$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/O9rIUW2j-iTzzHYEAijZry7OZts.roa File: O9rIUW2j-iTzzHYEAijZry7OZts.roa (raw, json) Hash identifier: VFvisbotMqdFyIi+krSLGb9KsqUkmSXozEV0sG11wac= Subject key identifier: 3B:DA:C8:51:6D:A3:FA:24:F3:CC:76:04:02:28:D9:AF:2E:CE:66:DB Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0D14 Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/O9rIUW2j-iTzzHYEAijZry7OZts.roa Signing time: Mon 10 Feb 2025 14:02:30 +0000 ROA not before: Mon 10 Feb 2025 14:02:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9922 IP address blocks: 39.1.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3348 (0xd14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Feb 10 14:02:30 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3BDAC8516DA3FA24F3CC76040228D9AF2ECE66DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1b:da:0f:d3:39:b1:87:95:7c:e3:3f:1c:17: 56:52:83:ed:07:e0:80:89:ef:6d:cc:ea:ff:dc:57: 3a:74:39:78:0d:2f:bf:79:6f:d2:2b:0a:c2:fe:f3: 54:f3:60:7b:91:5b:b8:d2:8b:fb:28:76:3d:ab:f7: 19:d5:e8:15:37:36:c3:3a:a4:71:d3:de:66:88:72: 87:97:61:25:c5:fc:3f:bc:6d:bf:8f:ed:40:e9:00: 63:84:e4:ca:a9:27:50:d9:77:d8:4c:de:a4:8f:e2: a7:b0:dc:34:7d:ce:a8:f3:52:40:ab:1e:d4:68:07: 50:38:b9:7e:f5:98:a5:03:71:3c:87:47:f3:4a:9e: e5:62:ec:53:8f:4a:ee:01:e8:f8:16:53:9c:00:ff: 1e:73:b5:a5:d4:24:e6:d9:33:da:99:b1:f8:c7:07: b2:d5:43:df:99:bc:aa:19:4f:ea:c5:ea:da:85:73: 0a:9c:cf:dc:15:69:de:72:0f:ef:ca:05:6f:98:03: 57:5b:69:de:d2:73:ba:d5:40:95:93:cd:16:46:bd: fe:28:37:0a:3f:59:6f:4e:60:bb:7f:63:43:74:b1: 87:97:67:7e:21:bf:f1:ce:71:6e:27:93:23:85:35: 18:5c:bd:9e:18:dc:0d:cd:fa:e6:3d:c7:f3:a0:cc: 68:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DA:C8:51:6D:A3:FA:24:F3:CC:76:04:02:28:D9:AF:2E:CE:66:DB X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/O9rIUW2j-iTzzHYEAijZry7OZts.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 39.1.32.0/21 Signature Algorithm: sha256WithRSAEncryption 21:a4:e2:b8:6d:2b:6d:b5:4c:cb:9f:ea:05:a0:58:f3:cf:ac: 9d:52:30:f0:84:1c:c0:d7:79:5c:39:4e:9b:e3:22:34:a3:a8: fa:85:48:00:33:4a:b5:93:9c:c2:e9:18:7e:c5:87:45:d7:a7: 40:fc:43:e0:25:e9:e4:30:f7:60:c7:cc:f6:33:c5:df:39:7d: 5b:e2:35:05:91:5c:aa:73:fc:c5:d2:8a:62:b2:9d:ab:31:2b: 08:d8:f6:87:16:bd:33:86:31:4c:f2:56:f8:c2:28:6b:57:81: f1:eb:88:6c:b1:9f:5b:04:91:2e:67:00:97:70:49:6b:f5:71: 7c:08:12:e3:55:56:9c:4a:a2:4b:3a:90:1c:d4:f2:37:04:4b: c9:f2:95:66:4e:8d:51:ca:80:3a:8f:55:81:b2:55:eb:f4:1b: a6:43:11:26:e1:cf:11:de:88:8e:78:27:a0:65:ad:ce:10:ba: 2f:67:99:1e:f7:ae:42:9f:ae:b3:54:63:ea:bd:24:fd:e2:cf: 6d:03:7b:c1:09:ef:b8:39:70:e7:10:73:33:c7:95:e7:29:f1: 35:72:a2:f5:86:b4:eb:bd:a1:fe:8f:a6:14:ca:a4:2f:a7:14: 4e:b9:dc:f1:06:1e:8c:7f:9a:77:2c:74:e6:2f:d1:46:3f:32: 85:2c:57:b5 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDRQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNTAyMTAx NDAyMzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNCREFDODUxNkRBM0ZB MjRGM0NDNzYwNDAyMjhEOUFGMkVDRTY2REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSG9oP0zmxh5V84z8cF1ZSg+0H4ICJ723M6v/cVzp0OXgNL795 b9IrCsL+81TzYHuRW7jSi/sodj2r9xnV6BU3NsM6pHHT3maIcoeXYSXF/D+8bb+P 7UDpAGOE5MqpJ1DZd9hM3qSP4qew3DR9zqjzUkCrHtRoB1A4uX71mKUDcTyHR/NK nuVi7FOPSu4B6PgWU5wA/x5ztaXUJObZM9qZsfjHB7LVQ9+ZvKoZT+rF6tqFcwqc z9wVad5yD+/KBW+YA1dbad7Sc7rVQJWTzRZGvf4oNwo/WW9OYLt/Y0N0sYeXZ34h v/HOcW4nkyOFNRhcvZ4Y3A3N+uY9x/OgzGjPAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUO9rIUW2j+iTzzHYEAijZry7OZtswHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9POXJJVVcyai1pVHp6SFlFQWlq WnJ5N09adHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJwEg MA0GCSqGSIb3DQEBCwUAA4IBAQAhpOK4bStttUzLn+oFoFjzz6ydUjDwhBzA13lc OU6b4yI0o6j6hUgAM0q1k5zC6Rh+xYdF16dA/EPgJenkMPdgx8z2M8XfOX1b4jUF kVyqc/zF0opisp2rMSsI2PaHFr0zhjFM8lb4wihrV4Hx64hssZ9bBJEuZwCXcElr 9XF8CBLjVVacSqJLOpAc1PI3BEvJ8pVmTo1RyoA6j1WBslXr9BumQxEm4c8R3oiO eCegZa3OELovZ5ke965Cn66zVGPqvST94s9tA3vBCe+4OXDnEHMzx5XnKfE1cqL1 hrTrvaH+j6YUyqQvpxROudzxBh6Mf5p3LHTmL9FGPzKFLFe1 -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net