$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DCT/ZPKN_rDshjEpdYlzk_c-Td2ySgQ.roa File: ZPKN_rDshjEpdYlzk_c-Td2ySgQ.roa (raw, json) Hash identifier: 8BM6aYi6/zq+qcA5TVkLLzaFUCSmUPbOAziKkcLLkwI= Subject key identifier: 64:F2:8D:FE:B0:EC:86:31:29:75:89:73:93:F7:3E:4D:DD:B2:4A:04 Certificate issuer: /CN=9B062D74C7F512F04AE60955C5456FC19755337F Certificate serial: 0C96 Authority key identifier: 9B:06:2D:74:C7:F5:12:F0:4A:E6:09:55:C5:45:6F:C1:97:55:33:7F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mwYtdMf1EvBK5glVxUVvwZdVM38.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCT/ZPKN_rDshjEpdYlzk_c-Td2ySgQ.roa Signing time: Mon 10 Feb 2025 14:10:30 +0000 ROA not before: Mon 10 Feb 2025 14:10:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131601 IP address blocks: 114.29.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCT/mwYtdMf1EvBK5glVxUVvwZdVM38.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DCT/mwYtdMf1EvBK5glVxUVvwZdVM38.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mwYtdMf1EvBK5glVxUVvwZdVM38.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3222 (0xc96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B062D74C7F512F04AE60955C5456FC19755337F Validity Not Before: Feb 10 14:10:30 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=64F28DFEB0EC86312975897393F73E4DDDB24A04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:05:09:cb:6b:df:35:f0:7d:ae:3b:62:35:2c: 18:c6:bb:06:90:2d:fa:55:87:0e:f4:db:d1:57:4e: 90:f8:3f:0c:30:73:45:cb:23:71:e1:a2:da:87:bb: 03:28:5c:ab:f1:51:f3:70:43:d1:93:10:28:44:70: d5:80:65:26:10:b1:35:71:de:40:a5:26:1d:2e:47: bf:9a:3f:73:51:aa:1a:c0:7f:3f:5e:56:01:41:0a: da:6d:f7:aa:17:df:c1:30:9f:87:a6:49:a8:48:99: 91:b8:f4:87:d5:1d:43:63:1e:2b:3d:be:e9:46:a1: 6f:a0:53:78:69:7a:82:5f:71:a7:51:f1:9f:24:30: 5c:7d:e6:ec:26:b3:fb:71:06:f4:19:3d:c6:c5:22: c2:01:97:07:e5:41:7d:df:5b:5c:0d:f9:49:f8:b4: ec:8d:c5:3d:a7:b5:e0:43:cf:5a:7f:22:c7:d9:f2: 85:9c:cd:30:af:50:d1:de:04:5d:57:11:42:c4:5c: 98:d7:8f:4b:4c:c3:78:67:1a:dd:d0:66:85:0a:e6: 3a:6d:9e:33:7f:7b:29:b5:41:7a:5c:9d:54:0c:72: f5:9d:59:98:60:cb:b8:82:9e:68:d2:93:38:df:fe: 63:1d:14:fc:29:8c:e5:76:ff:1f:c0:4e:3d:92:70: 05:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F2:8D:FE:B0:EC:86:31:29:75:89:73:93:F7:3E:4D:DD:B2:4A:04 X509v3 Authority Key Identifier: keyid:9B:06:2D:74:C7:F5:12:F0:4A:E6:09:55:C5:45:6F:C1:97:55:33:7F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCT/mwYtdMf1EvBK5glVxUVvwZdVM38.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mwYtdMf1EvBK5glVxUVvwZdVM38.