$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/6GGvwBUfFxw1nSCwhb9IJOjiHzc.roa File: 6GGvwBUfFxw1nSCwhb9IJOjiHzc.roa (raw, json) Hash identifier: VQJsdHL3R9mn4n9Ze8N81vGAzOXZ7N3h33WM5dS6EeI= Subject key identifier: E8:61:AF:C0:15:1F:17:1C:35:9D:20:B0:85:BF:48:24:E8:E2:1F:37 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0EB7 Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/6GGvwBUfFxw1nSCwhb9IJOjiHzc.roa Signing time: Mon 10 Feb 2025 13:59:48 +0000 ROA not before: Mon 10 Feb 2025 13:59:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38843 IP address blocks: 124.150.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3767 (0xeb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Feb 10 13:59:48 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E861AFC0151F171C359D20B085BF4824E8E21F37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:6a:e0:ac:10:92:14:61:23:2b:3c:fe:f5: 51:8f:29:fa:da:af:40:2d:71:78:68:5d:1c:88:ef: d6:80:55:5c:99:47:32:68:34:2a:5f:ae:21:80:a1: 83:b4:76:d0:04:7e:10:1b:be:d6:c0:a9:58:64:04: 6b:ec:a6:d0:bf:a8:94:b0:b9:29:9a:c6:dc:39:b8: c7:6f:08:14:f5:86:d7:f9:c8:fe:2d:c8:08:40:07: 79:f9:a3:df:c1:fb:fe:0b:40:96:a0:8f:86:a5:a1: ec:f5:61:77:8e:aa:31:1d:fa:3b:8c:64:36:60:56: 77:78:6c:59:5e:d8:02:00:a9:ed:e0:e0:a5:d6:d3: 4e:06:09:43:cb:6d:e4:6d:f0:1a:ad:43:ac:8a:0e: 51:eb:0b:c6:76:a0:06:3f:32:bc:ef:7c:5f:98:99: 4d:e2:f3:fe:eb:f3:e5:da:dc:45:84:4b:ec:2c:55: 86:1f:d7:b9:09:fb:2f:56:f4:ba:a2:ee:31:04:60: 66:f2:1d:a9:f8:e2:24:95:04:36:0d:2c:38:52:a9: 29:8d:db:c2:2e:b5:04:54:10:80:cc:cb:30:85:2c: 5e:69:31:58:c7:1f:9f:42:95:ba:00:d0:16:79:9c: 25:bc:8c:2b:b4:f7:59:29:26:d8:17:25:d3:65:01: 8b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:61:AF:C0:15:1F:17:1C:35:9D:20:B0:85:BF:48:24:E8:E2:1F:37 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/6GGvwBUfFxw1nSCwhb9IJOjiHzc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.150.132.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:b2:de:a5:44:d3:eb:cd:e3:a8:17:d1:9f:c6:ef:26:e2:bf: 2f:58:b3:f1:f0:5a:41:89:52:d8:c0:c3:8d:7e:c0:15:9d:af: 84:9e:55:ec:d2:61:b0:40:22:25:e5:b7:88:62:fc:6b:39:b4: 94:5d:12:58:91:46:02:5d:c1:2c:ae:39:fd:0c:06:11:1d:7f: a3:62:14:da:5c:dc:9a:45:a4:60:11:a6:fb:7b:96:48:b5:e8: f6:c3:7a:fe:e9:fe:3b:96:47:5a:73:14:18:28:98:80:46:cc: bf:5e:64:c3:e3:c4:c5:83:98:9b:67:01:07:28:4c:c9:37:79: 4b:75:6b:1f:e8:92:64:21:7e:8e:87:4f:51:ab:04:fa:7e:d9: d9:22:c5:e0:89:a8:ac:63:3e:52:69:3f:5b:d2:11:01:65:36: 10:c9:87:b0:7c:b9:8c:c5:74:79:ef:87:8f:17:63:e5:a9:95: 57:53:bb:14:44:65:64:b8:e3:e0:d7:ed:5f:24:84:c8:dc:ee: 07:40:1a:de:03:9e:bf:62:7c:5f:30:9d:7b:1d:de:bc:65:bb: 4a:44:d7:b2:a5:e9:56:6b:40:73:d8:39:d2:d9:4a:50:c1:fb: 60:ea:4d:d3:ae:c5:5f:34:b2:a9:21:bc:a6:79:7a:a6:bc:9f: e8:ae:83:04 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDrcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNTAyMTAx MzU5NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU4NjFBRkMwMTUxRjE3 MUMzNTlEMjBCMDg1QkY0ODI0RThFMjFGMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+xGrgrBCSFGEjKzz+9VGPKfrar0AtcXhoXRyI79aAVVyZRzJo NCpfriGAoYO0dtAEfhAbvtbAqVhkBGvsptC/qJSwuSmaxtw5uMdvCBT1htf5yP4t yAhAB3n5o9/B+/4LQJagj4aloez1YXeOqjEd+juMZDZgVnd4bFle2AIAqe3g4KXW 004GCUPLbeRt8BqtQ6yKDlHrC8Z2oAY/MrzvfF+YmU3i8/7r8+Xa3EWES+wsVYYf 17kJ+y9W9Lqi7jEEYGbyHan44iSVBDYNLDhSqSmN28IutQRUEIDMyzCFLF5pMVjH H59ClboA0BZ5nCW8jCu091kpJtgXJdNlAYtxAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU6GGvwBUfFxw1nSCwhb9IJOjiHzcwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vNkdHdndCVWZGeHcxblNDd2hiOUlK T2ppSHpjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnyWhDAN BgkqhkiG9w0BAQsFAAOCAQEAKrLepUTT683jqBfRn8bvJuK/L1iz8fBaQYlS2MDD jX7AFZ2vhJ5V7NJhsEAiJeW3iGL8azm0lF0SWJFGAl3BLK45/QwGER1/o2IU2lzc mkWkYBGm+3uWSLXo9sN6/un+O5ZHWnMUGCiYgEbMv15kw+PExYOYm2cBByhMyTd5 S3VrH+iSZCF+jodPUasE+n7Z2SLF4ImorGM+Umk/W9IRAWU2EMmHsHy5jMV0ee+H jxdj5amVV1O7FERlZLjj4NftXySEyNzuB0Aa3gOev2J8XzCdex3evGW7SkTXsqXp VmtAc9g50tlKUMH7YOpN067FXzSyqSG8pnl6pryf6K6DBA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net