$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/6M67JmSEoaeUKxvtWpD-49a5JGo.roa File: 6M67JmSEoaeUKxvtWpD-49a5JGo.roa (raw, json) Hash identifier: 5IVv+j9HV8IsUWqwbiGKgH1ePVhxkXF8oORytispBLM= Subject key identifier: E8:CE:BB:26:64:84:A1:A7:94:2B:1B:ED:5A:90:FE:E3:D6:B9:24:6A Certificate issuer: /CN=F858D0000C7C46A986B2EB96815F06AE2693A9D0 Certificate serial: 0CBE Authority key identifier: F8:58:D0:00:0C:7C:46:A9:86:B2:EB:96:81:5F:06:AE:26:93:A9:D0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-FjQAAx8RqmGsuuWgV8GriaTqdA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/6M67JmSEoaeUKxvtWpD-49a5JGo.roa Signing time: Mon 10 Feb 2025 14:04:32 +0000 ROA not before: Mon 10 Feb 2025 14:04:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18046 IP address blocks: 159.117.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/-FjQAAx8RqmGsuuWgV8GriaTqdA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/-FjQAAx8RqmGsuuWgV8GriaTqdA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/-FjQAAx8RqmGsuuWgV8GriaTqdA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3262 (0xcbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F858D0000C7C46A986B2EB96815F06AE2693A9D0 Validity Not Before: Feb 10 14:04:32 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E8CEBB266484A1A7942B1BED5A90FEE3D6B9246A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:01:7c:64:9d:a6:77:32:8e:db:b6:63:b8:68: 01:3a:c8:ce:13:85:ea:cd:48:23:2a:ee:fa:a5:5b: 67:88:d7:6b:4e:72:dc:43:53:5f:a1:88:92:3a:b7: 5e:c1:45:af:c6:a5:23:07:cd:55:fb:67:bf:78:27: 5b:6e:90:de:0e:a5:88:32:e7:f0:a9:4c:b0:71:c6: f8:e0:1f:27:ad:8f:8e:40:97:f1:cf:9d:68:8e:9a: 1f:41:00:67:81:e3:d8:a6:3a:f0:83:57:3c:57:b2: c5:02:32:bf:44:83:ef:21:c0:91:1f:7f:36:9b:71: 38:97:fb:c5:ab:17:a1:2f:30:16:d3:f9:2c:2f:eb: e2:5f:92:42:09:7f:6f:4d:d5:62:5b:7c:04:0c:5b: a3:9c:c0:61:1e:f1:44:9d:54:34:85:74:e1:6a:c6: 7c:a3:fe:ba:d7:5c:1f:ec:5f:c2:da:65:09:1a:cb: 96:b5:86:0d:a5:d7:54:53:ad:e4:63:63:b7:d1:74: 0a:a7:ee:7e:22:ac:ee:4f:8b:ef:a6:cb:ef:2d:8a: 5b:4b:1f:e0:43:e0:3b:a5:82:0e:f4:8f:69:44:f2: 43:43:a0:3a:63:6c:90:be:40:d4:0c:5d:3e:fc:93: 26:65:d0:f8:97:65:5e:d0:d6:0e:40:8d:0c:ad:6a: 6b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:CE:BB:26:64:84:A1:A7:94:2B:1B:ED:5A:90:FE:E3:D6:B9:24:6A X509v3 Authority Key Identifier: keyid:F8:58:D0:00:0C:7C:46:A9:86:B2:EB:96:81:5F:06:AE:26:93:A9:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/-FjQAAx8RqmGsuuWgV8GriaTqdA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-FjQAAx8RqmGsuuWgV8GriaTqdA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/6M67JmSEoaeUKxvtWpD-49a5JGo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 