$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/hYyepMDIpBY-JHorYEhIMB-ANW4.roa File: hYyepMDIpBY-JHorYEhIMB-ANW4.roa (raw, json) Hash identifier: 3WB6jlJPGMPg7wIcwtP7oU3R9Bwxw/9ND8vEnS2H624= Subject key identifier: 85:8C:9E:A4:C0:C8:A4:16:3E:24:7A:2B:60:48:48:30:1F:80:35:6E Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0D60 Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/hYyepMDIpBY-JHorYEhIMB-ANW4.roa Signing time: Mon 10 Feb 2025 14:13:15 +0000 ROA not before: Mon 10 Feb 2025 14:13:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 61.58.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3424 (0xd60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Feb 10 14:13:15 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=858C9EA4C0C8A4163E247A2B604848301F80356E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c0:72:0c:bb:73:0c:38:1a:02:b2:ea:5b:67: 62:55:95:48:02:25:8f:1d:af:78:bb:82:07:eb:6a: 34:a9:8d:73:0a:2b:1a:6f:c0:9a:2f:ae:2f:c8:5c: e7:cc:33:96:b7:e6:52:01:a6:0f:a3:27:93:6f:43: a8:9c:11:0b:bb:5d:a4:e8:4a:24:7a:40:a2:49:b8: 8f:f7:be:ff:d2:67:80:b8:a0:5f:08:f4:9b:a7:10: c5:a4:93:14:46:84:d7:6b:b9:b3:a3:9b:b2:56:03: 67:73:f7:77:1f:5e:41:59:a2:9b:a6:e7:68:29:ba: 5e:10:43:a5:cf:b1:91:0a:45:aa:d4:ef:9a:77:0e: bd:15:4b:c8:cf:45:a0:b9:e5:c0:e1:58:cb:25:1a: 05:c2:71:79:da:44:3e:96:b9:c3:cb:0a:74:da:f7: 8c:e1:48:3c:e5:35:95:d6:b7:eb:11:5d:0b:a0:cf: 10:58:6b:b5:d9:72:5f:1c:8c:8e:e8:4d:7b:bd:f4: 3a:59:b4:21:82:14:c5:4d:0e:7b:ac:99:19:ad:bb: fa:e1:c2:67:f2:67:63:2a:23:31:1a:7b:07:94:42: 04:fc:a8:69:d1:94:5c:d8:d8:d4:6f:cc:34:94:1c: 08:5a:be:7f:f2:4b:3d:2f:76:26:0b:64:fc:c0:c7: 4f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8C:9E:A4:C0:C8:A4:16:3E:24:7A:2B:60:48:48:30:1F:80:35:6E X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/hYyepMDIpBY-JHorYEhIMB-ANW4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.64.0/20 Signature Algorithm: sha256WithRSAEncryption 45:42:7e:4b:34:14:3c:09:51:41:75:83:8a:eb:c1:39:62:68: 0b:19:2a:36:64:03:a4:21:e9:2a:da:0f:75:7d:ca:85:6a:c6: fe:1d:74:72:a8:f7:1e:1f:e5:c9:7a:cf:8f:44:5d:b5:6e:d4: 23:33:6f:ea:57:72:27:4d:f3:10:79:cb:c8:e4:c1:53:e9:25: 92:5e:a4:fd:39:78:ba:bd:7a:bb:76:29:04:e0:aa:ad:68:d6: 43:c5:76:ed:89:68:25:1a:53:92:39:0f:77:0a:f7:32:f0:4c: 21:8a:f3:30:6f:c3:bd:ad:19:97:03:9c:d3:56:f3:07:ec:af: 50:a2:41:5c:a8:ee:ab:21:62:f2:df:2f:69:a0:b3:66:0a:82: 6c:1e:0d:46:8f:34:7a:c6:5a:d1:1a:8f:ef:9b:f1:d3:b7:84: c2:90:a2:0b:b0:ba:11:82:21:e4:60:2a:52:ff:13:7d:aa:34: c6:9b:98:2d:b8:58:ad:36:c9:23:1f:6a:15:0b:ea:3a:e4:66: 29:dc:9e:1f:06:15:7d:da:b1:ff:0f:3c:36:ee:21:b6:52:af: 74:b1:11:c6:a8:20:98:22:c1:33:f4:16:07:92:8f:1d:3b:34: e2:fa:29:ba:48:5c:51:32:33:39:60:a1:80:5f:15:6f:4b:0f: 2a:a6:40:b6 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDWAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNTAyMTAx NDEzMTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg1OEM5RUE0QzBDOEE0 MTYzRTI0N0EyQjYwNDg0ODMwMUY4MDM1NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwwHIMu3MMOBoCsupbZ2JVlUgCJY8dr3i7ggfrajSpjXMKKxpv wJovri/IXOfMM5a35lIBpg+jJ5NvQ6icEQu7XaToSiR6QKJJuI/3vv/SZ4C4oF8I 9JunEMWkkxRGhNdrubOjm7JWA2dz93cfXkFZopum52gpul4QQ6XPsZEKRarU75p3 Dr0VS8jPRaC55cDhWMslGgXCcXnaRD6WucPLCnTa94zhSDzlNZXWt+sRXQugzxBY a7XZcl8cjI7oTXu99DpZtCGCFMVNDnusmRmtu/rhwmfyZ2MqIzEaeweUQgT8qGnR lFzY2NRvzDSUHAhavn/ySz0vdiYLZPzAx09hAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUhYyepMDIpBY+JHorYEhIMB+ANW4wHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9oWXllcE1ESXBCWS1KSG9yWUVo SU1CLUFOVzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPTpA MA0GCSqGSIb3DQEBCwUAA4IBAQBFQn5LNBQ8CVFBdYOK68E5YmgLGSo2ZAOkIekq 2g91fcqFasb+HXRyqPceH+XJes+PRF21btQjM2/qV3InTfMQecvI5MFT6SWSXqT9 OXi6vXq7dikE4KqtaNZDxXbtiWglGlOSOQ93Cvcy8EwhivMwb8O9rRmXA5zTVvMH 7K9QokFcqO6rIWLy3y9poLNmCoJsHg1GjzR6xlrRGo/vm/HTt4TCkKILsLoRgiHk YCpS/xN9qjTGm5gtuFitNskjH2oVC+o65GYp3J4fBhV92rH/Dzw27iG2Uq90sRHG qCCYIsEz9BYHko8dOzTi+im6SFxRMjM5YKGAXxVvSw8qpkC2 -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net