$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/MLiWlft-tbD1iAMbjCd3ImZc-mk.roa File: MLiWlft-tbD1iAMbjCd3ImZc-mk.roa (raw, json) Hash identifier: QYg/HN6o8Cx17HE7ArZfI2WtJD4DLtahJ4WMwKAbJGY= Subject key identifier: 30:B8:96:95:FB:7E:B5:B0:F5:88:03:1B:8C:27:77:22:66:5C:FA:69 Certificate issuer: /CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB Certificate serial: 013E Authority key identifier: 35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/MLiWlft-tbD1iAMbjCd3ImZc-mk.roa Signing time: Mon 10 Feb 2025 14:23:57 +0000 ROA not before: Mon 10 Feb 2025 14:23:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 205329 IP address blocks: 2401:5f20::/32 maxlen: 127 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB Validity Not Before: Feb 10 14:23:57 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=30B89695FB7EB5B0F588031B8C277722665CFA69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:58:da:60:b0:08:51:a5:02:d7:3f:e4:6e:0a: 96:ad:e9:ca:20:82:56:8b:38:d0:c2:2d:8b:16:bd: 55:df:12:c7:5d:5b:9f:01:62:0c:a8:44:fd:55:84: 04:51:70:f5:63:f2:5f:4e:3d:e5:f5:0b:4e:ba:c9: 8b:54:96:51:b7:ec:26:4b:79:d6:16:c8:2a:ca:bd: 78:b5:d4:ca:26:01:97:a2:15:fa:d7:32:ce:71:a7: 08:1a:f3:21:20:cd:1b:b9:2d:0b:e4:0d:ed:83:0e: 49:cb:32:2d:8e:b8:6c:5c:1e:77:ff:64:86:07:36: 94:03:22:e9:99:24:e3:05:86:00:a1:f1:76:51:09: 16:65:bc:7a:86:54:5c:6a:b8:c1:c7:fd:2b:b3:3b: f2:86:4d:41:76:76:10:2b:69:b7:73:df:ee:10:8d: 78:0d:e8:7e:5a:6b:c7:ea:b0:96:b2:de:e9:48:dc: ee:8a:23:89:54:5d:ef:7d:1d:59:4b:4e:1f:0a:a9: 30:5f:f9:ee:75:92:07:ec:72:dd:0b:8e:63:ff:1d: f5:32:d4:13:eb:e6:a8:16:f0:47:bc:66:4c:53:d7: b9:9f:b1:65:b2:57:b1:2a:2e:ea:72:68:89:15:14: 3c:44:ad:b1:d1:c3:5d:b7:6c:d8:9c:49:18:08:b3: 4c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B8:96:95:FB:7E:B5:B0:F5:88:03:1B:8C:27:77:22:66:5C:FA:69 X509v3 Authority Key Identifier: keyid:35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/MLiWlft-tbD1iAMbjCd3ImZc-mk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:5f20::/32 Signature Algorithm: sha256WithRSAEncryption 6b:f3:b1:ff:7f:4a:4b:c6:13:17:08:bc:18:40:06:03:60:4b: 50:e3:8c:ca:ea:53:55:fe:27:8d:4e:f9:9c:27:ad:02:7a:27: 79:8c:d2:5f:ac:93:83:07:5d:ce:74:31:81:0e:58:ba:8b:dc: b0:83:3d:ed:db:4a:81:4b:c6:83:1b:52:17:0a:64:8b:57:74: 0d:e3:c8:98:8b:71:06:ec:5b:21:b7:8d:e1:ca:72:da:53:81: 82:91:6b:39:13:e7:31:b3:f2:ae:b8:7a:de:fa:e8:cb:83:b7: 5a:31:67:4e:17:42:85:94:76:6d:4f:cb:c1:5a:3d:8c:22:0a: 07:aa:d5:bc:03:56:7e:53:46:d4:ff:41:5f:18:a4:cc:08:44: 2a:c4:12:02:08:99:7c:4c:a4:87:b0:ff:8c:88:bb:1e:71:53: cb:7c:49:f4:34:0d:e0:02:2e:ea:66:4c:dc:24:57:5e:77:38: 55:3a:f5:2c:2f:1a:bd:e1:0c:5a:24:34:4e:b8:00:3c:bc:2c: 81:e7:ff:6c:35:ea:67:17:34:dc:24:41:91:be:57:08:b4:4c: 5b:b9:5e:f1:62:7f:b5:16:e6:36:6e:25:aa:76:20:79:6c:55: b0:af:63:8f:a4:fd:66:41:b7:aa:ff:53:50:74:53:be:11:74: c2:07:62:93 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzVG RjkwMzA2QjQ3QTdERTAzMDdGMEUzMzVCNERDN0YyN0RFQTRGQjAeFw0yNTAyMTAx NDIzNTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMwQjg5Njk1RkI3RUI1 QjBGNTg4MDMxQjhDMjc3NzIyNjY1Q0ZBNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJWNpgsAhRpQLXP+RuCpat6cogglaLONDCLYsWvVXfEsddW58B YgyoRP1VhARRcPVj8l9OPeX1C066yYtUllG37CZLedYWyCrKvXi11MomAZeiFfrX Ms5xpwga8yEgzRu5LQvkDe2DDknLMi2OuGxcHnf/ZIYHNpQDIumZJOMFhgCh8XZR CRZlvHqGVFxquMHH/SuzO/KGTUF2dhArabdz3+4QjXgN6H5aa8fqsJay3ulI3O6K I4lUXe99HVlLTh8KqTBf+e51kgfsct0LjmP/HfUy1BPr5qgW8Ee8ZkxT17mfsWWy V7EqLupyaIkVFDxErbHRw123bNicSRgIs0wZAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUMLiWlft+tbD1iAMbjCd3ImZc+mkwHwYDVR0jBBgwFoAUNf+QMGtHp94DB/Dj NbTcfyfepPswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJSklD T0xURC9OZi1RTUd0SHA5NERCX0RqTmJUY2Z5ZmVwUHMuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL05mLVFNR3RIcDk0REJfRGpOYlRjZnlmZXBQcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NISUpJQ09MVEQvTUxpV2xmdC10 YkQxaUFNYmpDZDNJbVpjLW1rLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQBXyAwDQYJKoZIhvcNAQELBQADggEBAGvzsf9/SkvGExcIvBhABgNg S1DjjMrqU1X+J41O+ZwnrQJ6J3mM0l+sk4MHXc50MYEOWLqL3LCDPe3bSoFLxoMb UhcKZItXdA3jyJiLcQbsWyG3jeHKctpTgYKRazkT5zGz8q64et766MuDt1oxZ04X QoWUdm1Py8FaPYwiCgeq1bwDVn5TRtT/QV8YpMwIRCrEEgIImXxMpIew/4yIux5x U8t8SfQ0DeACLupmTNwkV153OFU69SwvGr3hDFokNE64ADy8LIHn/2w16mcXNNwk QZG+Vwi0TFu5XvFif7UW5jZuJap2IHlsVbCvY4+k/WZBt6r/U1B0U74RdMIHYpM= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net