$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/mlxXFALrzalp53y_A6e7N1cQVtg.roa File: mlxXFALrzalp53y_A6e7N1cQVtg.roa (raw, json) Hash identifier: ex1rrrBHJ3k96+H3kRi8uCNJvdFp5GnJFsIgr93z2RM= Subject key identifier: 9A:5C:57:14:02:EB:CD:A9:69:E7:7C:BF:03:A7:BB:37:57:10:56:D8 Certificate issuer: /CN=2C20881A0EFD0664A591AF3095D29935EF9BC361 Certificate serial: 036E Authority key identifier: 2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/mlxXFALrzalp53y_A6e7N1cQVtg.roa Signing time: Mon 10 Feb 2025 14:00:26 +0000 ROA not before: Mon 10 Feb 2025 14:00:26 +0000 ROA not after: Thu 28 Aug 2025 15:30:19 +0000 asID: 215262 IP address blocks: 2401:bf60:4ff9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 878 (0x36e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C20881A0EFD0664A591AF3095D29935EF9BC361 Validity Not Before: Feb 10 14:00:26 2025 GMT Not After : Aug 28 15:30:19 2025 GMT Subject: CN=9A5C571402EBCDA969E77CBF03A7BB37571056D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:10:f5:ae:53:c3:f6:7f:1b:e4:f1:2d:06:c8: b2:22:fc:99:ef:9e:a4:1f:23:10:a2:7f:76:21:b1: 35:54:f7:9b:07:ab:05:58:70:a0:b8:10:4e:90:79: ab:3f:60:56:9c:4d:fd:83:86:78:78:55:ab:32:80: f0:af:ca:6b:30:8a:78:2e:45:a9:c7:eb:7c:cd:5f: 6e:48:ce:b7:2d:4e:32:07:d7:41:77:4d:77:89:a8: 5e:8d:e1:21:a8:11:6b:b7:ef:68:13:ea:6c:5e:3f: bb:00:f7:b0:62:1f:3b:46:9d:3c:69:e7:b4:c2:80: 73:ad:7f:aa:7f:02:83:4f:74:63:d6:ad:07:ae:05: 19:f8:0e:4b:b5:ae:71:5e:23:5f:83:8e:c1:4b:70: e8:59:f7:40:57:0f:8f:d5:8f:12:87:3c:08:ad:c1: d4:a2:2b:25:2e:27:77:3e:1a:7b:b9:80:de:d0:d1: 8e:6d:3d:74:cf:3a:3c:6b:39:23:49:fe:26:5a:b0: ea:25:c9:49:d5:06:6a:2c:de:d9:13:17:26:6d:8d: 7f:7d:0b:37:b3:6c:3f:87:a8:e0:25:85:ce:b8:73: ff:5a:23:f6:2a:21:75:21:81:39:f3:7c:99:9e:f7: cd:ad:91:c1:4b:69:c0:73:9e:5a:2c:a2:5f:c1:f8: a8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5C:57:14:02:EB:CD:A9:69:E7:7C:BF:03:A7:BB:37:57:10:56:D8 X509v3 Authority Key Identifier: keyid:2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/mlxXFALrzalp53y_A6e7N1cQVtg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:bf60:4ff9::/48 Signature Algorithm: sha256WithRSAEncryption b6:20:5d:ea:e1:f2:66:c2:0b:76:b5:12:ea:23:f4:86:4b:1b: 5c:66:9c:cd:3e:4f:a4:89:01:8b:16:95:97:ae:4b:d7:30:4c: 