$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LEOLCY/PNfLD_RAnDBqQfuIVb9AWf90_vg.roa File: PNfLD_RAnDBqQfuIVb9AWf90_vg.roa (raw, json) Hash identifier: tzKTqPFct6t0ceXQJhRDvpaj+ec1b9oQW3JxGu/oL9k= Subject key identifier: 3C:D7:CB:0F:F4:40:9C:30:6A:41:FB:88:55:BF:40:59:FF:74:FE:F8 Certificate issuer: /CN=3D685193B8FAF2537E5A1385E03D19FE89742A8B Certificate serial: 0C2B Authority key identifier: 3D:68:51:93:B8:FA:F2:53:7E:5A:13:85:E0:3D:19:FE:89:74:2A:8B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PWhRk7j68lN-WhOF4D0Z_ol0Kos.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEOLCY/PNfLD_RAnDBqQfuIVb9AWf90_vg.roa Signing time: Mon 10 Feb 2025 14:20:39 +0000 ROA not before: Mon 10 Feb 2025 14:20:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9304 IP address blocks: 103.17.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEOLCY/PWhRk7j68lN-WhOF4D0Z_ol0Kos.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LEOLCY/PWhRk7j68lN-WhOF4D0Z_ol0Kos.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PWhRk7j68lN-WhOF4D0Z_ol0Kos.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 18:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3115 (0xc2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D685193B8FAF2537E5A1385E03D19FE89742A8B Validity Not Before: Feb 10 14:20:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3CD7CB0FF4409C306A41FB8855BF4059FF74FEF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:15:cc:ed:51:9f:c6:f3:ac:b5:c0:9c:ed:11: 0b:f3:a6:b5:67:73:20:4a:cc:ee:df:c3:b0:84:e3: 06:63:60:49:3c:f0:08:b3:33:5e:d5:4e:a2:d3:97: 6a:34:38:ba:39:a9:fe:56:f6:65:a9:45:ad:ee:eb: 84:48:95:b2:06:63:90:b1:1c:bc:02:cb:15:df:00: 01:2b:87:27:b6:3d:3f:a5:78:19:cd:e0:c8:7f:4c: a0:02:a8:2b:78:c3:93:9a:bd:79:f8:f9:41:9b:e1: 95:4a:c9:4d:44:00:10:3c:5f:2c:06:5d:84:cb:9f: 20:41:4f:bf:b2:22:f8:0b:46:b5:8d:9c:b4:52:1c: d0:6b:06:d5:c8:72:1d:91:50:16:c1:e3:89:b7:dc: 5a:fe:9d:6b:75:6c:f4:89:95:0e:50:ad:4d:6b:ff: ea:14:d9:4d:16:fd:74:ec:4b:eb:4a:ba:e2:33:66: 8e:d0:43:db:32:44:fe:db:98:48:16:60:e4:0d:c5: cb:aa:2f:11:32:e1:68:36:e7:15:5e:4a:15:1f:ef: 34:00:0c:24:fa:df:d8:f4:d1:e4:c5:83:0b:86:18: a6:bf:6b:c5:18:68:fb:f9:21:51:ae:c6:3e:5a:1a: f8:8c:ab:f8:f0:ee:13:bc:b0:1c:42:e6:30:58:4e: a8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D7:CB:0F:F4:40:9C:30:6A:41:FB:88:55:BF:40:59:FF:74:FE:F8 X509v3 Authority Key Identifier: keyid:3D:68:51:93:B8:FA:F2:53:7E:5A:13:85:E0:3D:19:FE:89:74:2A:8B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEOLCY/PWhRk7j68lN-WhOF4D0Z_ol0Kos.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PWhRk7j68lN-WhOF4D0Z_ol0Kos.