$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/ofvcuxthmQnQctgObeTfbYy1KUo.roa File: ofvcuxthmQnQctgObeTfbYy1KUo.roa (raw, json) Hash identifier: tFfI4JeTrQSym/a2AviRbZM4XdkTzpEoX2emFZPM1xo= Subject key identifier: A1:FB:DC:BB:1B:61:99:09:D0:72:D8:0E:6D:E4:DF:6D:8C:B5:29:4A Certificate issuer: /CN=2C20881A0EFD0664A591AF3095D29935EF9BC361 Certificate serial: 036D Authority key identifier: 2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/ofvcuxthmQnQctgObeTfbYy1KUo.roa Signing time: Mon 10 Feb 2025 14:00:25 +0000 ROA not before: Mon 10 Feb 2025 14:00:25 +0000 ROA not after: Thu 28 Aug 2025 15:30:19 +0000 asID: 215262 IP address blocks: 2401:bf60:4ff6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 877 (0x36d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C20881A0EFD0664A591AF3095D29935EF9BC361 Validity Not Before: Feb 10 14:00:25 2025 GMT Not After : Aug 28 15:30:19 2025 GMT Subject: CN=A1FBDCBB1B619909D072D80E6DE4DF6D8CB5294A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:0e:bf:e0:b7:69:78:ec:4c:9f:2c:99:0a: 57:01:81:86:11:b2:c2:d7:a9:3a:37:e3:9d:f6:b6: ab:98:38:04:60:8a:be:a5:02:b1:d2:70:08:fc:45: 8e:92:cc:04:cf:96:d2:39:e3:09:97:73:41:56:d0: 97:dc:a8:5c:5c:60:2f:df:00:30:41:a3:96:d3:65: 9a:49:14:03:be:06:c0:1a:cf:5f:36:cf:80:e3:a3: 21:db:9c:63:f7:9e:ed:80:2d:e1:69:25:a0:f5:92: 43:27:31:69:8c:48:fc:76:4f:f6:97:0a:53:ec:0d: cd:b9:7f:22:ff:78:2f:d4:52:45:3f:89:48:9d:99: 36:4a:28:7e:7c:fd:88:33:60:74:a0:04:b9:1c:8d: 90:55:66:ae:0f:07:37:0d:0c:9a:35:d0:72:1d:b4: 53:52:2e:84:40:9f:7f:b3:58:16:a1:18:5f:e5:5d: 2e:10:81:50:60:ec:98:92:92:29:cd:9c:67:39:32: 3b:e2:6e:c2:50:99:78:72:7e:cc:15:03:29:fd:3c: a3:08:98:cc:5e:19:8d:c9:4a:65:41:3b:cf:22:fa: 92:69:80:82:aa:48:1e:52:55:21:5f:57:79:f6:24: e7:c3:8a:cf:22:54:f6:93:0d:d0:e9:6e:4f:01:8b: 52:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FB:DC:BB:1B:61:99:09:D0:72:D8:0E:6D:E4:DF:6D:8C:B5:29:4A X509v3 Authority Key Identifier: keyid:2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/ofvcuxthmQnQctgObeTfbYy1KUo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:bf60:4ff6::/48 Signature Algorithm: sha256WithRSAEncryption 96:a2:f7:3f:b7:d1:4a:78:28:11:47:92:c8:43:d7:52:32:94: 4d:3d:c8:d3:fa:da:ff:3b:74:07:f6:56:7b:54:3f:b0:f2:b6: 6a:3c:0d:45:e4:00:21:53:e8:88:f7:bd:04:2c:92:d0:b5:68: 