$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/kRENSVDoLbBA9bgH7XZIffNqPgM.roa File: kRENSVDoLbBA9bgH7XZIffNqPgM.roa (raw, json) Hash identifier: K4//PJVXH0NMYmfESUOzQoeEtKDI3QK4sf5CCTUUzTc= Subject key identifier: 91:11:0D:49:50:E8:2D:B0:40:F5:B8:07:ED:76:48:7D:F3:6A:3E:03 Certificate issuer: /CN=CAA8405CBD8CE6AE1EA3A9DAA6779756EC6EDC42 Certificate serial: 0167 Authority key identifier: CA:A8:40:5C:BD:8C:E6:AE:1E:A3:A9:DA:A6:77:97:56:EC:6E:DC:42 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yqhAXL2M5q4eo6napneXVuxu3EI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/kRENSVDoLbBA9bgH7XZIffNqPgM.roa Signing time: Mon 10 Feb 2025 13:43:45 +0000 ROA not before: Mon 10 Feb 2025 13:43:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 103.99.142.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/yqhAXL2M5q4eo6napneXVuxu3EI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/yqhAXL2M5q4eo6napneXVuxu3EI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/yqhAXL2M5q4eo6napneXVuxu3EI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAA8405CBD8CE6AE1EA3A9DAA6779756EC6EDC42 Validity Not Before: Feb 10 13:43:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=91110D4950E82DB040F5B807ED76487DF36A3E03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bf:12:fd:ff:b8:25:8f:64:86:40:1d:bb:72: d7:1a:3a:02:3f:a5:fd:33:af:e1:52:6e:66:6e:c7: ef:df:9a:7e:83:80:98:b3:57:e8:2b:03:eb:9f:78: 03:14:3d:d4:2b:ff:46:73:e6:cd:24:3e:b1:6a:69: 1a:44:93:16:10:d1:8b:fd:94:7e:04:a8:80:28:8c: 69:25:5e:d8:a4:6e:02:54:f7:78:8e:e2:d0:37:9b: 60:2c:e8:cf:26:98:e9:42:5f:a3:bb:88:01:67:a8: fb:27:10:14:c3:f1:01:8d:d4:c5:59:13:0d:da:55: bb:56:96:d7:50:b1:d2:53:6d:77:a4:55:35:86:39: 55:7d:f2:37:01:27:7e:a9:6e:c6:a6:28:80:91:4e: bb:60:2a:84:37:51:95:57:d5:57:1b:e4:3a:c7:93: c7:52:67:b5:98:b7:24:c3:06:db:62:79:77:0e:53: 44:95:1e:c8:e3:1d:ed:4b:dc:11:7a:7b:4f:02:8a: dd:8e:8c:99:b7:a0:69:91:a4:8e:46:a2:7f:0e:ce: 7f:77:7b:96:d7:b7:10:f1:16:c2:e0:99:aa:4e:b3: 80:71:09:c6:d5:70:f4:5d:51:1a:13:66:bf:fe:47: d8:27:a5:5c:84:fe:32:02:78:72:a8:ca:4a:d2:91: 29:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:11:0D:49:50:E8:2D:B0:40:F5:B8:07:ED:76:48:7D:F3:6A:3E:03 X509v3 Authority Key Identifier: keyid:CA:A8:40:5C:BD:8C:E6:AE:1E:A3:A9:DA:A6:77:97:56:EC:6E:DC:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/yqhAXL2M5q4eo6napneXVuxu3EI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yqhAXL2M5q4eo6napneXVuxu3EI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/kRENSVDoLbBA9bgH7XZIffNqPgM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.99.142.