$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/O9CSpgTWnkI9wZDqdyS0VAH_UZQ.roa File: O9CSpgTWnkI9wZDqdyS0VAH_UZQ.roa (raw, json) Hash identifier: k3SeCE8mNkmJm6OqQbfxH3OvHU8yhgSVc7lBM87vtps= Subject key identifier: 3B:D0:92:A6:04:D6:9E:42:3D:C1:90:EA:77:24:B4:54:01:FF:51:94 Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0D13 Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/O9CSpgTWnkI9wZDqdyS0VAH_UZQ.roa Signing time: Mon 10 Feb 2025 14:02:30 +0000 ROA not before: Mon 10 Feb 2025 14:02:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9922 IP address blocks: 39.1.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3347 (0xd13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Feb 10 14:02:30 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3BD092A604D69E423DC190EA7724B45401FF5194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:27:3f:0c:86:ae:cb:71:44:8b:9c:36:07:9c: 91:01:69:b0:4b:bf:79:97:34:af:3e:ef:85:95:5c: fc:c5:6c:3f:c1:be:ab:4d:d9:43:6a:b6:10:e0:e1: 48:a5:b9:b2:14:da:0d:ae:7b:19:b7:c5:45:b3:f9: b1:70:8b:69:28:ea:31:a3:d5:19:af:1a:95:54:3b: 44:8a:35:e8:9f:51:a2:0a:aa:5d:be:e4:e8:8f:f6: 21:69:8a:e6:40:16:a1:c6:55:bf:bc:89:ac:db:a1: b6:3a:b1:39:9e:26:ce:28:c6:ee:52:4b:f7:a4:2f: 26:cb:cf:5d:3e:59:cc:95:80:48:95:f4:2f:19:76: 35:14:07:df:bb:3a:d7:cd:80:f5:08:29:b2:cf:ee: 7f:f4:0e:46:96:ef:f7:c7:5f:44:47:26:42:8c:62: 72:5b:bc:75:35:0f:e6:cb:72:72:52:1d:14:69:ff: 69:9a:4d:4d:6c:db:73:d1:a0:38:a3:9b:92:f2:c8: 98:d5:dd:a0:88:bb:c7:9b:1d:39:b9:4b:12:a6:52: c4:87:d3:8b:c4:53:cf:48:c2:78:f4:66:54:ff:84: ff:ba:6f:50:a1:d1:25:94:05:ad:51:c6:09:c0:88: 42:8a:d8:98:a2:5f:56:32:f8:c7:0c:d2:8c:f5:b2: b3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D0:92:A6:04:D6:9E:42:3D:C1:90:EA:77:24:B4:54:01:FF:51:94 X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/O9CSpgTWnkI9wZDqdyS0VAH_UZQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 39.1.0.0/20 Signature Algorithm: sha256WithRSAEncryption 0b:d1:ef:8a:ff:75:2f:aa:ff:44:d0:1b:78:43:96:fc:fd:32: fc:19:14:a4:3e:e7:8b:d4:ae:d4:de:62:e9:e3:74:84:c2:58: 44:44:6c:fb:db:48:6f:5a:03:48:75:65:f7:85:4d:e6:1e:14: 2a:8a:63:b0:81:05:d5:58:d8:cc:63:85:13:3b:d1:4a:31:36: 68:f4:56:31:49:7e:3b:8b:4a:a3:fe:f7:95:32:75:ce:d6:78: 54:77:63:31:13:9c:78:f0:10:ca:a5:af:53:10:46:d2:75:7e: 22:c0:68:0b:d7:bd:70:57:35:9d:f9:f7:38:a6:1d:d6:98:48: 79:d1:3e:7f:a0:45:46:bc:a3:8b:d9:d5:bb:0c:61:4f:c2:df: 21:48:1b:f8:cf:c4:67:48:74:f6:04:ed:70:ad:e0:f0:b3:71: bb:a3:83:0f:c7:cd:3f:b1:4d:8a:a3:6f:e8:19:85:20:fd:bf: 97:29:83:ae:70:f7:2e:03:f6:cb:e9:b3:7b:ba:1b:96:5d:54: f6:5a:c4:7d:eb:74:bd:9f:06:78:19:c6:3d:73:e6:85:d2:38: c5:b5:e4:ec:da:d8:37:32:f0:4c:54:97:67:54:60:fa:bd:09: 21:0c:ad:78:8e:99:fc:a6:67:74:93:ac:6c:1b:93:37:fa:ad: 3f:8b:db:9f -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDRMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNTAyMTAx NDAyMzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNCRDA5MkE2MDRENjlF NDIzREMxOTBFQTc3MjRCNDU0MDFGRjUxOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdJz8Mhq7LcUSLnDYHnJEBabBLv3mXNK8+74WVXPzFbD/BvqtN 2UNqthDg4UilubIU2g2uexm3xUWz+bFwi2ko6jGj1RmvGpVUO0SKNeifUaIKql2+ 5OiP9iFpiuZAFqHGVb+8iazbobY6sTmeJs4oxu5SS/ekLybLz10+WcyVgEiV9C8Z djUUB9+7OtfNgPUIKbLP7n/0DkaW7/fHX0RHJkKMYnJbvHU1D+bLcnJSHRRp/2ma TU1s23PRoDijm5LyyJjV3aCIu8ebHTm5SxKmUsSH04vEU89Iwnj0ZlT/hP+6b1Ch 0SWUBa1RxgnAiEKK2JiiX1Yy+McM0oz1srPxAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUO9CSpgTWnkI9wZDqdyS0VAH/UZQwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9POUNTcGdUV25rSTl3WkRxZHlT MFZBSF9VWlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJwEA MA0GCSqGSIb3DQEBCwUAA4IBAQAL0e+K/3Uvqv9E0Bt4Q5b8/TL8GRSkPueL1K7U 3mLp43SEwlhERGz720hvWgNIdWX3hU3mHhQqimOwgQXVWNjMY4UTO9FKMTZo9FYx SX47i0qj/veVMnXO1nhUd2MxE5x48BDKpa9TEEbSdX4iwGgL171wVzWd+fc4ph3W mEh50T5/oEVGvKOL2dW7DGFPwt8hSBv4z8RnSHT2BO1wreDws3G7o4MPx80/sU2K o2/oGYUg/b+XKYOucPcuA/bL6bN7uhuWXVT2WsR963S9nwZ4GcY9c+aF0jjFteTs 2tg3MvBMVJdnVGD6vQkhDK14jpn8pmd0k6xsG5M3+q0/i9uf -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net