98:f7:5e:94:5d:00:26:b3:e7:7c:a4:e0:a9:41:39:20:20:d2: fa:80:46:bb:b1:84:ff:4e:9a:0c:5c:2d:63:f5:e3:e2:82:d1: 08:dd:23:0a:1b:94:85:c6:bb:da:07:d1:49:23:3d:7a:17:ba: d6:7a:62:d2:78:a5:84:0c:6f:b1:ad:a1:31:e0:a0:51:0f:b9: 33:e5:bb:89:f8:b9:bf:70:11:7c:99:54:25:75:12:30:6d:08: 3a:96:d6:95:cb:9a:d8:b4:fe:c4:46:30:8a:b0:c2:9a:50:95: e3:32:7c:47:b8:91:1a:67:12:22:a7:69:fa:22:6a:e5:ba:2e: db:4e:05:cd:31:9c:d8:96:ef:44:a6:f1:cf:86:4a:f4:2e:5c: e6:4a:fe:8b:03:50:60:b7:2d:e8:3e:4b:e9:07:e3:fe:e0:8a: d8:1c:7b:92:b4:e5:a6:1a:dd:2e:35:10:7d:49:c5:b8:5d:ec: 25:c0:18:a6:5f:cc:d9:26:8f:4a:c5:69:8e:fc:3e:7d:9f:98: 1a:f6:8f:27 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgICA20wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMy MDg4MUEwRUZEMDY2NEE1OTFBRjMwOTVEMjk5MzVFRjlCQzM2MTAeFw0yNTAyMTAx NDAwMjVaFw0yNTA4MjgxNTMwMTlaMDMxMTAvBgNVBAMTKEExRkJEQ0JCMUI2MTk5 MDlEMDcyRDgwRTZERTRERjZEOENCNTI5NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGcA6/4LdpeOxMnyyZClcBgYYRssLXqTo34532tquYOARgir6l ArHScAj8RY6SzATPltI54wmXc0FW0JfcqFxcYC/fADBBo5bTZZpJFAO+BsAaz182 z4DjoyHbnGP3nu2ALeFpJaD1kkMnMWmMSPx2T/aXClPsDc25fyL/eC/UUkU/iUid mTZKKH58/YgzYHSgBLkcjZBVZq4PBzcNDJo10HIdtFNSLoRAn3+zWBahGF/lXS4Q gVBg7JiSkinNnGc5MjvibsJQmXhyfswVAyn9PKMImMxeGY3JSmVBO88i+pJpgIKq SB5SVSFfV3n2JOfDis8iVPaTDdDpbk8Bi1JdAgMBAAGjggH5MIIB9TAdBgNVHQ4E FgQUofvcuxthmQnQctgObeTfbYy1KUowHwYDVR0jBBgwFoAULCCIGg79BmSlka8w ldKZNe+bw2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09ERVVQ VEVDSC9MQ0NJR2c3OUJtU2xrYTh3bGRLWk5lLWJ3MkUuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0xDQ0lHZzc5Qm1TbGthOHdsZEtaTmUtYncyRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NPREVVUFRFQ0gvb2Z2Y3V4dGht UW5RY3RnT2JlVGZiWXkxS1VvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQC AAIwCQMHACQBv2BP9jANBgkqhkiG9w0BAQsFAAOCAQEAlqL3P7fRSngoEUeSyEPX UjKUTT3I0/ra/zt0B/ZWe1Q/sPK2ajwNReQAIVPoiPe9BCyS0LVomPdelF0AJrPn fKTgqUE5ICDS+oBGu7GE/06aDFwtY/Xj4oLRCN0jChuUhca72gfRSSM9ehe61npi 0nilhAxvsa2hMeCgUQ+5M+W7ifi5v3ARfJlUJXUSMG0IOpbWlcua2LT+xEYwirDC mlCV4zJ8R7iRGmcSIqdp+iJq5bou204FzTGc2JbvRKbxz4ZK9C5c5kr+iwNQYLct 6D5L6Qfj/uCK2Bx7krTlphrdLjUQfUnFuF3sJcAYpl/M2SaPSsVpjvw+fZ+YGvaP Jw== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:34 2025 by rpki-client on console.sobornost.net