$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/yRSx7igzyvU1Xt8n5IsAkkt7aFw.roa File: yRSx7igzyvU1Xt8n5IsAkkt7aFw.roa (raw, json) Hash identifier: bo8YbhEQ+jONdPxASh8b5szJWVef+c7Y4zIzGjXvqfo= Subject key identifier: C9:14:B1:EE:28:33:CA:F5:35:5E:DF:27:E4:8B:00:92:4B:7B:68:5C Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Certificate serial: 0D5D Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/yRSx7igzyvU1Xt8n5IsAkkt7aFw.roa Signing time: Mon 10 Feb 2025 14:12:17 +0000 ROA not before: Mon 10 Feb 2025 14:12:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 203.121.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3421 (0xd5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Validity Not Before: Feb 10 14:12:17 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C914B1EE2833CAF5355EDF27E48B00924B7B685C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b2:0a:4d:ef:a7:9b:52:cb:87:b5:00:cc:3a: 55:9c:f5:a5:a2:2d:29:b8:07:64:c5:de:d7:c5:6c: 2f:6e:41:29:01:b1:c5:1f:17:0f:ac:8b:e7:c9:93: 58:8e:68:71:e0:6d:fa:41:9a:86:4c:14:e1:2c:64: c2:5a:39:00:6f:24:55:ce:b3:ec:cc:ea:5e:15:2d: 3c:90:a5:a4:10:0b:8b:76:3c:3c:73:23:04:59:e7: 33:04:89:ab:41:29:78:0e:29:44:1d:40:ad:1f:c7: bd:1c:10:40:bc:04:99:f5:df:f7:7e:8a:f3:3b:fd: d2:e9:b4:a9:8e:97:fe:88:7d:39:b6:cc:8d:ed:34: af:8e:86:1d:f8:82:06:c8:62:c6:13:95:8d:c0:ad: a1:b5:55:c0:ad:4a:fa:60:d1:ec:9b:c7:52:b3:79: 77:7a:94:4d:56:1e:86:14:47:0d:d1:9b:59:36:de: e0:2a:60:6b:0a:f1:26:bc:e9:89:42:d5:31:8e:a2: c1:25:23:6b:ff:c0:9b:b8:52:77:5f:d7:4c:59:7f: ae:34:bc:9d:ba:e6:c1:0a:ab:15:93:83:26:61:90: 55:e8:66:26:a4:c9:13:95:a3:82:89:f8:64:ac:b2: 06:8f:60:78:29:51:15:71:17:b1:d5:1f:89:0d:07: 3b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:14:B1:EE:28:33:CA:F5:35:5E:DF:27:E4:8B:00:92:4B:7B:68:5C X509v3 Authority Key Identifier: keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/yRSx7igzyvU1Xt8n5IsAkkt7aFw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.121.240.0/20 Signature Algorithm: sha256WithRSAEncryption 0b:81:c9:5b:d6:79:c8:34:ba:fb:8c:28:99:5d:9a:1d:52:22: 13:b0:d3:39:fe:73:e2:2d:38:0a:07:65:16:16:42:ba:f4:c4: 6e:20:42:50:76:73:a1:d8:6c:c5:1f:37:0c:0b:36:03:26:50: 55:60:9a:61:6d:45:f2:7b:2c:e0:64:61:13:c1:7e:70:ee:ed: 62:68:f7:d7:e7:f1:f9:e1:ce:a3:11:1d:51:68:65:7f:36:63: 96:97:e3:95:81:f6:e5:17:54:52:ac:ec:4e:ca:da:38:d1:ad: 9b:11:aa:ad:c2:6b:f3:33:cd:ee:f0:13:ed:c8:d6:6f:2e:61: 5b:a6:b4:13:86:34:f5:5b:83:35:6e:ab:49:fe:f3:5c:66:21: da:56:d0:a2:75:62:29:73:ed:85:ec:49:12:2b:0c:1d:cc:ee: 96:f2:c5:55:4c:a9:a0:48:17:77:5b:36:fa:90:96:b3:42:b8: f4:f4:d0:5f:eb:ad:e8:d9:da:c2:83:5d:77:f6:1c:aa:07:e6: ed:21:c2:96:5f:c1:9d:c7:bb:5f:15:f3:a3:1c:6b:6a:32:05: cf:e7:1a:1c:00:d6:d3:0e:36:cd:77:9b:f0:1e:3e:91:08:6a: a1:b9:9c:8a:07:8a:27:5f:1a:55:5a:7e:36:8c:40:42:44:c0: e5:8a:77:22 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDV0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yNTAyMTAx NDEyMTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM5MTRCMUVFMjgzM0NB RjUzNTVFREYyN0U0OEIwMDkyNEI3QjY4NUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMsgpN76ebUsuHtQDMOlWc9aWiLSm4B2TF3tfFbC9uQSkBscUf Fw+si+fJk1iOaHHgbfpBmoZMFOEsZMJaOQBvJFXOs+zM6l4VLTyQpaQQC4t2PDxz IwRZ5zMEiatBKXgOKUQdQK0fx70cEEC8BJn13/d+ivM7/dLptKmOl/6IfTm2zI3t NK+Ohh34ggbIYsYTlY3AraG1VcCtSvpg0eybx1KzeXd6lE1WHoYURw3Rm1k23uAq YGsK8Sa86YlC1TGOosElI2v/wJu4Undf10xZf640vJ265sEKqxWTgyZhkFXoZiak yROVo4KJ+GSssgaPYHgpURVxF7HVH4kNBzvnAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUyRSx7igzyvU1Xt8n5IsAkkt7aFwwHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+ q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS95UlN4N2lnenl2VTFYdDhuNUlz QWtrdDdhRncucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEy3nw MA0GCSqGSIb3DQEBCwUAA4IBAQALgclb1nnINLr7jCiZXZodUiITsNM5/nPiLTgK B2UWFkK69MRuIEJQdnOh2GzFHzcMCzYDJlBVYJphbUXyeyzgZGETwX5w7u1iaPfX 5/H54c6jER1RaGV/NmOWl+OVgfblF1RSrOxOyto40a2bEaqtwmvzM83u8BPtyNZv LmFbprQThjT1W4M1bqtJ/vNcZiHaVtCidWIpc+2F7EkSKwwdzO6W8sVVTKmgSBd3 Wzb6kJazQrj09NBf663o2drCg1139hyqB+btIcKWX8Gdx7tfFfOjHGtqMgXP5xoc ANbTDjbNd5vwHj6RCGqhuZyKB4onXxpVWn42jEBCRMDlinci -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net