$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/GzUJ7BJRyddbvdZMQgmyOPmrPi8.roa File: GzUJ7BJRyddbvdZMQgmyOPmrPi8.roa (raw, json) Hash identifier: y93nksV+cDrr98AW8ZxY2f1433nfld8K+X79w2SmzRA= Subject key identifier: 1B:35:09:EC:12:51:C9:D7:5B:BD:D6:4C:42:09:B2:38:F9:AB:3E:2F Certificate issuer: /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB Certificate serial: 136D Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/GzUJ7BJRyddbvdZMQgmyOPmrPi8.roa Signing time: Mon 10 Feb 2025 14:01:12 +0000 ROA not before: Mon 10 Feb 2025 14:01:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9922 IP address blocks: 2403:b340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4973 (0x136d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB Validity Not Before: Feb 10 14:01:12 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1B3509EC1251C9D75BBDD64C4209B238F9AB3E2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:f0:36:01:00:04:be:c4:0c:f4:bf:aa:57: 58:6e:65:a4:d8:69:d3:42:d7:1e:99:90:73:a2:78: f6:40:81:ab:53:ab:ff:cb:8b:d7:a9:32:4e:dc:19: 8c:e3:9b:44:f9:a8:50:99:e6:ca:c2:60:46:52:d7: fa:b3:d9:40:56:db:75:ce:7b:f1:d4:4d:36:8f:e3: f1:0e:41:cf:53:64:73:67:c4:b0:a9:36:7c:b3:cf: e7:7c:ea:a4:fd:6a:62:35:20:a3:1a:cf:5e:ab:a1: f0:fc:00:ae:ec:b8:03:c0:14:e5:b7:6c:1a:7d:5c: 2e:6f:70:59:4f:aa:7c:80:6b:a2:e2:12:24:fb:83: 0e:33:4b:e9:a2:68:02:04:6c:9b:c0:50:5d:e1:81: 2d:dd:33:25:79:b9:88:a3:53:00:ae:bd:90:20:1a: 54:39:db:ba:48:5d:ba:8f:d6:d3:14:55:26:7c:93: 15:af:bf:af:8a:73:28:78:91:61:1a:c5:85:36:e2: 1d:73:82:62:a1:cf:2c:68:b7:0b:73:c2:cb:93:53: f4:fc:e9:bb:62:60:0c:8b:f0:37:b5:13:bb:f6:41: cc:8f:e9:49:07:4a:79:9c:a7:b1:a4:11:8d:fd:10: 3a:56:b8:f8:95:14:fc:62:15:27:62:12:f5:b1:06: d3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:35:09:EC:12:51:C9:D7:5B:BD:D6:4C:42:09:B2:38:F9:AB:3E:2F X509v3 Authority Key Identifier: keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/GzUJ7BJRyddbvdZMQgmyOPmrPi8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:b340::/32 Signature Algorithm: sha256WithRSAEncryption 7b:3a:f7:ed:2e:a4:be:b2:17:78:75:29:ca:47:f6:24:2b:86: c2:0d:0b:03:72:9c:5a:04:1f:e6:61:b2:1c:75:46:11:c7:ef: ce:fb:5e:7d:15:66:4d:33:72:8e:14:76:b5:cc:22:19:cf:1e: c2:9d:a8:60:81:cb:99:2e:1f:f8:9e:05:82:b9:3f:38:ef:68: c6:06:52:0f:d9:dc:ec:4a:13:f2:80:60:58:aa:21:bf:3c:ac: 81:e8:4d:77:e9:a9:2d:2b:e9:3a:1f:8f:c9:21:fb:95:75:11: c0:c7:11:22:23:89:1e:c7:4e:e1:9b:31:42:d2:0f:e2:d0:7b: 7f:7f:7c:96:8a:b4:96:d5:50:cb:16:43:d0:bb:e8:2f:cc:38: ad:6f:c1:79:cf:db:2b:14:d7:28:0e:2f:5f:a9:f6:f1:f4:dd: 0b:1a:27:18:f5:d4:1b:04:b3:92:c7:75:c2:bb:c9:14:06:fa: b7:dd:66:67:0b:07:3e:44:0d:76:e2:f8:ca:b1:1b:e4:39:5a: ce:ac:df:5b:51:df:74:f2:5e:7e:ac:ba:c7:22:27:fd:6b:2e: 19:cd:1f:04:a9:52:1a:6c:07:e8:4b:0a:b0:d8:a2:62:a7:eb: 11:6d:94:7a:ff:13:29:69:db:58:96:1e:68:57:04:b2:46:26: 63:f5:f7:d0 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICE20wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODA1 MUYyRUNFRkMyNDJFOUFGOUYxRTQ1NEE0RkI3OTY1OTFCOERBQjAeFw0yNTAyMTAx NDAxMTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFCMzUwOUVDMTI1MUM5 RDc1QkJERDY0QzQyMDlCMjM4RjlBQjNFMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEG/A2AQAEvsQM9L+qV1huZaTYadNC1x6ZkHOiePZAgatTq//L i9epMk7cGYzjm0T5qFCZ5srCYEZS1/qz2UBW23XOe/HUTTaP4/EOQc9TZHNnxLCp Nnyzz+d86qT9amI1IKMaz16rofD8AK7suAPAFOW3bBp9XC5vcFlPqnyAa6LiEiT7 gw4zS+miaAIEbJvAUF3hgS3dMyV5uYijUwCuvZAgGlQ527pIXbqP1tMUVSZ8kxWv v6+Kcyh4kWEaxYU24h1zgmKhzyxotwtzwsuTU/T86btiYAyL8De1E7v2QcyP6UkH Snmcp7GkEY39EDpWuPiVFPxiFSdiEvWxBtO3AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUGzUJ7BJRyddbvdZMQgmyOPmrPi8wHwYDVR0jBBgwFoAUgFHy7O/CQumvnx5F Sk+3llkbjaswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVU L2dGSHk3T19DUXVtdm54NUZTay0zbGxrYmphcy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvZ0ZIeTdPX0NRdW12bng1RlNrLTNsbGtiamFzLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVUL0d6VUo3QkpSeWRkYnZkWk1R Z215T1BtclBpOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk A7NAMA0GCSqGSIb3DQEBCwUAA4IBAQB7OvftLqS+shd4dSnKR/YkK4bCDQsDcpxa BB/mYbIcdUYRx+/O+159FWZNM3KOFHa1zCIZzx7CnahggcuZLh/4ngWCuT8472jG BlIP2dzsShPygGBYqiG/PKyB6E136aktK+k6H4/JIfuVdRHAxxEiI4kex07hmzFC 0g/i0Ht/f3yWirSW1VDLFkPQu+gvzDitb8F5z9srFNcoDi9fqfbx9N0LGicY9dQb BLOSx3XCu8kUBvq33WZnCwc+RA124vjKsRvkOVrOrN9bUd908l5+rLrHIif9ay4Z zR8EqVIabAfoSwqw2KJip+sRbZR6/xMpadtYlh5oVwSyRiZj9ffQ -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:42 2025 by rpki-client on console.sobornost.net