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEOLCY/PNfLD_RAnDBqQfuIVb9AWf90_vg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.17.240.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:60:4f:bb:7f:60:12:a4:b5:2c:de:7a:22:2f:a7:af:c9:bb: 03:76:09:c7:df:85:96:9d:c9:61:11:83:71:e1:34:75:83:c8: e6:da:44:6b:b3:d0:c2:96:f5:29:45:d2:50:3c:a6:74:5e:11: 88:8a:0b:c7:0a:3b:b1:1d:c2:a8:0f:4c:e7:6d:9d:0a:e5:cc: 48:5b:80:20:46:91:c5:ce:51:30:aa:c8:8f:e2:82:b7:aa:78: 7e:5c:63:24:2f:23:eb:1d:8f:c2:de:15:0c:d9:14:b2:d2:44: 07:ec:59:53:5d:df:67:93:3e:e0:a7:f8:ae:fc:08:1b:90:71: 0d:09:1c:9a:36:28:04:07:4a:fe:dc:12:dd:8b:13:a0:b2:61: 3b:6b:55:1f:ae:75:ce:d4:33:87:70:3d:c4:f5:53:df:aa:6e: dc:62:19:62:a6:ab:29:64:f1:54:76:7d:5b:ed:9b:47:47:24: 86:1c:5b:eb:74:1d:24:e7:ab:92:d5:d5:b3:22:cf:f4:06:bf: f8:ed:82:5e:bc:17:32:6a:61:7c:b3:33:16:23:e7:f8:20:d2: 71:6c:3a:91:8e:71:b9:66:51:25:58:7a:70:b6:e5:21:ef:62: f1:1b:3d:65:b8:ef:8c:fc:0a:a7:bc:4b:5f:e0:4d:45:d7:8b: d5:fe:f6:b3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDCswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0Q2 ODUxOTNCOEZBRjI1MzdFNUExMzg1RTAzRDE5RkU4OTc0MkE4QjAeFw0yNTAyMTAx NDIwMzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNDRDdDQjBGRjQ0MDlD MzA2QTQxRkI4ODU1QkY0MDU5RkY3NEZFRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2FcztUZ/G86y1wJztEQvzprVncyBKzO7fw7CE4wZjYEk88Aiz M17VTqLTl2o0OLo5qf5W9mWpRa3u64RIlbIGY5CxHLwCyxXfAAErhye2PT+leBnN 4Mh/TKACqCt4w5OavXn4+UGb4ZVKyU1EABA8XywGXYTLnyBBT7+yIvgLRrWNnLRS HNBrBtXIch2RUBbB44m33Fr+nWt1bPSJlQ5QrU1r/+oU2U0W/XTsS+tKuuIzZo7Q Q9syRP7bmEgWYOQNxcuqLxEy4Wg25xVeShUf7zQADCT639j00eTFgwuGGKa/a8UY aPv5IVGuxj5aGviMq/jw7hO8sBxC5jBYTqhpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPNfLD/RAnDBqQfuIVb9AWf90/vgwHwYDVR0jBBgwFoAUPWhRk7j68lN+WhOF 4D0Z/ol0KoswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVPTENZ L1BXaFJrN2o2OGxOLVdoT0Y0RDBaX29sMEtvcy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvUFdoUms3ajY4bE4tV2hPRjREMFpfb2wwS29zLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVPTENZL1BOZkxEX1JBbkRCcVFmdUlW YjlBV2Y5MF92Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn EfAwDQYJKoZIhvcNAQELBQADggEBAGtgT7t/YBKktSzeeiIvp6/JuwN2CcffhZad yWERg3HhNHWDyObaRGuz0MKW9SlF0lA8pnReEYiKC8cKO7EdwqgPTOdtnQrlzEhb gCBGkcXOUTCqyI/igreqeH5cYyQvI+sdj8LeFQzZFLLSRAfsWVNd32eTPuCn+K78 CBuQcQ0JHJo2KAQHSv7cEt2LE6CyYTtrVR+udc7UM4dwPcT1U9+qbtxiGWKmqylk 8VR2fVvtm0dHJIYcW+t0HSTnq5LV1bMiz/QGv/jtgl68FzJqYXyzMxYj5/gg0nFs OpGOcblmUSVYenC25SHvYvEbPWW474z8Cqe8S1/gTUXXi9X+9rM= -----END CERTIFICATE-----Generated at Thu Apr 24 15:53:52 2025 by rpki-client on console.sobornost.net