$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/uUtDEQh2i-X9AoE1gVqnL5Sszmw.roa File: uUtDEQh2i-X9AoE1gVqnL5Sszmw.roa (raw, json) Hash identifier: dxLIcgK0A7a9fn+Aob8yBRSXqWBU9XFVGD28LWsncXk= Subject key identifier: B9:4B:43:11:08:76:8B:E5:FD:02:81:35:81:5A:A7:2F:94:AC:CE:6C Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0D63 Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/uUtDEQh2i-X9AoE1gVqnL5Sszmw.roa Signing time: Mon 10 Feb 2025 14:13:16 +0000 ROA not before: Mon 10 Feb 2025 14:13:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131596 IP address blocks: 123.110.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3427 (0xd63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Feb 10 14:13:16 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B94B431108768BE5FD028135815AA72F94ACCE6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0d:a3:f9:52:ff:71:95:20:87:c8:1e:16:b0: e3:ec:d1:ac:07:92:78:72:8c:ac:d2:5e:7f:de:38: 98:22:62:39:37:f3:8d:99:05:66:03:f4:ff:7e:cb: 40:06:30:2c:c8:2c:65:93:81:78:1f:75:54:0c:2f: 9d:92:f9:45:65:14:9e:22:0c:8b:62:2d:65:0a:60: 01:f1:82:87:35:66:6f:7c:8b:c4:32:6c:df:af:bb: 8f:8c:39:b0:ca:65:a7:08:00:e2:59:a4:1e:b5:2a: 28:76:aa:71:01:a4:55:ee:7e:67:97:fa:1a:28:6b: 51:2e:9a:80:ae:da:2a:03:c7:03:08:c1:d6:00:3b: 41:3d:8f:a8:72:8f:f0:82:69:a4:0e:7a:68:a2:17: b5:16:bb:e8:33:f8:40:e0:9f:78:73:58:71:28:20: a4:b6:52:b0:b7:46:71:0f:fd:c6:b8:32:90:a7:75: af:e0:96:58:dd:78:56:4f:77:85:7b:77:e2:c6:33: 96:4d:29:ff:8a:ee:97:d4:6a:7b:8a:5a:58:e0:29: a4:79:48:8d:17:61:fb:1c:9b:ea:44:c6:96:94:bd: 60:71:a2:eb:16:89:c8:2e:c3:e0:25:48:ca:16:54: bf:8b:f5:bf:f6:25:4f:56:92:58:d5:1d:e8:e1:f7: 42:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4B:43:11:08:76:8B:E5:FD:02:81:35:81:5A:A7:2F:94:AC:CE:6C X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/uUtDEQh2i-X9AoE1gVqnL5Sszmw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.110.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3f:c0:6f:1d:d3:ad:d6:af:80:40:e9:e4:3d:86:b4:69:8a:7c: f9:24:b3:8e:76:9a:c7:28:98:68:de:4e:50:27:b4:7b:ad:04: 5b:8b:fb:0d:b0:af:7c:68:6b:05:88:e6:9a:83:5d:0a:4d:2b: 2a:e7:4e:b3:6e:ab:5d:f5:19:90:80:30:6c:8e:74:c8:30:a7: 6a:bc:20:e5:a0:42:e3:22:b4:fc:8f:00:58:e0:41:a1:bf:ed: 4d:aa:45:85:4d:a7:a5:8e:92:2b:a0:3a:60:f4:3d:d4:85:ad: 17:9b:c2:9d:d6:84:8b:7e:33:c1:26:f3:96:44:49:c2:65:22: ec:d4:42:29:a6:df:eb:a8:cb:ac:3c:e1:3e:35:c4:7a:a7:c7: 6b:b4:ab:7c:42:47:68:e5:09:3e:c3:f4:d3:d3:80:1f:ed:76: f7:b4:44:a5:5f:65:ad:9b:90:13:32:b7:61:65:d4:62:20:f6: 39:10:2b:c1:b0:e5:47:fa:b5:55:25:fa:cb:c8:14:21:cd:1e: f9:9a:c9:2e:9a:74:fa:cc:58:c9:02:2f:53:78:7a:8a:a9:82: 7c:79:cd:f0:ae:7f:59:b0:ea:30:7b:2c:f2:f9:41:81:e5:29: 1f:cc:49:68:9e:1b:99:b9:17:32:3d:12:f2:04:af:d5:af:b2: 4a:25:8e:8f -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDWMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNTAyMTAx NDEzMTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI5NEI0MzExMDg3NjhC RTVGRDAyODEzNTgxNUFBNzJGOTRBQ0NFNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCVDaP5Uv9xlSCHyB4WsOPs0awHknhyjKzSXn/eOJgiYjk3842Z BWYD9P9+y0AGMCzILGWTgXgfdVQML52S+UVlFJ4iDItiLWUKYAHxgoc1Zm98i8Qy bN+vu4+MObDKZacIAOJZpB61Kih2qnEBpFXufmeX+hooa1EumoCu2ioDxwMIwdYA O0E9j6hyj/CCaaQOemiiF7UWu+gz+EDgn3hzWHEoIKS2UrC3RnEP/ca4MpCnda/g lljdeFZPd4V7d+LGM5ZNKf+K7pfUanuKWljgKaR5SI0XYfscm+pExpaUvWBxousW icguw+AlSMoWVL+L9b/2JU9WkljVHejh90IlAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUuUtDEQh2i+X9AoE1gVqnL5SszmwwHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS91VXRERVFoMmktWDlBb0UxZ1Zx bkw1U3N6bXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAe24w DQYJKoZIhvcNAQELBQADggEBAD/Abx3TrdavgEDp5D2GtGmKfPkks452mscomGje TlAntHutBFuL+w2wr3xoawWI5pqDXQpNKyrnTrNuq131GZCAMGyOdMgwp2q8IOWg QuMitPyPAFjgQaG/7U2qRYVNp6WOkiugOmD0PdSFrRebwp3WhIt+M8Em85ZEScJl IuzUQimm3+uoy6w84T41xHqnx2u0q3xCR2jlCT7D9NPTgB/tdve0RKVfZa2bkBMy t2Fl1GIg9jkQK8Gw5Uf6tVUl+svIFCHNHvmayS6adPrMWMkCL1N4eoqpgnx5zfCu f1mw6jB7LPL5QYHlKR/MSWieG5m5FzI9EvIEr9Wvskoljo8= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net