159.117.64.0/19 Signature Algorithm: sha256WithRSAEncryption 12:60:51:2b:08:88:ad:42:fd:b3:8f:1e:63:6a:12:49:17:59: 6d:b0:1a:50:29:5e:1b:8a:b7:6a:5c:8e:0f:2f:59:b1:4b:66: 38:c1:44:4b:77:82:12:0d:74:8c:b3:18:c2:76:6d:f5:9c:73: 8d:a9:16:07:84:86:ad:96:fb:c1:88:a9:4f:f2:38:a6:e0:29: b3:42:4e:ab:04:c9:e4:76:fa:55:4a:83:0b:4c:5e:71:0c:09: 5d:d5:d7:4d:83:ea:a9:72:9b:ed:fa:23:56:82:de:35:9a:c4: dd:c5:b2:8b:87:92:de:a2:48:00:fc:91:09:a8:dc:8f:5f:c2: 0a:db:a2:47:8c:5f:9e:62:70:a9:13:92:05:c7:85:99:ef:49: 69:c9:a2:ef:ee:d3:f1:41:05:36:bc:14:e5:76:c5:fc:55:b9: a2:4a:1a:58:d4:37:79:5e:3d:a6:35:a3:3c:23:ee:47:d1:4d: f5:0f:32:69:c1:b7:66:fc:d6:a5:42:a7:c1:40:9f:23:80:b6: aa:05:77:56:31:e5:08:77:93:07:c1:76:2e:57:b3:6e:9e:84: 60:72:a7:cc:93:d4:d6:6f:7a:e9:ec:25:47:69:0d:7d:3f:1c: d8:a5:f5:af:82:24:c5:bb:92:3e:0e:2e:6a:21:3f:2b:55:a2: a2:54:11:f8 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjg1 OEQwMDAwQzdDNDZBOTg2QjJFQjk2ODE1RjA2QUUyNjkzQTlEMDAeFw0yNTAyMTAx NDA0MzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU4Q0VCQjI2NjQ4NEEx QTc5NDJCMUJFRDVBOTBGRUUzRDZCOTI0NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8AXxknaZ3Mo7btmO4aAE6yM4TherNSCMq7vqlW2eI12tOctxD U1+hiJI6t17BRa/GpSMHzVX7Z794J1tukN4OpYgy5/CpTLBxxvjgHyetj45Al/HP nWiOmh9BAGeB49imOvCDVzxXssUCMr9Eg+8hwJEffzabcTiX+8WrF6EvMBbT+Swv 6+JfkkIJf29N1WJbfAQMW6OcwGEe8USdVDSFdOFqxnyj/rrXXB/sX8LaZQkay5a1 hg2l11RTreRjY7fRdAqn7n4irO5Pi++my+8tiltLH+BD4Dulgg70j2lE8kNDoDpj bJC+QNQMXT78kyZl0PiXZV7Q1g5AjQytamstAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU6M67JmSEoaeUKxvtWpD+49a5JGowHwYDVR0jBBgwFoAU+FjQAAx8RqmGsuuW gV8GriaTqdAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9OR0ZP TkcvLUZqUUFBeDhScW1Hc3V1V2dWOEdyaWFUcWRBLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS8tRmpRQUF4OFJxbUdzdXVXZ1Y4R3JpYVRxZEEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ET05HRk9ORy82TTY3Sm1TRW9hZVVL eHZ0V3BELTQ5YTVKR28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQFn3VAMA0GCSqGSIb3DQEBCwUAA4IBAQASYFErCIitQv2zjx5jahJJF1ltsBpQ KV4birdqXI4PL1mxS2Y4wURLd4ISDXSMsxjCdm31nHONqRYHhIatlvvBiKlP8jim 4CmzQk6rBMnkdvpVSoMLTF5xDAld1ddNg+qpcpvt+iNWgt41msTdxbKLh5LeokgA /JEJqNyPX8IK26JHjF+eYnCpE5IFx4WZ70lpyaLv7tPxQQU2vBTldsX8VbmiShpY 1Dd5Xj2mNaM8I+5H0U31DzJpwbdm/NalQqfBQJ8jgLaqBXdWMeUId5MHwXYuV7Nu noRgcqfMk9TWb3rp7CVHaQ19PxzYpfWvgiTFu5I+Di5qIT8rVaKiVBH4 -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:35 2025 by rpki-client on console.sobornost.net