$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/SkTUAyHkyz3_mPdstZhHDicPHFo.roa File: SkTUAyHkyz3_mPdstZhHDicPHFo.roa (raw, json) Hash identifier: H5C9BdpnpgbpIv7UAQ+Y06kjWn/6CR8qDm2cXvUwjJs= Subject key identifier: 4A:44:D4:03:21:E4:CB:3D:FF:98:F7:6C:B5:98:47:0E:27:0F:1C:5A Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 01EE Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/SkTUAyHkyz3_mPdstZhHDicPHFo.roa Signing time: Wed 14 May 2025 01:51:20 +0000 ROA not before: Wed 14 May 2025 01:51:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 152609 IP address blocks: 157.20.248.66/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 08:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: May 14 01:51:20 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4A44D40321E4CB3DFF98F76CB598470E270F1C5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a0:8c:a4:3a:d6:6a:aa:ba:fa:4c:7d:80:55: 52:5c:69:f9:79:9b:de:42:3e:b9:eb:8d:8c:23:61: d7:0a:99:5f:56:6c:13:47:1c:21:3f:e4:00:d4:2e: cb:b6:ce:32:89:f9:2c:fa:aa:d6:d9:d3:9b:4c:23: de:de:a5:ff:24:b6:14:a0:54:d6:07:9e:2f:aa:3b: 54:df:b8:a1:4f:cf:f2:ce:ac:cd:04:74:55:bf:d5: 68:87:55:fe:29:1b:cd:98:b3:e6:b1:c1:4b:cb:44: e1:95:22:2e:7e:9e:03:ad:f3:9a:3a:f7:d3:19:0f: b0:f0:03:b9:66:97:2e:dd:01:e4:cf:98:ba:5a:43: 3c:2b:b6:70:26:bc:25:fd:d6:fa:88:aa:77:2c:f6: 55:2b:12:5d:72:07:da:95:76:8e:70:80:5f:fd:d4: ee:48:3b:67:22:bd:a2:45:c7:86:be:c4:63:b1:b6: 0f:d0:ba:33:ea:be:19:b8:35:2b:65:02:c1:60:60: 89:d9:50:87:94:ed:c5:5d:73:8a:19:1f:74:73:1c: 21:8d:93:25:67:0f:52:7f:33:69:0c:42:5d:2f:4e: 97:af:98:a9:44:fc:d4:ed:1f:df:ef:25:fa:74:ee: a2:ec:81:6f:69:eb:d1:43:17:36:76:39:f6:39:de: 37:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:44:D4:03:21:E4:CB:3D:FF:98:F7:6C:B5:98:47:0E:27:0F:1C:5A X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/SkTUAyHkyz3_mPdstZhHDicPHFo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.248.66/32 Signature Algorithm: sha256WithRSAEncryption 44:90:7b:da:4a:96:9c:cd:47:38:db:ff:6e:a2:ed:5c:49:c4: a1:fc:f0:fb:66:43:32:5a:d6:ab:d9:8f:43:3f:cf:a8:f2:63: e0:a9:20:36:48:5b:65:71:d0:b3:d3:b1:aa:43:89:32:11:24: b8:cd:72:1d:16:0a:89:7f:df:65:e0:79:f1:73:83:42:16:41: 09:7d:0e:2c:ef:77:be:84:a2:04:b5:73:63:e6:f6:c7:a5:9b: 72:ae:83:4a:86:35:96:9f:d4:0f:0d:04:1d:1a:6b:11:36:5c: 89:c6:a2:60:76:f8:b1:31:cf:e7:91:ad:18:dd:b4:2d:ae:13: 3f:5d:dd:ea:ef:79:06:4c:ad:c7:cc:24:68:1a:56:51:60:62: 45:51:3b:ed:c9:6e:90:6d:81:2c:67:dc:0e:83:38:2f:2d:26: 9b:5d:c8:56:1f:64:d9:18:7c:94:44:cb:18:f7:82:a6:62:c0: 3f:ba:fd:8e:77:f0:56:be:64:c5:ae:3d:b1:4d:39:5f:39:e2: d0:75:8a:db:99:f0:08:e3:99:b2:9d:38:b5:ad:4d:9e:35:cb: 28:6f:fc:cd:a2:e2:88:76:16:9f:fc:15:94:3a:17:4c:df:99: 3b:33:57:08:bd:4d:6e:24:b0:1b:ff:fa:40:d8:00:3c:26:01: 94:ac:9b:dc -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTA1MTQw MTUxMjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRBNDRENDAzMjFFNENC M0RGRjk4Rjc2Q0I1OTg0NzBFMjcwRjFDNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChoIykOtZqqrr6TH2AVVJcafl5m95CPrnrjYwjYdcKmV9WbBNH HCE/5ADULsu2zjKJ+Sz6qtbZ05tMI97epf8kthSgVNYHni+qO1TfuKFPz/LOrM0E dFW/1WiHVf4pG82Ys+axwUvLROGVIi5+ngOt85o699MZD7DwA7lmly7dAeTPmLpa QzwrtnAmvCX91vqIqncs9lUrEl1yB9qVdo5wgF/91O5IO2civaJFx4a+xGOxtg/Q ujPqvhm4NStlAsFgYInZUIeU7cVdc4oZH3RzHCGNkyVnD1J/M2kMQl0vTpevmKlE /NTtH9/vJfp07qLsgW9p69FDFzZ2OfY53jdHAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUSkTUAyHkyz3/mPdstZhHDicPHFowHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvU2tUVUF5SGt5ejNfbVBkc3RaaEhE aWNQSEZvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFAJ0U+EIw DQYJKoZIhvcNAQELBQADggEBAESQe9pKlpzNRzjb/26i7VxJxKH88PtmQzJa1qvZ j0M/z6jyY+CpIDZIW2Vx0LPTsapDiTIRJLjNch0WCol/32XgefFzg0IWQQl9Dizv d76EogS1c2Pm9selm3Kug0qGNZaf1A8NBB0aaxE2XInGomB2+LExz+eRrRjdtC2u Ez9d3erveQZMrcfMJGgaVlFgYkVRO+3JbpBtgSxn3A6DOC8tJptdyFYfZNkYfJRE yxj3gqZiwD+6/Y538Fa+ZMWuPbFNOV854tB1ituZ8AjjmbKdOLWtTZ41yyhv/M2i 4oh2Fp/8FZQ6F0zfmTszVwi9TW4ksBv/+kDYADwmAZSsm9w= -----END CERTIFICATE-----Generated at Mon May 19 07:11:03 2025 by rpki-client