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCT/ZPKN_rDshjEpdYlzk_c-Td2ySgQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.29.244.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:b4:e4:09:13:3a:55:4d:50:52:b7:8b:32:51:55:00:af:d2: cc:b8:54:b1:f2:eb:3f:64:75:c2:f0:7a:f2:c9:8e:9f:c0:89: 1f:ac:2f:1c:f7:a2:08:d6:49:1b:46:cc:a1:4c:bc:96:ba:00: b0:4e:4f:3a:ac:3c:44:4e:16:79:35:4d:3b:e2:24:fb:f1:4e: 16:48:b3:44:6a:0a:2e:ab:4e:2a:f8:bc:8d:4d:1c:6e:46:cc: 8b:68:eb:64:98:ea:47:cc:cb:27:f3:ef:12:24:95:72:a6:41: c8:d4:2f:f2:4c:7e:a2:cc:e1:7e:a6:28:d0:e3:ec:48:0a:cf: ac:20:20:ed:59:70:6f:53:96:71:61:7d:e0:a0:1e:a8:b9:cf: 37:7c:1b:f8:23:be:16:7a:1d:d8:ed:78:18:2d:ef:73:a3:25: bf:dc:f9:74:f7:a1:49:3b:52:81:e7:6d:fc:29:ce:ad:8c:cc: d7:cc:f1:00:20:42:c5:c5:e9:21:a9:79:10:db:99:17:b5:e5: 0b:0b:7f:d6:a0:de:18:12:99:6c:7b:77:9d:31:34:ca:de:1b: 85:f0:84:b6:14:c9:03:fc:83:3c:1b:4d:2c:a8:09:de:19:b3: e1:33:8a:35:ac:3f:f5:93:78:78:cd:52:ef:c2:60:e4:43:bb: 51:b8:57:6b -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDJYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUIw NjJENzRDN0Y1MTJGMDRBRTYwOTU1QzU0NTZGQzE5NzU1MzM3RjAeFw0yNTAyMTAx NDEwMzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY0RjI4REZFQjBFQzg2 MzEyOTc1ODk3MzkzRjczRTRERERCMjRBMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLBQnLa9818H2uO2I1LBjGuwaQLfpVhw7029FXTpD4Pwwwc0XL I3HhotqHuwMoXKvxUfNwQ9GTEChEcNWAZSYQsTVx3kClJh0uR7+aP3NRqhrAfz9e VgFBCtpt96oX38Ewn4emSahImZG49IfVHUNjHis9vulGoW+gU3hpeoJfcadR8Z8k MFx95uwms/txBvQZPcbFIsIBlwflQX3fW1wN+Un4tOyNxT2nteBDz1p/IsfZ8oWc zTCvUNHeBF1XEULEXJjXj0tMw3hnGt3QZoUK5jptnjN/eym1QXpcnVQMcvWdWZhg y7iCnmjSkzjf/mMdFPwpjOV2/x/ATj2ScAVVAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUZPKN/rDshjEpdYlzk/c+Td2ySgQwHwYDVR0jBBgwFoAUmwYtdMf1EvBK5glV xUVvwZdVM38wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRENUL213 WXRkTWYxRXZCSzVnbFZ4VVZ2d1pkVk0zOC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev bXdZdGRNZjFFdkJLNWdsVnhVVnZ3WmRWTTM4LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRENUL1pQS05fckRzaGpFcGRZbHprX2MtVGQy eVNnUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJyHfQwDQYJ KoZIhvcNAQELBQADggEBAAq05AkTOlVNUFK3izJRVQCv0sy4VLHy6z9kdcLwevLJ jp/AiR+sLxz3ogjWSRtGzKFMvJa6ALBOTzqsPEROFnk1TTviJPvxThZIs0RqCi6r Tir4vI1NHG5GzIto62SY6kfMyyfz7xIklXKmQcjUL/JMfqLM4X6mKNDj7EgKz6wg IO1ZcG9TlnFhfeCgHqi5zzd8G/gjvhZ6HdjteBgt73OjJb/c+XT3oUk7UoHnbfwp zq2MzNfM8QAgQsXF6SGpeRDbmRe15QsLf9ag3hgSmWx7d50xNMreG4XwhLYUyQP8 gzwbTSyoCd4Zs+EzijWsP/WTeHjNUu/CYORDu1G4V2s= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:35 2025 by rpki-client on console.sobornost.net