$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/26qR8nz6F-SJr8c2riQEAKYe0ns.roa File: 26qR8nz6F-SJr8c2riQEAKYe0ns.roa (raw, json) Hash identifier: fltrw6QeUR5PbKpegem+ownIyDIN0HYBFrqMRTMnbJw= Subject key identifier: DB:AA:91:F2:7C:FA:17:E4:89:AF:C7:36:AE:24:04:00:A6:1E:D2:7B Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 12B2 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/26qR8nz6F-SJr8c2riQEAKYe0ns.roa Signing time: Mon 10 Feb 2025 14:15:08 +0000 ROA not before: Mon 10 Feb 2025 14:15:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 10133 IP address blocks: 2406:d400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4786 (0x12b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:15:08 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DBAA91F27CFA17E489AFC736AE240400A61ED27B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1b:93:12:2b:22:44:6c:8b:52:00:e5:0d:64: 1a:62:ae:12:7f:30:e1:33:e0:21:a2:a9:e3:f1:2f: f7:ef:46:7e:be:ff:b8:89:f6:df:43:66:60:8e:3c: 68:39:78:5e:4a:7f:e4:05:7a:5b:ed:89:44:21:9a: 53:22:c4:a7:79:c5:eb:a8:6a:4c:b5:ca:2b:d4:37: 97:c2:47:0f:29:1e:4c:5d:b6:c7:83:a7:fd:72:48: f3:19:1e:74:f4:62:55:c3:d2:d5:94:66:65:b4:83: 75:c4:7a:00:bb:df:f5:b0:06:b0:5c:30:38:17:68: 52:8e:21:ec:d6:b7:67:33:b4:55:db:21:3f:34:fe: 30:52:6c:13:9e:f3:ac:84:2f:1d:90:d6:c1:74:1f: ca:a8:4e:24:e4:ca:0c:7f:66:f3:44:cf:ab:f6:4b: d8:7c:57:18:0b:69:92:09:34:89:de:13:1a:5b:04: 1c:ce:6b:a5:c3:17:6b:3e:79:2e:25:c5:34:0b:47: 03:6e:b8:95:6b:ad:23:6c:87:18:aa:4a:0c:df:aa: 60:2e:0e:fd:cd:5e:40:3c:2a:a5:eb:a7:62:0f:c2: 09:5e:c5:77:36:7c:c6:2c:39:de:e2:28:34:6d:82: 41:a8:e5:25:13:3e:ce:b6:40:0c:97:13:09:f4:0d: 15:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AA:91:F2:7C:FA:17:E4:89:AF:C7:36:AE:24:04:00:A6:1E:D2:7B X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/26qR8nz6F-SJr8c2riQEAKYe0ns.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:d400::/32 Signature Algorithm: sha256WithRSAEncryption 3c:e8:2e:8f:38:0f:40:c5:38:8d:d2:95:c1:9c:59:1e:5a:e1: c1:ca:8b:8d:88:4a:ab:f4:e1:07:d8:d0:25:0a:0a:30:30:ae: 67:5a:17:8b:d4:2a:c2:a3:3a:dc:95:b6:55:56:ed:9e:c2:76: a4:69:15:e9:3c:79:10:5b:76:5a:e1:04:b7:a4:1c:a0:8e:d6: 75:71:b8:7c:51:19:c6:11:3a:c4:dd:18:51:c8:de:d6:b8:e9: 15:97:f6:22:aa:71:15:58:08:f1:f2:6a:d9:e2:2c:cc:9d:1f: 62:75:97:e0:92:5e:26:48:ad:92:f4:41:10:e1:e9:3b:1b:2b: 3a:9d:14:ad:90:9b:18:d7:5b:87:3b:8d:a1:d1:a2:bd:1d:4a: 88:65:55:b4:2b:59:3a:d3:a6:e5:e0:20:28:e4:06:3b:2f:54: 24:17:b7:c3:b1:ad:3a:a3:2e:57:60:92:50:bd:72:57:96:22: de:4b:44:df:02:53:d8:50:ab:a1:b5:07:b9:6f:9d:fa:9d:05: ac:56:43:c3:0b:09:27:1d:b6:42:5e:bb:ad:e8:15:b2:52:4d: 07:a9:2a:7f:c6:3e:fe:8b:ef:30:f3:55:d9:87:54:bc:db:4f: e2:78:73:ab:88:a2:63:55:3d:43:13:3b:de:1c:19:33:94:1d: aa:44:d7:ea -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICErIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE1MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERCQUE5MUYyN0NGQTE3 RTQ4OUFGQzczNkFFMjQwNDAwQTYxRUQyN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtG5MSKyJEbItSAOUNZBpirhJ/MOEz4CGiqePxL/fvRn6+/7iJ 9t9DZmCOPGg5eF5Kf+QFelvtiUQhmlMixKd5xeuoaky1yivUN5fCRw8pHkxdtseD p/1ySPMZHnT0YlXD0tWUZmW0g3XEegC73/WwBrBcMDgXaFKOIezWt2cztFXbIT80 /jBSbBOe86yELx2Q1sF0H8qoTiTkygx/ZvNEz6v2S9h8VxgLaZIJNIneExpbBBzO a6XDF2s+eS4lxTQLRwNuuJVrrSNshxiqSgzfqmAuDv3NXkA8KqXrp2IPwglexXc2 fMYsOd7iKDRtgkGo5SUTPs62QAyXEwn0DRWBAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU26qR8nz6F+SJr8c2riQEAKYe0nswHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy8yNnFSOG56NkYtU0py OGMycmlRRUFLWWUwbnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAbUADANBgkqhkiG9w0BAQsFAAOCAQEAPOgujzgPQMU4jdKVwZxZHlrhwcqL jYhKq/ThB9jQJQoKMDCuZ1oXi9QqwqM63JW2VVbtnsJ2pGkV6Tx5EFt2WuEEt6Qc oI7WdXG4fFEZxhE6xN0YUcje1rjpFZf2IqpxFVgI8fJq2eIszJ0fYnWX4JJeJkit kvRBEOHpOxsrOp0UrZCbGNdbhzuNodGivR1KiGVVtCtZOtOm5eAgKOQGOy9UJBe3 w7GtOqMuV2CSUL1yV5Yi3ktE3wJT2FCrobUHuW+d+p0FrFZDwwsJJx22Ql67regV slJNB6kqf8Y+/ovvMPNV2YdUvNtP4nhzq4iiY1U9QxM73hwZM5QdqkTX6g== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:34 2025 by rpki-client on console.sobornost.net