$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/2UAPjEWfdYV6XfKtO6FdpJTyQD4.roa File: 2UAPjEWfdYV6XfKtO6FdpJTyQD4.roa (raw, json) Hash identifier: /rIczceKdRVLPMIyAMLWjK8QRU+2sOTWQdUsCLGNC2w= Subject key identifier: D9:40:0F:8C:45:9F:75:85:7A:5D:F2:AD:3B:A1:5D:A4:94:F2:40:3E Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Certificate serial: 0D64 Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/2UAPjEWfdYV6XfKtO6FdpJTyQD4.roa Signing time: Mon 10 Feb 2025 14:12:19 +0000 ROA not before: Mon 10 Feb 2025 14:12:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 203.121.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3428 (0xd64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Validity Not Before: Feb 10 14:12:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D9400F8C459F75857A5DF2AD3BA15DA494F2403E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:08:d5:5c:f8:d0:40:16:b8:5c:39:6b:1f:99: 4c:44:4a:30:44:64:30:db:7e:bc:69:0f:c4:66:29: a2:0f:ae:fc:e9:f4:23:a9:34:27:65:12:ec:bf:d9: bf:45:3f:13:9a:e2:34:0e:89:fd:69:15:86:1b:c6: 77:c2:c2:0f:a8:18:e3:42:11:d7:96:c5:07:02:4e: 7e:25:98:42:ab:be:57:b0:82:2b:4f:9e:71:95:34: 89:9b:9d:80:ba:fb:39:5f:ae:8a:77:84:ce:af:a1: d1:f1:fb:27:1f:24:fe:14:70:c3:ac:3d:54:4c:9c: 94:b4:47:ff:40:aa:c1:c9:35:03:a9:a9:58:76:dc: 03:0b:fe:97:66:c9:2f:d0:ba:c4:db:10:51:50:cf: 5c:74:cf:be:ec:27:20:a6:06:96:70:16:44:68:2c: e3:87:19:64:d6:1a:27:46:75:2e:62:8b:0d:fd:cf: f2:ea:ad:99:f7:02:95:0f:2c:25:c9:98:7a:59:7a: ee:2e:e8:22:94:23:fe:44:98:fc:48:cd:78:dd:e3: 00:2d:96:db:f0:43:fa:55:5b:9d:33:58:b1:b5:bf: 92:8c:94:17:a0:b9:84:97:af:e0:f9:0d:a9:f8:aa: 11:8f:70:ff:f9:54:6e:1a:65:d4:12:7f:57:9a:4e: 90:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:40:0F:8C:45:9F:75:85:7A:5D:F2:AD:3B:A1:5D:A4:94:F2:40:3E X509v3 Authority Key Identifier: keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/2UAPjEWfdYV6XfKtO6FdpJTyQD4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.121.224.0/20 Signature Algorithm: sha256WithRSAEncryption 56:af:b1:6a:9c:5a:c0:da:1e:b3:04:b9:b0:17:76:f4:6d:60: 0f:09:67:1f:d9:01:09:f4:a7:29:fd:13:24:78:e4:56:03:18: 24:31:82:73:ae:75:c2:d8:97:74:7b:14:e3:30:4a:5f:42:ab: 3d:a8:6a:95:0e:3f:51:d2:73:26:72:a2:4c:d2:b3:3b:99:e2: 53:cd:79:c2:9f:3e:28:79:ff:10:07:7c:c0:9a:ef:19:07:d2: 37:9b:95:99:c5:3e:15:80:b3:85:c2:47:50:bc:e1:1a:ea:27: b5:41:6a:61:39:74:8f:3f:3b:f3:f6:e2:c5:21:cf:23:e7:4b: 58:1f:93:1c:bb:e7:41:ab:b5:73:03:77:64:55:db:a8:ac:f6: 84:dd:2a:8a:80:d4:a5:d7:12:b2:88:69:bd:16:72:5f:33:c9: a4:cb:ea:ea:45:1a:04:9a:4f:81:94:e5:34:b1:d2:4d:c4:c8: 0a:9c:f1:b3:af:88:93:96:f1:5a:b9:ef:cf:14:aa:d2:0e:eb: 17:fc:b6:46:06:87:c9:5a:4f:6d:a2:24:fc:c6:ad:b7:fe:a9: a5:bf:21:56:d5:84:2f:4e:2a:29:28:c6:51:3f:c9:b2:f6:5a: 95:67:9f:81:5b:53:b3:25:07:96:28:58:04:b3:6f:97:f4:db: 41:c6:b2:9d -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yNTAyMTAx NDEyMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ5NDAwRjhDNDU5Rjc1 ODU3QTVERjJBRDNCQTE1REE0OTRGMjQwM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2CNVc+NBAFrhcOWsfmUxESjBEZDDbfrxpD8RmKaIPrvzp9COp NCdlEuy/2b9FPxOa4jQOif1pFYYbxnfCwg+oGONCEdeWxQcCTn4lmEKrvlewgitP nnGVNImbnYC6+zlfrop3hM6vodHx+ycfJP4UcMOsPVRMnJS0R/9AqsHJNQOpqVh2 3AML/pdmyS/QusTbEFFQz1x0z77sJyCmBpZwFkRoLOOHGWTWGidGdS5iiw39z/Lq rZn3ApUPLCXJmHpZeu4u6CKUI/5EmPxIzXjd4wAtltvwQ/pVW50zWLG1v5KMlBeg uYSXr+D5Dan4qhGPcP/5VG4aZdQSf1eaTpDPAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU2UAPjEWfdYV6XfKtO6FdpJTyQD4wHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+ q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS8yVUFQakVXZmRZVjZYZkt0TzZG ZHBKVHlRRDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEy3ng MA0GCSqGSIb3DQEBCwUAA4IBAQBWr7FqnFrA2h6zBLmwF3b0bWAPCWcf2QEJ9Kcp /RMkeORWAxgkMYJzrnXC2Jd0exTjMEpfQqs9qGqVDj9R0nMmcqJM0rM7meJTzXnC nz4oef8QB3zAmu8ZB9I3m5WZxT4VgLOFwkdQvOEa6ie1QWphOXSPPzvz9uLFIc8j 50tYH5Mcu+dBq7VzA3dkVduorPaE3SqKgNSl1xKyiGm9FnJfM8mky+rqRRoEmk+B lOU0sdJNxMgKnPGzr4iTlvFaue/PFKrSDusX/LZGBofJWk9toiT8xq23/qmlvyFW 1YQvTiopKMZRP8my9lqVZ5+BW1OzJQeWKFgEs2+X9NtBxrKd -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net