$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/IDVVxx8U8CSfE0VnxZJSZwOtZWM.roa File: IDVVxx8U8CSfE0VnxZJSZwOtZWM.roa (raw, json) Hash identifier: AsEgLMsmQ4/a/DTbTpGUVRth+NrCQgLvJs3doR8ng3g= Subject key identifier: 20:35:55:C7:1F:14:F0:24:9F:13:45:67:C5:92:52:67:03:AD:65:63 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0EF6 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/IDVVxx8U8CSfE0VnxZJSZwOtZWM.roa Signing time: Mon 10 Feb 2025 14:16:15 +0000 ROA not before: Mon 10 Feb 2025 14:16:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 163.28.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3830 (0xef6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Feb 10 14:16:15 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=203555C71F14F0249F134567C592526703AD6563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:f6:27:1c:94:e8:1d:89:66:29:af:4f:66: e5:f0:70:4e:cf:e9:ac:e8:c9:35:f6:3e:61:ed:34: de:b2:9c:23:4d:4d:1a:67:77:e2:1a:1e:dc:09:2c: 99:f3:a8:83:eb:1d:dd:fd:25:94:e8:76:df:61:9f: 78:b8:68:85:aa:07:d3:66:59:a2:ca:11:fa:47:ee: b0:26:81:2e:04:7c:ac:40:d9:19:ff:f0:9e:aa:4d: bb:06:0f:d3:28:6c:04:72:b9:c8:c1:23:35:2b:0c: e2:a8:1c:f3:af:bb:0b:2c:39:12:20:89:d4:dd:42: dd:13:73:1f:21:2c:c8:c5:af:25:b4:4a:83:7d:79: a8:67:f7:12:1d:2f:86:a3:a3:94:c5:d4:5c:c6:ba: 50:1d:d2:03:63:d0:da:2c:bd:14:07:d2:24:e5:7b: d7:7b:6e:09:12:2b:68:1d:f4:a8:e9:16:98:4b:ea: 36:ba:c8:2d:73:34:5f:31:15:d3:a6:d5:07:fe:3d: 03:63:8b:ed:9a:25:40:56:48:f5:dc:5a:aa:0c:a5: e7:dc:26:d2:4a:71:7f:cb:97:ed:9e:61:c0:5a:7c: 63:c2:ff:2d:38:26:a5:10:ae:90:fd:7b:bc:83:e1: 12:c9:d1:fa:21:de:ef:22:09:92:60:19:72:44:b6: 50:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:35:55:C7:1F:14:F0:24:9F:13:45:67:C5:92:52:67:03:AD:65:63 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/IDVVxx8U8CSfE0VnxZJSZwOtZWM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.28.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4c:45:9e:9b:51:46:9e:fb:32:29:ae:b8:43:86:e4:68:39:fa: 72:88:6a:c1:55:5f:e1:aa:8c:67:90:61:52:21:5a:49:9d:23: 18:cc:5e:b1:cd:92:f7:9f:10:2e:60:6a:05:9a:ba:1a:20:b9: ca:cc:51:b2:2d:bc:d5:62:95:26:01:38:c5:ab:4a:1f:84:e3: 08:ec:15:ab:00:79:57:91:24:dc:f4:ab:4a:1c:8f:1e:a9:2e: 72:cc:55:d0:36:5e:f2:c9:7c:82:b5:70:e0:16:c1:11:08:50: 82:10:95:39:50:14:5a:a0:2f:21:57:14:2a:96:f3:3f:01:d6: 9a:71:b4:4b:c3:bd:2a:6f:5b:c2:41:17:15:d8:f2:da:ec:a3: 97:f5:3f:a1:3a:e3:14:0c:2a:8d:79:92:df:fe:d6:fd:ed:18: 6e:25:8b:1c:7b:d7:ea:67:5c:09:43:7d:7a:0e:f6:6e:5e:68: b3:d3:b8:23:1a:5e:53:bf:bf:d5:b5:5c:71:99:a1:62:a0:af: 0d:53:8d:c9:49:3e:b6:ff:f4:9b:23:93:ee:8c:ea:96:ac:4d: a7:96:c9:45:cd:3c:35:c9:e7:d2:f7:15:d9:01:ec:d7:ad:fe: 27:fc:d7:a9:cd:66:85:31:d5:6b:44:3e:71:90:be:3d:7e:31: 8d:0e:47:0d -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDvYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTAx NDE2MTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIwMzU1NUM3MUYxNEYw MjQ5RjEzNDU2N0M1OTI1MjY3MDNBRDY1NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDANPYnHJToHYlmKa9PZuXwcE7P6azoyTX2PmHtNN6ynCNNTRpn d+IaHtwJLJnzqIPrHd39JZTodt9hn3i4aIWqB9NmWaLKEfpH7rAmgS4EfKxA2Rn/ 8J6qTbsGD9MobARyucjBIzUrDOKoHPOvuwssORIgidTdQt0Tcx8hLMjFryW0SoN9 eahn9xIdL4ajo5TF1FzGulAd0gNj0NosvRQH0iTle9d7bgkSK2gd9KjpFphL6ja6 yC1zNF8xFdOm1Qf+PQNji+2aJUBWSPXcWqoMpefcJtJKcX/Ll+2eYcBafGPC/y04 JqUQrpD9e7yD4RLJ0foh3u8iCZJgGXJEtlAvAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUIDVVxx8U8CSfE0VnxZJSZwOtZWMwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9JRFZWeHg4VThDU2ZFMFZueFpK U1p3T3RaV00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoxww DQYJKoZIhvcNAQELBQADggEBAExFnptRRp77MimuuEOG5Gg5+nKIasFVX+GqjGeQ YVIhWkmdIxjMXrHNkvefEC5gagWauhogucrMUbItvNVilSYBOMWrSh+E4wjsFasA eVeRJNz0q0ocjx6pLnLMVdA2XvLJfIK1cOAWwREIUIIQlTlQFFqgLyFXFCqW8z8B 1ppxtEvDvSpvW8JBFxXY8trso5f1P6E64xQMKo15kt/+1v3tGG4lixx71+pnXAlD fXoO9m5eaLPTuCMaXlO/v9W1XHGZoWKgrw1TjclJPrb/9Jsjk+6M6pasTaeWyUXN PDXJ59L3FdkB7Net/if816nNZoUx1WtEPnGQvj1+MY0ORw0= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net