$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vMBZRLLyaq0pBBu-HJMtabfcaQM.roa File: vMBZRLLyaq0pBBu-HJMtabfcaQM.roa (raw, json) Hash identifier: hHfFYNJCY87+AubT3KB6iT9iIFJ6bRxSP2gl2C47Fd0= Subject key identifier: BC:C0:59:44:B2:F2:6A:AD:29:04:1B:BE:1C:93:2D:69:B7:DC:69:03 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1262 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vMBZRLLyaq0pBBu-HJMtabfcaQM.roa Signing time: Mon 10 Feb 2025 14:14:46 +0000 ROA not before: Mon 10 Feb 2025 14:14:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 10085 IP address blocks: 203.163.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4706 (0x1262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:14:46 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BCC05944B2F26AAD29041BBE1C932D69B7DC6903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:56:6e:78:c1:60:99:84:8d:e0:27:91:c1:35: 03:13:8f:76:a1:ac:4c:63:49:58:8c:8b:b5:7f:93: 98:67:60:e2:13:07:60:27:21:28:b1:43:75:3e:69: 4e:87:ab:87:40:eb:2d:c6:86:ac:74:ba:03:09:f3: c2:9c:13:a4:12:76:c9:6c:d4:ea:ac:51:3e:c4:e3: 55:bf:1c:66:b5:af:39:30:4f:90:c2:a4:4b:ff:26: da:37:30:71:f1:bc:a8:d5:8d:8e:e8:be:12:3e:e7: 0f:02:34:dd:82:fb:55:c1:74:be:5c:68:f9:c0:49: ea:5e:54:c1:99:5a:a9:25:08:55:a0:12:14:da:86: ca:bb:3d:9b:fb:25:e3:06:10:c7:df:16:96:d7:8f: 8a:79:bf:98:08:eb:7d:35:4b:fc:87:5d:f8:74:88: 52:c0:9f:f1:e1:fd:8e:a2:3a:d8:5a:22:8e:78:0c: 46:28:a3:e5:db:56:a0:d9:d1:5e:ba:07:51:d2:01: 56:f9:b3:00:30:1b:29:7c:1a:cd:14:85:82:d5:f8: 66:f6:ca:a2:f9:f1:2b:3b:98:c6:a7:b1:0b:20:e2: 47:de:ca:5b:39:b0:59:1f:84:77:86:3f:9c:c3:37: 91:ca:6d:e6:08:35:02:ed:7b:bf:e7:d4:29:10:f9: 9a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C0:59:44:B2:F2:6A:AD:29:04:1B:BE:1C:93:2D:69:B7:DC:69:03 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vMBZRLLyaq0pBBu-HJMtabfcaQM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.163.202.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:cd:5e:b7:70:76:0b:6e:a2:a9:d1:a2:90:38:36:85:4a:2f: 68:b8:bb:b6:b3:3f:4e:c9:23:db:c5:2c:e9:24:bf:1e:9e:53: 5a:c9:5d:3f:90:bd:97:20:26:46:78:81:13:57:ae:e9:ae:f0: 18:04:4e:3c:7f:68:50:5c:f1:ba:a0:b7:ce:63:f6:34:c2:7d: 67:8a:c3:63:5e:74:67:3f:b7:05:91:b0:b9:48:fe:ad:b5:46: af:e6:e2:e6:3c:87:75:c4:93:b3:b4:87:17:80:3d:ef:b5:82: c4:71:f6:13:66:c9:30:0e:76:5c:47:68:fe:d3:9b:10:f0:22: e3:55:df:9b:2b:0d:50:b7:92:8e:a1:29:79:75:ad:e8:c1:38: ef:ec:ff:a0:43:2c:5f:87:08:47:3f:c5:dc:2b:57:4d:e8:b1: 0c:8f:aa:ac:c1:2f:97:ad:66:97:1d:0e:f0:f2:9b:3d:e7:10: 6b:d3:81:0a:69:26:cd:49:05:ab:91:85:f9:db:ce:6e:b5:ac: 5c:d3:e0:85:3d:5b:ff:77:0d:68:e8:3d:ec:c0:7a:25:1f:9c: de:15:5b:9c:97:83:79:51:46:61:5a:70:4c:10:a9:26:da:36: 26:92:3e:56:84:f7:06:9a:30:ce:e2:6e:9a:55:b9:45:5e:63: 10:e4:fd:4a -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE0NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJDQzA1OTQ0QjJGMjZB QUQyOTA0MUJCRTFDOTMyRDY5QjdEQzY5MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcVm54wWCZhI3gJ5HBNQMTj3ahrExjSViMi7V/k5hnYOITB2An ISixQ3U+aU6Hq4dA6y3Ghqx0ugMJ88KcE6QSdsls1OqsUT7E41W/HGa1rzkwT5DC pEv/Jto3MHHxvKjVjY7ovhI+5w8CNN2C+1XBdL5caPnASepeVMGZWqklCFWgEhTa hsq7PZv7JeMGEMffFpbXj4p5v5gI6301S/yHXfh0iFLAn/Hh/Y6iOthaIo54DEYo o+XbVqDZ0V66B1HSAVb5swAwGyl8Gs0UhYLV+Gb2yqL58Ss7mMansQsg4kfeyls5 sFkfhHeGP5zDN5HKbeYINQLte7/n1CkQ+ZpbAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUvMBZRLLyaq0pBBu+HJMtabfcaQMwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy92TUJaUkxMeWFxMHBC QnUtSEpNdGFiZmNhUU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBy6PKMA0GCSqGSIb3DQEBCwUAA4IBAQBfzV63cHYLbqKp0aKQODaFSi9ouLu2 sz9OySPbxSzpJL8enlNayV0/kL2XICZGeIETV67prvAYBE48f2hQXPG6oLfOY/Y0 wn1nisNjXnRnP7cFkbC5SP6ttUav5uLmPId1xJOztIcXgD3vtYLEcfYTZskwDnZc R2j+05sQ8CLjVd+bKw1Qt5KOoSl5da3owTjv7P+gQyxfhwhHP8XcK1dN6LEMj6qs wS+XrWaXHQ7w8ps95xBr04EKaSbNSQWrkYX5285utaxc0+CFPVv/dw1o6D3swHol H5zeFVucl4N5UUZhWnBMEKkm2jYmkj5WhPcGmjDO4m6aVblFXmMQ5P1K -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:34 2025 by rpki-client on console.sobornost.net