$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JFT/0Rck18Sn5SS8SfyvJLkkZlZ1ASA.roa File: 0Rck18Sn5SS8SfyvJLkkZlZ1ASA.roa (raw, json) Hash identifier: BFUUdTK/ExzNrZ0gWJD6fh1807QOfq333o+RUVRfbtk= Subject key identifier: D1:17:24:D7:C4:A7:E5:24:BC:49:FC:AF:24:B9:24:66:56:75:01:20 Certificate issuer: /CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595 Certificate serial: 0186 Authority key identifier: 62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/0Rck18Sn5SS8SfyvJLkkZlZ1ASA.roa Signing time: Mon 10 Feb 2025 13:42:19 +0000 ROA not before: Mon 10 Feb 2025 13:42:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38136 IP address blocks: 103.236.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595 Validity Not Before: Feb 10 13:42:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D11724D7C4A7E524BC49FCAF24B9246656750120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b3:68:71:a4:54:6c:b4:66:d2:c2:0a:c6:af: e4:a0:85:c6:c7:71:5c:f2:65:26:67:68:dd:91:15: 78:75:9b:ba:52:3a:03:d4:00:0f:f7:82:db:b4:0c: 71:43:77:10:e4:ca:29:f5:8e:ab:3e:0a:2c:05:f0: 31:3d:13:9a:07:53:a3:30:f0:07:60:0d:c6:7a:9e: a5:cc:97:a0:53:18:3d:92:57:53:7e:30:28:04:0f: 54:e3:67:bd:05:8d:93:8e:ed:e6:d5:b8:8e:c6:b3: 3a:87:ae:4c:17:95:88:fb:44:e2:e0:f5:4d:65:34: 52:ba:3e:b5:fd:05:f5:61:4a:6f:eb:a4:eb:80:8d: f1:a9:86:e8:23:9b:0d:dd:6a:e4:f2:8f:3f:b4:13: f6:80:df:be:50:52:f1:2d:a5:b8:0b:74:34:a8:60: e6:0a:88:be:ad:6a:d8:33:94:ad:3b:d5:9e:56:e8: 0e:76:76:6c:b0:7d:6e:26:f4:fd:61:ff:f5:79:81: 44:33:f0:dc:ba:f0:a4:21:b8:b1:c0:ca:d7:d3:fb: 96:36:42:1c:98:58:f4:11:64:f4:da:2b:e8:fe:57: 40:34:f7:de:95:32:20:35:b0:40:48:fd:b3:cc:3d: 6e:96:ec:a1:34:c5:d2:12:a1:45:38:3d:6d:4c:bf: 22:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:17:24:D7:C4:A7:E5:24:BC:49:FC:AF:24:B9:24:66:56:75:01:20 X509v3 Authority Key Identifier: keyid:62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/0Rck18Sn5SS8SfyvJLkkZlZ1ASA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.226.0/23 Signature Algorithm: sha256WithRSAEncryption 51:b8:c1:d2:f7:d6:cf:aa:fd:0b:2b:03:64:b5:4f:66:e6:32: 8f:8e:a7:48:c3:96:fc:2e:a7:b1:6d:91:2d:2f:a5:d7:8a:25: 38:3d:bd:1e:75:6f:06:bf:80:be:4a:d0:0f:eb:ba:b6:b0:99: 2b:19:6b:5d:c4:b6:c6:d3:88:73:72:40:9f:61:58:9b:08:3f: 83:7f:6e:07:4b:a6:bf:66:03:cd:63:63:1d:27:cd:a1:99:9c: 0a:e0:43:d8:29:b0:8d:72:f8:f3:45:af:e3:59:f3:80:c7:bf: c3:7a:27:ce:54:76:17:62:c8:86:62:cb:c4:83:cf:91:ac:18: f7:20:db:f1:55:b2:cc:2a:00:04:92:4c:c4:1c:26:a3:c2:3f: 2d:98:07:4d:8d:b3:f8:3e:a9:d5:9d:1f:28:2d:81:02:47:90: d8:36:c9:56:6a:71:e9:0d:66:df:6d:e9:de:60:c5:d1:26:be: 7c:48:94:57:e9:2f:73:c7:4b:db:21:bd:61:8a:28:39:a5:42: 8b:e5:fd:b0:d9:77:be:74:e9:b5:b0:3a:6d:96:d4:46:2b:86: b7:52:58:6f:6e:c5:0d:41:7e:4d:60:f6:c0:30:af:ab:74:c2: 5c:34:81:13:39:0c:58:27:92:3e:df:f0:37:23:60:c4:39:81: 8f:c6:c4:1a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjI3 RDY3NUZGNUUyQzhCQTkwRjRCNjU1QjEwOEI2OTI1REFGMTU5NTAeFw0yNTAyMTAx MzQyMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQxMTcyNEQ3QzRBN0U1 MjRCQzQ5RkNBRjI0QjkyNDY2NTY3NTAxMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWs2hxpFRstGbSwgrGr+SghcbHcVzyZSZnaN2RFXh1m7pSOgPU AA/3gtu0DHFDdxDkyin1jqs+CiwF8DE9E5oHU6Mw8AdgDcZ6nqXMl6BTGD2SV1N+ MCgED1TjZ70FjZOO7ebVuI7GszqHrkwXlYj7ROLg9U1lNFK6PrX9BfVhSm/rpOuA jfGphugjmw3dauTyjz+0E/aA375QUvEtpbgLdDSoYOYKiL6tatgzlK071Z5W6A52 dmywfW4m9P1h//V5gUQz8Ny68KQhuLHAytfT+5Y2QhyYWPQRZPTaK+j+V0A0996V MiA1sEBI/bPMPW6W7KE0xdISoUU4PW1MvyK7AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU0Rck18Sn5SS8SfyvJLkkZlZ1ASAwHwYDVR0jBBgwFoAUYn1nX/XiyLqQ9LZV sQi2kl2vFZUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSkZUL1lu MW5YX1hpeUxxUTlMWlZzUWkya2wydkZaVS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev WW4xblhfWGl5THFROUxaVnNRaTJrbDJ2RlpVLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSkZULzBSY2sxOFNuNVNTOFNmeXZKTGtrWmxa MUFTQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn7OIwDQYJ KoZIhvcNAQELBQADggEBAFG4wdL31s+q/QsrA2S1T2bmMo+Op0jDlvwup7FtkS0v pdeKJTg9vR51bwa/gL5K0A/rurawmSsZa13EtsbTiHNyQJ9hWJsIP4N/bgdLpr9m A81jYx0nzaGZnArgQ9gpsI1y+PNFr+NZ84DHv8N6J85UdhdiyIZiy8SDz5GsGPcg 2/FVsswqAASSTMQcJqPCPy2YB02Ns/g+qdWdHygtgQJHkNg2yVZqcekNZt9t6d5g xdEmvnxIlFfpL3PHS9shvWGKKDmlQovl/bDZd7506bWwOm2W1EYrhrdSWG9uxQ1B fk1g9sAwr6t0wlw0gRM5DFgnkj7f8DcjYMQ5gY/GxBo= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:39 2025 by rpki-client on console.sobornost.net