$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/YokNC2od6aYT-S3V1u_4wXefzXU.roa File: YokNC2od6aYT-S3V1u_4wXefzXU.roa (raw, json) Hash identifier: ed3NpYxxgHk+gsmjSSeGFJ7BhE0uIeZN9EKcMEoyAZA= Subject key identifier: 62:89:0D:0B:6A:1D:E9:A6:13:F9:2D:D5:D6:EF:F8:C1:77:9F:CD:75 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0EAC Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/YokNC2od6aYT-S3V1u_4wXefzXU.roa Signing time: Mon 10 Feb 2025 13:59:46 +0000 ROA not before: Mon 10 Feb 2025 13:59:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 13335 IP address blocks: 223.27.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3756 (0xeac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Feb 10 13:59:46 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=62890D0B6A1DE9A613F92DD5D6EFF8C1779FCD75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8f:cb:01:73:6a:82:9d:c4:58:18:ba:93:54: ef:98:a1:3e:4f:96:45:dd:4a:02:ae:78:f0:7e:dd: 06:66:46:7f:ff:94:66:89:88:a4:cd:c0:cd:a0:f4: 20:11:14:22:bd:2a:a2:3e:91:28:83:b0:d5:67:40: 98:79:c8:1c:32:c7:78:58:13:7c:53:e5:05:45:ed: f8:a6:34:e0:ef:81:e7:fa:53:d1:ad:a3:10:c6:7d: 7d:4f:67:cc:42:36:a9:0f:5a:0e:ef:0b:d0:8e:7c: 38:41:dd:d7:d0:0a:3f:0b:e7:7f:59:4d:3a:f8:d4: ee:96:67:42:5a:7b:7c:1d:84:6e:79:58:1a:b2:4c: 3a:51:9f:eb:36:a0:2f:1f:79:62:05:32:43:b5:fd: 32:c4:dd:dd:23:ad:cd:b5:21:a3:9f:87:bb:b6:b7: 23:6b:20:52:ea:b9:7c:5e:b0:de:31:ec:4c:ef:a2: c4:55:51:9e:ae:7f:7e:10:8f:2f:1f:1b:d0:c8:58: b1:2b:b5:a6:46:c3:db:c9:ca:42:21:77:42:77:cd: a0:70:e9:cc:9d:7e:f6:15:72:1f:23:c6:b7:da:0a: 5b:59:ae:2f:ba:51:f8:4c:79:5f:72:43:0e:e1:91: 6f:b6:23:d7:c8:24:ef:70:ba:c4:b0:3a:8d:6e:77: b3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:89:0D:0B:6A:1D:E9:A6:13:F9:2D:D5:D6:EF:F8:C1:77:9F:CD:75 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/YokNC2od6aYT-S3V1u_4wXefzXU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.27.48.0/20 Signature Algorithm: sha256WithRSAEncryption 35:a3:3b:f4:99:a8:16:61:10:5b:9c:ff:7e:3e:83:f8:71:47: 58:32:15:76:8e:4e:00:35:b6:be:90:d4:53:20:4d:c1:d5:a0: 52:aa:9c:6d:cb:56:52:52:57:43:eb:3a:ab:07:ad:bc:4e:76: d2:10:f5:c0:1b:91:b6:c9:8f:2f:52:c5:f2:ab:18:6c:e3:00: 44:b0:3b:d9:80:d0:66:61:05:b4:93:06:d4:39:ab:6c:c1:5f: 89:e2:d4:ae:99:0f:ce:37:1f:9d:eb:bd:0c:6c:7e:ee:c7:4c: 97:72:cb:03:8c:4c:0a:cb:36:47:ec:98:51:d9:8a:6e:cb:5f: 3b:20:1a:ec:89:cb:93:67:ab:97:6d:e8:09:81:e1:57:5b:67: 55:bc:b6:6a:a8:88:11:aa:da:03:78:41:a5:79:d1:e9:db:49: e8:9d:25:77:e8:dd:c5:5e:08:ef:ce:86:a7:4b:84:64:cc:b1: 0a:6f:cd:51:55:61:86:2e:be:41:08:0a:79:96:9d:c3:9a:16: 61:ae:2b:09:19:61:75:f4:2f:4a:cd:b5:6a:dc:af:9d:34:d9: 7e:f5:85:d9:b4:6f:f1:8a:ad:c0:45:b0:17:31:f7:7d:a3:d5: b0:3d:40:00:70:5c:ca:ff:15:49:b6:05:90:48:45:ca:4a:71: 4f:a5:5c:f3 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDqwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNTAyMTAx MzU5NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYyODkwRDBCNkExREU5 QTYxM0Y5MkRENUQ2RUZGOEMxNzc5RkNENzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMj8sBc2qCncRYGLqTVO+YoT5PlkXdSgKuePB+3QZmRn//lGaJ iKTNwM2g9CARFCK9KqI+kSiDsNVnQJh5yBwyx3hYE3xT5QVF7fimNODvgef6U9Gt oxDGfX1PZ8xCNqkPWg7vC9COfDhB3dfQCj8L539ZTTr41O6WZ0Jae3wdhG55WBqy TDpRn+s2oC8feWIFMkO1/TLE3d0jrc21IaOfh7u2tyNrIFLquXxesN4x7EzvosRV UZ6uf34Qjy8fG9DIWLErtaZGw9vJykIhd0J3zaBw6cydfvYVch8jxrfaCltZri+6 UfhMeV9yQw7hkW+2I9fIJO9wusSwOo1ud7ODAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUYokNC2od6aYT+S3V1u/4wXefzXUwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vWW9rTkMyb2Q2YVlULVMzVjF1XzR3 WGVmelhVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBN8bMDAN BgkqhkiG9w0BAQsFAAOCAQEANaM79JmoFmEQW5z/fj6D+HFHWDIVdo5OADW2vpDU UyBNwdWgUqqcbctWUlJXQ+s6qwetvE520hD1wBuRtsmPL1LF8qsYbOMARLA72YDQ ZmEFtJMG1DmrbMFfieLUrpkPzjcfneu9DGx+7sdMl3LLA4xMCss2R+yYUdmKbstf OyAa7InLk2erl23oCYHhV1tnVby2aqiIEaraA3hBpXnR6dtJ6J0ld+jdxV4I786G p0uEZMyxCm/NUVVhhi6+QQgKeZadw5oWYa4rCRlhdfQvSs21atyvnTTZfvWF2bRv 8YqtwEWwFzH3faPVsD1AAHBcyv8VSbYFkEhFykpxT6Vc8w== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net