$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/Ti9TxZj2Gr3xeSjreUoELY0B3hQ.roa File: Ti9TxZj2Gr3xeSjreUoELY0B3hQ.roa (raw, json) Hash identifier: Y3EIJH2GE/RyONsSkFt2oYbJmVKdVhXo2Lgil3yI+a0= Subject key identifier: 4E:2F:53:C5:98:F6:1A:BD:F1:79:28:EB:79:4A:04:2D:8D:01:DE:14 Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2 Certificate serial: 598B Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/Ti9TxZj2Gr3xeSjreUoELY0B3hQ.roa Signing time: Mon 10 Feb 2025 14:10:37 +0000 ROA not before: Mon 10 Feb 2025 14:10:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38851 IP address blocks: 103.46.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22923 (0x598b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2 Validity Not Before: Feb 10 14:10:37 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4E2F53C598F61ABDF17928EB794A042D8D01DE14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:df:44:9a:d6:26:81:f6:bd:b3:84:70:52: fb:81:15:4b:cf:13:f5:a3:c3:9e:b7:9c:33:35:fc: 69:0f:3b:94:47:60:7f:dd:39:44:5f:9e:c7:3a:75: c8:b4:ec:e8:ca:e0:56:0b:77:2f:a3:d2:f7:a8:de: d7:bc:46:37:c9:02:28:de:1c:4d:4f:d6:bc:07:1e: 67:35:a6:bc:c6:a8:6e:e7:5e:1f:8c:8b:b7:77:8b: 9f:4f:a5:5f:58:ce:67:73:96:16:b9:93:08:c4:9f: bc:13:e7:3d:88:6b:82:e9:ae:59:f8:b8:54:a0:73: 08:ab:11:33:0d:c6:34:d6:90:e1:ce:80:3e:d9:bc: 30:51:a3:4c:a0:92:34:65:ec:68:82:d5:c9:c5:57: 2a:25:ef:ea:3d:e5:23:e8:25:b7:b6:81:14:1d:f3: 98:c2:86:e2:02:d5:47:e3:95:ad:dc:59:e2:71:22: e8:58:c8:ec:57:8a:6b:b9:4b:f9:4e:e3:a2:7c:80: 98:d6:6a:81:b7:93:e8:bc:cb:75:1a:a5:2a:51:0e: d5:23:89:8a:ef:fc:33:6e:2d:e7:77:6c:c0:6c:7e: 8a:3f:81:8d:86:55:11:68:59:d3:fc:92:3d:54:27: bb:5b:e3:ea:19:10:ed:f8:01:22:ac:dd:ca:c1:f7: 08:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2F:53:C5:98:F6:1A:BD:F1:79:28:EB:79:4A:04:2D:8D:01:DE:14 X509v3 Authority Key Identifier: keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/Ti9TxZj2Gr3xeSjreUoELY0B3hQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.46.190.0/23 Signature Algorithm: sha256WithRSAEncryption 74:d0:73:38:c7:32:05:95:88:2e:1e:4b:ff:74:ff:4f:95:21: fa:d2:ec:02:30:ec:ef:81:68:f0:2c:0d:e1:bc:59:3f:8a:78: 3b:f9:43:b5:43:af:e5:51:0a:ee:65:66:57:4d:bf:a2:52:f0: e1:e1:96:d5:fd:6d:d6:79:c2:0f:79:1f:e3:b5:82:b2:07:1f: 32:a7:d8:d1:28:1a:06:ff:38:0c:14:9f:74:5a:36:4c:92:87: 3b:c0:d0:81:8c:3e:53:07:a1:9c:a1:35:84:2c:ae:23:70:75: 6a:94:32:64:12:79:57:c9:b9:dd:c0:b1:f5:80:46:ee:88:f0: 01:f4:a7:12:3d:77:d8:f1:6c:30:80:98:41:03:59:ca:fb:20: 89:aa:30:f0:7d:3a:6c:6b:a8:76:3f:51:33:72:db:03:fb:7a: ff:33:78:b3:5f:76:a2:eb:56:06:9d:91:70:48:de:3f:c8:3c: 3b:c6:da:16:45:ef:97:66:0a:3e:ee:02:dc:83:1f:bb:3c:6f: 28:b8:25:77:f2:43:10:80:33:a8:8d:48:50:ca:75:39:61:34: 66:22:a6:03:1b:b5:4c:94:89:96:78:5c:a2:b5:54:e5:61:02: 0d:8c:43:9a:03:c6:67:cf:a8:ea:96:de:a1:a5:66:d9:30:36: 57:fb:ea:08 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICWYswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjQz MjBGRDc4REZCNkE0RDFDOTIzMjJGNzk0OTY2Qjg1MjVERkREMjAeFw0yNTAyMTAx NDEwMzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRFMkY1M0M1OThGNjFB QkRGMTc5MjhFQjc5NEEwNDJEOEQwMURFMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDL99EmtYmgfa9s4RwUvuBFUvPE/Wjw563nDM1/GkPO5RHYH/d OURfnsc6dci07OjK4FYLdy+j0veo3te8RjfJAijeHE1P1rwHHmc1przGqG7nXh+M i7d3i59PpV9Yzmdzlha5kwjEn7wT5z2Ia4Lprln4uFSgcwirETMNxjTWkOHOgD7Z vDBRo0ygkjRl7GiC1cnFVyol7+o95SPoJbe2gRQd85jChuIC1Ufjla3cWeJxIuhY yOxXimu5S/lO46J8gJjWaoG3k+i8y3UapSpRDtUjiYrv/DNuLed3bMBsfoo/gY2G VRFoWdP8kj1UJ7tb4+oZEO34ASKs3crB9whZAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUTi9TxZj2Gr3xeSjreUoELY0B3hQwHwYDVR0jBBgwFoAUtDIP1437ak0ckjIv eUlmuFJd/dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlRDQ0FU Vi90RElQMTQzN2FrMGNrakl2ZVVsbXVGSmRfZEkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3RESVAxNDM3YWswY2tqSXZlVWxtdUZKZF9kSS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05UQ0NBVFYvVGk5VHhaajJHcjN4ZVNq cmVVb0VMWTBCM2hRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWcuvjANBgkqhkiG9w0BAQsFAAOCAQEAdNBzOMcyBZWILh5L/3T/T5Uh+tLsAjDs 74Fo8CwN4bxZP4p4O/lDtUOv5VEK7mVmV02/olLw4eGW1f1t1nnCD3kf47WCsgcf MqfY0SgaBv84DBSfdFo2TJKHO8DQgYw+UwehnKE1hCyuI3B1apQyZBJ5V8m53cCx 9YBG7ojwAfSnEj132PFsMICYQQNZyvsgiaow8H06bGuodj9RM3LbA/t6/zN4s192 outWBp2RcEjeP8g8O8baFkXvl2YKPu4C3IMfuzxvKLgld/JDEIAzqI1IUMp1OWE0 ZiKmAxu1TJSJlnhcorVU5WECDYxDmgPGZ8+o6pbeoaVm2TA2V/vqCA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:42 2025 by rpki-client on console.sobornost.net