$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/Qm7blXBn7RtU2Ced_5vJzrtgofQ.roa File: Qm7blXBn7RtU2Ced_5vJzrtgofQ.roa (raw, json) Hash identifier: N6+d+mCmP7VJqupLQ1bzymbE4WIHWxTDBc4DhMIyKlM= Subject key identifier: 42:6E:DB:95:70:67:ED:1B:54:D8:27:9D:FF:9B:C9:CE:BB:60:A1:F4 Certificate issuer: /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F Certificate serial: 0C71 Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/Qm7blXBn7RtU2Ced_5vJzrtgofQ.roa Signing time: Mon 10 Feb 2025 14:20:11 +0000 ROA not before: Mon 10 Feb 2025 14:20:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131618 IP address blocks: 103.129.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3185 (0xc71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F Validity Not Before: Feb 10 14:20:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=426EDB957067ED1B54D8279DFF9BC9CEBB60A1F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:84:9f:c7:3b:63:7a:fe:6d:48:42:a7:e9:06: 8a:ff:b4:e1:c5:7f:47:17:86:21:9c:c2:ea:6b:64: e4:e4:9c:8e:cd:58:ce:c0:11:6e:27:db:43:64:16: 8b:41:b7:ec:c0:17:0f:ef:1b:f3:1e:95:ba:dc:75: 4d:a6:3d:d0:45:cc:1c:38:a7:21:50:39:ca:aa:7d: 0d:20:fa:59:ea:ca:56:95:65:98:0e:21:a4:05:39: 99:56:66:7b:83:00:f5:58:a7:97:a6:fc:46:29:e8: 22:a9:a1:a8:d1:31:57:56:6f:9a:a4:03:2d:df:f5: 82:84:88:24:27:0d:15:b6:d2:92:3c:82:29:a6:27: 9e:9d:6f:28:e8:30:e9:13:fb:a3:20:be:b9:a4:a2: 99:e6:a5:ab:d8:4e:36:46:22:16:9a:06:8a:d0:ec: 3d:45:07:e0:b0:6d:eb:28:4f:46:37:a7:87:d1:a2: 6d:7c:c5:2d:e3:34:a0:15:11:7c:cf:cc:a8:87:ec: b9:eb:f5:14:34:1e:5b:5a:00:3d:02:7d:ac:93:3b: 00:c3:6a:b8:b2:1d:29:68:2b:84:96:44:e7:a2:f6: 45:5b:cd:46:32:cf:fc:39:92:22:fa:66:09:a0:ac: 82:29:2e:81:fb:a0:7b:67:95:25:fe:76:05:50:63: d3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6E:DB:95:70:67:ED:1B:54:D8:27:9D:FF:9B:C9:CE:BB:60:A1:F4 X509v3 Authority Key Identifier: keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/Qm7blXBn7RtU2Ced_5vJzrtgofQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.129.136.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:97:90:be:86:b0:c0:82:63:62:2f:13:7c:f2:9f:69:92:a4: 20:bb:20:fa:5d:ed:ed:b5:88:c0:a7:63:9f:61:51:3f:94:48: ee:61:e6:2e:ec:0e:a0:6a:01:69:5b:f4:f8:08:45:38:9d:db: b7:0e:35:ad:e0:be:62:5b:3f:ac:76:08:40:0c:c5:fb:e2:70: f0:80:00:d1:2d:52:98:86:12:1a:f0:18:20:93:fe:e5:88:c3: d6:8f:00:57:43:8e:dc:d3:dd:fb:24:a6:2e:8c:e1:bb:a7:91: 1b:7f:92:2f:d4:18:00:e4:53:b3:25:25:b1:a2:d9:57:61:47: f6:21:58:9e:24:5c:03:70:ae:50:28:19:62:2d:b5:b1:8b:3c: 81:ea:c4:9e:cb:af:a7:f7:44:d5:57:79:a6:94:3a:d2:51:55: 17:c1:40:05:e3:d7:53:a5:ea:fc:0e:73:9d:d5:10:4c:0f:18: 58:d4:0d:51:c1:ba:ca:d2:a1:13:11:fa:ca:60:24:7c:69:d0: 9d:04:19:8c:81:ea:05:cf:06:a1:34:81:33:2f:dc:e9:3a:c9: 04:6e:8c:6c:76:9b:2f:de:e7:92:d4:2b:b1:bd:b1:04:d6:aa: 20:c7:44:77:bf:17:06:71:c5:ea:f5:8a:79:2b:41:2c:f0:6e: 91:b8:c3:96 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDHEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEMx ODNEN0NCQTZCOUE5Q0FGRTZGNTBCRkIwMzhENjQ1RDI2REM3RjAeFw0yNTAyMTAx NDIwMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQyNkVEQjk1NzA2N0VE MUI1NEQ4Mjc5REZGOUJDOUNFQkI2MEExRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMhJ/HO2N6/m1IQqfpBor/tOHFf0cXhiGcwuprZOTknI7NWM7A EW4n20NkFotBt+zAFw/vG/MelbrcdU2mPdBFzBw4pyFQOcqqfQ0g+lnqylaVZZgO IaQFOZlWZnuDAPVYp5em/EYp6CKpoajRMVdWb5qkAy3f9YKEiCQnDRW20pI8gimm J56dbyjoMOkT+6MgvrmkopnmpavYTjZGIhaaBorQ7D1FB+CwbesoT0Y3p4fRom18 xS3jNKAVEXzPzKiH7Lnr9RQ0HltaAD0CfayTOwDDariyHSloK4SWROei9kVbzUYy z/w5kiL6ZgmgrIIpLoH7oHtnlSX+dgVQY9OxAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUQm7blXBn7RtU2Ced/5vJzrtgofQwHwYDVR0jBBgwFoAUjBg9fLprmpyv5vUL +wONZF0m3H8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tZQ0xP VUQvakJnOWZMcHJtcHl2NXZVTC13T05aRjBtM0g4LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9qQmc5Zkxwcm1weXY1dlVMLXdPTlpGMG0zSDguY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS1lDTE9VRC9RbTdibFhCbjdSdFUy Q2VkXzV2SnpydGdvZlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ4GIMA0GCSqGSIb3DQEBCwUAA4IBAQAul5C+hrDAgmNiLxN88p9pkqQguyD6 Xe3ttYjAp2OfYVE/lEjuYeYu7A6gagFpW/T4CEU4ndu3DjWt4L5iWz+sdghADMX7 4nDwgADRLVKYhhIa8Bggk/7liMPWjwBXQ47c0937JKYujOG7p5Ebf5Iv1BgA5FOz JSWxotlXYUf2IVieJFwDcK5QKBliLbWxizyB6sSey6+n90TVV3mmlDrSUVUXwUAF 49dTper8DnOd1RBMDxhY1A1RwbrK0qETEfrKYCR8adCdBBmMgeoFzwahNIEzL9zp OskEboxsdpsv3ueS1CuxvbEE1qogx0R3vxcGccXq9Yp5K0Es8G6RuMOW -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net