$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/9SqRpobI-GhH9oyyh_iW6f5nPIo.roa File: 9SqRpobI-GhH9oyyh_iW6f5nPIo.roa (raw, json) Hash identifier: MNpFF9u9hCY4TShw3KxQIOPFvtHURLFgyeUX4+simpQ= Subject key identifier: F5:2A:91:A6:86:C8:F8:68:47:F6:8C:B2:87:F8:96:E9:FE:67:3C:8A Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0F03 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/9SqRpobI-GhH9oyyh_iW6f5nPIo.roa Signing time: Mon 10 Feb 2025 14:16:18 +0000 ROA not before: Mon 10 Feb 2025 14:16:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 2001:288::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3843 (0xf03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Feb 10 14:16:18 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F52A91A686C8F86847F68CB287F896E9FE673C8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:de:13:e6:4c:ba:71:61:1f:0b:62:31:08:48: 0e:b3:28:cf:bb:a7:80:61:f6:02:87:fe:00:14:15: 07:1c:8b:c3:aa:4c:20:84:f2:0e:9b:f8:bb:ce:a2: b4:98:cc:2b:06:82:a1:7d:87:72:2d:88:54:62:63: 7d:6b:1a:79:c4:7a:45:49:85:24:a2:d8:99:55:3a: 83:68:83:60:35:30:d3:8b:f6:53:75:ee:b6:2d:e7: 9e:2d:60:09:8d:65:51:f6:1f:3c:51:87:cb:be:2b: 73:11:f6:e7:5d:1a:09:78:ae:50:43:1f:c2:2e:4a: 0a:ad:81:5a:29:bc:c1:fc:cb:13:b9:df:77:17:8b: ea:95:1e:44:9d:10:4b:a8:04:28:23:40:7d:bc:ee: 8c:31:59:fb:eb:99:4b:d4:7f:6a:49:96:7a:a5:31: 42:9a:6a:25:f3:a6:d5:45:e9:86:72:b5:08:66:6f: 7c:ca:fb:b1:c4:50:a8:25:6d:9b:2e:72:f4:11:fe: d4:ce:a1:9e:44:41:bb:ed:8a:56:b7:1b:6b:6b:37: d2:1c:99:57:bb:a7:6c:d9:35:6a:9e:ac:82:1e:71: b6:51:20:59:9a:da:e9:2c:8d:54:bd:0a:2e:2c:c1: 07:69:dd:4a:5e:e3:99:d3:12:3d:43:d2:4c:b3:ad: 5e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2A:91:A6:86:C8:F8:68:47:F6:8C:B2:87:F8:96:E9:FE:67:3C:8A X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/9SqRpobI-GhH9oyyh_iW6f5nPIo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:288::/32 Signature Algorithm: sha256WithRSAEncryption 15:4a:d7:e3:09:2c:ee:62:16:08:40:05:4f:3e:56:fe:7e:f6: 88:66:ca:77:8e:8c:70:4b:3c:78:fa:b5:bf:46:82:e9:2f:fb: c9:af:38:12:e2:ff:77:15:e1:49:89:d6:85:0e:c4:21:36:78: 07:dd:d3:d7:a0:45:8b:fd:79:df:73:9b:3f:23:66:e7:bf:33: e9:4d:4a:0f:3d:1e:6f:a3:be:db:e8:f0:bb:3b:a4:48:88:20: 86:fc:94:20:41:df:7a:59:55:0a:06:e6:aa:a5:13:7e:02:f0: 61:58:50:b3:7b:1d:cd:22:a9:67:68:3b:85:54:9a:0f:93:d9: 2e:b2:6b:7c:41:1c:ff:54:ff:dc:e4:2d:5d:10:9c:90:7f:a3: ff:89:0a:22:c8:99:7f:aa:04:30:a3:1c:cc:6c:b6:bf:81:2e: 60:45:6e:bf:6a:96:bb:fd:c5:cc:ef:61:b6:13:2f:6c:27:66: f1:26:13:8e:b2:0f:c8:0d:0a:2d:e3:96:34:68:97:cc:b1:89: 7b:38:c3:fd:71:4e:b1:b0:5f:40:d1:5b:43:9a:51:07:09:11: 92:4f:3a:3e:5a:78:69:d0:12:f0:ad:c3:24:f0:52:c4:c8:0b: 4b:77:6a:28:c3:4c:b2:79:06:83:f1:3a:57:bd:69:79:38:e8: 99:ca:88:32 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDwMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTAx NDE2MThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY1MkE5MUE2ODZDOEY4 Njg0N0Y2OENCMjg3Rjg5NkU5RkU2NzNDOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCp3hPmTLpxYR8LYjEISA6zKM+7p4Bh9gKH/gAUFQcci8OqTCCE 8g6b+LvOorSYzCsGgqF9h3ItiFRiY31rGnnEekVJhSSi2JlVOoNog2A1MNOL9lN1 7rYt554tYAmNZVH2HzxRh8u+K3MR9uddGgl4rlBDH8IuSgqtgVopvMH8yxO533cX i+qVHkSdEEuoBCgjQH287owxWfvrmUvUf2pJlnqlMUKaaiXzptVF6YZytQhmb3zK +7HEUKglbZsucvQR/tTOoZ5EQbvtila3G2trN9IcmVe7p2zZNWqerIIecbZRIFma 2uksjVS9Ci4swQdp3Upe45nTEj1D0kyzrV6VAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU9SqRpobI+GhH9oyyh/iW6f5nPIowHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC85U3FScG9iSS1HaEg5b3l5aF9p VzZmNW5QSW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEC iDANBgkqhkiG9w0BAQsFAAOCAQEAFUrX4wks7mIWCEAFTz5W/n72iGbKd46McEs8 ePq1v0aC6S/7ya84EuL/dxXhSYnWhQ7EITZ4B93T16BFi/1533ObPyNm578z6U1K Dz0eb6O+2+jwuzukSIgghvyUIEHfellVCgbmqqUTfgLwYVhQs3sdzSKpZ2g7hVSa D5PZLrJrfEEc/1T/3OQtXRCckH+j/4kKIsiZf6oEMKMczGy2v4EuYEVuv2qWu/3F zO9hthMvbCdm8SYTjrIPyA0KLeOWNGiXzLGJezjD/XFOsbBfQNFbQ5pRBwkRkk86 Plp4adAS8K3DJPBSxMgLS3dqKMNMsnkGg/E6V71peTjomcqIMg== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net