$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/n0z-7gw9P02Q1_udeWLPVppNBt0.roa File: n0z-7gw9P02Q1_udeWLPVppNBt0.roa (raw, json) Hash identifier: TO7npdkWXVhjIRYg2GRj4OkY0OpzW8h6N0e9LezxyBY= Subject key identifier: 9F:4C:FE:EE:0C:3D:3F:4D:90:D7:FB:9D:79:62:CF:56:9A:4D:06:DD Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0D19 Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/n0z-7gw9P02Q1_udeWLPVppNBt0.roa Signing time: Mon 10 Feb 2025 14:02:31 +0000 ROA not before: Mon 10 Feb 2025 14:02:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9922 IP address blocks: 39.1.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3353 (0xd19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Feb 10 14:02:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9F4CFEEE0C3D3F4D90D7FB9D7962CF569A4D06DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fa:17:ef:18:61:ac:1b:c1:c0:79:ef:20:1b: af:7d:18:82:eb:6f:85:b5:5d:30:40:63:48:46:d5: 4a:e2:86:20:bb:74:d7:70:8f:ec:5f:54:2f:62:c8: 9d:85:23:0f:00:2c:83:cb:56:cd:05:a7:2d:f4:49: b3:cf:05:3c:00:78:9b:2a:3e:be:e6:a5:20:44:cb: ce:f3:3c:52:e2:9d:4a:80:6d:3e:e9:47:ec:cd:06: f3:ac:ca:74:2e:3f:a2:52:2a:a1:2f:02:6a:b3:50: 10:f9:73:02:94:94:4d:12:e5:11:ab:26:bb:be:aa: d7:2c:61:f2:52:bd:9f:a9:cc:f6:79:3f:5b:64:90: ce:0a:1e:04:93:c6:d0:ce:1c:4d:5c:95:81:d5:ad: ee:65:53:7f:af:90:af:9c:ad:78:31:af:01:c5:fe: 0b:7d:f9:eb:bd:7f:cf:50:22:98:5b:6c:5e:b9:4a: 44:21:8d:ae:e0:3f:a9:64:8c:8b:be:f0:84:7e:ea: 45:9c:eb:78:b8:42:ac:77:75:c9:ec:1f:ec:73:5a: e3:8b:a5:ba:e2:2f:75:02:9a:0a:5d:76:a9:94:cd: 0a:d3:fb:f5:e3:b0:70:5d:ca:af:30:6f:80:7d:bf: bd:f1:0a:47:6f:de:30:f5:e8:1d:25:b3:b4:44:ff: 09:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4C:FE:EE:0C:3D:3F:4D:90:D7:FB:9D:79:62:CF:56:9A:4D:06:DD X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/n0z-7gw9P02Q1_udeWLPVppNBt0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 39.1.40.0/22 Signature Algorithm: sha256WithRSAEncryption 24:ca:c5:db:04:18:84:ea:47:ce:a1:cf:75:99:d7:20:6e:85: 6a:64:24:f9:ba:a9:10:cf:05:9b:46:73:b5:db:87:5d:ce:43: b0:45:30:d4:43:e4:16:ab:d6:70:10:71:55:63:7b:ab:64:22: 9c:4d:46:5d:64:89:83:33:89:1d:e5:a7:16:0a:bb:00:06:b5: 5a:ef:77:d4:48:24:9e:f4:9a:bc:34:6a:9f:22:88:11:bc:04: 2b:75:31:c1:e0:24:2b:b7:13:a5:52:80:54:ca:8c:e5:4d:6d: a8:03:5e:8a:ef:56:9b:08:20:80:f1:ae:bf:17:ed:49:83:a3: 26:4c:35:cc:91:e9:f1:4e:5a:84:44:c6:ce:17:ef:c6:93:c5: 32:da:6a:1c:c4:e4:07:2c:f3:55:5c:40:2c:5d:d6:36:ae:25: 65:57:e0:a3:e4:d2:54:57:1f:f1:99:3d:66:12:d7:58:2e:bf: 8b:b3:16:a0:91:89:64:32:df:dc:cd:7f:17:a8:95:00:7f:5a: c2:a4:96:12:2d:a2:0a:c3:1e:64:a4:4b:62:ac:07:e0:5c:7e: 3e:db:48:6c:61:fb:b5:17:9d:56:26:d6:11:5c:bd:52:73:5f: 76:51:e1:6a:e4:75:97:af:d3:db:8b:25:11:9d:6d:71:d7:78: f4:6a:85:1e -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDRkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNTAyMTAx NDAyMzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlGNENGRUVFMEMzRDNG NEQ5MEQ3RkI5RDc5NjJDRjU2OUE0RDA2REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCk+hfvGGGsG8HAee8gG699GILrb4W1XTBAY0hG1UrihiC7dNdw j+xfVC9iyJ2FIw8ALIPLVs0Fpy30SbPPBTwAeJsqPr7mpSBEy87zPFLinUqAbT7p R+zNBvOsynQuP6JSKqEvAmqzUBD5cwKUlE0S5RGrJru+qtcsYfJSvZ+pzPZ5P1tk kM4KHgSTxtDOHE1clYHVre5lU3+vkK+crXgxrwHF/gt9+eu9f89QIphbbF65SkQh ja7gP6lkjIu+8IR+6kWc63i4Qqx3dcnsH+xzWuOLpbriL3UCmgpddqmUzQrT+/Xj sHBdyq8wb4B9v73xCkdv3jD16B0ls7RE/wkPAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUn0z+7gw9P02Q1/udeWLPVppNBt0wHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9uMHotN2d3OVAwMlExX3VkZVdM UFZwcE5CdDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJwEo MA0GCSqGSIb3DQEBCwUAA4IBAQAkysXbBBiE6kfOoc91mdcgboVqZCT5uqkQzwWb RnO124ddzkOwRTDUQ+QWq9ZwEHFVY3urZCKcTUZdZImDM4kd5acWCrsABrVa73fU SCSe9Jq8NGqfIogRvAQrdTHB4CQrtxOlUoBUyozlTW2oA16K71abCCCA8a6/F+1J g6MmTDXMkenxTlqERMbOF+/Gk8Uy2mocxOQHLPNVXEAsXdY2riVlV+Cj5NJUVx/x mT1mEtdYLr+LsxagkYlkMt/czX8XqJUAf1rCpJYSLaIKwx5kpEtirAfgXH4+20hs Yfu1F51WJtYRXL1Sc192UeFq5HWXr9PbiyURnW1x13j0aoUe -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net