$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CPSYS/SLgx61JrqQPBxVcp4DNYoKBmdME.roa File: SLgx61JrqQPBxVcp4DNYoKBmdME.roa (raw, json) Hash identifier: 0bbM+QsBAWU/ayeWAbiBW2SEJSrv0SpkVwq9gXtQ18k= Subject key identifier: 48:B8:31:EB:52:6B:A9:03:C1:C5:57:29:E0:33:58:A0:A0:66:74:C1 Certificate issuer: /CN=1F877983527470E200D5AE06A01588213555FEE6 Certificate serial: 0255 Authority key identifier: 1F:87:79:83:52:74:70:E2:00:D5:AE:06:A0:15:88:21:35:55:FE:E6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/SLgx61JrqQPBxVcp4DNYoKBmdME.roa Signing time: Mon 10 Feb 2025 14:01:31 +0000 ROA not before: Mon 10 Feb 2025 14:01:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 134823 IP address blocks: 103.14.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 08:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F877983527470E200D5AE06A01588213555FEE6 Validity Not Before: Feb 10 14:01:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=48B831EB526BA903C1C55729E03358A0A06674C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d1:51:98:0d:ee:5f:71:ef:eb:9d:10:0f:0a: f9:53:17:59:c2:53:f2:67:9e:32:71:63:d2:b1:33: 0a:f1:e1:14:43:ad:c2:dd:2f:5f:18:5e:0d:1e:80: e6:cc:9d:04:6d:43:d1:68:29:fc:ef:51:b3:82:35: e2:10:fb:ad:46:52:d4:d3:5a:73:b8:8f:16:e6:46: b2:15:77:b9:23:6c:a4:ca:0c:f2:0b:e4:aa:69:a3: 1d:db:09:9d:dd:eb:cc:0a:4a:00:7d:2b:1e:48:79: 77:36:39:3a:50:52:a6:c9:72:7e:71:c6:ad:90:cd: fb:09:a6:ae:86:cc:00:1a:c0:cc:24:46:0d:a0:bc: 87:82:d3:a7:ae:79:8f:3f:f0:4c:ea:84:f4:f0:af: 68:fc:bf:4f:ed:81:82:d5:0d:92:19:37:f2:6c:6b: 7b:f4:c7:2d:86:54:ce:95:66:3d:d3:1d:32:eb:e2: 07:3d:ec:c3:68:72:cf:d3:25:b9:38:7f:3c:36:d2: 50:be:d4:a8:3e:5c:31:54:d4:95:d9:7a:ba:5c:a7: 57:1d:f6:01:d5:26:33:9c:7f:e6:bb:1b:09:4e:da: 05:a7:f1:d0:bd:3c:fc:ad:19:e2:d0:29:3b:7c:ae: ad:a5:f2:bc:04:70:88:2d:ab:ca:bd:5e:19:5e:2b: 93:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B8:31:EB:52:6B:A9:03:C1:C5:57:29:E0:33:58:A0:A0:66:74:C1 X509v3 Authority Key Identifier: keyid:1F:87:79:83:52:74:70:E2:00:D5:AE:06:A0:15:88:21:35:55:FE:E6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/SLgx61JrqQPBxVcp4DNYoKBmdME.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.14.170.0/23 Signature Algorithm: sha256WithRSAEncryption 16:62:97:86:51:f3:3c:a4:41:54:dc:c8:de:de:a2:06:78:42: 4a:1b:c3:d1:59:a9:e9:66:2c:c5:d0:38:46:51:94:0f:63:c0: 4e:9e:76:cc:50:82:ec:b5:1c:44:f7:40:b9:75:89:10:07:07: 00:c1:aa:8d:90:af:ae:53:df:e3:f7:15:3c:1f:e8:88:b2:0d: ac:11:ab:b8:11:f1:19:7a:b6:4f:df:35:6e:7c:29:5b:4d:f1: 20:53:06:95:d5:2e:a4:5b:6a:a8:fc:57:13:14:64:fc:3c:78: c3:21:85:5d:cf:4c:40:81:ca:20:fc:70:e1:d4:22:72:52:bf: b7:a1:ee:aa:28:56:f3:6e:62:c0:3e:60:c5:3a:d1:48:3f:fb: 09:27:e4:a0:ed:ef:4c:33:78:e3:5c:23:5e:b9:d6:03:53:d9: a8:1f:3e:77:71:55:58:f3:b5:c6:e1:ba:1f:c3:c0:88:13:0e: 8d:0d:07:01:9a:35:e6:e6:a6:30:b9:2d:9c:c8:aa:21:d9:62: bf:03:f2:95:cd:5b:ea:ef:17:65:3f:41:37:9c:bb:2d:af:66: 4d:a9:85:24:20:e1:c5:34:29:f9:ba:87:71:06:17:62:0c:c4: 24:64:64:1a:a4:60:39:ec:2e:5a:29:51:14:af:67:2a:b3:f4: da:bd:0f:7c -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUY4 Nzc5ODM1Mjc0NzBFMjAwRDVBRTA2QTAxNTg4MjEzNTU1RkVFNjAeFw0yNTAyMTAx NDAxMzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ4QjgzMUVCNTI2QkE5 MDNDMUM1NTcyOUUwMzM1OEEwQTA2Njc0QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS0VGYDe5fce/rnRAPCvlTF1nCU/JnnjJxY9KxMwrx4RRDrcLd L18YXg0egObMnQRtQ9FoKfzvUbOCNeIQ+61GUtTTWnO4jxbmRrIVd7kjbKTKDPIL 5Kppox3bCZ3d68wKSgB9Kx5IeXc2OTpQUqbJcn5xxq2QzfsJpq6GzAAawMwkRg2g vIeC06eueY8/8EzqhPTwr2j8v0/tgYLVDZIZN/Jsa3v0xy2GVM6VZj3THTLr4gc9 7MNocs/TJbk4fzw20lC+1Kg+XDFU1JXZerpcp1cd9gHVJjOcf+a7GwlO2gWn8dC9 PPytGeLQKTt8rq2l8rwEcIgtq8q9XhleK5OlAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUSLgx61JrqQPBxVcp4DNYoKBmdMEwHwYDVR0jBBgwFoAUH4d5g1J0cOIA1a4G oBWIITVV/uYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1BTWVMv SDRkNWcxSjBjT0lBMWE0R29CV0lJVFZWX3VZLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9INGQ1ZzFKMGNPSUExYTRHb0JXSUlUVlZfdVkuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DUFNZUy9TTGd4NjFKcnFRUEJ4VmNwNERO WW9LQm1kTUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZw6q MA0GCSqGSIb3DQEBCwUAA4IBAQAWYpeGUfM8pEFU3Mje3qIGeEJKG8PRWanpZizF 0DhGUZQPY8BOnnbMUILstRxE90C5dYkQBwcAwaqNkK+uU9/j9xU8H+iIsg2sEau4 EfEZerZP3zVufClbTfEgUwaV1S6kW2qo/FcTFGT8PHjDIYVdz0xAgcog/HDh1CJy Ur+3oe6qKFbzbmLAPmDFOtFIP/sJJ+Sg7e9MM3jjXCNeudYDU9moHz53cVVY87XG 4bofw8CIEw6NDQcBmjXm5qYwuS2cyKoh2WK/A/KVzVvq7xdlP0E3nLstr2ZNqYUk IOHFNCn5uodxBhdiDMQkZGQapGA57C5aKVEUr2cqs/TavQ98 -----END CERTIFICATE-----Generated at Fri Apr 25 06:08:53 2025 by rpki-client on console.sobornost.net