$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/EYJMHo1GDVa6AWmUIUgDSt6kHXc.roa File: EYJMHo1GDVa6AWmUIUgDSt6kHXc.roa (raw, json) Hash identifier: XKhHh2f1OSUhUDxML/5vHcUrg6WjV1N8txmlQq+wTqo= Subject key identifier: 11:82:4C:1E:8D:46:0D:56:BA:01:69:94:21:48:03:4A:DE:A4:1D:77 Certificate issuer: /CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5 Certificate serial: 01A0 Authority key identifier: 02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/EYJMHo1GDVa6AWmUIUgDSt6kHXc.roa Signing time: Mon 10 Feb 2025 13:42:39 +0000 ROA not before: Mon 10 Feb 2025 13:42:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 134823 IP address blocks: 202.153.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5 Validity Not Before: Feb 10 13:42:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=11824C1E8D460D56BA0169942148034ADEA41D77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ac:4a:57:5a:c9:59:e0:95:f2:bb:68:3c:0a: d8:5d:19:d1:1d:20:4d:47:39:a9:06:44:bb:81:71: 2c:d9:46:60:fd:b3:06:34:6e:b4:21:96:e3:d6:39: 7a:af:62:00:8f:3c:2c:f0:85:1f:88:d5:2c:cf:88: 3d:09:2b:83:55:2a:f8:be:5c:4f:78:58:91:6c:01: 72:ac:72:ba:a5:e0:62:f1:90:0c:e8:d5:f0:9b:2a: d8:cf:bc:f5:f0:3c:5d:23:5b:b9:3e:85:f7:b3:84: d0:f5:64:af:ad:ec:79:08:f9:fe:3b:1f:e5:ae:10: 0b:31:91:ea:ae:95:7e:d3:78:c1:84:32:31:75:84: a0:2a:9c:7b:94:6b:4a:d4:04:16:f0:6b:9b:c8:e6: b5:25:90:05:ee:ba:17:4e:c4:c2:4f:d3:66:a2:d6: 5f:cb:f2:c0:95:e0:40:7c:ff:fd:4c:3b:a6:2d:f4: 76:a4:6f:42:0a:b6:f9:29:1e:f6:76:5c:74:fb:2f: 8e:d8:d1:af:3d:d4:d1:05:64:2e:9a:9c:df:b1:9b: 43:62:1d:58:c2:ef:bc:7a:eb:73:be:e9:1d:e4:4d: 3c:36:ee:96:5d:94:3c:2d:50:26:40:dd:df:66:5a: 2d:56:f7:1f:fd:90:f6:44:b7:90:67:67:d0:d1:5e: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:82:4C:1E:8D:46:0D:56:BA:01:69:94:21:48:03:4A:DE:A4:1D:77 X509v3 Authority Key Identifier: keyid:02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/EYJMHo1GDVa6AWmUIUgDSt6kHXc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.153.4.0/23 Signature Algorithm: sha256WithRSAEncryption 91:fa:3f:e6:1a:71:b0:e2:ff:06:36:33:c7:b5:c6:b7:e1:6e: 26:bb:f0:83:42:2b:b3:03:75:e7:61:0b:c1:b7:39:6b:98:43: 9e:1a:74:f9:04:06:58:2a:2f:9e:8f:ff:a4:2c:3f:42:48:3a: f6:41:23:a0:85:36:6b:8d:65:ab:6e:26:09:78:b0:87:31:ac: 2a:55:f1:8e:51:ea:6f:15:cf:9f:81:85:35:15:23:91:b0:df: a1:ca:1f:1a:f9:7d:92:a7:89:d1:8a:ad:08:5a:79:44:7c:80: 87:e6:cc:5e:12:5b:0f:56:0c:33:27:2c:81:5b:a6:2a:c9:33: 40:07:f6:3d:72:38:14:cf:a0:49:ad:3e:4c:05:a0:21:8a:cc: fe:06:4a:1d:b3:9e:64:d7:9a:56:45:33:d5:42:3a:70:61:2e: b1:9b:b4:cf:8c:cc:53:b5:07:b8:3b:cc:88:f3:b0:db:a1:98: 3f:be:fc:ae:01:b3:77:dd:26:6a:15:a2:01:80:84:4c:a5:28: 7b:69:a6:04:0c:b3:3b:6d:c2:d6:3d:3d:03:96:5a:40:03:49: 38:a5:6a:f9:b7:2c:fa:c4:ef:27:07:6f:50:f6:70:24:24:81: 07:a4:90:e7:93:2c:4d:54:d8:12:19:84:47:a2:93:8f:5d:2a: 1a:f7:d8:80 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDI2 NEE0MUE3NDFFNUYwMEFFRDJCRDdFNEE3QTQyRjVCMUQ3NThENTAeFw0yNTAyMTAx MzQyMzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDExODI0QzFFOEQ0NjBE NTZCQTAxNjk5NDIxNDgwMzRBREVBNDFENzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkrEpXWslZ4JXyu2g8CthdGdEdIE1HOakGRLuBcSzZRmD9swY0 brQhluPWOXqvYgCPPCzwhR+I1SzPiD0JK4NVKvi+XE94WJFsAXKscrql4GLxkAzo 1fCbKtjPvPXwPF0jW7k+hfezhND1ZK+t7HkI+f47H+WuEAsxkequlX7TeMGEMjF1 hKAqnHuUa0rUBBbwa5vI5rUlkAXuuhdOxMJP02ai1l/L8sCV4EB8//1MO6Yt9Hak b0IKtvkpHvZ2XHT7L47Y0a891NEFZC6anN+xm0NiHVjC77x663O+6R3kTTw27pZd lDwtUCZA3d9mWi1W9x/9kPZEt5BnZ9DRXkNzAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUEYJMHo1GDVa6AWmUIUgDSt6kHXcwHwYDVR0jBBgwFoAUAmSkGnQeXwCu0r1+ SnpC9bHXWNUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0RDTC1U Vy9BbVNrR25RZVh3Q3UwcjEtU25wQzliSFhXTlUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FtU2tHblFlWHdDdTByMS1TbnBDOWJIWFdOVS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NEQ0wtVFcvRVlKTUhvMUdEVmE2QVdt VUlVZ0RTdDZrSFhjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AcqZBDANBgkqhkiG9w0BAQsFAAOCAQEAkfo/5hpxsOL/BjYzx7XGt+FuJrvwg0Ir swN152ELwbc5a5hDnhp0+QQGWCovno//pCw/Qkg69kEjoIU2a41lq24mCXiwhzGs KlXxjlHqbxXPn4GFNRUjkbDfocofGvl9kqeJ0YqtCFp5RHyAh+bMXhJbD1YMMycs gVumKskzQAf2PXI4FM+gSa0+TAWgIYrM/gZKHbOeZNeaVkUz1UI6cGEusZu0z4zM U7UHuDvMiPOw26GYP778rgGzd90mahWiAYCETKUoe2mmBAyzO23C1j09A5ZaQANJ OKVq+bcs+sTvJwdvUPZwJCSBB6SQ55MsTVTYEhmER6KTj10qGvfYgA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net