$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/rD5Vxk_ynOoj6-6JFCzfQBQldRM.roa File: rD5Vxk_ynOoj6-6JFCzfQBQldRM.roa (raw, json) Hash identifier: 54MeS1mlwqytYpiLo8OUyb1hGtFaPS0BAz6Lrllk5Is= Subject key identifier: AC:3E:55:C6:4F:F2:9C:EA:23:EB:EE:89:14:2C:DF:40:14:25:75:13 Certificate issuer: /CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Certificate serial: 0ED6 Authority key identifier: A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/rD5Vxk_ynOoj6-6JFCzfQBQldRM.roa Signing time: Mon 10 Feb 2025 14:12:00 +0000 ROA not before: Mon 10 Feb 2025 14:12:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 5065 IP address blocks: 103.135.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3798 (0xed6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Validity Not Before: Feb 10 14:12:00 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AC3E55C64FF29CEA23EBEE89142CDF4014257513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:e3:64:43:d2:0f:71:9f:78:23:c7:c6:f2: b1:b0:61:4c:fa:c6:53:5a:c5:50:cc:98:69:25:0d: 5e:ed:30:7e:e3:8e:e9:5e:91:50:9f:fd:b2:d7:32: d7:4c:93:88:25:76:7c:3b:b9:db:16:ae:7b:db:49: f2:68:82:18:dc:54:99:11:e6:7f:46:3f:28:65:67: 2b:b0:2e:0e:e4:89:2b:7c:40:dd:57:92:17:f3:2e: 1e:39:0f:e5:a2:b7:3b:96:d7:bb:60:b5:c7:b4:89: 35:35:f3:47:45:9e:b1:46:ac:cf:2e:4d:3c:bd:6d: 8b:2c:01:69:73:b8:9f:7c:ef:96:d9:49:2d:02:9a: e6:a9:3b:d4:b8:34:ed:b1:bd:0b:5d:37:e2:95:41: 37:4f:4f:3f:21:5b:46:81:50:46:b9:b7:64:b0:ed: 9a:7c:86:ff:87:98:e6:aa:b4:92:f1:f3:27:5f:c7: 37:92:6f:9b:67:47:0b:36:ed:c4:33:22:81:2e:ce: a0:32:07:de:be:48:88:f4:18:68:2a:b8:e7:5d:7e: 2f:31:4f:f1:c6:64:c9:39:5f:f7:bd:97:86:1a:96: 26:d4:92:74:f1:ec:28:70:92:80:87:eb:87:02:28: 92:b0:2e:38:0d:b3:27:9d:2a:c2:a1:3b:56:20:3d: 5f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3E:55:C6:4F:F2:9C:EA:23:EB:EE:89:14:2C:DF:40:14:25:75:13 X509v3 Authority Key Identifier: keyid:A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/rD5Vxk_ynOoj6-6JFCzfQBQldRM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.135.22.0/23 Signature Algorithm: sha256WithRSAEncryption 50:e5:2d:ba:98:b7:1b:e6:43:41:16:58:2a:bc:20:fe:5f:d4: 2c:66:d4:41:43:58:5b:28:7b:af:d0:e0:9d:f4:85:fe:d2:0c: 74:cb:a1:fe:dc:2e:87:26:bc:f5:69:87:2a:59:de:54:8f:30: 63:0e:53:ae:26:0f:24:1e:95:e1:7c:84:f9:6c:ab:cd:d1:5d: 98:4d:b9:5d:6a:1e:0f:b7:f8:c2:db:01:41:e8:21:5f:98:7a: 02:e8:bd:b6:92:ca:54:9b:a8:62:8c:a3:71:65:5f:10:63:bd: 6c:58:0a:0a:e1:da:83:71:ca:5c:86:1a:65:9a:56:b1:6d:6c: 70:b4:92:29:0c:26:ee:48:70:94:ea:b7:fe:76:3e:0a:ec:24: 8a:59:aa:a7:23:3f:44:4e:02:f6:bc:ff:83:a2:8e:9a:f8:ca: 30:9c:8a:51:a7:40:3b:4c:f2:d5:47:a1:f5:dc:99:3f:13:35: eb:49:5a:3e:12:c2:d1:05:30:ab:f6:79:9d:ee:38:03:74:26: 79:6f:50:3c:84:ca:07:b1:a1:6d:db:50:44:2b:e6:37:17:4b: 3b:b3:84:f5:2f:7d:18:ce:6a:70:66:01:55:f8:23:ba:fa:50: 18:a7:46:8c:79:6d:11:ce:2b:9e:3e:60:04:19:88:39:0f:f9: 30:34:74:52 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDtYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTE4 RUIzNzdERDAzMThBRTQ2NUQ4RjNGN0Q2RTBBRDBBNEU5RUQxRTAeFw0yNTAyMTAx NDEyMDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFDM0U1NUM2NEZGMjlD RUEyM0VCRUU4OTE0MkNERjQwMTQyNTc1MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3MONkQ9IPcZ94I8fG8rGwYUz6xlNaxVDMmGklDV7tMH7jjule kVCf/bLXMtdMk4gldnw7udsWrnvbSfJoghjcVJkR5n9GPyhlZyuwLg7kiSt8QN1X khfzLh45D+WitzuW17tgtce0iTU180dFnrFGrM8uTTy9bYssAWlzuJ9875bZSS0C muapO9S4NO2xvQtdN+KVQTdPTz8hW0aBUEa5t2Sw7Zp8hv+HmOaqtJLx8ydfxzeS b5tnRws27cQzIoEuzqAyB96+SIj0GGgquOddfi8xT/HGZMk5X/e9l4YalibUknTx 7ChwkoCH64cCKJKwLjgNsyedKsKhO1YgPV9rAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUrD5Vxk/ynOoj6+6JFCzfQBQldRMwHwYDVR0jBBgwFoAUoY6zd90DGK5GXY8/ fW4K0KTp7R4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ TkdFTi9vWTZ6ZDkwREdLNUdYWThfZlc0SzBLVHA3UjQuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL29ZNnpkOTBER0s1R1hZOF9mVzRLMEtUcDdSNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL01JTkdKSU5HRU4vckQ1VnhrX3lu T29qNi02SkZDemZRQlFsZFJNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWeHFjANBgkqhkiG9w0BAQsFAAOCAQEAUOUtupi3G+ZDQRZYKrwg/l/U LGbUQUNYWyh7r9DgnfSF/tIMdMuh/twuhya89WmHKlneVI8wYw5TriYPJB6V4XyE +WyrzdFdmE25XWoeD7f4wtsBQeghX5h6Aui9tpLKVJuoYoyjcWVfEGO9bFgKCuHa g3HKXIYaZZpWsW1scLSSKQwm7khwlOq3/nY+CuwkilmqpyM/RE4C9rz/g6KOmvjK MJyKUadAO0zy1Ueh9dyZPxM160laPhLC0QUwq/Z5ne44A3QmeW9QPITKB7GhbdtQ RCvmNxdLO7OE9S99GM5qcGYBVfgjuvpQGKdGjHltEc4rnj5gBBmIOQ/5MDR0Ug== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:40 2025 by rpki-client on console.sobornost.net