$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/-LaNSd5bcyNwfvJQEnWW0Y-UPTw.roa File: -LaNSd5bcyNwfvJQEnWW0Y-UPTw.roa (raw, json) Hash identifier: iRDk2Oqad20hAKeEZC3fxkepM/Lnpw5Rxv0JCz7TknQ= Subject key identifier: F8:B6:8D:49:DE:5B:73:23:70:7E:F2:50:12:75:96:D1:8F:94:3D:3C Certificate issuer: /CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Certificate serial: 0EDC Authority key identifier: A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/-LaNSd5bcyNwfvJQEnWW0Y-UPTw.roa Signing time: Mon 10 Feb 2025 14:12:02 +0000 ROA not before: Mon 10 Feb 2025 14:12:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 63897 IP address blocks: 103.135.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3804 (0xedc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Validity Not Before: Feb 10 14:12:02 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F8B68D49DE5B7323707EF250127596D18F943D3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:13:4c:1e:10:67:16:e6:77:af:73:15:79:7d: 2c:72:1c:af:e4:ef:dd:ee:52:64:fd:81:66:7c:57: 73:78:d8:d9:03:cd:e8:34:69:04:bf:f3:a2:69:00: 2c:37:bd:80:c2:e6:72:99:48:be:d9:09:4e:a2:94: 20:79:7a:ee:a8:01:84:c9:14:b5:36:ba:4c:3e:e8: a7:ad:aa:76:69:04:c6:75:05:3e:e4:a3:dc:be:82: 3a:34:c8:21:30:6d:6d:e3:fd:dc:0b:ad:c3:af:54: 95:a2:0d:7e:0f:93:00:ef:39:0f:69:d3:0a:cf:9e: da:35:2e:36:39:ed:d9:c7:79:4a:5f:6c:61:ea:21: 82:cb:1e:91:04:3a:ec:0d:a4:b7:06:44:b6:66:a2: 62:bc:d9:b1:5e:26:2c:52:35:2a:d6:2d:0a:33:6e: 73:db:77:37:98:60:9c:62:3a:cf:ee:65:71:ea:40: 9e:1e:b4:68:96:3f:d0:8c:0d:d4:04:e5:a4:7c:84: 45:77:90:29:26:65:a6:8f:95:31:39:7a:a4:08:f2: 26:8b:d9:4c:8c:02:49:c0:3c:7a:62:8c:45:96:39: 61:89:bf:0d:f1:fe:69:ec:91:d1:15:43:1c:ea:7e: cb:d5:e4:76:6b:91:bf:89:b1:2a:d8:29:5d:ed:ae: a6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B6:8D:49:DE:5B:73:23:70:7E:F2:50:12:75:96:D1:8F:94:3D:3C X509v3 Authority Key Identifier: keyid:A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/-LaNSd5bcyNwfvJQEnWW0Y-UPTw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.135.21.0/24 Signature Algorithm: sha256WithRSAEncryption 09:a0:e4:bd:a4:17:cf:31:51:53:0f:11:f7:9e:64:ca:e3:83: b0:c7:9c:4d:fd:32:63:99:66:46:55:1f:ce:97:66:cb:03:ed: 2a:79:f1:73:c6:09:8a:32:21:d9:d9:47:9a:3e:e9:5e:b4:c5: ae:0d:a9:ef:0c:5f:67:33:5b:92:b2:36:42:13:1e:54:5e:81: 46:8c:d4:a9:32:2b:4b:07:84:c1:8b:e0:8c:48:e8:42:6f:8b: 09:b3:60:41:e8:f8:91:d2:0c:f8:59:72:bf:02:4c:c9:15:23: 25:88:26:1f:4b:1d:4c:e0:24:b2:e7:7e:ab:71:e9:21:c4:35: 64:cc:a7:97:53:42:f8:32:bd:f9:b5:86:43:5e:9b:3c:63:50: 87:01:d2:e2:f8:94:06:ca:68:cd:34:ce:b7:f6:18:90:6f:f0: 13:7c:7d:81:31:8c:b5:45:2b:93:92:bc:8c:6a:88:fe:96:3c: 75:27:86:ae:46:bd:d7:1b:70:19:15:7a:ff:b6:c2:a7:60:92: 5a:7f:ce:c8:19:bf:52:52:bf:ab:3a:c4:9c:49:9d:38:55:90: 9d:29:2f:ba:25:f4:eb:f5:7f:ce:40:26:f0:5d:ff:bf:53:1c: 8e:7a:dc:d7:40:27:97:f5:6d:bd:75:f4:41:f9:a7:31:95:cd: de:74:16:08 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDtwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTE4 RUIzNzdERDAzMThBRTQ2NUQ4RjNGN0Q2RTBBRDBBNEU5RUQxRTAeFw0yNTAyMTAx NDEyMDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY4QjY4RDQ5REU1Qjcz MjM3MDdFRjI1MDEyNzU5NkQxOEY5NDNEM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpE0weEGcW5nevcxV5fSxyHK/k793uUmT9gWZ8V3N42NkDzeg0 aQS/86JpACw3vYDC5nKZSL7ZCU6ilCB5eu6oAYTJFLU2ukw+6KetqnZpBMZ1BT7k o9y+gjo0yCEwbW3j/dwLrcOvVJWiDX4PkwDvOQ9p0wrPnto1LjY57dnHeUpfbGHq IYLLHpEEOuwNpLcGRLZmomK82bFeJixSNSrWLQozbnPbdzeYYJxiOs/uZXHqQJ4e tGiWP9CMDdQE5aR8hEV3kCkmZaaPlTE5eqQI8iaL2UyMAknAPHpijEWWOWGJvw3x /mnskdEVQxzqfsvV5HZrkb+JsSrYKV3trqbbAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQU+LaNSd5bcyNwfvJQEnWW0Y+UPTwwHwYDVR0jBBgwFoAUoY6zd90DGK5GXY8/ fW4K0KTp7R4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ TkdFTi9vWTZ6ZDkwREdLNUdYWThfZlc0SzBLVHA3UjQuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL29ZNnpkOTBER0s1R1hZOF9mVzRLMEtUcDdSNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL01JTkdKSU5HRU4vLUxhTlNkNWJj eU53ZnZKUUVuV1cwWS1VUFR3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGeHFTANBgkqhkiG9w0BAQsFAAOCAQEACaDkvaQXzzFRUw8R955kyuOD sMecTf0yY5lmRlUfzpdmywPtKnnxc8YJijIh2dlHmj7pXrTFrg2p7wxfZzNbkrI2 QhMeVF6BRozUqTIrSweEwYvgjEjoQm+LCbNgQej4kdIM+FlyvwJMyRUjJYgmH0sd TOAksud+q3HpIcQ1ZMynl1NC+DK9+bWGQ16bPGNQhwHS4viUBspozTTOt/YYkG/w E3x9gTGMtUUrk5K8jGqI/pY8dSeGrka91xtwGRV6/7bCp2CSWn/OyBm/UlK/qzrE nEmdOFWQnSkvuiX06/V/zkAm8F3/v1Mcjnrc10Anl/VtvXX0QfmnMZXN3nQWCA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:40 2025 by rpki-client on console.sobornost.net