$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/VY3zj-IiEBrmpdZFDh6_Cq4A6iQ.roa File: VY3zj-IiEBrmpdZFDh6_Cq4A6iQ.roa (raw, json) Hash identifier: OqpB/74KEq5CLRrcGpuP5PJwLxDCOmCaW+rOSSA7Ucc= Subject key identifier: 55:8D:F3:8F:E2:22:10:1A:E6:A5:D6:45:0E:1E:BF:0A:AE:00:EA:24 Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B Certificate serial: 0CD1 Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/VY3zj-IiEBrmpdZFDh6_Cq4A6iQ.roa Signing time: Mon 10 Feb 2025 14:12:57 +0000 ROA not before: Mon 10 Feb 2025 14:12:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18046 IP address blocks: 103.130.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3281 (0xcd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B Validity Not Before: Feb 10 14:12:57 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=558DF38FE222101AE6A5D6450E1EBF0AAE00EA24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:68:f1:cd:a9:fa:f0:4c:d5:ea:55:1b:06:fc: 7d:dc:31:26:3b:f0:87:4a:51:b1:30:09:0d:4d:50: fa:20:67:b8:ca:f7:5d:69:10:9d:90:47:7d:7b:e3: bd:fc:f5:6c:52:4d:6f:58:f7:db:51:6f:fe:2b:a3: ad:27:63:52:c6:a8:fe:2a:93:81:b1:51:7d:48:b8: 12:67:c0:3d:d8:7e:c2:96:74:70:2e:b5:8c:4d:eb: 21:bc:f5:89:ac:71:70:06:5d:b8:9a:1e:8c:28:69: 8f:55:83:85:70:c3:9f:3c:e8:31:46:14:81:42:0f: de:61:ae:f4:4f:ad:8a:c4:ae:c2:8f:43:03:57:af: c6:02:1d:60:ea:b4:17:ad:f1:36:23:7f:d4:00:16: 47:2f:9f:14:26:0e:f9:33:89:c4:ea:35:e5:2e:ff: d8:dd:15:46:52:ca:0a:78:31:c2:57:dd:9d:5a:7b: b4:1f:5e:48:e2:be:59:7c:55:1a:19:89:c7:ec:d9: 1c:5f:51:92:8b:40:51:69:8a:0f:11:1e:f1:fc:61: 35:e6:0b:67:76:90:3a:ef:2d:9f:c2:e6:b4:79:77: 1d:dd:25:53:bc:3c:7d:b4:8b:96:81:08:b3:67:63: 78:6b:b4:c6:51:33:a0:56:49:7b:99:35:f3:9b:65: fd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8D:F3:8F:E2:22:10:1A:E6:A5:D6:45:0E:1E:BF:0A:AE:00:EA:24 X509v3 Authority Key Identifier: keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/VY3zj-IiEBrmpdZFDh6_Cq4A6iQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.44.0/22 Signature Algorithm: sha256WithRSAEncryption b2:11:c3:f2:e5:f2:b8:35:45:42:ef:ac:f1:80:bb:bc:31:80: 54:0b:0f:98:2d:85:ca:37:32:4f:1d:b8:13:9c:1a:8f:fe:c8: 0a:7f:89:b0:c5:06:6a:dd:ce:17:dd:a9:ec:ff:18:07:db:0c: 0c:88:da:a8:78:fc:8c:4c:02:26:bd:3b:f9:60:0e:28:b4:bb: 04:5b:ef:4a:7d:ad:2a:bc:c8:e8:41:c5:7d:df:d7:01:a9:e0: 49:e8:36:6c:f1:c9:40:81:70:43:cd:c3:fe:c5:82:55:ac:1e: 59:9f:1d:04:75:bd:87:1c:69:75:d6:ea:ca:49:52:53:b7:ea: 82:24:dd:49:81:2e:18:bd:81:84:eb:69:c7:2e:58:28:c7:5a: 80:f4:8f:8b:b7:95:67:8a:7c:b0:30:ad:53:9c:bd:53:ae:71: 3c:ca:2c:1f:a9:bc:31:52:ad:f4:80:0b:15:99:6e:bc:6a:64: f1:45:35:a7:78:b5:de:99:5a:7a:ed:92:a4:da:a1:bc:c0:ea: d0:12:eb:c0:50:e0:84:fe:c4:33:f3:9d:fb:06:ed:20:0d:0d: 3c:21:43:61:cd:21:6c:6e:46:75:77:78:63:71:a4:af:92:2e: a1:af:60:c5:0d:9e:b2:f0:52:6e:a0:ce:63:b5:71:5d:99:fb: 82:d1:77:05 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDNEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE RUEzNDcwNzE1MjI5MEMxRDI2MDZGRkJGQzY5QjkyN0Q0MEE1QjAeFw0yNTAyMTAx NDEyNTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU1OERGMzhGRTIyMjEw MUFFNkE1RDY0NTBFMUVCRjBBQUUwMEVBMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYaPHNqfrwTNXqVRsG/H3cMSY78IdKUbEwCQ1NUPogZ7jK911p EJ2QR31747389WxSTW9Y99tRb/4ro60nY1LGqP4qk4GxUX1IuBJnwD3YfsKWdHAu tYxN6yG89YmscXAGXbiaHowoaY9Vg4Vww5886DFGFIFCD95hrvRPrYrErsKPQwNX r8YCHWDqtBet8TYjf9QAFkcvnxQmDvkzicTqNeUu/9jdFUZSygp4McJX3Z1ae7Qf Xkjivll8VRoZicfs2RxfUZKLQFFpig8RHvH8YTXmC2d2kDrvLZ/C5rR5dx3dJVO8 PH20i5aBCLNnY3hrtMZRM6BWSXuZNfObZf3RAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUVY3zj+IiEBrmpdZFDh6/Cq4A6iQwHwYDVR0jBBgwFoAUb96jRwcVIpDB0mBv +/xpuSfUClswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lDQ0FU Vi9iOTZqUndjVklwREIwbUJ2LV94cHVTZlVDbHMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2I5NmpSd2NWSXBEQjBtQnYtX3hwdVNmVUNscy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NZQ0NBVFYvVlkzemotSWlFQnJtcGRa RkRoNl9DcTRBNmlRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AmeCLDANBgkqhkiG9w0BAQsFAAOCAQEAshHD8uXyuDVFQu+s8YC7vDGAVAsPmC2F yjcyTx24E5waj/7ICn+JsMUGat3OF92p7P8YB9sMDIjaqHj8jEwCJr07+WAOKLS7 BFvvSn2tKrzI6EHFfd/XAangSeg2bPHJQIFwQ83D/sWCVaweWZ8dBHW9hxxpddbq yklSU7fqgiTdSYEuGL2BhOtpxy5YKMdagPSPi7eVZ4p8sDCtU5y9U65xPMosH6m8 MVKt9IALFZluvGpk8UU1p3i13plaeu2SpNqhvMDq0BLrwFDghP7EM/Od+wbtIA0N PCFDYc0hbG5GdXd4Y3Gkr5Iuoa9gxQ2esvBSbqDOY7VxXZn7gtF3BQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:35 2025 by rpki-client on console.sobornost.net