$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/1tq8MGswr7ZxNPPpZh8xvPDqXtQ.roa File: 1tq8MGswr7ZxNPPpZh8xvPDqXtQ.roa (raw, json) Hash identifier: 45jVSW0on/ii96nyz9rKqSoOsW2zIf0sNGCfqt8v3g0= Subject key identifier: D6:DA:BC:30:6B:30:AF:B6:71:34:F3:E9:66:1F:31:BC:F0:EA:5E:D4 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0F78 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/1tq8MGswr7ZxNPPpZh8xvPDqXtQ.roa Signing time: Tue 18 Feb 2025 01:43:32 +0000 ROA not before: Tue 18 Feb 2025 01:43:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 120.125.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3960 (0xf78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Feb 18 01:43:32 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D6DABC306B30AFB67134F3E9661F31BCF0EA5ED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:36:86:04:09:c7:d4:f5:14:4d:f3:6e:83: b3:bf:c2:35:45:53:ee:82:b6:3c:7f:32:8f:9c:76: 1c:e9:de:86:7d:d6:34:1a:75:44:fb:7d:22:87:39: 08:f9:95:05:31:80:c0:89:f9:9d:35:0d:87:bf:6f: a6:1c:49:4b:2c:23:a1:d8:f6:3c:e8:e6:0e:c0:b3: b0:09:b7:40:d4:06:a6:06:e1:f5:2a:72:7c:b3:9d: ce:f7:e3:4d:84:ba:53:1f:b8:4f:a2:8e:2e:bc:da: c6:e2:c2:ef:d4:17:c3:3c:37:ff:3d:71:c9:20:7d: 54:6f:96:34:34:25:38:f6:d6:5f:64:18:4f:a1:a0: 83:ab:f4:4d:ef:c9:3f:f5:78:a9:6c:c7:17:7c:42: 3b:42:96:fb:77:be:ba:e2:ef:16:4a:6b:f2:d5:cd: 23:ff:ac:23:09:23:5a:3e:bc:cf:18:21:c3:71:9f: 38:4d:99:66:dd:10:33:ea:32:c0:41:69:a4:e7:30: d8:c5:ea:29:ba:14:38:2f:89:73:79:ac:f4:33:60: 0b:62:62:41:ae:c5:9a:10:b6:a1:fe:8e:50:24:5f: fd:b8:47:e4:3d:03:ff:86:0c:be:da:54:1e:6c:a6: 32:d8:9c:6c:f4:35:ee:9b:c7:1f:44:bb:57:52:ed: 8b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DA:BC:30:6B:30:AF:B6:71:34:F3:E9:66:1F:31:BC:F0:EA:5E:D4 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/1tq8MGswr7ZxNPPpZh8xvPDqXtQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.125.0.0/16 Signature Algorithm: sha256WithRSAEncryption 02:58:f8:1d:27:39:8d:e1:1b:18:50:0a:a8:96:9c:24:68:80: 0f:33:36:c4:7b:2d:a1:93:b1:22:3a:47:45:d7:2e:43:41:3e: 9c:98:dc:d7:50:08:64:9e:15:42:01:0f:08:b4:5b:8f:79:18: cb:39:bd:d7:6d:8c:68:42:94:2e:3b:a7:7b:64:de:c3:89:8e: 79:ca:97:61:76:3e:82:01:c8:52:29:0e:4c:66:b6:dd:65:f7: ee:54:d9:4e:92:5d:91:f7:ed:30:21:9a:40:9c:3a:52:94:7f: 6e:91:65:83:f6:a8:00:2e:9b:25:87:00:c8:89:2d:80:34:c0: da:8f:f6:9b:14:e5:19:46:d6:61:06:8e:65:5b:99:62:5f:37: 65:fd:6b:a2:8a:9a:b3:80:0d:53:c9:c3:ea:76:cd:6b:6e:e7: e5:7b:7a:5b:43:09:67:77:d2:43:5a:52:96:aa:ba:2d:68:8c: ce:d7:a5:35:67:d4:5f:eb:b0:c9:e1:b6:1f:5c:0d:9f:65:7f: c9:a5:79:15:e6:32:2f:8c:e4:1d:72:91:67:a8:ee:f8:b5:4b: e9:5f:e6:e7:e9:53:31:d8:59:6c:42:ad:87:67:d9:bb:97:6f: 08:1b:e6:3d:77:d2:e8:86:4b:21:46:bd:e5:da:03:6d:57:94: 6f:89:df:2b -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD3gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTgw MTQzMzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ2REFCQzMwNkIzMEFG QjY3MTM0RjNFOTY2MUYzMUJDRjBFQTVFRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/vzaGBAnH1PUUTfNug7O/wjVFU+6Ctjx/Mo+cdhzp3oZ91jQa dUT7fSKHOQj5lQUxgMCJ+Z01DYe/b6YcSUssI6HY9jzo5g7As7AJt0DUBqYG4fUq cnyznc73402EulMfuE+iji682sbiwu/UF8M8N/89cckgfVRvljQ0JTj21l9kGE+h oIOr9E3vyT/1eKlsxxd8QjtClvt3vrri7xZKa/LVzSP/rCMJI1o+vM8YIcNxnzhN mWbdEDPqMsBBaaTnMNjF6im6FDgviXN5rPQzYAtiYkGuxZoQtqH+jlAkX/24R+Q9 A/+GDL7aVB5spjLYnGz0Ne6bxx9Eu1dS7YsVAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU1tq8MGswr7ZxNPPpZh8xvPDqXtQwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC8xdHE4TUdzd3I3WnhOUFBwWmg4 eHZQRHFYdFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAeH0w DQYJKoZIhvcNAQELBQADggEBAAJY+B0nOY3hGxhQCqiWnCRogA8zNsR7LaGTsSI6 R0XXLkNBPpyY3NdQCGSeFUIBDwi0W495GMs5vddtjGhClC47p3tk3sOJjnnKl2F2 PoIByFIpDkxmtt1l9+5U2U6SXZH37TAhmkCcOlKUf26RZYP2qAAumyWHAMiJLYA0 wNqP9psU5RlG1mEGjmVbmWJfN2X9a6KKmrOADVPJw+p2zWtu5+V7eltDCWd30kNa Upaqui1ojM7XpTVn1F/rsMnhth9cDZ9lf8mleRXmMi+M5B1ykWeo7vi1S+lf5ufp UzHYWWxCrYdn2buXbwgb5j130uiGSyFGveXaA21XlG+J3ys= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net