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:bd:de:11:10:d4:ed:9c:33:40:0f:79:96:3b:db:bc:a9:35: 8c:a2:d7:a8:eb:bf:d3:d1:20:af:3f:51:ed:b6:7f:51:9a:bf: 6e:2b:50:69:7f:20:d5:bf:e3:14:5d:f1:60:11:89:30:61:04: e9:dc:5b:98:88:83:8c:1e:9e:15:8a:12:33:62:a5:1f:2b:78: 9b:ab:0f:3f:10:d6:23:ea:cb:ac:45:e4:46:2d:a3:a3:a5:a1: f4:44:b1:13:17:3b:0f:cf:5c:bb:29:5f:1e:3f:95:f6:c5:91: f3:ac:22:e9:2d:45:9c:92:32:fd:46:d2:34:91:8f:ab:08:ef: 0a:52:25:85:f4:b7:93:2a:60:2f:87:41:ea:ca:c3:41:c3:87: b6:2b:01:7a:d4:a1:1d:94:14:6a:f8:9e:c8:39:42:94:05:c3: 8c:96:d0:cb:ba:de:2a:94:c9:fc:99:2d:c0:fb:76:b7:5e:82: 3b:1e:12:13:49:bc:e5:0a:76:fb:fc:9c:94:46:af:d2:4d:7c: e4:ba:f4:8e:6e:54:a3:cc:af:5f:a2:23:0d:75:dc:22:ec:bd: 4e:fa:d5:60:ec:6d:d6:ef:44:aa:e7:d5:ae:f0:9d:ad:c6:70: fe:ef:f3:79:b0:38:75:c1:08:93:40:39:52:23:01:d3:96:68: fa:ac:9e:d0 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0FB ODQwNUNCRDhDRTZBRTFFQTNBOURBQTY3Nzk3NTZFQzZFREM0MjAeFw0yNTAyMTAx MzQzNDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkxMTEwRDQ5NTBFODJE QjA0MEY1QjgwN0VENzY0ODdERjM2QTNFMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6vxL9/7glj2SGQB27ctcaOgI/pf0zr+FSbmZux+/fmn6DgJiz V+grA+ufeAMUPdQr/0Zz5s0kPrFqaRpEkxYQ0Yv9lH4EqIAojGklXtikbgJU93iO 4tA3m2As6M8mmOlCX6O7iAFnqPsnEBTD8QGN1MVZEw3aVbtWltdQsdJTbXekVTWG OVV98jcBJ36pbsamKICRTrtgKoQ3UZVX1Vcb5DrHk8dSZ7WYtyTDBttieXcOU0SV HsjjHe1L3BF6e08Cit2OjJm3oGmRpI5Gon8Ozn93e5bXtxDxFsLgmapOs4BxCcbV cPRdURoTZr/+R9gnpVyE/jICeHKoykrSkSnxAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUkRENSVDoLbBA9bgH7XZIffNqPgMwHwYDVR0jBBgwFoAUyqhAXL2M5q4eo6na pneXVuxu3EIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFVBTkdE RVhJQS95cWhBWEwyTTVxNGVvNm5hcG5lWFZ1eHUzRUkuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL3lxaEFYTDJNNXE0ZW82bmFwbmVYVnV4dTNFSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hVQU5HREVYSUEva1JFTlNWRG9M YkJBOWJnSDdYWklmZk5xUGdNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWdjjjANBgkqhkiG9w0BAQsFAAOCAQEAbr3eERDU7ZwzQA95ljvbvKk1 jKLXqOu/09Egrz9R7bZ/UZq/bitQaX8g1b/jFF3xYBGJMGEE6dxbmIiDjB6eFYoS M2KlHyt4m6sPPxDWI+rLrEXkRi2jo6Wh9ESxExc7D89cuylfHj+V9sWR86wi6S1F nJIy/UbSNJGPqwjvClIlhfS3kypgL4dB6srDQcOHtisBetShHZQUavieyDlClAXD jJbQy7reKpTJ/JktwPt2t16COx4SE0m85Qp2+/yclEav0k185Lr0jm5Uo8yvX6Ij DXXcIuy9TvrVYOxt1u9EqufVrvCdrcZw/u/zebA4dcEIk0A5UiMB05Zo+qye0A== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:39 2025 by rpki-client on console.sobornost.net