$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/J7NxcyMRepcKJmsO68a432q647g.roa File: J7NxcyMRepcKJmsO68a432q647g.roa (raw, json) Hash identifier: SBsW1ar8TDxc5q0rSASRV5OEjhLFWMcLVdDuwwcys5A= Subject key identifier: 27:B3:71:73:23:11:7A:97:0A:26:6B:0E:EB:C6:B8:DF:6A:BA:E3:B8 Certificate issuer: /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF Certificate serial: 11B8 Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/J7NxcyMRepcKJmsO68a432q647g.roa Signing time: Mon 10 Feb 2025 14:27:11 +0000 ROA not before: Mon 10 Feb 2025 14:27:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 63897 IP address blocks: 103.127.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4536 (0x11b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF Validity Not Before: Feb 10 14:27:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=27B3717323117A970A266B0EEBC6B8DF6ABAE3B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e3:ee:bf:af:98:f2:ad:3c:13:6b:ff:dc:5d: e1:bb:75:24:ad:6a:ed:9c:be:40:1f:f0:5e:0c:10: 76:d5:2a:b6:f7:3b:2b:30:57:2a:03:79:8e:03:28: c1:33:29:12:de:b7:88:4b:60:5a:04:64:64:c8:aa: ec:86:6b:c4:f8:92:f2:d1:7b:d4:58:98:f7:5e:dd: 11:7e:9e:db:08:dd:d0:f3:80:4a:63:1f:c4:8d:87: 5d:d8:c1:70:6c:ab:c6:ab:56:cc:0d:47:05:3a:9b: ed:59:7e:ba:96:77:01:86:81:34:2a:b0:ff:4f:bb: c9:f2:85:76:2e:b7:c8:b6:fd:3d:d7:30:69:1c:f7: f8:ca:60:81:c4:67:80:aa:97:f2:21:3a:2c:ad:9a: 8a:a6:9b:58:0a:43:cc:f7:bf:d1:ed:d2:89:13:22: 83:dd:88:4c:a3:49:14:32:f2:f9:3b:21:8d:28:b9: 16:e3:bc:27:fd:58:3d:5c:ca:74:1b:ea:37:3c:f1: 6a:4b:75:cf:25:ec:0d:27:fa:f9:7b:d9:d4:c7:c5: 3e:3a:36:b8:fa:4c:2f:63:51:89:26:fe:cd:7c:65: 87:b6:60:47:ec:ed:8f:8b:ec:aa:7f:e0:0a:81:91: 63:3e:f2:6b:04:14:52:5b:1f:1c:54:64:3f:df:22: 71:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B3:71:73:23:11:7A:97:0A:26:6B:0E:EB:C6:B8:DF:6A:BA:E3:B8 X509v3 Authority Key Identifier: keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/J7NxcyMRepcKJmsO68a432q647g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.127.237.0/24 Signature Algorithm: sha256WithRSAEncryption 06:d9:a1:ea:a3:46:91:ef:e5:0e:05:01:47:1f:bf:da:4e:e5: 6e:8e:bb:ad:7e:16:51:f7:2c:3d:fe:4b:b5:78:7e:3f:32:85: 4f:60:d9:58:1d:9b:56:a3:49:cd:eb:62:50:bc:6a:94:69:77: 37:fe:1c:e9:2b:d8:d9:3e:13:9c:bd:ad:5a:c0:4f:86:59:72: 8d:e8:cd:29:c5:03:9d:2e:6f:63:04:76:c0:e9:b7:57:92:7f: 8a:7c:49:95:32:19:7a:1f:b8:03:1e:6b:e4:cd:b5:c6:33:4b: f7:d8:53:ec:bf:c8:3b:42:d3:38:56:50:75:09:46:c7:ea:65: 41:ee:e0:0f:ee:8f:57:50:ad:40:a5:ac:80:ed:b3:39:ba:5d: 3a:fb:7f:e3:a7:52:59:d1:2f:a2:8d:35:78:73:36:04:de:67: cc:6a:70:d8:96:f8:9f:07:cc:59:d9:8f:f8:83:32:19:43:59: ed:de:33:55:72:d0:01:f5:62:46:42:35:d6:83:59:b8:da:4f: e0:64:59:44:aa:b5:d1:47:b1:42:1b:3e:19:4f:50:38:0f:c4: bf:5f:05:82:8e:1a:f1:0b:d9:20:24:a2:5f:29:a0:9e:ae:a4: 1f:31:d7:ca:43:34:90:fb:20:88:fa:f2:ed:24:52:fd:4a:93: 0d:d1:e3:e7 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEbgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUQx ODZGNjMxNEQ3QjU3MTNFRkZFQ0ZCOTNFQkMzRTgyMTk3RTJFRjAeFw0yNTAyMTAx NDI3MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI3QjM3MTczMjMxMTdB OTcwQTI2NkIwRUVCQzZCOERGNkFCQUUzQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCn4+6/r5jyrTwTa//cXeG7dSStau2cvkAf8F4MEHbVKrb3Oysw VyoDeY4DKMEzKRLet4hLYFoEZGTIquyGa8T4kvLRe9RYmPde3RF+ntsI3dDzgEpj H8SNh13YwXBsq8arVswNRwU6m+1ZfrqWdwGGgTQqsP9Pu8nyhXYut8i2/T3XMGkc 9/jKYIHEZ4Cql/IhOiytmoqmm1gKQ8z3v9Ht0okTIoPdiEyjSRQy8vk7IY0ouRbj vCf9WD1cynQb6jc88WpLdc8l7A0n+vl72dTHxT46Nrj6TC9jUYkm/s18ZYe2YEfs 7Y+L7Kp/4AqBkWM+8msEFFJbHxxUZD/fInGHAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUJ7NxcyMRepcKJmsO68a432q647gwHwYDVR0jBBgwFoAU7RhvYxTXtXE+/+z7 k+vD6CGX4u8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hVTllJ TkcvN1Jodll4VFh0WEUtXy16N2stdkQ2Q0dYNHU4LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS83Umh2WXhUWHRYRS1fLXo3ay12RDZDR1g0dTguY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSFVOWUlORy9KN054Y3lNUmVwY0tK bXNPNjhhNDMycTY0N2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ3/tMA0GCSqGSIb3DQEBCwUAA4IBAQAG2aHqo0aR7+UOBQFHH7/aTuVujrut fhZR9yw9/ku1eH4/MoVPYNlYHZtWo0nN62JQvGqUaXc3/hzpK9jZPhOcva1awE+G WXKN6M0pxQOdLm9jBHbA6bdXkn+KfEmVMhl6H7gDHmvkzbXGM0v32FPsv8g7QtM4 VlB1CUbH6mVB7uAP7o9XUK1ApayA7bM5ul06+3/jp1JZ0S+ijTV4czYE3mfManDY lvifB8xZ2Y/4gzIZQ1nt3jNVctAB9WJGQjXWg1m42k/gZFlEqrXRR7FCGz4ZT1A4 D8S/XwWCjhrxC9kgJKJfKaCerqQfMdfKQzSQ+yCI+vLtJFL9SpMN0ePn -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net