$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/m1m3T8Q2u4MkKVepOryOWW5_I7I.roa File: m1m3T8Q2u4MkKVepOryOWW5_I7I.roa (raw, json) Hash identifier: dBrljFSHHBcm0OxUkalKcS3/gd8ffeCtJiuyCMwpT94= Subject key identifier: 9B:59:B7:4F:C4:36:BB:83:24:29:57:A9:3A:BC:8E:59:6E:7F:23:B2 Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Certificate serial: 0D1C Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/m1m3T8Q2u4MkKVepOryOWW5_I7I.roa Signing time: Mon 10 Feb 2025 14:23:27 +0000 ROA not before: Mon 10 Feb 2025 14:23:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 101.3.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3356 (0xd1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Validity Not Before: Feb 10 14:23:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9B59B74FC436BB83242957A93ABC8E596E7F23B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a6:ee:db:dd:81:c1:fc:68:e6:bb:72:42:88: 99:58:f6:af:21:ea:7c:8a:6b:a6:42:73:a7:e9:eb: 08:8d:7f:42:89:08:ff:e7:e9:bb:e0:bb:6f:ed:b0: 93:81:c6:e1:f2:cd:51:9b:81:ba:d3:87:0c:5e:5b: 62:21:e9:eb:f1:8c:f1:d7:c8:8d:37:52:6b:8c:86: 51:d7:6d:ad:46:55:18:0b:25:ac:d0:a7:e9:07:7f: e8:21:d4:f9:25:86:7b:04:de:3a:9c:a5:27:8c:ff: b1:42:85:1a:7d:81:66:fe:f5:24:c1:40:09:30:ba: e0:48:c8:45:2d:37:fc:ff:95:d4:e9:57:bf:e7:3c: 2e:e1:8f:c6:0e:97:53:f6:b4:64:d3:fa:23:69:f3: 3e:97:50:05:57:7c:b6:3c:c1:b1:ec:38:f3:f8:38: 0d:8b:eb:36:cf:da:a0:a8:bf:6e:1a:9a:33:db:71: 25:65:19:58:e9:42:e6:38:ac:f6:e4:f8:28:90:34: a0:65:10:4e:57:a4:5e:73:14:35:7e:f6:29:60:c1: 63:f9:36:2e:4d:a6:47:3e:2c:9c:b7:17:86:58:8e: 05:c7:5b:d3:43:46:5b:15:bc:48:ca:55:b4:d9:5a: c2:c9:6b:99:b7:88:36:5d:52:5f:12:c4:9f:ff:ac: 6c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:59:B7:4F:C4:36:BB:83:24:29:57:A9:3A:BC:8E:59:6E:7F:23:B2 X509v3 Authority Key Identifier: keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/m1m3T8Q2u4MkKVepOryOWW5_I7I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.3.160.0/23 Signature Algorithm: sha256WithRSAEncryption a4:cf:ed:53:4e:a0:12:59:8e:df:71:eb:61:a4:c3:4f:19:a9: ad:bf:1b:19:9d:90:d5:68:71:2c:4b:5a:89:09:34:ab:03:d3: 6f:ca:f1:7d:ad:e3:f8:9b:40:c0:3b:f3:23:10:f1:99:db:10: a8:d0:8a:ad:06:d4:70:09:5f:3a:5b:13:87:54:f5:1a:ae:f6: 96:db:20:af:cf:87:ed:8f:df:f0:57:54:23:e1:69:61:94:ee: f1:23:2d:c0:b3:7a:a3:bb:c1:94:64:ff:49:d0:55:8b:ad:9e: d8:38:54:65:1b:82:56:51:67:49:b2:fb:04:42:45:47:68:b1: 20:5d:2f:9c:bc:e1:5c:02:1d:4e:98:64:25:6c:40:ee:d3:ad: 84:7a:5a:15:db:ca:0e:de:bf:02:d3:9c:fb:ca:27:f0:a6:dd: 50:62:31:4a:62:d2:63:89:e7:41:56:6f:21:95:39:88:11:c0: 8c:77:a2:e2:c3:54:4e:db:5e:f7:7e:57:b1:22:32:70:42:b5: e9:71:58:de:0d:39:54:c3:f4:da:cc:1c:fa:cb:c4:50:13:bd: d4:94:4c:bf:e7:29:47:5e:2c:2a:99:55:3d:72:9d:16:9b:47: a2:38:00:3f:c7:b3:0c:45:dd:2f:c3:df:79:fd:b8:97:f6:78: 4e:36:02:6e -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1 NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yNTAyMTAx NDIzMjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlCNTlCNzRGQzQzNkJC ODMyNDI5NTdBOTNBQkM4RTU5NkU3RjIzQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHpu7b3YHB/Gjmu3JCiJlY9q8h6nyKa6ZCc6fp6wiNf0KJCP/n 6bvgu2/tsJOBxuHyzVGbgbrThwxeW2Ih6evxjPHXyI03UmuMhlHXba1GVRgLJazQ p+kHf+gh1PklhnsE3jqcpSeM/7FChRp9gWb+9STBQAkwuuBIyEUtN/z/ldTpV7/n PC7hj8YOl1P2tGTT+iNp8z6XUAVXfLY8wbHsOPP4OA2L6zbP2qCov24amjPbcSVl GVjpQuY4rPbk+CiQNKBlEE5XpF5zFDV+9ilgwWP5Ni5Npkc+LJy3F4ZYjgXHW9ND RlsVvEjKVbTZWsLJa5m3iDZdUl8SxJ//rGzfAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUm1m3T8Q2u4MkKVepOryOWW5/I7IwHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83 NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2L20xbTNUOFEydTRN a0tWZXBPcnlPV1c1X0k3SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFlA6AwDQYJKoZIhvcNAQELBQADggEBAKTP7VNOoBJZjt9x62Gkw08Zqa2/ GxmdkNVocSxLWokJNKsD02/K8X2t4/ibQMA78yMQ8ZnbEKjQiq0G1HAJXzpbE4dU 9Rqu9pbbIK/Ph+2P3/BXVCPhaWGU7vEjLcCzeqO7wZRk/0nQVYutntg4VGUbglZR Z0my+wRCRUdosSBdL5y84VwCHU6YZCVsQO7TrYR6WhXbyg7evwLTnPvKJ/Cm3VBi MUpi0mOJ50FWbyGVOYgRwIx3ouLDVE7bXvd+V7EiMnBCtelxWN4NOVTD9NrMHPrL xFATvdSUTL/nKUdeLCqZVT1ynRabR6I4AD/HswxF3S/D33n9uJf2eE42Am4= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net