$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/1UxhNGMmFgbjoQaVjCjMQYdjBYE.roa File: 1UxhNGMmFgbjoQaVjCjMQYdjBYE.roa (raw, json) Hash identifier: Pnwt/0AUvScTQsmZ5xT4Q741teN+n9ewYhy8oteAKQA= Subject key identifier: D5:4C:61:34:63:26:16:06:E3:A1:06:95:8C:28:CC:41:87:63:05:81 Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0D06 Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/1UxhNGMmFgbjoQaVjCjMQYdjBYE.roa Signing time: Mon 10 Feb 2025 14:02:27 +0000 ROA not before: Mon 10 Feb 2025 14:02:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 39.1.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3334 (0xd06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Feb 10 14:02:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D54C613463261606E3A106958C28CC4187630581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c8:34:15:55:1b:0a:5e:9a:51:45:cc:b4:d3: 7a:d2:95:38:13:83:ce:a6:e8:4f:28:fd:ba:fe:65: a5:86:4d:03:41:41:df:7b:d9:27:9d:25:ef:1e:cf: 0b:60:a6:22:90:1e:09:6f:61:cb:12:48:14:16:cc: 08:8d:2b:cd:7f:4f:a5:95:55:7b:c8:ad:d7:7c:0f: 31:b8:2d:88:94:b3:04:7a:df:a2:94:f8:9a:aa:8f: d2:4a:d8:ec:a0:54:f0:8e:b3:38:56:6a:28:9f:b5: 57:3a:95:19:a9:21:09:1d:c8:f1:4f:f6:4b:73:a4: 27:da:c4:76:29:f2:2f:ce:7f:ed:96:ac:53:83:aa: fe:41:eb:7f:b5:36:27:79:bc:9a:54:5a:51:c9:37: 44:a2:4a:0c:1e:30:98:73:37:ec:10:e3:7f:34:d8: f8:6d:5d:d8:c8:d8:9a:5a:8f:01:67:af:8d:96:21: ff:1d:75:ce:bc:aa:a3:e6:13:2d:e7:e7:65:47:2d: 33:d9:f0:88:5f:71:65:c6:33:55:d7:e4:c5:6c:03: 5d:1f:18:49:32:0b:e4:e1:f5:1a:44:82:23:7e:96: cb:35:53:5d:0c:5c:f4:0f:77:a7:6a:d8:64:6d:27: 22:76:44:a9:45:a5:78:b1:64:fb:7c:ee:1e:12:92: d1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4C:61:34:63:26:16:06:E3:A1:06:95:8C:28:CC:41:87:63:05:81 X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/1UxhNGMmFgbjoQaVjCjMQYdjBYE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 39.1.96.0/20 Signature Algorithm: sha256WithRSAEncryption 43:d3:4a:3e:2f:80:7a:85:88:3f:50:c7:06:82:21:a9:c8:78: 12:0a:e5:4f:68:42:a9:67:c6:47:32:a2:d2:82:ea:a8:8b:69: 9f:84:44:20:ac:a4:0f:b5:b9:a4:b6:de:11:e6:16:c2:13:31: 19:07:30:a4:0e:69:07:56:d6:5e:64:1b:28:6b:1f:6a:66:03: d9:99:a1:b2:f6:37:bc:a9:6c:e7:a9:52:1c:7b:66:66:75:68: dd:b6:70:71:bd:3a:e8:bc:8a:cb:bc:bd:0c:90:bc:4f:52:8c: a5:5d:6f:fc:42:96:2a:54:9b:fd:e8:3a:0a:47:b4:f1:bc:64: c9:14:29:0b:67:e5:f3:ad:97:24:48:4d:fc:50:de:b3:44:52: 54:69:38:7f:3f:a7:f4:3d:14:02:c7:d4:ed:e2:2d:62:38:bd: a0:72:69:d6:9b:d0:52:9b:32:b2:bd:48:3e:2c:b1:99:28:0c: 25:7b:29:3d:a2:e5:08:57:fe:11:9b:e4:63:1b:b3:7d:cb:32: 40:5d:d6:eb:b9:ba:f6:05:64:f7:5f:f4:0e:7c:0a:77:c5:a5: fb:86:02:21:26:eb:5e:00:43:84:e1:68:7e:2b:5e:00:bb:d4: 88:73:08:51:bb:34:4d:bf:db:05:77:39:0e:ec:70:7e:fb:76: c4:6d:09:76 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDQYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNTAyMTAx NDAyMjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ1NEM2MTM0NjMyNjE2 MDZFM0ExMDY5NThDMjhDQzQxODc2MzA1ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCryDQVVRsKXppRRcy003rSlTgTg86m6E8o/br+ZaWGTQNBQd97 2SedJe8ezwtgpiKQHglvYcsSSBQWzAiNK81/T6WVVXvIrdd8DzG4LYiUswR636KU +Jqqj9JK2OygVPCOszhWaiiftVc6lRmpIQkdyPFP9ktzpCfaxHYp8i/Of+2WrFOD qv5B63+1Nid5vJpUWlHJN0SiSgweMJhzN+wQ43802PhtXdjI2JpajwFnr42WIf8d dc68qqPmEy3n52VHLTPZ8IhfcWXGM1XX5MVsA10fGEkyC+Th9RpEgiN+lss1U10M XPQPd6dq2GRtJyJ2RKlFpXixZPt87h4SktHtAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU1UxhNGMmFgbjoQaVjCjMQYdjBYEwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC8xVXhoTkdNbUZnYmpvUWFWakNq TVFZZGpCWUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJwFg MA0GCSqGSIb3DQEBCwUAA4IBAQBD00o+L4B6hYg/UMcGgiGpyHgSCuVPaEKpZ8ZH MqLSguqoi2mfhEQgrKQPtbmktt4R5hbCEzEZBzCkDmkHVtZeZBsoax9qZgPZmaGy 9je8qWznqVIce2ZmdWjdtnBxvTrovIrLvL0MkLxPUoylXW/8QpYqVJv96DoKR7Tx vGTJFCkLZ+XzrZckSE38UN6zRFJUaTh/P6f0PRQCx9Tt4i1iOL2gcmnWm9BSmzKy vUg+LLGZKAwleyk9ouUIV/4Rm+RjG7N9yzJAXdbrubr2BWT3X/QOfAp3xaX7hgIh JuteAEOE4Wh+K14Au9SIcwhRuzRNv9sFdzkO7HB++3bEbQl2 -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net