$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/6kbiqvrYxUogDnQnZMUvinRP7L8.roa File: 6kbiqvrYxUogDnQnZMUvinRP7L8.roa (raw, json) Hash identifier: 0Dz+quZWiEOug0Y9QbCvDZ+r7vqIZ0ivxnA3815GG/0= Subject key identifier: EA:46:E2:AA:FA:D8:C5:4A:20:0E:74:27:64:C5:2F:8A:74:4F:EC:BF Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0D08 Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/6kbiqvrYxUogDnQnZMUvinRP7L8.roa Signing time: Mon 10 Feb 2025 14:02:28 +0000 ROA not before: Mon 10 Feb 2025 14:02:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9922 IP address blocks: 39.1.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3336 (0xd08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Feb 10 14:02:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EA46E2AAFAD8C54A200E742764C52F8A744FECBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ab:9a:86:98:d0:82:81:b7:31:95:94:8f:f0: 6c:9c:90:ca:0a:b9:32:f9:64:a7:49:ca:fc:4e:62: b6:e0:76:29:41:f1:5a:c8:21:25:8d:1c:ba:14:00: e8:77:56:ae:60:f3:cf:c8:5b:f0:f9:cf:dd:4d:1f: 72:27:30:62:8f:ec:b9:dd:86:06:70:2f:43:31:27: fd:ad:50:63:af:d5:f1:e1:63:df:d1:5b:7a:87:21: 0c:15:f0:03:58:d0:d4:d1:01:c1:9b:2c:9b:83:24: 0d:d9:94:46:4b:3c:f0:a5:2f:dd:d8:ef:01:71:c3: 51:40:34:3d:71:b0:e7:29:fb:4a:e4:1d:5d:b6:c7: 5b:6d:79:24:e5:8a:bc:8c:1a:0a:26:65:59:5a:25: be:27:8d:6f:96:b4:7a:49:55:00:87:44:63:72:76: b9:54:fc:dc:c4:a0:7c:5f:5c:c6:6f:03:30:48:e3: 36:ca:e1:c4:87:88:91:fe:7f:28:66:80:ba:25:4a: 15:4a:0c:d7:3e:53:53:b6:21:bb:f2:1c:8a:53:33: e1:3c:47:72:0a:a6:aa:3f:00:33:55:f0:15:7e:60: e2:84:73:00:cb:09:54:15:b1:63:73:a7:72:48:2e: 93:68:c2:4c:3d:76:6a:3d:c5:40:40:46:c2:cb:b0: 26:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:46:E2:AA:FA:D8:C5:4A:20:0E:74:27:64:C5:2F:8A:74:4F:EC:BF X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/6kbiqvrYxUogDnQnZMUvinRP7L8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 39.1.48.0/20 Signature Algorithm: sha256WithRSAEncryption 10:df:9f:fa:74:c2:bc:b6:83:d9:a3:e1:02:56:12:e9:06:b5: 66:52:d4:f6:c1:8d:f6:99:b4:62:65:b6:fe:b9:1b:64:12:ec: 6d:92:d4:66:ea:08:6c:42:d8:e2:37:e4:ef:7d:35:f9:6a:b7: 98:eb:c1:93:a4:84:f3:16:36:11:3b:d5:59:87:25:f3:86:c0: 0c:09:25:60:d9:4a:96:d4:36:60:84:3f:69:41:2c:79:fd:9f: 8d:b5:ab:ff:37:4b:06:30:c8:c1:90:58:36:4e:f6:5a:ce:6c: 79:97:99:68:e5:56:9d:bb:38:8c:e0:63:c3:0f:77:34:5b:e3: bd:e5:0d:8c:a4:bd:70:a8:6b:95:05:a4:7c:e3:74:c3:fc:cb: 4a:1d:d0:ee:83:dc:31:a4:2b:a0:24:a4:20:07:08:9e:ee:5d: 1f:8a:65:3a:65:78:36:b3:7b:1a:59:2b:5b:cb:52:4d:70:b3: 89:24:0a:4e:dd:15:f5:41:97:3e:f2:77:a5:2c:91:39:8f:0c: f1:89:fb:73:f8:9b:b8:cb:5c:70:40:47:a4:86:5a:8e:ed:b7: 5d:9e:d5:06:54:bf:8e:8a:51:5b:73:c1:df:14:a1:42:be:05: 9d:7a:fe:6c:34:43:9c:ef:4e:38:f1:8f:6b:4a:18:ac:40:69: fb:4c:23:c2 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDQgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNTAyMTAx NDAyMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVBNDZFMkFBRkFEOEM1 NEEyMDBFNzQyNzY0QzUyRjhBNzQ0RkVDQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGq5qGmNCCgbcxlZSP8GyckMoKuTL5ZKdJyvxOYrbgdilB8VrI ISWNHLoUAOh3Vq5g88/IW/D5z91NH3InMGKP7LndhgZwL0MxJ/2tUGOv1fHhY9/R W3qHIQwV8ANY0NTRAcGbLJuDJA3ZlEZLPPClL93Y7wFxw1FAND1xsOcp+0rkHV22 x1tteSTliryMGgomZVlaJb4njW+WtHpJVQCHRGNydrlU/NzEoHxfXMZvAzBI4zbK 4cSHiJH+fyhmgLolShVKDNc+U1O2IbvyHIpTM+E8R3IKpqo/ADNV8BV+YOKEcwDL CVQVsWNzp3JILpNowkw9dmo9xUBARsLLsCZ7AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU6kbiqvrYxUogDnQnZMUvinRP7L8wHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC82a2JpcXZyWXhVb2dEblFuWk1V dmluUlA3TDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJwEw MA0GCSqGSIb3DQEBCwUAA4IBAQAQ35/6dMK8toPZo+ECVhLpBrVmUtT2wY32mbRi Zbb+uRtkEuxtktRm6ghsQtjiN+TvfTX5areY68GTpITzFjYRO9VZhyXzhsAMCSVg 2UqW1DZghD9pQSx5/Z+Ntav/N0sGMMjBkFg2TvZazmx5l5lo5VaduziM4GPDD3c0 W+O95Q2MpL1wqGuVBaR843TD/MtKHdDug9wxpCugJKQgBwie7l0fimU6ZXg2s3sa WStby1JNcLOJJApO3RX1QZc+8nelLJE5jwzxiftz+Ju4y1xwQEekhlqO7bddntUG VL+OilFbc8HfFKFCvgWdev5sNEOc70448Y9rShisQGn7TCPC -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net