$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/43zxwQkQ1BJtMtCf2OgD7QPMNSg.roa File: 43zxwQkQ1BJtMtCf2OgD7QPMNSg.roa (raw, json) Hash identifier: liz/DsHIAzdCwpACCCIGePe4Dg4LV17i53qHR79+7f0= Subject key identifier: E3:7C:F1:C1:09:10:D4:12:6D:32:D0:9F:D8:E8:03:ED:03:CC:35:28 Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B Certificate serial: 0CCD Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/43zxwQkQ1BJtMtCf2OgD7QPMNSg.roa Signing time: Mon 10 Feb 2025 14:12:56 +0000 ROA not before: Mon 10 Feb 2025 14:12:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 180.92.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3277 (0xccd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B Validity Not Before: Feb 10 14:12:56 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E37CF1C10910D4126D32D09FD8E803ED03CC3528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:3d:1a:26:0a:cc:38:31:13:10:d6:e9:0d: ab:40:66:81:af:c9:70:38:dc:0d:51:c0:5b:a9:0c: 4c:15:d7:44:89:a0:9f:ce:7e:1c:58:74:36:dc:cd: 78:c0:1f:a6:18:c6:b3:87:59:45:d7:03:80:33:02: 4d:57:96:bb:34:d1:4b:86:21:9b:42:5d:46:cf:27: a7:28:60:cf:6c:e4:f8:f3:28:49:e5:8c:28:46:51: d7:f0:9c:f0:ec:b9:db:c8:4c:7f:7f:57:fd:27:2a: c4:b9:bf:ea:d7:87:e7:16:84:e3:d9:bb:70:0c:b4: 2c:7e:8f:44:62:2c:ce:94:81:0e:2e:a7:9f:e5:d0: 47:cc:4c:8d:4a:34:d7:23:e3:c5:8a:56:47:5c:fb: 8a:3b:a2:f9:e2:b4:f6:96:38:af:80:e4:8b:39:55: 04:d5:66:2f:4d:50:17:43:9c:46:4b:02:11:de:52: 29:a7:f5:aa:12:36:3c:73:a7:fa:03:ba:c6:61:75: c0:60:6d:10:a9:39:1d:78:33:9a:b4:f2:a8:b8:9b: f5:8b:2f:ff:d7:af:7e:ee:ea:d7:42:08:24:51:4d: a5:80:57:1d:91:65:60:39:4b:c6:6c:20:a0:d7:91: 45:f0:91:da:ec:9b:bf:34:b8:51:71:ab:b5:5f:74: 12:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7C:F1:C1:09:10:D4:12:6D:32:D0:9F:D8:E8:03:ED:03:CC:35:28 X509v3 Authority Key Identifier: keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/43zxwQkQ1BJtMtCf2OgD7QPMNSg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.92.0.0/20 Signature Algorithm: sha256WithRSAEncryption c8:33:40:4f:71:24:a1:b0:6c:90:28:4a:51:ad:c8:82:ec:6d: 97:01:b5:92:c8:a4:16:57:fb:40:36:c3:c3:86:8a:e4:2e:36: 69:cb:4d:54:c8:87:eb:4d:7b:88:6c:ee:79:68:ce:0d:bf:46: df:88:68:9a:5f:2a:1e:53:1e:59:87:e8:df:86:05:9c:db:f1: 5c:ef:36:4e:76:b8:21:57:ea:a7:0c:56:ca:0f:51:14:cc:fc: 5f:55:28:b7:b1:4b:95:b1:69:af:1f:ec:df:fc:5a:bc:dc:b4: 21:e3:94:01:57:80:7e:6c:71:06:cc:14:5d:a5:be:48:dd:08: ab:be:d1:95:b3:2a:89:33:69:0a:01:e7:13:02:b4:06:a2:3d: 96:76:d6:38:20:6c:2c:67:a1:7a:25:21:e7:c0:71:a1:58:18: 6e:17:9c:3e:c6:eb:8a:6a:f6:f0:07:cf:5a:8c:7c:ca:ec:11: dc:7a:c5:5c:ff:10:95:d1:84:c3:ff:a9:3e:38:4d:c4:cb:df: 04:04:aa:7b:be:07:57:a7:29:9f:41:8b:f0:2f:88:85:0f:c6: fc:3a:b2:c0:3b:d5:e4:2a:eb:f1:01:e7:94:d9:81:5d:a0:e9: 26:b7:1a:82:0a:63:e8:ea:02:01:50:1f:7c:52:99:94:c9:7a: 0f:b1:c0:e8 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDM0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE RUEzNDcwNzE1MjI5MEMxRDI2MDZGRkJGQzY5QjkyN0Q0MEE1QjAeFw0yNTAyMTAx NDEyNTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUzN0NGMUMxMDkxMEQ0 MTI2RDMyRDA5RkQ4RTgwM0VEMDNDQzM1MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBqT0aJgrMODETENbpDatAZoGvyXA43A1RwFupDEwV10SJoJ/O fhxYdDbczXjAH6YYxrOHWUXXA4AzAk1Xlrs00UuGIZtCXUbPJ6coYM9s5PjzKEnl jChGUdfwnPDsudvITH9/V/0nKsS5v+rXh+cWhOPZu3AMtCx+j0RiLM6UgQ4up5/l 0EfMTI1KNNcj48WKVkdc+4o7ovnitPaWOK+A5Is5VQTVZi9NUBdDnEZLAhHeUimn 9aoSNjxzp/oDusZhdcBgbRCpOR14M5q08qi4m/WLL//Xr37u6tdCCCRRTaWAVx2R ZWA5S8ZsIKDXkUXwkdrsm780uFFxq7VfdBJhAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU43zxwQkQ1BJtMtCf2OgD7QPMNSgwHwYDVR0jBBgwFoAUb96jRwcVIpDB0mBv +/xpuSfUClswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lDQ0FU Vi9iOTZqUndjVklwREIwbUJ2LV94cHVTZlVDbHMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2I5NmpSd2NWSXBEQjBtQnYtX3hwdVNmVUNscy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NZQ0NBVFYvNDN6eHdRa1ExQkp0TXRD ZjJPZ0Q3UVBNTlNnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BLRcADANBgkqhkiG9w0BAQsFAAOCAQEAyDNAT3EkobBskChKUa3IguxtlwG1ksik Flf7QDbDw4aK5C42actNVMiH6017iGzueWjODb9G34homl8qHlMeWYfo34YFnNvx XO82Tna4IVfqpwxWyg9RFMz8X1Uot7FLlbFprx/s3/xavNy0IeOUAVeAfmxxBswU XaW+SN0Iq77RlbMqiTNpCgHnEwK0BqI9lnbWOCBsLGeheiUh58BxoVgYbhecPsbr imr28AfPWox8yuwR3HrFXP8QldGEw/+pPjhNxMvfBASqe74HV6cpn0GL8C+IhQ/G /DqywDvV5Crr8QHnlNmBXaDpJrcaggpj6OoCAVAffFKZlMl6D7HA6A== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:35 2025 by rpki-client on console.sobornost.net