$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/9PHlfSjE2YvkH5T24PldPIJgc9k.roa File: 9PHlfSjE2YvkH5T24PldPIJgc9k.roa (raw, json) Hash identifier: P/WAjOCjoQP6wS7kRLEeZGnKMv0k364GnICY4X6DKCM= Subject key identifier: F4:F1:E5:7D:28:C4:D9:8B:E4:1F:94:F6:E0:F9:5D:3C:82:60:73:D9 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0FC1 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/9PHlfSjE2YvkH5T24PldPIJgc9k.roa Signing time: Tue 25 Feb 2025 00:19:30 +0000 ROA not before: Tue 25 Feb 2025 00:19:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18047 IP address blocks: 120.127.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4033 (0xfc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Feb 25 00:19:30 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F4F1E57D28C4D98BE41F94F6E0F95D3C826073D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:89:68:70:2a:8b:ce:82:a3:dd:09:f7:c7:fa: 90:44:27:25:a0:d1:59:e5:b1:21:bb:d5:58:40:0b: 87:1d:7e:5a:53:4f:08:f6:20:90:06:54:dd:e7:6c: 1d:b0:26:f0:66:40:64:aa:1d:96:4f:3e:ab:64:f8: d7:0a:3f:21:6e:2e:b3:a3:00:f3:6b:ce:13:98:dc: a7:d2:9b:9c:ae:61:10:41:90:2d:fe:44:4f:83:a1: d9:67:2a:33:fc:e8:37:95:02:ff:2e:c1:ba:29:36: 70:21:ac:41:88:f5:8d:29:d1:18:89:77:58:0d:83: 0d:8e:59:c0:0f:7f:fb:6a:b9:40:c4:c5:f1:33:31: 47:17:88:79:2a:a6:b9:16:4e:32:29:05:42:9f:a6: 62:8f:4c:be:96:c1:1c:2f:d4:60:4f:1d:1f:aa:c1: 34:31:51:9f:f8:d8:72:13:32:9a:2f:04:da:d7:72: 1d:04:00:cb:71:01:ac:00:6d:50:04:e7:97:7a:c7: 93:34:19:06:c0:06:a1:56:14:67:f1:ee:bf:9f:c3: 14:1e:34:81:37:48:5f:7e:7a:2e:98:f6:79:96:a4: f6:7d:43:34:4d:ba:cf:6c:23:a8:f6:02:73:e6:53: d6:41:08:83:8b:25:a5:0f:ae:81:73:78:6f:f4:34: 71:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F1:E5:7D:28:C4:D9:8B:E4:1F:94:F6:E0:F9:5D:3C:82:60:73:D9 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/9PHlfSjE2YvkH5T24PldPIJgc9k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.127.160.0/19 Signature Algorithm: sha256WithRSAEncryption 94:a9:ef:55:63:d8:3f:61:9a:97:d1:f0:28:d7:1a:c4:d4:eb: d7:fd:ce:df:d3:73:24:52:5e:d1:f9:a0:9c:6c:25:56:cd:09: ac:2e:3e:7d:a2:77:e6:e6:77:c4:7b:29:9a:7f:0d:f3:ac:ae: 60:12:1c:8e:59:c3:7b:52:34:8f:90:a7:fa:f0:72:18:12:0e: 69:a3:79:eb:da:62:e4:23:5e:2e:d0:22:9a:04:c5:55:04:02: 00:d1:91:1d:fa:a2:26:43:d9:49:0f:fc:b3:38:61:0c:f8:9c: 49:62:89:f3:b9:04:a3:7d:0d:1c:5e:c5:c2:ba:34:c4:e4:fe: 05:cb:41:94:e3:0b:40:f3:8f:79:77:4c:50:90:7f:0f:25:2c: 9b:a8:33:b2:fc:18:96:5b:ff:6a:c0:bf:e4:e7:af:3b:fc:9a: 4f:44:6c:bf:46:2a:91:ed:cc:7d:c7:a8:11:c0:c9:2a:d9:be: 15:fa:6c:4c:36:1a:d8:a7:fc:8f:94:cc:e3:58:32:d8:e5:87: 36:92:2b:61:ba:a4:c1:59:f2:1b:14:0e:4b:3f:fc:a1:29:52: 2f:bd:8f:fc:2c:f2:c9:50:04:e8:bb:54:cd:82:92:2b:ca:0c: bd:28:5d:f2:b7:04:d4:cc:08:85:52:33:f9:4c:9e:c8:b8:25: c9:1f:ca:86 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD8EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMjUw MDE5MzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY0RjFFNTdEMjhDNEQ5 OEJFNDFGOTRGNkUwRjk1RDNDODI2MDczRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSiWhwKovOgqPdCffH+pBEJyWg0VnlsSG71VhAC4cdflpTTwj2 IJAGVN3nbB2wJvBmQGSqHZZPPqtk+NcKPyFuLrOjAPNrzhOY3KfSm5yuYRBBkC3+ RE+DodlnKjP86DeVAv8uwbopNnAhrEGI9Y0p0RiJd1gNgw2OWcAPf/tquUDExfEz MUcXiHkqprkWTjIpBUKfpmKPTL6WwRwv1GBPHR+qwTQxUZ/42HITMpovBNrXch0E AMtxAawAbVAE55d6x5M0GQbABqFWFGfx7r+fwxQeNIE3SF9+ei6Y9nmWpPZ9QzRN us9sI6j2AnPmU9ZBCIOLJaUProFzeG/0NHE7AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU9PHlfSjE2YvkH5T24PldPIJgc9kwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC85UEhsZlNqRTJZdmtINVQyNFBs ZFBJSmdjOWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFeH+g MA0GCSqGSIb3DQEBCwUAA4IBAQCUqe9VY9g/YZqX0fAo1xrE1OvX/c7f03MkUl7R +aCcbCVWzQmsLj59onfm5nfEeymafw3zrK5gEhyOWcN7UjSPkKf68HIYEg5po3nr 2mLkI14u0CKaBMVVBAIA0ZEd+qImQ9lJD/yzOGEM+JxJYonzuQSjfQ0cXsXCujTE 5P4Fy0GU4wtA8495d0xQkH8PJSybqDOy/BiWW/9qwL/k5687/JpPRGy/RiqR7cx9 x6gRwMkq2b4V+mxMNhrYp/yPlMzjWDLY5Yc2kithuqTBWfIbFA5LP/yhKVIvvY/8 LPLJUATou1TNgpIrygy9KF3ytwTUzAiFUjP5TJ7IuCXJH8qG -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net