$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/DuBW_qJiBPrNW6IybNEiH42sqwc.roa File: DuBW_qJiBPrNW6IybNEiH42sqwc.roa (raw, json) Hash identifier: 52DR1LpsHmQViQuvpCI4qjnKq/WUGHBov8c+O/FGgxE= Subject key identifier: 0E:E0:56:FE:A2:62:04:FA:CD:5B:A2:32:6C:D1:22:1F:8D:AC:AB:07 Certificate issuer: /CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D Certificate serial: 0361 Authority key identifier: 0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/DuBW_qJiBPrNW6IybNEiH42sqwc.roa Signing time: Mon 10 Feb 2025 14:00:27 +0000 ROA not before: Mon 10 Feb 2025 14:00:27 +0000 ROA not after: Thu 28 Aug 2025 15:30:19 +0000 asID: 396982 IP address blocks: 160.30.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 22:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 865 (0x361) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D Validity Not Before: Feb 10 14:00:27 2025 GMT Not After : Aug 28 15:30:19 2025 GMT Subject: CN=0EE056FEA26204FACD5BA2326CD1221F8DACAB07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:02:d7:52:30:e8:50:b7:6d:a8:ad:20:58: 0c:33:a2:c5:cc:91:f8:9e:02:27:b4:39:a8:a2:8d: fe:aa:38:25:7c:60:3b:29:9b:dd:6b:d0:fb:e7:b1: 34:b8:52:e6:9d:17:a8:85:3c:c2:83:27:f5:fb:d9: 36:ec:74:88:ba:3b:e1:fc:a7:af:31:2d:e8:09:8f: af:66:35:25:ab:b3:3c:f6:40:5c:e8:cc:83:86:de: 0d:a2:c0:81:94:c4:42:c8:5c:c5:99:76:f3:23:ce: bf:e2:6a:ca:59:9d:9c:ee:9a:d1:3b:b1:a8:10:ed: d7:59:d3:6b:05:3b:4e:71:a3:cd:72:aa:5a:ab:62: 4a:f3:00:7f:db:7e:aa:0a:d4:56:14:3c:31:1e:bc: d0:32:95:f6:d1:ff:cd:fb:44:c0:e1:7a:ee:56:1d: d6:0d:10:a7:67:06:19:ba:65:12:9e:2f:5c:79:aa: 6d:bc:b6:c1:11:e2:24:7e:bb:50:16:74:c9:40:59: 3c:4e:0c:1a:c3:2f:b1:2e:6c:b7:c4:d7:e0:0f:7a: 1f:f3:06:55:af:ca:9a:1d:2b:98:67:d6:91:04:f7: 5a:e9:ab:6b:5a:6e:7c:44:c0:ac:13:d7:95:e8:dc: 91:59:c2:6f:39:a8:1e:5c:e8:9a:3e:58:5b:73:9a: b8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E0:56:FE:A2:62:04:FA:CD:5B:A2:32:6C:D1:22:1F:8D:AC:AB:07 X509v3 Authority Key Identifier: keyid:0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/DuBW_qJiBPrNW6IybNEiH42sqwc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.211.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:62:fd:89:8c:04:54:f7:17:1b:b7:75:d6:78:9a:02:a7:e4: 21:72:49:77:44:24:16:f7:1b:b9:4f:fd:d6:03:dd:97:56:c6: 5d:4c:b7:47:9a:c5:48:7b:bc:91:72:96:57:0c:48:63:4a:e6: e7:90:2a:b1:32:1a:94:02:67:88:31:fc:2f:8d:68:c2:4e:4e: f3:32:d7:ab:7d:54:f7:c0:09:7d:20:93:b5:47:ad:fa:91:c5: a5:82:13:59:8c:ef:9e:83:c2:d0:a7:c6:62:dc:38:08:2d:ed: 2d:44:58:6f:82:fd:81:79:92:3b:cc:f0:6d:53:f1:c8:7e:ec: f7:74:48:a1:56:7a:de:07:0c:7e:bd:53:9e:64:d8:72:d2:7c: d5:9e:47:1a:7f:b5:de:e4:e3:40:08:68:62:7f:c4:fa:ce:2a: 0b:0c:36:4f:87:ae:e8:ac:49:95:ad:76:a8:0c:2b:d8:a3:0a: 3e:7f:9b:d1:d9:a9:bd:d1:66:19:45:dc:5d:7d:97:23:25:a9: dd:8b:72:e3:8f:89:05:ac:43:94:c7:6f:3d:6e:b7:e6:d4:e5: 8d:1c:f0:45:53:df:bd:67:7e:97:fa:e6:5d:b9:ae:7d:ac:59: 8e:90:c4:27:72:d8:85:fd:70:63:9e:71:7f:66:6e:9b:e9:0b: 3e:2a:b2:23 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICA2EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEI2 N0M3OEUzNUQyMzYzMkEyNTUzMkFFRkU4QjRBOUZDQUJFM0I0RDAeFw0yNTAyMTAx NDAwMjdaFw0yNTA4MjgxNTMwMTlaMDMxMTAvBgNVBAMTKDBFRTA1NkZFQTI2MjA0 RkFDRDVCQTIzMjZDRDEyMjFGOERBQ0FCMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAvALXUjDoULdtqK0gWAwzosXMkfieAie0Oaiijf6qOCV8YDsp m91r0PvnsTS4UuadF6iFPMKDJ/X72TbsdIi6O+H8p68xLegJj69mNSWrszz2QFzo zIOG3g2iwIGUxELIXMWZdvMjzr/iaspZnZzumtE7sagQ7ddZ02sFO05xo81yqlqr YkrzAH/bfqoK1FYUPDEevNAylfbR/837RMDheu5WHdYNEKdnBhm6ZRKeL1x5qm28 tsER4iR+u1AWdMlAWTxODBrDL7EubLfE1+APeh/zBlWvypodK5hn1pEE91rpq2ta bnxEwKwT15Xo3JFZwm85qB5c6Jo+WFtzmrgHAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUDuBW/qJiBPrNW6IybNEiH42sqwcwHwYDVR0jBBgwFoAUC2fHjjXSNjKiVTKu /otKn8q+O00wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09ERVVQ VEVDSC9DMmZIampYU05qS2lWVEt1X290S244cS1PMDAuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0MyZkhqalhTTmpLaVZUS3Vfb3RLbjhxLU8wMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NPREVVUFRFQ0gvRHVCV19xSmlC UHJOVzZJeWJORWlINDJzcXdjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAKAe0zANBgkqhkiG9w0BAQsFAAOCAQEADWL9iYwEVPcXG7d11niaAqfk IXJJd0QkFvcbuU/91gPdl1bGXUy3R5rFSHu8kXKWVwxIY0rm55AqsTIalAJniDH8 L41owk5O8zLXq31U98AJfSCTtUet+pHFpYITWYzvnoPC0KfGYtw4CC3tLURYb4L9 gXmSO8zwbVPxyH7s93RIoVZ63gcMfr1TnmTYctJ81Z5HGn+13uTjQAhoYn/E+s4q Cww2T4eu6KxJla12qAwr2KMKPn+b0dmpvdFmGUXcXX2XIyWp3Yty44+JBaxDlMdv PW635tTljRzwRVPfvWd+l/rmXbmufaxZjpDEJ3LYhf1wY55xf2Zum+kLPiqyIw== -----END CERTIFICATE-----Generated at Fri Apr 25 19:33:47 2025 by rpki-client on console.sobornost.net