$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/b17sTrvu7TFo_gu6dF7NeKkKgzo.roa File: b17sTrvu7TFo_gu6dF7NeKkKgzo.roa (raw, json) Hash identifier: dTNwnNXHOdlnqlBQhLJDAqrsFeQTb+KepeWSqYln5s4= Subject key identifier: 6F:5E:EC:4E:BB:EE:ED:31:68:FE:0B:BA:74:5E:CD:78:A9:0A:83:3A Certificate issuer: /CN=34F47974E551C20236C3D89395F57F3BA02B57B7 Certificate serial: 0C44 Authority key identifier: 34:F4:79:74:E5:51:C2:02:36:C3:D8:93:95:F5:7F:3B:A0:2B:57:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/b17sTrvu7TFo_gu6dF7NeKkKgzo.roa Signing time: Mon 10 Feb 2025 14:03:56 +0000 ROA not before: Mon 10 Feb 2025 14:03:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 214766 IP address blocks: 103.129.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/NPR5dOVRwgI2w9iTlfV_O6ArV7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/NPR5dOVRwgI2w9iTlfV_O6ArV7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3140 (0xc44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34F47974E551C20236C3D89395F57F3BA02B57B7 Validity Not Before: Feb 10 14:03:56 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6F5EEC4EBBEEED3168FE0BBA745ECD78A90A833A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:70:b0:9e:60:6f:b5:27:09:89:1f:b8:ab:9e: 33:0d:c9:a0:b6:a1:fc:44:dd:65:47:05:d5:6a:89: 02:7f:72:75:cf:90:22:db:64:e4:56:c7:c5:89:d1: 7f:4a:1a:b2:c4:6f:0b:83:73:02:32:9c:8e:f9:67: 4c:f7:3c:ca:a0:d1:90:b8:5c:38:24:43:0a:2d:8e: cc:45:73:ef:a7:53:24:43:9e:ab:bc:ed:da:96:0a: 8f:40:a2:4f:f7:3d:96:9b:18:73:5c:68:61:2c:3c: 9a:b3:9c:6a:e9:da:15:29:d2:a6:e9:8d:5f:7c:03: 6b:ed:b1:12:4c:80:ed:ba:f9:ed:43:bf:77:7e:59: 17:65:41:58:dd:35:72:95:08:98:09:75:20:df:65: 33:ff:39:b6:ff:a8:7a:5b:c0:0d:29:68:3c:1f:83: f8:ae:93:74:df:f6:b0:b7:eb:4c:18:92:ab:cc:42: 1f:56:d3:28:64:da:25:c0:6d:20:b9:37:83:cf:43: 90:2c:27:d1:24:48:83:32:61:61:48:40:33:69:a7: 59:ef:84:af:61:30:28:ac:8e:cc:fb:1d:6a:48:a9: 56:bb:34:3e:eb:57:c3:96:75:1e:0a:04:2f:65:cb: 42:ea:53:25:02:f1:79:93:63:8a:36:f6:39:b3:57: c4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5E:EC:4E:BB:EE:ED:31:68:FE:0B:BA:74:5E:CD:78:A9:0A:83:3A X509v3 Authority Key Identifier: keyid:34:F4:79:74:E5:51:C2:02:36:C3:D8:93:95:F5:7F:3B:A0:2B:57:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/NPR5dOVRwgI2w9iTlfV_O6ArV7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/b17sTrvu7TFo_gu6dF7NeKkKgzo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.129.160.0/22 Signature Algorithm: sha256WithRSAEncryption 11:37:ab:b2:b8:b3:b6:a1:f5:28:76:cb:96:4b:67:db:b1:4b: 16:74:65:dc:1a:51:12:61:89:b0:5f:80:6e:87:25:35:bb:a7: 71:00:45:a0:62:bd:8e:cc:03:5b:31:00:85:3b:d6:35:eb:0a: a0:39:12:0d:8a:cf:a7:a0:8b:23:f6:73:4e:18:01:a7:84:ad: 21:dc:4e:45:ac:68:77:aa:2d:39:c6:88:31:a3:3f:ce:28:dd: 9a:37:3e:ea:93:ad:5f:3c:04:87:a9:ce:ff:85:3e:92:20:a2: 5f:01:d3:ff:9b:bc:61:fe:fa:c2:64:7e:da:15:56:da:ad:3b: 67:1b:5e:bd:05:00:12:94:10:b0:f4:bc:0b:a8:a5:4b:b1:a2: 33:bb:7d:77:22:00:5a:b9:24:30:97:31:e3:21:08:20:f9:2e: e3:d5:94:93:32:5d:3c:68:1b:e4:18:15:8d:3e:26:b3:53:8c: 30:93:ac:3b:da:30:30:0b:4c:a5:d0:21:65:3b:f0:e1:5e:b1: 89:6f:b1:81:55:69:43:6c:3d:cf:47:25:92:e0:02:a7:26:f8: 53:0a:cd:4b:30:58:fa:78:b2:3d:b3:29:3e:a5:bd:f6:49:0c: 70:23:35:ca:96:d9:09:e6:74:d9:ce:b1:1a:ad:83:c4:62:b3: 58:02:0b:86 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDEQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRG NDc5NzRFNTUxQzIwMjM2QzNEODkzOTVGNTdGM0JBMDJCNTdCNzAeFw0yNTAyMTAx NDAzNTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZGNUVFQzRFQkJFRUVE MzE2OEZFMEJCQTc0NUVDRDc4QTkwQTgzM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChcLCeYG+1JwmJH7irnjMNyaC2ofxE3WVHBdVqiQJ/cnXPkCLb ZORWx8WJ0X9KGrLEbwuDcwIynI75Z0z3PMqg0ZC4XDgkQwotjsxFc++nUyRDnqu8 7dqWCo9Aok/3PZabGHNcaGEsPJqznGrp2hUp0qbpjV98A2vtsRJMgO26+e1Dv3d+ WRdlQVjdNXKVCJgJdSDfZTP/Obb/qHpbwA0paDwfg/iuk3Tf9rC360wYkqvMQh9W 0yhk2iXAbSC5N4PPQ5AsJ9EkSIMyYWFIQDNpp1nvhK9hMCisjsz7HWpIqVa7ND7r V8OWdR4KBC9ly0LqUyUC8XmTY4o29jmzV8RnAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUb17sTrvu7TFo/gu6dF7NeKkKgzowHwYDVR0jBBgwFoAUNPR5dOVRwgI2w9iT lfV/O6ArV7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9SSUNM T1VEL05QUjVkT1ZSd2dJMnc5aVRsZlZfTzZBclY3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvTlBSNWRPVlJ3Z0kydzlpVGxmVl9PNkFyVjdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9SSUNMT1VEL2IxN3NUcnZ1N1RG b19ndTZkRjdOZUtrS2d6by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJngaAwDQYJKoZIhvcNAQELBQADggEBABE3q7K4s7ah9Sh2y5ZLZ9uxSxZ0 ZdwaURJhibBfgG6HJTW7p3EARaBivY7MA1sxAIU71jXrCqA5Eg2Kz6egiyP2c04Y AaeErSHcTkWsaHeqLTnGiDGjP84o3Zo3PuqTrV88BIepzv+FPpIgol8B0/+bvGH+ +sJkftoVVtqtO2cbXr0FABKUELD0vAuopUuxojO7fXciAFq5JDCXMeMhCCD5LuPV lJMyXTxoG+QYFY0+JrNTjDCTrDvaMDALTKXQIWU78OFesYlvsYFVaUNsPc9HJZLg Aqcm+FMKzUswWPp4sj2zKT6lvfZJDHAjNcqW2QnmdNnOsRqtg8Ris1gCC4Y= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:40 2025 by rpki-client on console.sobornost.net