68:f4:96:87:5d:c3:81:08:0b:26:49:18:59:3a:de:78:be:a1: a5:33:0f:52:a8:84:35:93:1a:83:fd:5e:06:6d:c0:4e:89:a3: e0:ab:93:56:42:1d:ec:da:b7:9f:68:e4:65:8e:a2:5e:7d:9d: 03:d2:7e:b6:ed:52:c8:ac:05:ec:29:1e:e1:91:31:be:78:13: ab:84:f5:01:47:0a:60:ad:56:51:71:3a:31:52:03:03:42:1d: 90:36:c7:9a:43:3a:c6:09:ee:59:17:21:76:ea:03:84:8d:2b: 98:36:c0:fa:58:60:8b:c7:fe:4e:19:cc:b0:22:96:62:38:a4: b4:7d:06:79:2c:d2:3a:b7:06:94:87:81:3e:6d:a8:80:ac:78: 0e:84:77:62:f6:fc:32:27:5b:ae:7a:10:23:dc:92:d0:2d:90: 4f:a3:4a:91:f5:a8:a0:25:6b:76:e5:38:b9:b3:61:b1:4d:94: b6:a4:90:dc:35:08:db:e4:37:2f:3e:65:73:fe:cc:16:61:30: 13:c5:9e:4b:eb:ca:39:df:b6:95:8e:79:83:ea:2e:fd:69:0f: 75:79:5d:cd -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgICA24wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMy MDg4MUEwRUZEMDY2NEE1OTFBRjMwOTVEMjk5MzVFRjlCQzM2MTAeFw0yNTAyMTAx NDAwMjZaFw0yNTA4MjgxNTMwMTlaMDMxMTAvBgNVBAMTKDlBNUM1NzE0MDJFQkNE QTk2OUU3N0NCRjAzQTdCQjM3NTcxMDU2RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDREPWuU8P2fxvk8S0GyLIi/JnvnqQfIxCif3YhsTVU95sHqwVY cKC4EE6Qeas/YFacTf2Dhnh4VasygPCvymswinguRanH63zNX25IzrctTjIH10F3 TXeJqF6N4SGoEWu372gT6mxeP7sA97BiHztGnTxp57TCgHOtf6p/AoNPdGPWrQeu BRn4Dku1rnFeI1+DjsFLcOhZ90BXD4/VjxKHPAitwdSiKyUuJ3c+Gnu5gN7Q0Y5t PXTPOjxrOSNJ/iZasOolyUnVBmos3tkTFyZtjX99CzezbD+HqOAlhc64c/9aI/Yq IXUhgTnzfJme982tkcFLacBznlosol/B+KiRAgMBAAGjggH5MIIB9TAdBgNVHQ4E FgQUmlxXFALrzalp53y/A6e7N1cQVtgwHwYDVR0jBBgwFoAULCCIGg79BmSlka8w ldKZNe+bw2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09ERVVQ VEVDSC9MQ0NJR2c3OUJtU2xrYTh3bGRLWk5lLWJ3MkUuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0xDQ0lHZzc5Qm1TbGthOHdsZEtaTmUtYncyRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NPREVVUFRFQ0gvbWx4WEZBTHJ6 YWxwNTN5X0E2ZTdOMWNRVnRnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQC AAIwCQMHACQBv2BP+TANBgkqhkiG9w0BAQsFAAOCAQEAtiBd6uHyZsILdrUS6iP0 hksbXGaczT5PpIkBixaVl65L1zBMaPSWh13DgQgLJkkYWTreeL6hpTMPUqiENZMa g/1eBm3ATomj4KuTVkId7Nq3n2jkZY6iXn2dA9J+tu1SyKwF7Cke4ZExvngTq4T1 AUcKYK1WUXE6MVIDA0IdkDbHmkM6xgnuWRchduoDhI0rmDbA+lhgi8f+ThnMsCKW YjiktH0GeSzSOrcGlIeBPm2ogKx4DoR3Yvb8MidbrnoQI9yS0C2QT6NKkfWooCVr duU4ubNhsU2UtqSQ3DUI2+Q3Lz5lc/7MFmEwE8WeS+vKOd+2lY55g+ou/WkPdXld zQ== -----END CERTIFICATE-----Generated at Sun Apr 27 20:36:55 2025 by rpki-client