$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/VE9LWoK3JP5BV-xnNCMwXruNJf0.roa File: VE9LWoK3JP5BV-xnNCMwXruNJf0.roa (raw, json) Hash identifier: MqGU7zCdDPc9gUcakaqgTfhtv5T5BXRfkTkOV3YKz2k= Subject key identifier: 54:4F:4B:5A:82:B7:24:FE:41:57:EC:67:34:23:30:5E:BB:8D:25:FD Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0D65 Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/VE9LWoK3JP5BV-xnNCMwXruNJf0.roa Signing time: Mon 10 Feb 2025 14:13:16 +0000 ROA not before: Mon 10 Feb 2025 14:13:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 116.241.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3429 (0xd65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Feb 10 14:13:16 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=544F4B5A82B724FE4157EC673423305EBB8D25FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:3d:48:86:f3:87:69:24:f4:e8:c0:92:a1:16: 96:90:44:23:fb:c3:e4:74:33:4b:79:7c:2a:3f:30: 26:4c:e5:10:6c:14:4d:92:b4:62:bf:12:24:2a:94: cf:fa:8f:c6:a6:df:24:1d:9c:3e:e9:37:40:47:08: f8:d3:e6:70:ce:e9:1e:2a:57:c5:56:99:b1:a5:31: bf:1f:6c:80:38:45:39:05:f0:1c:8e:d3:b6:31:e7: 0d:48:bd:0a:67:37:c5:00:32:a2:7e:0a:ef:8a:fc: 94:b2:63:ce:e6:92:b3:f1:c4:17:be:8c:a7:21:ff: d2:07:34:a8:fd:4d:f4:c2:3c:1d:e8:0c:63:06:10: 9f:5a:89:c9:23:08:88:7e:c7:b7:c5:7a:cf:f1:ae: 77:5f:00:ee:83:fa:05:20:da:da:6a:0a:87:f8:07: bf:3e:62:bf:ae:45:bd:79:52:cf:e7:0b:1b:4f:ba: 80:fe:c7:fa:aa:49:5f:5b:9a:fc:15:1e:96:e9:02: 7e:ac:5c:92:c9:ff:9a:9c:2c:38:8f:82:7a:65:6f: 86:25:74:75:61:6d:02:ec:72:04:89:30:9d:f0:be: 3b:0e:5e:6c:52:a7:ab:cb:7f:58:27:3d:ae:89:8e: be:88:86:91:88:39:bd:ed:9b:f2:69:d4:9a:0e:6f: 1f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4F:4B:5A:82:B7:24:FE:41:57:EC:67:34:23:30:5E:BB:8D:25:FD X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/VE9LWoK3JP5BV-xnNCMwXruNJf0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 116.241.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3f:89:2b:7a:3d:b3:62:ee:09:f3:ff:ac:06:69:0c:af:d6:5b: 59:0a:4d:d7:fa:c2:5f:5a:e8:a2:07:ca:21:7d:1e:cd:ca:5a: 9f:36:a8:48:5f:dd:c0:b8:12:8d:e7:ef:a2:ba:db:09:61:52: 67:d0:a5:9a:a7:bf:e6:da:b7:6e:82:9f:72:ee:a1:27:21:b0: 6e:fc:cc:12:98:c5:7b:a9:7d:58:40:60:3c:c8:52:2c:19:52: ef:f3:d9:ab:b2:1b:19:fc:45:67:df:33:7d:57:25:50:0c:25: 0a:e3:35:11:15:b3:ec:05:3f:30:1a:c0:9a:98:21:98:e6:14: 09:d7:e2:6a:86:4c:1b:d2:17:c6:f8:64:32:e4:70:75:74:39: f2:f0:70:80:d7:ce:fc:78:81:b0:d3:66:db:fc:cb:aa:9b:27: ef:e5:88:bf:8e:ef:b0:b5:77:2b:7d:70:5d:cd:39:d1:1c:c3: 10:34:ef:1b:a2:27:bf:df:00:15:41:f5:e5:30:a2:86:9a:ad: da:52:25:95:4e:99:ae:5c:65:25:e7:ef:30:85:8a:b3:df:f4: b0:ec:20:c1:c2:c1:d7:97:d5:fe:82:f4:98:ff:48:c5:18:da: 60:bc:b5:07:43:22:09:1c:dd:d5:4d:5f:df:4a:02:13:2a:1c: cc:c0:aa:cf -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDWUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNTAyMTAx NDEzMTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU0NEY0QjVBODJCNzI0 RkU0MTU3RUM2NzM0MjMzMDVFQkI4RDI1RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3PUiG84dpJPTowJKhFpaQRCP7w+R0M0t5fCo/MCZM5RBsFE2S tGK/EiQqlM/6j8am3yQdnD7pN0BHCPjT5nDO6R4qV8VWmbGlMb8fbIA4RTkF8ByO 07Yx5w1IvQpnN8UAMqJ+Cu+K/JSyY87mkrPxxBe+jKch/9IHNKj9TfTCPB3oDGMG EJ9aickjCIh+x7fFes/xrndfAO6D+gUg2tpqCof4B78+Yr+uRb15Us/nCxtPuoD+ x/qqSV9bmvwVHpbpAn6sXJLJ/5qcLDiPgnplb4YldHVhbQLscgSJMJ3wvjsOXmxS p6vLf1gnPa6Jjr6IhpGIOb3tm/Jp1JoObx8xAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUVE9LWoK3JP5BV+xnNCMwXruNJf0wHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9WRTlMV29LM0pQNUJWLXhuTkNN d1hydU5KZjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAdPEw DQYJKoZIhvcNAQELBQADggEBAD+JK3o9s2LuCfP/rAZpDK/WW1kKTdf6wl9a6KIH yiF9Hs3KWp82qEhf3cC4Eo3n76K62wlhUmfQpZqnv+bat26Cn3LuoSchsG78zBKY xXupfVhAYDzIUiwZUu/z2auyGxn8RWffM31XJVAMJQrjNREVs+wFPzAawJqYIZjm FAnX4mqGTBvSF8b4ZDLkcHV0OfLwcIDXzvx4gbDTZtv8y6qbJ+/liL+O77C1dyt9 cF3NOdEcwxA07xuiJ7/fABVB9eUwooaardpSJZVOma5cZSXn7zCFirPf9LDsIMHC wdeX1f6C9Jj/SMUY2mC8tQdDIgkc3dVNX99KAhMqHMzAqs8= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net