$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/B3GjKJE5AhmntybizLFgxZ_Bi3M.roa File: B3GjKJE5AhmntybizLFgxZ_Bi3M.roa (raw, json) Hash identifier: 4oCMGhxaQEjkIRHxNa3zupIixqOqo4oRg7PbvAQp0y4= Subject key identifier: 07:71:A3:28:91:39:02:19:A7:B7:26:E2:CC:B1:60:C5:9F:C1:8B:73 Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0D0C Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/B3GjKJE5AhmntybizLFgxZ_Bi3M.roa Signing time: Mon 10 Feb 2025 14:02:28 +0000 ROA not before: Mon 10 Feb 2025 14:02:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9922 IP address blocks: 39.1.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3340 (0xd0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Feb 10 14:02:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0771A32891390219A7B726E2CCB160C59FC18B73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8e:3c:50:75:0e:9c:ca:d9:b7:e1:1c:d4:c8: 7e:53:5a:00:ca:6c:b4:67:87:5c:3f:6f:66:24:cd: a4:cc:7c:a8:2a:0e:2e:e4:8f:05:27:53:79:70:f0: 5b:5a:5a:7c:8b:66:c8:85:54:2f:b7:9f:4a:ad:7b: 6f:a6:3b:11:57:14:48:53:dc:d7:71:a5:e1:93:28: 3a:7f:c7:49:bf:cb:81:b5:c0:b3:f2:77:48:32:8f: fe:40:7b:e1:06:41:02:5d:c3:ec:1e:c4:cb:8c:c0: 3b:86:dc:cb:d4:f3:9f:3c:9c:fc:94:ed:fc:46:be: 2a:6c:83:34:d6:62:a5:0e:28:62:29:dd:7d:cb:17: 5b:dc:26:c9:a7:a7:45:68:04:c4:d3:05:27:16:59: 9f:50:71:42:93:94:fb:c8:7d:36:05:77:eb:16:45: 03:19:07:88:e2:9c:c0:81:dd:2e:b5:d1:3a:2e:c5: bf:a1:bb:dd:23:57:57:2c:0f:94:70:8a:86:31:67: 87:d6:70:da:37:b2:78:57:e2:0a:87:65:9a:f9:f7: c7:83:e4:bf:31:9f:ea:80:a6:86:3f:77:35:0c:d5: fd:27:97:86:83:38:e9:3c:f3:1d:ee:d8:28:3a:3c: ac:fe:99:5b:db:2b:c6:38:26:c7:6e:32:b9:a1:38: 7b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:71:A3:28:91:39:02:19:A7:B7:26:E2:CC:B1:60:C5:9F:C1:8B:73 X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/B3GjKJE5AhmntybizLFgxZ_Bi3M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 39.1.16.0/20 Signature Algorithm: sha256WithRSAEncryption 96:06:1c:b4:e6:03:db:73:8c:c1:2a:08:6d:86:31:e6:28:0d: 56:da:e2:71:d9:65:ab:d8:67:ec:12:95:07:8b:2a:5b:2b:ac: 53:5b:ed:d4:b1:b1:5f:c4:bb:6b:61:4f:7e:ce:b3:ef:17:72: 45:c1:42:46:33:b7:39:dd:26:52:19:0a:b7:dc:cc:46:30:81: 47:b6:65:7a:1a:59:a0:86:08:74:ee:d6:b5:37:04:9b:5b:0e: f7:ee:db:c3:0b:29:84:d0:af:33:58:f9:fd:0a:68:dc:f7:66: d7:b1:87:9a:ca:fa:90:9c:31:f0:ba:1e:b7:02:45:5d:ae:0f: 8f:fe:95:42:35:67:db:05:42:1a:68:cc:be:3d:59:bd:4b:31: 4a:73:3b:c7:fa:ce:ec:dc:2c:6c:7c:5c:db:ad:a1:33:f7:2f: 0a:93:dc:25:a2:10:ab:dd:e1:40:ab:b7:ee:89:20:b2:f0:3d: a7:41:8e:2b:56:ef:be:ef:e9:09:5d:81:3e:76:26:00:66:b7: 8d:98:fc:66:15:77:be:c0:a6:3b:be:e2:cc:ac:92:d0:cc:f3: e7:9c:69:b1:b0:0d:e8:6c:69:4b:a9:d7:e0:fe:32:d4:e5:55: bf:2a:a3:d8:48:a2:f6:38:14:bd:af:a9:96:69:ad:52:de:ec: 64:bb:3f:9b -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNTAyMTAx NDAyMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA3NzFBMzI4OTEzOTAy MTlBN0I3MjZFMkNDQjE2MEM1OUZDMThCNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2jjxQdQ6cytm34RzUyH5TWgDKbLRnh1w/b2YkzaTMfKgqDi7k jwUnU3lw8FtaWnyLZsiFVC+3n0qte2+mOxFXFEhT3NdxpeGTKDp/x0m/y4G1wLPy d0gyj/5Ae+EGQQJdw+wexMuMwDuG3MvU8588nPyU7fxGvipsgzTWYqUOKGIp3X3L F1vcJsmnp0VoBMTTBScWWZ9QcUKTlPvIfTYFd+sWRQMZB4jinMCB3S610Touxb+h u90jV1csD5RwioYxZ4fWcNo3snhX4gqHZZr598eD5L8xn+qApoY/dzUM1f0nl4aD OOk88x3u2Cg6PKz+mVvbK8Y4JsduMrmhOHtXAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUB3GjKJE5AhmntybizLFgxZ/Bi3MwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9CM0dqS0pFNUFobW50eWJpekxG Z3haX0JpM00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJwEQ MA0GCSqGSIb3DQEBCwUAA4IBAQCWBhy05gPbc4zBKghthjHmKA1W2uJx2WWr2Gfs EpUHiypbK6xTW+3UsbFfxLtrYU9+zrPvF3JFwUJGM7c53SZSGQq33MxGMIFHtmV6 Glmghgh07ta1NwSbWw737tvDCymE0K8zWPn9Cmjc92bXsYeayvqQnDHwuh63AkVd rg+P/pVCNWfbBUIaaMy+PVm9SzFKczvH+s7s3CxsfFzbraEz9y8Kk9wlohCr3eFA q7fuiSCy8D2nQY4rVu++7+kJXYE+diYAZreNmPxmFXe+wKY7vuLMrJLQzPPnnGmx sA3obGlLqdfg/jLU5VW/KqPYSKL2OBS9r6mWaa1S3uxkuz+b -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net