$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/LA6sc1oRcozl3URH779RNpgaSZg.roa File: LA6sc1oRcozl3URH779RNpgaSZg.roa (raw, json) Hash identifier: n3hhwJKGxHfDJD59kqcJ61h7oW4CPzvfuzSrzHLR8i4= Subject key identifier: 2C:0E:AC:73:5A:11:72:8C:E5:DD:44:47:EF:BF:51:36:98:1A:49:98 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 122C Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/LA6sc1oRcozl3URH779RNpgaSZg.roa Signing time: Mon 10 Feb 2025 14:28:08 +0000 ROA not before: Mon 10 Feb 2025 14:28:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18412 IP address blocks: 2401:e180:8960::/44 maxlen: 44 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4652 (0x122c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:08 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2C0EAC735A11728CE5DD4447EFBF5136981A4998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ad:b7:4d:47:26:0e:44:c7:25:50:58:77:24: dc:b2:28:ec:db:4c:88:0b:aa:ef:03:39:a6:34:2b: 30:bd:87:de:bd:f4:dc:96:ac:ce:b8:e6:75:d0:cb: 38:18:12:02:56:6c:f0:48:20:43:f0:1f:6d:d8:6f: 86:59:63:e7:b7:05:27:c8:22:2d:38:2b:34:03:9d: 74:53:c6:19:90:bf:34:28:ab:83:bd:67:29:fe:4b: d1:5c:51:6e:59:ab:93:53:b5:b6:cb:fa:be:d7:4e: 67:1b:b9:a2:61:fe:e8:a1:3c:d8:fd:1e:ca:df:08: 8f:d1:f6:73:3d:9a:5f:98:12:4c:66:33:52:bf:2d: 17:52:ea:a1:9a:cf:79:46:52:06:14:b6:cd:1e:e8: 49:20:0d:be:26:69:de:c6:69:25:62:17:8e:fb:65: 92:38:84:f5:7c:b2:81:bd:a5:e9:e3:b2:ad:de:dc: fc:89:6c:d7:28:66:70:73:db:ff:9e:17:8b:c8:3e: 6d:1b:12:73:dd:de:94:3f:db:ba:72:d9:24:08:34: 60:e6:88:e8:c5:4d:f7:31:2c:f7:c7:c5:06:d1:e7: 64:91:4a:fc:81:8f:06:47:df:ee:c0:53:fd:22:a9: 1c:53:22:f0:40:45:ef:11:c2:18:bb:81:6c:c1:ba: cb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0E:AC:73:5A:11:72:8C:E5:DD:44:47:EF:BF:51:36:98:1A:49:98 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/LA6sc1oRcozl3URH779RNpgaSZg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:e180:8960::/44 Signature Algorithm: sha256WithRSAEncryption 89:a0:7e:2a:2b:96:4b:ae:cd:13:42:19:a3:6b:59:2d:43:69: d9:c0:98:84:2e:c5:57:44:01:9a:93:d3:71:a8:e8:29:99:f2: c2:1e:84:ca:e9:e7:7d:89:02:b8:18:bd:d7:d0:ce:85:a5:cf: e8:4b:26:4e:e1:51:c7:74:ad:0d:c3:70:a1:49:60:60:11:bf: f9:9b:02:b0:91:aa:70:30:32:8d:e8:58:a4:21:e1:2a:7d:f1: 56:8d:f7:6a:f6:1f:2e:ef:52:1c:b9:fd:b9:56:88:37:66:da: f1:77:cc:26:cd:c9:15:97:c0:f9:45:ec:95:6d:e8:9d:2d:43: 9f:4e:e7:38:22:18:a2:c4:a5:95:bd:b3:f4:4b:00:e3:4a:9b: 7d:ad:0c:da:b7:b9:77:bf:48:59:31:af:04:60:89:ea:a0:e7: 0f:a2:18:8c:c7:aa:bf:5c:c4:a2:13:51:df:1a:fe:d3:43:dc: 73:54:63:0f:ae:71:a5:0f:fe:80:54:43:f5:34:4e:da:43:e0: b2:cb:57:3e:0a:8c:b6:23:af:73:84:6b:22:7f:fa:6f:d3:85: 57:f6:ff:30:d7:0c:e7:59:3f:1e:2c:e4:0d:a5:25:6f:c4:a1: d0:5d:79:62:ac:89:6a:28:86:ab:be:03:12:d7:c8:77:48:06: 31:fb:d8:f6 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEiwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJDMEVBQzczNUExMTcy OENFNURENDQ0N0VGQkY1MTM2OTgxQTQ5OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGrbdNRyYORMclUFh3JNyyKOzbTIgLqu8DOaY0KzC9h9699NyW rM645nXQyzgYEgJWbPBIIEPwH23Yb4ZZY+e3BSfIIi04KzQDnXRTxhmQvzQoq4O9 Zyn+S9FcUW5Zq5NTtbbL+r7XTmcbuaJh/uihPNj9HsrfCI/R9nM9ml+YEkxmM1K/ LRdS6qGaz3lGUgYUts0e6EkgDb4mad7GaSViF477ZZI4hPV8soG9penjsq3e3PyJ bNcoZnBz2/+eF4vIPm0bEnPd3pQ/27py2SQINGDmiOjFTfcxLPfHxQbR52SRSvyB jwZH3+7AU/0iqRxTIvBARe8Rwhi7gWzBusuTAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQULA6sc1oRcozl3URH779RNpgaSZgwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0xBNnNjMW9SY296bDNVUkg3NzlSTnBn YVNaZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQkAeGAiWAw DQYJKoZIhvcNAQELBQADggEBAImgfiorlkuuzRNCGaNrWS1DadnAmIQuxVdEAZqT 03Go6CmZ8sIehMrp532JArgYvdfQzoWlz+hLJk7hUcd0rQ3DcKFJYGARv/mbArCR qnAwMo3oWKQh4Sp98VaN92r2Hy7vUhy5/blWiDdm2vF3zCbNyRWXwPlF7JVt6J0t Q59O5zgiGKLEpZW9s/RLAONKm32tDNq3uXe/SFkxrwRgieqg5w+iGIzHqr9cxKIT Ud8a/tND3HNUYw+ucaUP/oBUQ/U0TtpD4LLLVz4KjLYjr3OEayJ/+m/ThVf2/zDX DOdZPx4s5A2lJW/EodBdeWKsiWoohqu+AxLXyHdIBjH72PY= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:36 2025 by rpki-client on console.sobornost.net