$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/0I8Z5OK7kcMFLvqAm_GuRrjq9Co.roa File: 0I8Z5OK7kcMFLvqAm_GuRrjq9Co.roa (raw, json) Hash identifier: b/wXCHIYDDlWv9EFqk1bQUIbOb17PE4pGzX95Atyjek= Subject key identifier: D0:8F:19:E4:E2:BB:91:C3:05:2E:FA:80:9B:F1:AE:46:B8:EA:F4:2A Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0D52 Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/0I8Z5OK7kcMFLvqAm_GuRrjq9Co.roa Signing time: Mon 10 Feb 2025 14:13:10 +0000 ROA not before: Mon 10 Feb 2025 14:13:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131596 IP address blocks: 61.58.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3410 (0xd52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Feb 10 14:13:10 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D08F19E4E2BB91C3052EFA809BF1AE46B8EAF42A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fd:07:66:9f:3a:fe:c7:95:1e:25:63:73:89: 80:2a:1f:d7:e5:9e:5a:81:16:24:43:fd:b7:7f:46: e8:9f:61:51:af:20:08:43:4e:ac:79:f1:94:d1:35: 7f:ea:55:6c:22:5e:28:e0:1e:42:88:0b:b5:6d:58: cc:dd:fb:95:b8:06:e0:dd:cb:55:3c:2c:6a:e8:6e: f3:17:97:c9:b7:14:f8:e3:8a:89:f1:e5:c8:96:db: 7c:cf:44:22:a9:05:76:12:e4:3b:7e:50:41:08:59: f9:13:92:bd:7e:24:21:60:a6:fa:0e:20:6a:ed:b7: 51:cc:45:3d:33:b1:65:3e:58:2b:14:5e:34:b9:89: e3:26:ef:58:c1:21:d7:8e:5c:2a:a7:d5:90:09:c9: 40:d1:a2:37:21:f5:23:50:7e:56:03:10:ee:70:a0: 4f:da:4e:86:be:dc:37:11:13:74:b1:ef:17:78:7c: ca:ab:6f:59:e2:d1:7b:03:2a:df:cb:c5:2d:cd:97: 22:13:22:e7:5a:53:72:75:94:a6:06:19:3d:88:fa: 5d:28:25:40:6e:5b:f0:f1:c2:ce:89:ec:08:35:d6: 02:21:22:2c:a9:2b:60:a5:a8:91:4b:94:42:5c:22: b9:22:f7:5e:3f:c5:08:00:60:f8:d5:15:96:8f:3c: f6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8F:19:E4:E2:BB:91:C3:05:2E:FA:80:9B:F1:AE:46:B8:EA:F4:2A X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/0I8Z5OK7kcMFLvqAm_GuRrjq9Co.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.160.0/19 Signature Algorithm: sha256WithRSAEncryption 86:06:f6:1d:4f:36:9b:51:5c:25:28:3d:01:67:28:e2:3e:90: 33:a5:4a:13:25:5d:b5:f9:b5:11:95:57:36:4b:7c:75:22:de: 5b:33:30:e5:5c:4d:0d:1f:33:61:0a:f8:09:1d:23:2c:a7:7b: 05:e0:7e:1d:60:d6:7c:74:9a:d7:b7:58:bf:7d:ab:be:42:fa: d4:76:bc:27:d7:31:32:27:2b:3a:5c:49:27:8a:f3:9d:24:57: 95:4b:79:44:e5:6a:f9:8f:3c:58:dd:37:f3:bd:fd:86:ab:79: f3:78:1b:3a:9e:35:f6:67:34:09:ae:9c:d5:24:45:b9:bd:23: 4e:e2:1c:eb:38:e6:aa:ed:61:df:e2:68:c9:82:fb:f4:a3:9f: 78:15:a5:6d:d5:0d:fc:2d:5f:7c:a4:b7:56:a6:ac:0f:69:75: 71:ed:d1:0a:a4:23:fa:eb:4c:f9:2c:5d:80:56:74:f4:8e:8a: 23:60:33:14:48:ee:14:32:54:54:82:7e:14:47:2f:d0:36:bf: 75:19:a3:0d:a9:b3:44:43:fc:bb:88:8f:f4:0e:1f:78:4f:cf: b1:2d:a8:05:97:05:cf:0e:31:7c:4d:e2:18:be:6b:fc:46:d1: ce:44:5b:2b:d7:20:f9:2f:87:4f:e9:9c:e9:70:fa:58:36:02: 81:52:a5:c0 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNTAyMTAx NDEzMTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQwOEYxOUU0RTJCQjkx QzMwNTJFRkE4MDlCRjFBRTQ2QjhFQUY0MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDO/Qdmnzr+x5UeJWNziYAqH9flnlqBFiRD/bd/RuifYVGvIAhD Tqx58ZTRNX/qVWwiXijgHkKIC7VtWMzd+5W4BuDdy1U8LGrobvMXl8m3FPjjionx 5ciW23zPRCKpBXYS5Dt+UEEIWfkTkr1+JCFgpvoOIGrtt1HMRT0zsWU+WCsUXjS5 ieMm71jBIdeOXCqn1ZAJyUDRojch9SNQflYDEO5woE/aToa+3DcRE3Sx7xd4fMqr b1ni0XsDKt/LxS3NlyITIudaU3J1lKYGGT2I+l0oJUBuW/Dxws6J7Ag11gIhIiyp K2ClqJFLlEJcIrki914/xQgAYPjVFZaPPPbTAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU0I8Z5OK7kcMFLvqAm/GuRrjq9CowHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS8wSThaNU9LN2tjTUZMdnFBbV9H dVJyanE5Q28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPTqg MA0GCSqGSIb3DQEBCwUAA4IBAQCGBvYdTzabUVwlKD0BZyjiPpAzpUoTJV21+bUR lVc2S3x1It5bMzDlXE0NHzNhCvgJHSMsp3sF4H4dYNZ8dJrXt1i/fau+QvrUdrwn 1zEyJys6XEknivOdJFeVS3lE5Wr5jzxY3Tfzvf2Gq3nzeBs6njX2ZzQJrpzVJEW5 vSNO4hzrOOaq7WHf4mjJgvv0o594FaVt1Q38LV98pLdWpqwPaXVx7dEKpCP660z5 LF2AVnT0joojYDMUSO4UMlRUgn4URy/QNr91GaMNqbNEQ/y7iI/0Dh94T8+xLagF lwXPDjF8TeIYvmv8RtHORFsr1yD5L4dP6ZzpcPpYNgKBUqXA -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net