$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/b-TYav7zHey8PKOW7Wx8DsCX3Dg.roa File: b-TYav7zHey8PKOW7Wx8DsCX3Dg.roa (raw, json) Hash identifier: /9tqoPWUNlxn3/P68aYLj0sPUsJb/Wf1BCpHZi5kQMI= Subject key identifier: 6F:E4:D8:6A:FE:F3:1D:EC:BC:3C:A3:96:ED:6C:7C:0E:C0:97:DC:38 Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB Certificate serial: 0D17 Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/b-TYav7zHey8PKOW7Wx8DsCX3Dg.roa Signing time: Mon 10 Feb 2025 14:04:33 +0000 ROA not before: Mon 10 Feb 2025 14:04:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18046 IP address blocks: 103.234.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3351 (0xd17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB Validity Not Before: Feb 10 14:04:33 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6FE4D86AFEF31DECBC3CA396ED6C7C0EC097DC38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:37:08:1e:68:09:7d:6d:ee:b8:16:f0:2e:a1: 9c:a1:7a:5e:60:43:80:d2:5b:39:8b:d7:98:a5:27: 34:a8:26:87:65:81:f0:c9:63:f6:35:89:45:f7:55: 51:fa:ba:5c:98:b5:d3:5d:96:bd:53:58:13:27:89: cd:a2:ab:4d:8c:2f:84:f7:04:e8:c4:a7:17:33:d0: ce:16:8c:f0:1d:a9:bd:df:7f:17:ce:08:e0:52:b4: c2:d1:5b:c3:5d:a8:cb:70:97:27:5a:98:e2:de:98: bc:30:6b:94:1a:be:e2:6b:45:ac:3e:9c:32:83:9e: 8b:b2:3f:54:79:97:47:d0:2b:8c:48:75:df:7f:74: 28:51:54:d8:0a:9e:d0:a7:d6:8c:45:dd:7f:0d:0e: 81:1e:8b:6a:99:44:d5:d9:f1:e6:44:4a:02:65:a8: b6:bd:c5:9d:ec:1c:a8:d0:1a:84:32:ae:95:2d:21: c0:a7:88:c7:de:bc:41:c6:cd:5c:9c:27:c9:e4:43: be:07:f1:fd:90:33:8e:71:61:c4:54:11:d4:b3:90: ab:03:cb:49:b0:ab:fb:4d:1b:51:55:a4:f7:75:89: 0c:38:44:8d:30:33:63:ce:15:72:21:c1:18:36:ca: 38:47:e1:47:97:59:42:b2:58:bc:97:89:56:da:b1: 1d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E4:D8:6A:FE:F3:1D:EC:BC:3C:A3:96:ED:6C:7C:0E:C0:97:DC:38 X509v3 Authority Key Identifier: keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/b-TYav7zHey8PKOW7Wx8DsCX3Dg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.234.76.0/22 Signature Algorithm: sha256WithRSAEncryption 65:1a:e4:13:e0:a3:9a:d9:a3:97:b3:2f:3a:91:08:5a:54:66: 02:6d:21:49:78:1b:65:ed:fe:d6:c9:5e:90:f0:85:e5:36:2a: 24:8e:e7:2e:14:e1:83:a9:5f:74:da:d1:35:f8:3d:2f:3e:13: f9:4b:e7:06:1a:a0:c6:63:d2:28:4a:4a:da:b4:a6:ab:f9:73: b5:17:0b:78:ba:72:d0:3a:58:78:c4:cb:52:47:61:7e:93:b0: 6a:26:7a:cc:ea:db:6f:50:fe:a1:3a:65:ca:33:07:49:0e:98: c6:87:51:8b:6b:9d:b5:01:0d:f1:c1:4e:6f:f0:eb:cb:10:26: f6:9e:6a:c4:e6:66:d6:8e:53:74:0d:f8:7a:0e:33:59:14:53: 35:51:ed:9d:51:e3:3a:a8:8f:e6:2d:40:e6:31:ec:be:39:a3: ad:09:be:5b:07:fe:66:0d:7f:80:85:1b:9f:ce:80:04:98:81: 72:ee:6e:d7:fd:60:30:0f:7d:91:95:9c:68:b2:91:15:b8:f0: 73:cd:fc:ca:e1:c0:c8:3a:3a:4c:1d:c9:1e:8e:7f:ce:eb:26: c1:bc:e3:26:4e:0d:05:73:0a:4f:a5:6c:9e:54:4d:a6:38:77: 03:cd:c1:8b:af:b4:d8:78:03:c6:fc:f5:73:e0:6a:36:6b:0a: ea:d8:2b:5e -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDRcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEM3 ODk2MTY0MkEwNEJFMTMyNzA4REIxOTNEN0JBOTE2QjJCNjdDQjAeFw0yNTAyMTAx NDA0MzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZGRTREODZBRkVGMzFE RUNCQzNDQTM5NkVENkM3QzBFQzA5N0RDMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrNwgeaAl9be64FvAuoZyhel5gQ4DSWzmL15ilJzSoJodlgfDJ Y/Y1iUX3VVH6ulyYtdNdlr1TWBMnic2iq02ML4T3BOjEpxcz0M4WjPAdqb3ffxfO COBStMLRW8NdqMtwlydamOLemLwwa5QavuJrRaw+nDKDnouyP1R5l0fQK4xIdd9/ dChRVNgKntCn1oxF3X8NDoEei2qZRNXZ8eZESgJlqLa9xZ3sHKjQGoQyrpUtIcCn iMfevEHGzVycJ8nkQ74H8f2QM45xYcRUEdSzkKsDy0mwq/tNG1FVpPd1iQw4RI0w M2POFXIhwRg2yjhH4UeXWUKyWLyXiVbasR2bAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUb+TYav7zHey8PKOW7Wx8DsCX3DgwHwYDVR0jBBgwFoAUDHiWFkKgS+EycI2x k9e6kWsrZ8swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9OR0ZP TkcvREhpV0ZrS2dTLUV5Y0kyeGs5ZTZrV3NyWjhzLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9ESGlXRmtLZ1MtRXljSTJ4azllNmtXc3JaOHMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ET05HRk9ORy9iLVRZYXY3ekhleThQ S09XN1d4OERzQ1gzRGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ+pMMA0GCSqGSIb3DQEBCwUAA4IBAQBlGuQT4KOa2aOXsy86kQhaVGYCbSFJ eBtl7f7WyV6Q8IXlNiokjucuFOGDqV902tE1+D0vPhP5S+cGGqDGY9IoSkratKar +XO1Fwt4unLQOlh4xMtSR2F+k7BqJnrM6ttvUP6hOmXKMwdJDpjGh1GLa521AQ3x wU5v8OvLECb2nmrE5mbWjlN0Dfh6DjNZFFM1Ue2dUeM6qI/mLUDmMey+OaOtCb5b B/5mDX+AhRufzoAEmIFy7m7X/WAwD32RlZxospEVuPBzzfzK4cDIOjpMHckejn/O 6ybBvOMmTg0FcwpPpWyeVE2mOHcDzcGLr7TYeAPG/PVz4Go2awrq2Cte -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:35 2025 by rpki-client on console.sobornost.net