$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIINET/OTOMgQUdUuAeP16rKCMRcquFLp8.roa File: OTOMgQUdUuAeP16rKCMRcquFLp8.roa (raw, json) Hash identifier: fzdLcNB8dNQVgxkNHW431k2vxYRfPgicXosbG62ez4E= Subject key identifier: 39:33:8C:81:05:1D:52:E0:1E:3F:5E:AB:28:23:11:72:AB:85:2E:9F Certificate issuer: /CN=69797BDE8D0581FA299D8E1420ED2957C4208A07 Certificate serial: 0C82 Authority key identifier: 69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/OTOMgQUdUuAeP16rKCMRcquFLp8.roa Signing time: Mon 10 Feb 2025 13:49:51 +0000 ROA not before: Mon 10 Feb 2025 13:49:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17710 IP address blocks: 150.107.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3202 (0xc82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69797BDE8D0581FA299D8E1420ED2957C4208A07 Validity Not Before: Feb 10 13:49:51 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=39338C81051D52E01E3F5EAB28231172AB852E9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c1:1c:39:f0:32:70:68:67:03:71:ea:58:69: ff:b5:82:9f:1f:2c:f7:0a:b6:c8:61:71:c4:f3:aa: 34:fa:d7:d7:5b:c8:57:cb:da:58:68:ad:14:00:63: e9:0c:55:35:bf:52:55:8a:6d:20:53:c6:85:d5:08: f2:0c:a9:64:01:e7:a7:73:4d:b7:2c:82:9b:df:43: 03:de:19:1c:0c:15:0a:bb:67:3c:5c:6c:64:2d:b4: de:53:66:7f:54:f9:8c:a9:a4:2f:08:a2:de:d9:9a: 47:a3:6e:be:c2:34:94:3f:2e:84:ce:5b:83:c8:8e: b9:42:e7:28:d7:ee:ca:2d:0d:54:0a:8c:61:1f:16: 83:65:2c:a6:35:da:e9:35:fd:4e:c3:c5:8b:75:9f: 05:df:2b:00:fb:fc:cc:fc:90:34:63:06:9d:18:fc: 6d:6d:90:a1:0c:b3:a8:74:bf:dc:1a:8d:0a:37:92: e6:67:92:63:94:b7:ff:87:1b:ac:09:dc:05:bb:37: 91:15:b4:43:3b:cc:65:83:8d:5f:be:17:26:52:37: 3a:7f:bb:90:1f:c7:a1:d8:46:89:57:f4:23:83:cc: 9f:38:81:4d:e7:15:71:aa:9a:5f:72:59:62:d7:46: 5f:e0:e0:c3:5b:2d:e9:a2:91:8e:f0:37:99:01:0f: 50:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:33:8C:81:05:1D:52:E0:1E:3F:5E:AB:28:23:11:72:AB:85:2E:9F X509v3 Authority Key Identifier: keyid:69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/OTOMgQUdUuAeP16rKCMRcquFLp8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.107.64.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:e9:04:d5:3d:6c:5d:cf:b2:11:f4:ca:a0:5b:ec:d5:fe:47: bf:da:ae:92:59:ef:bb:8a:5f:f1:c9:86:8e:f1:db:1c:b1:88: 8b:b3:3d:ac:19:1b:75:b4:f1:5b:31:a7:aa:77:b4:db:0f:4a: 07:b1:bb:31:2b:27:87:2d:38:7f:45:ed:5a:69:5f:f0:92:f2: ac:b9:dc:14:2e:a9:60:26:07:ba:1f:46:ee:17:aa:f2:dd:68: 03:74:02:76:91:03:27:8f:49:9b:bf:9e:8b:99:40:34:5c:32: 62:ce:32:e3:87:09:98:c6:c2:eb:99:14:65:50:d5:4d:83:77: ca:6d:2e:45:b9:b4:9e:3e:87:24:53:6b:ba:ba:f9:61:65:dc: a6:fa:02:96:ae:29:e2:51:d6:ff:94:00:a4:7f:fd:fd:27:2a: 5c:2c:f9:a2:e4:da:05:df:8f:d9:9c:a3:08:39:1f:ab:27:8d: 19:1d:f2:64:e6:01:c5:63:d5:43:0e:63:c4:ce:c4:85:83:ae: 02:8a:e4:7b:8d:02:0c:4f:b0:88:94:86:f9:4a:8a:e5:3c:cb: a8:b5:2d:9a:eb:85:f7:ce:f3:66:29:35:25:c2:75:81:a5:c8: d9:32:c3:cc:9a:86:96:ab:43:b0:47:e8:5a:4c:fe:53:b5:50: cd:81:41:2c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk3 OTdCREU4RDA1ODFGQTI5OUQ4RTE0MjBFRDI5NTdDNDIwOEEwNzAeFw0yNTAyMTAx MzQ5NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM5MzM4QzgxMDUxRDUy RTAxRTNGNUVBQjI4MjMxMTcyQUI4NTJFOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdwRw58DJwaGcDcepYaf+1gp8fLPcKtshhccTzqjT619dbyFfL 2lhorRQAY+kMVTW/UlWKbSBTxoXVCPIMqWQB56dzTbcsgpvfQwPeGRwMFQq7Zzxc bGQttN5TZn9U+YyppC8Iot7Zmkejbr7CNJQ/LoTOW4PIjrlC5yjX7sotDVQKjGEf FoNlLKY12uk1/U7DxYt1nwXfKwD7/Mz8kDRjBp0Y/G1tkKEMs6h0v9wajQo3kuZn kmOUt/+HG6wJ3AW7N5EVtEM7zGWDjV++FyZSNzp/u5Afx6HYRolX9CODzJ84gU3n FXGqml9yWWLXRl/g4MNbLemikY7wN5kBD1CtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOTOMgQUdUuAeP16rKCMRcquFLp8wHwYDVR0jBBgwFoAUaXl73o0FgfopnY4U IO0pV8QgigcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUElJTkVU L2FYbDczbzBGZ2ZvcG5ZNFVJTzBwVjhRZ2lnYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvYVhsNzNvMEZnZm9wblk0VUlPMHBWOFFnaWdjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvUElJTkVUL09UT01nUVVkVXVBZVAxNnJL Q01SY3F1RkxwOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKW a0AwDQYJKoZIhvcNAQELBQADggEBAJ/pBNU9bF3PshH0yqBb7NX+R7/arpJZ77uK X/HJho7x2xyxiIuzPawZG3W08Vsxp6p3tNsPSgexuzErJ4ctOH9F7VppX/CS8qy5 3BQuqWAmB7ofRu4XqvLdaAN0AnaRAyePSZu/nouZQDRcMmLOMuOHCZjGwuuZFGVQ 1U2Dd8ptLkW5tJ4+hyRTa7q6+WFl3Kb6ApauKeJR1v+UAKR//f0nKlws+aLk2gXf j9mcowg5H6snjRkd8mTmAcVj1UMOY8TOxIWDrgKK5HuNAgxPsIiUhvlKiuU8y6i1 LZrrhffO82YpNSXCdYGlyNkyw8yahparQ7BH6FpM/lO1UM2BQSw= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:42 2025 by rpki-client on console.sobornost.net