$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/rk9UUd2KbIG9cE72lihL7qRvT8o.roa File: rk9UUd2KbIG9cE72lihL7qRvT8o.roa (raw, json) Hash identifier: nX02OfpJ48UMomu9p7buOmcpiGzoK977mUt1QPhjeA8= Subject key identifier: AE:4F:54:51:DD:8A:6C:81:BD:70:4E:F6:96:28:4B:EE:A4:6F:4F:CA Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0D09 Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/rk9UUd2KbIG9cE72lihL7qRvT8o.roa Signing time: Mon 10 Feb 2025 14:02:28 +0000 ROA not before: Mon 10 Feb 2025 14:02:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9922 IP address blocks: 39.1.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3337 (0xd09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Feb 10 14:02:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AE4F5451DD8A6C81BD704EF696284BEEA46F4FCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a7:58:e1:c5:df:d0:36:23:16:16:13:d3:36: f2:73:77:c2:29:b4:21:94:5d:9d:28:13:7a:d8:b0: 5d:25:c4:37:85:00:93:93:ba:9e:6f:07:2d:d6:89: c0:8f:aa:64:22:38:03:9a:c3:b3:d5:0c:b4:74:17: 8f:6c:2b:25:a8:41:2c:f3:4d:17:c0:58:39:97:4b: 7e:a5:18:e3:a4:6b:5e:e9:b5:98:7f:69:61:c7:6f: bd:52:40:04:31:8c:04:50:bc:75:58:b5:5f:e8:e9: f1:70:e2:f3:83:06:25:27:c0:25:0a:83:04:c1:2c: 33:0f:62:8a:91:1e:e0:89:d1:9a:14:2c:6e:46:af: 30:e9:01:29:1f:9f:df:ce:c2:37:23:1d:e0:3b:81: c2:ba:a3:ea:08:2b:e7:9d:e4:a2:82:97:9f:60:3e: b6:f8:62:7e:39:0a:8e:4d:ca:bc:78:62:95:3f:09: 73:3b:be:0b:b4:ee:02:6c:29:29:39:e9:ea:b6:18: 00:c2:87:f8:ee:80:0c:79:e1:e2:bd:8f:3e:ce:98: cf:59:e7:24:bc:21:07:ff:82:d9:3e:8a:dc:6c:ac: 95:d8:52:83:bd:01:8f:f1:f6:d7:17:23:0e:a3:da: 5d:8f:b7:0c:fb:86:e7:50:81:72:e4:b1:51:18:ba: 25:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4F:54:51:DD:8A:6C:81:BD:70:4E:F6:96:28:4B:EE:A4:6F:4F:CA X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/rk9UUd2KbIG9cE72lihL7qRvT8o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 39.1.47.0/24 Signature Algorithm: sha256WithRSAEncryption 36:d2:25:17:bd:d8:84:19:fb:1b:79:38:ae:86:81:78:ab:ba: ae:ad:71:d9:df:c7:f6:a4:5e:12:8c:7a:9f:2d:2b:08:24:d8: e0:fd:ad:ce:b3:b4:5b:0c:6d:2d:1d:12:50:60:53:42:8e:56: dc:97:a9:a8:65:84:fd:ef:15:87:0b:07:64:74:46:2e:c4:1b: 39:10:75:49:23:3e:f9:d6:8b:bb:2b:3c:a4:d8:c3:43:66:72: a2:ea:d8:5e:15:29:f8:60:bf:02:84:c4:bd:60:40:b6:99:b2: 65:53:39:16:57:ed:86:18:c8:de:60:51:14:5b:3b:d7:bb:de: 33:37:70:b3:63:44:a4:f8:8e:df:60:25:97:8c:6a:62:c6:9b: f2:23:6c:12:00:d1:2d:aa:1e:bf:b6:7c:1e:22:3a:6a:5c:fd: e8:90:59:4f:73:24:02:2b:ee:11:4b:e1:b9:52:0a:93:f8:d9: f5:05:7a:73:55:92:83:ad:5c:fd:93:ba:fa:7c:fa:ec:fa:99: 6e:c2:90:b2:66:42:51:fb:f6:c8:ba:94:62:36:9d:fe:e9:3b: d6:f7:69:e0:1e:32:6a:97:dd:12:d2:8d:7a:71:c4:1b:81:36: 8e:68:84:ff:85:6f:56:ab:47:bb:d0:c9:65:a6:08:05:dc:f7: 5a:39:a9:d3 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDQkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNTAyMTAx NDAyMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFFNEY1NDUxREQ4QTZD ODFCRDcwNEVGNjk2Mjg0QkVFQTQ2RjRGQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCip1jhxd/QNiMWFhPTNvJzd8IptCGUXZ0oE3rYsF0lxDeFAJOT up5vBy3WicCPqmQiOAOaw7PVDLR0F49sKyWoQSzzTRfAWDmXS36lGOOka17ptZh/ aWHHb71SQAQxjARQvHVYtV/o6fFw4vODBiUnwCUKgwTBLDMPYoqRHuCJ0ZoULG5G rzDpASkfn9/OwjcjHeA7gcK6o+oIK+ed5KKCl59gPrb4Yn45Co5Nyrx4YpU/CXM7 vgu07gJsKSk56eq2GADCh/jugAx54eK9jz7OmM9Z5yS8IQf/gtk+itxsrJXYUoO9 AY/x9tcXIw6j2l2Ptwz7hudQgXLksVEYuiWHAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUrk9UUd2KbIG9cE72lihL7qRvT8owHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9yazlVVWQyS2JJRzljRTcybGlo TDdxUnZUOG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJwEv MA0GCSqGSIb3DQEBCwUAA4IBAQA20iUXvdiEGfsbeTiuhoF4q7qurXHZ38f2pF4S jHqfLSsIJNjg/a3Os7RbDG0tHRJQYFNCjlbcl6moZYT97xWHCwdkdEYuxBs5EHVJ Iz751ou7Kzyk2MNDZnKi6theFSn4YL8ChMS9YEC2mbJlUzkWV+2GGMjeYFEUWzvX u94zN3CzY0Sk+I7fYCWXjGpixpvyI2wSANEtqh6/tnweIjpqXP3okFlPcyQCK+4R S+G5UgqT+Nn1BXpzVZKDrVz9k7r6fPrs+pluwpCyZkJR+/bIupRiNp3+6TvW92ng HjJql90S0o16ccQbgTaOaIT/hW9Wq0e70MllpggF3PdaOanT -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net