$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/cG0rp8sU5YPI2enpTCgZ7mnL-oE.roa File: cG0rp8sU5YPI2enpTCgZ7mnL-oE.roa (raw, json) Hash identifier: Dj1i/1AdRA13RqX/WNcmJpj3+Me1MKHAw1Uy9nuNGQc= Subject key identifier: 70:6D:2B:A7:CB:14:E5:83:C8:D9:E9:E9:4C:28:19:EE:69:CB:FA:81 Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0D53 Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/cG0rp8sU5YPI2enpTCgZ7mnL-oE.roa Signing time: Mon 10 Feb 2025 14:13:11 +0000 ROA not before: Mon 10 Feb 2025 14:13:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 2405:9200::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3411 (0xd53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Feb 10 14:13:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=706D2BA7CB14E583C8D9E9E94C2819EE69CBFA81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:00:3a:84:cf:f2:f8:fb:3e:37:49:22:42:24: 5e:13:3a:79:d6:bd:3f:0b:2e:2b:ec:bb:44:fd:52: 8b:80:ab:40:75:e8:e9:22:c5:4e:ff:28:49:c7:0b: 0e:57:67:8f:6c:10:b5:14:f7:7b:7d:54:2b:b4:49: f8:d0:45:5b:7d:83:9f:7d:ca:70:3e:23:fa:c8:f6: ac:20:c3:5e:ed:b3:9c:fd:e8:d9:8f:84:22:70:3a: 48:17:ab:af:80:b9:8d:28:b8:83:22:60:ca:b3:dd: 82:a6:f6:75:1e:72:c5:64:6a:8e:f3:8e:53:d1:a8: 9c:17:99:68:e3:57:fc:97:b8:28:e1:99:79:7b:d9: 21:69:a4:fb:7d:39:c6:b5:99:bb:44:1d:a3:ca:c3: 8a:82:7a:34:af:ee:8c:95:76:34:21:3c:07:82:48: 65:4f:32:ba:f0:fc:93:f4:c9:1b:9b:cb:5c:f7:d1: 64:aa:6d:39:af:a5:a7:cc:65:1b:b8:99:2e:65:8a: 4e:3f:00:f9:a1:70:80:09:a6:41:dd:2a:24:53:dc: 72:4d:79:4d:c3:d3:72:ae:58:5c:15:43:a1:80:86: b3:d3:b8:18:da:b5:9c:84:0e:b9:4c:3d:4c:51:20: 19:b4:c3:70:5b:d9:30:84:b1:43:b4:48:cc:2e:64: 5c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6D:2B:A7:CB:14:E5:83:C8:D9:E9:E9:4C:28:19:EE:69:CB:FA:81 X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/cG0rp8sU5YPI2enpTCgZ7mnL-oE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:9200::/32 Signature Algorithm: sha256WithRSAEncryption 40:25:e9:68:00:f4:60:4e:d3:64:da:0c:03:be:da:c5:65:3d: 3b:39:99:44:20:f3:6c:4e:cb:25:49:e9:75:41:df:dd:fb:bd: 69:54:7d:92:e1:59:97:02:fa:c8:8a:0d:61:dc:e5:aa:19:c4: bb:e3:54:44:42:c2:23:ff:db:6c:09:43:5a:75:85:4f:86:5a: 47:d1:1b:8c:5c:c9:c4:c3:57:a6:5d:36:f8:5d:e9:3a:69:ac: a4:0f:ac:d0:1d:52:ef:c0:27:0a:04:88:ec:24:cc:be:0b:c9: 26:3c:78:46:88:83:77:cf:94:a2:2c:65:b7:ef:4f:83:1a:17: 93:c4:40:7c:b0:33:56:8c:2f:fb:30:2e:64:ff:1d:8a:a5:48: 3b:ac:a0:04:e3:9e:2f:39:88:39:b3:41:a7:35:cd:83:ef:aa: cb:6b:19:b1:1c:9c:1a:04:1e:86:c3:a6:1a:95:34:3a:db:38: cd:84:a9:5d:f4:66:d5:89:03:9b:c2:c7:f4:a1:6a:59:d3:78: d5:a4:3f:bb:e0:33:f3:7b:82:d9:5f:8b:06:d3:f2:89:04:f0: 30:e8:78:53:aa:5a:7f:72:e4:94:5d:22:08:4a:8d:9d:f0:34: dc:21:8c:6b:7f:79:7b:cf:98:f3:e4:7e:6e:c0:77:8f:99:ad: 75:d5:91:c8 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDVMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNTAyMTAx NDEzMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcwNkQyQkE3Q0IxNEU1 ODNDOEQ5RTlFOTRDMjgxOUVFNjlDQkZBODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3ADqEz/L4+z43SSJCJF4TOnnWvT8LLivsu0T9UouAq0B16Oki xU7/KEnHCw5XZ49sELUU93t9VCu0SfjQRVt9g599ynA+I/rI9qwgw17ts5z96NmP hCJwOkgXq6+AuY0ouIMiYMqz3YKm9nUecsVkao7zjlPRqJwXmWjjV/yXuCjhmXl7 2SFppPt9Oca1mbtEHaPKw4qCejSv7oyVdjQhPAeCSGVPMrrw/JP0yRuby1z30WSq bTmvpafMZRu4mS5lik4/APmhcIAJpkHdKiRT3HJNeU3D03KuWFwVQ6GAhrPTuBja tZyEDrlMPUxRIBm0w3Bb2TCEsUO0SMwuZFy1AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUcG0rp8sU5YPI2enpTCgZ7mnL+oEwHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9jRzBycDhzVTVZUEkyZW5wVENn Wjdtbkwtb0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAWS ADANBgkqhkiG9w0BAQsFAAOCAQEAQCXpaAD0YE7TZNoMA77axWU9OzmZRCDzbE7L JUnpdUHf3fu9aVR9kuFZlwL6yIoNYdzlqhnEu+NURELCI//bbAlDWnWFT4ZaR9Eb jFzJxMNXpl02+F3pOmmspA+s0B1S78AnCgSI7CTMvgvJJjx4RoiDd8+Uoixlt+9P gxoXk8RAfLAzVowv+zAuZP8diqVIO6ygBOOeLzmIObNBpzXNg++qy2sZsRycGgQe hsOmGpU0Ots4zYSpXfRm1YkDm8LH9KFqWdN41aQ/u+Az83uC2V+LBtPyiQTwMOh4 U6paf3LklF0iCEqNnfA03CGMa395e8+Y8+R+bsB3j5mtddWRyA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net