b6:44:01:a8: a8:2f:dd:c8:26:6a:fd:b2:26:6a:63:99:45:cc:90:25:65:b4: 9e:fd:5c:cc:76:2f:c4:25:c0:2a:15:79:28:ff:c2:17:a5:89: 81:46:f8:21:8a:35:8e:d8:8e:ad:65:18:1c:93:c6:f4:a2:d2: b5:0e:50:c9:1f:b3:b8:41:51:1f:3f:de:46:02:aa:49:d2:ad: 47:53:cd:38:b4:88:9d:c1:e0:fd:cd:86:9a:38:71:94:1d:b6: 31:4b:f7:36:54:fa:58:99:24:0e:b8:be:70:77:c5:62:86:e3: 0e:48:69:58:be:eb:a4:14:10:cf:d4:f0:ea:8d:76:7e:ed:93: c9:eb:f8:a3:71:b5:e1:0c:f8:bc:f4:4a:45:fd:5f:80:2b:28: 4f:1f:1f:d7:5e:11:95:13:10:6f:ad:e9:40:4b:e1:2b:87:13: 4e:4b:73:88 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTA1MTMw NDE0NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMxOEVBQjFFMzhFNzM1 QkExRDAwRjkzNjIxNUQ4RTQwREM3MTc3NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRI09Q65sDSgKxnVFJpbPixP8J31E2XgkutWfdc9mVvhqXWMC9 KE7xemwYKHKfGEdrMH6busfNZ9t+o5E53w6LustPR+ASzgESXywkKSpWtrOvl3pT nMVWx5dauiRK8lNQ37M6slKQoC/d5iNnl18bkVeEfjx8PwJ0ULTflC82xMLbxJuM FLJqVntYIcodDjTytuTZzUaluOo4K9neqibMuu0cetHsA4cx57reb+2P+cT3cviB 0DmvdFqT4ph/KgJBlo8i+77hroax2wWQ6pax9glvLwhK7Ga9Tr+UMyCPQ35lVMMk Foh4s53MubVySyQEARKvcwHbEyjiigrTjg7nAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUMY6rHjjnNbodAPk2IV2OQNxxd1IwHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvTVk2ckhqam5OYm9kQVBrMklWMk9R Tnh4ZDFJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFAJ0U+CIw DQYJKoZIhvcNAQELBQADggEBAHyCEiO6prQ3NbTYfWfbBKFt5P0Ru2X7Zoq2Jjus tbwL/urPcAzRLfG78zzTQX828h8hhGe7cHZf5jIQRDNZqPGGbousfLFuqPVRmSRo 8TOaLwHfewQKtkQBqKgv3cgmav2yJmpjmUXMkCVltJ79XMx2L8QlwCoVeSj/whel iYFG+CGKNY7Yjq1lGByTxvSi0rUOUMkfs7hBUR8/3kYCqknSrUdTzTi0iJ3B4P3N hpo4cZQdtjFL9zZU+liZJA64vnB3xWKG4w5IaVi+66QUEM/U8OqNdn7tk8nr+KNx teEM+Lz0SkX9X4ArKE8fH9deEZUTEG+t6UBL4SuHE05Lc4g= -----END CERTIFICATE-----Generated at Mon May 19 07:21:02 2025 by rpki-client