$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCETECH/dqEvc27_bBvGC_DLFqiTu7nrWI8.roa File: dqEvc27_bBvGC_DLFqiTu7nrWI8.roa (raw, json) Hash identifier: gxOH4BAt3zIg+Cldbx42+J51xa/Hfx3WhRoDsmfBTyo= Subject key identifier: 76:A1:2F:73:6E:FF:6C:1B:C6:0B:F0:CB:16:A8:93:BB:B9:EB:58:8F Certificate issuer: /CN=7E9CEF27C8DED13506B3399D992ECFF626B57951 Certificate serial: 0484 Authority key identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/dqEvc27_bBvGC_DLFqiTu7nrWI8.roa Signing time: Mon 10 Feb 2025 13:57:46 +0000 ROA not before: Mon 10 Feb 2025 13:57:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 208223 IP address blocks: 160.25.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1156 (0x484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E9CEF27C8DED13506B3399D992ECFF626B57951 Validity Not Before: Feb 10 13:57:46 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=76A12F736EFF6C1BC60BF0CB16A893BBB9EB588F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cd:e1:79:9c:b7:87:4f:b9:0d:fb:f2:d7:8f: 30:47:f5:ab:23:e8:94:9d:df:18:7d:33:1b:91:ac: 1a:87:1e:19:e7:86:fe:5c:13:bb:52:c7:a4:19:41: 36:0a:0a:fe:f9:54:93:01:bc:40:a2:c3:b9:43:38: 28:6c:db:62:cf:f4:d3:91:8d:a0:ba:57:1a:f7:a9: 2b:15:dc:72:9c:d0:a9:fc:a8:5a:04:65:16:65:23: fc:d0:88:f6:2d:38:d1:02:27:0f:36:0f:02:2a:fd: f6:0d:bd:40:fa:ed:fc:0a:4e:29:74:16:a0:68:f7: 5b:31:2d:9b:84:28:ba:3e:a0:ae:d7:ae:9d:e0:10: 73:d5:f7:b0:60:04:7f:67:83:42:a9:1b:43:b7:77: d6:8b:fa:1c:68:43:21:f9:ec:0e:02:68:d1:db:bb: 5d:5d:3c:f7:f2:f2:c6:70:3f:68:fe:dd:9f:a5:49: 65:9a:0e:18:9c:b6:f4:2b:ee:4d:fe:64:73:dd:3e: 31:d3:e2:56:f4:79:ac:bc:ad:3e:80:5d:70:1b:3f: 3c:2f:03:ac:22:ac:a3:6a:fc:ae:36:52:29:3e:4b: 6a:1e:02:1f:15:3c:6e:4c:b6:cf:7b:c5:8a:42:64: a2:5b:4b:12:53:0b:06:f1:4e:7b:fe:f3:ca:92:1d: 5a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A1:2F:73:6E:FF:6C:1B:C6:0B:F0:CB:16:A8:93:BB:B9:EB:58:8F X509v3 Authority Key Identifier: keyid:7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/dqEvc27_bBvGC_DLFqiTu7nrWI8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.25.104.0/24 Signature Algorithm: sha256WithRSAEncryption dd:d8:26:5e:95:dc:ae:17:a7:4e:fd:1f:6d:b0:36:9b:e6:35: b2:51:b7:f4:3f:5f:20:ef:c2:3b:c1:0c:96:bd:26:b1:77:c2: 20:28:f8:24:db:4d:d4:e1:ab:a9:b7:64:e5:0c:d6:84:82:03: 00:57:93:d9:d1:a1:76:9d:7f:c2:47:f4:af:ca:57:fd:53:53: f0:e9:a0:e9:6d:5c:fd:c7:b1:42:19:91:6f:3d:1a:80:18:f7: fd:87:a2:67:c7:c6:b7:5d:3c:35:1a:4d:74:de:a0:f4:63:8d: 8a:03:d0:d0:40:0f:36:c4:88:da:4d:2a:a2:3e:72:c3:63:6d: e8:59:8d:e4:30:fa:78:6e:32:66:95:9c:f6:bf:6d:a9:09:aa: e9:18:31:99:a9:4e:5b:fc:49:86:ad:8a:7c:30:fd:81:fa:7e: 2f:0d:17:98:8c:ea:20:4d:b7:2c:4a:51:1a:ec:aa:74:40:5d: 83:e7:f8:e2:ff:76:80:6a:5b:95:82:53:ab:17:58:75:02:6d: 1b:9b:2c:73:e8:3a:2e:27:70:8c:01:4f:f5:be:1e:d1:41:ff: b1:74:01:12:11:34:94:46:4c:9f:ed:c9:d1:dc:d0:bd:dd:4f: 79:d4:c5:77:a1:af:15:f2:ed:54:a3:8a:a4:b9:e1:dc:6a:9d: da:11:f4:44 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0U5 Q0VGMjdDOERFRDEzNTA2QjMzOTlEOTkyRUNGRjYyNkI1Nzk1MTAeFw0yNTAyMTAx MzU3NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc2QTEyRjczNkVGRjZD MUJDNjBCRjBDQjE2QTg5M0JCQjlFQjU4OEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzzeF5nLeHT7kN+/LXjzBH9asj6JSd3xh9MxuRrBqHHhnnhv5c E7tSx6QZQTYKCv75VJMBvECiw7lDOChs22LP9NORjaC6Vxr3qSsV3HKc0Kn8qFoE ZRZlI/zQiPYtONECJw82DwIq/fYNvUD67fwKTil0FqBo91sxLZuEKLo+oK7Xrp3g EHPV97BgBH9ng0KpG0O3d9aL+hxoQyH57A4CaNHbu11dPPfy8sZwP2j+3Z+lSWWa DhictvQr7k3+ZHPdPjHT4lb0eay8rT6AXXAbPzwvA6wirKNq/K42Uik+S2oeAh8V PG5Mts97xYpCZKJbSxJTCwbxTnv+88qSHVolAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUdqEvc27/bBvGC/DLFqiTu7nrWI8wHwYDVR0jBBgwFoAUfpzvJ8je0TUGszmd mS7P9ia1eVEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NFVEVD SC9mcHp2SjhqZTBUVUdzem1kbVM3UDlpYTFlVkUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2ZwenZKOGplMFRVR3N6bWRtUzdQOWlhMWVWRS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDRVRFQ0gvZHFFdmMyN19iQnZHQ19E TEZxaVR1N25yV0k4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AKAZaDANBgkqhkiG9w0BAQsFAAOCAQEA3dgmXpXcrhenTv0fbbA2m+Y1slG39D9f IO/CO8EMlr0msXfCICj4JNtN1OGrqbdk5QzWhIIDAFeT2dGhdp1/wkf0r8pX/VNT 8Omg6W1c/cexQhmRbz0agBj3/YeiZ8fGt108NRpNdN6g9GONigPQ0EAPNsSI2k0q oj5yw2Nt6FmN5DD6eG4yZpWc9r9tqQmq6RgxmalOW/xJhq2KfDD9gfp+Lw0XmIzq IE23LEpRGuyqdEBdg+f44v92gGpblYJTqxdYdQJtG5ssc+g6LidwjAFP9b4e0UH/ sXQBEhE0lEZMn+3J0dzQvd1PedTFd6GvFfLtVKOKpLnh3Gqd2hH0RA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:34 2025 by rpki-client on console.sobornost.net