$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TOPCHINA/a_EmrOfNUXFIPWcxHHv6x55pT6Y.roa File: a_EmrOfNUXFIPWcxHHv6x55pT6Y.roa (raw, json) Hash identifier: 3gdc+b61mX/GMEdCczbHpEDw25347/C7iCHDsv9aTNU= Subject key identifier: 6B:F1:26:AC:E7:CD:51:71:48:3D:67:31:1C:7B:FA:C7:9E:69:4F:A6 Certificate issuer: /CN=0D677394A7AE27B8B455EFAE93A9A65CFE142D6B Certificate serial: 1287 Authority key identifier: 0D:67:73:94:A7:AE:27:B8:B4:55:EF:AE:93:A9:A6:5C:FE:14:2D:6B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWdzlKeuJ7i0Ve-uk6mmXP4ULWs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TOPCHINA/a_EmrOfNUXFIPWcxHHv6x55pT6Y.roa Signing time: Mon 10 Feb 2025 13:57:09 +0000 ROA not before: Mon 10 Feb 2025 13:57:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131659 IP address blocks: 103.124.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TOPCHINA/DWdzlKeuJ7i0Ve-uk6mmXP4ULWs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TOPCHINA/DWdzlKeuJ7i0Ve-uk6mmXP4ULWs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/DWdzlKeuJ7i0Ve-uk6mmXP4ULWs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4743 (0x1287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D677394A7AE27B8B455EFAE93A9A65CFE142D6B Validity Not Before: Feb 10 13:57:09 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6BF126ACE7CD5171483D67311C7BFAC79E694FA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:2c:18:ac:bf:dc:02:47:94:eb:c7:50:60: a2:d7:f9:56:4b:99:e8:14:e5:fa:e7:81:da:fa:c2: d0:af:72:ce:6f:ae:c2:72:46:6d:c6:db:02:27:c5: 47:37:8f:7c:5a:7b:df:4e:4f:89:ba:7f:34:34:7f: ae:b2:a0:de:6d:d0:9c:eb:19:06:5f:24:3b:ac:db: d6:3f:51:bc:76:d2:53:0b:2e:79:a8:f2:d6:aa:a3: 09:e4:4b:0c:e0:44:fe:62:9f:4f:2d:67:3b:5a:3c: 9a:33:cd:0f:46:c4:8d:20:28:fa:9a:73:d6:f8:c0: d4:8c:4f:95:fc:29:0f:f4:da:e8:14:72:83:0e:69: df:47:ba:5f:b3:26:6f:45:99:41:81:65:31:12:90: ee:3c:1c:c5:65:f5:fc:ff:16:31:7d:9a:3b:38:6f: ad:3f:92:d1:8d:e2:ce:48:c1:ff:5a:40:93:aa:e2: 87:23:67:20:8e:6e:f5:74:c2:df:54:d8:6f:9c:be: 11:40:86:16:5c:92:39:e8:bc:0d:1c:70:73:a4:15: 0b:b0:c0:14:78:b8:13:11:fd:8e:a8:69:46:6c:db: 67:85:03:d4:7b:f9:03:e0:8c:34:09:3b:2b:80:32: e6:1d:e2:e8:b4:34:eb:c9:69:b5:dc:e8:20:61:85: da:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F1:26:AC:E7:CD:51:71:48:3D:67:31:1C:7B:FA:C7:9E:69:4F:A6 X509v3 Authority Key Identifier: keyid:0D:67:73:94:A7:AE:27:B8:B4:55:EF:AE:93:A9:A6:5C:FE:14:2D:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TOPCHINA/DWdzlKeuJ7i0Ve-uk6mmXP4ULWs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWdzlKeuJ7i0Ve-uk6mmXP4ULWs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TOPCHINA/a_EmrOfNUXFIPWcxHHv6x55pT6Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.124.252.0/22 Signature Algorithm: sha256WithRSAEncryption 02:0f:87:97:89:bf:c7:6e:1c:e0:fb:97:15:eb:c7:6d:69:97: 67:e0:ed:30:16:b2:dc:0b:b2:71:02:8c:c2:5c:51:73:f3:25: 9b:7f:55:b1:73:5e:87:95:e2:fb:2c:b3:8a:c5:da:da:56:d1: 04:ce:d1:bb:80:ea:ce:4a:c7:6f:a6:c4:75:04:c4:ea:46:91: b4:54:dd:96:32:3d:1c:1e:f3:5e:92:89:e4:50:96:c1:97:84: ea:40:70:35:b7:51:70:06:be:55:c4:44:40:f1:4a:81:87:a6: a2:e4:f1:c7:94:ea:86:ba:e4:18:28:94:c0:31:b7:d2:9f:dc: ce:44:d8:f7:e7:25:61:a1:da:46:d5:03:88:ca:6f:dd:3a:cf: ca:57:f4:31:b3:3e:0b:65:ba:4a:18:d4:21:18:71:c9:42:bf: 56:32:aa:82:c3:2b:1e:88:f5:56:48:7a:b0:0d:be:92:95:a4: 52:79:c4:ec:10:27:89:69:20:c7:d7:2f:dc:9e:38:7a:99:c7: 00:d1:cd:46:ea:ce:4d:0c:99:15:43:d0:f0:a9:2f:40:a5:91: 4b:91:49:2d:9a:c0:09:f2:20:ac:44:3f:66:d8:20:d4:d1:32: fb:76:f6:6d:d8:cb:f2:b4:d1:51:b4:8d:c0:c2:79:24:e3:a4: 5d:48:19:38 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEocwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ2 NzczOTRBN0FFMjdCOEI0NTVFRkFFOTNBOUE2NUNGRTE0MkQ2QjAeFw0yNTAyMTAx MzU3MDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZCRjEyNkFDRTdDRDUx NzE0ODNENjczMTFDN0JGQUM3OUU2OTRGQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+LywYrL/cAkeU68dQYKLX+VZLmegU5frngdr6wtCvcs5vrsJy Rm3G2wInxUc3j3xae99OT4m6fzQ0f66yoN5t0JzrGQZfJDus29Y/Ubx20lMLLnmo 8taqownkSwzgRP5in08tZztaPJozzQ9GxI0gKPqac9b4wNSMT5X8KQ/02ugUcoMO ad9Hul+zJm9FmUGBZTESkO48HMVl9fz/FjF9mjs4b60/ktGN4s5Iwf9aQJOq4ocj ZyCObvV0wt9U2G+cvhFAhhZckjnovA0ccHOkFQuwwBR4uBMR/Y6oaUZs22eFA9R7 +QPgjDQJOyuAMuYd4ui0NOvJabXc6CBhhdr3AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUa/EmrOfNUXFIPWcxHHv6x55pT6YwHwYDVR0jBBgwFoAUDWdzlKeuJ7i0Ve+u k6mmXP4ULWswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVE9QQ0hJ TkEvRFdkemxLZXVKN2kwVmUtdWs2bW1YUDRVTFdzLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9EV2R6bEtldUo3aTBWZS11azZtbVhQNFVMV3MuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UT1BDSElOQS9hX0Vtck9mTlVYRklQ V2N4SEh2Nng1NXBUNlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3z8MA0GCSqGSIb3DQEBCwUAA4IBAQACD4eXib/Hbhzg+5cV68dtaZdn4O0w FrLcC7JxAozCXFFz8yWbf1Wxc16HleL7LLOKxdraVtEEztG7gOrOSsdvpsR1BMTq RpG0VN2WMj0cHvNekonkUJbBl4TqQHA1t1FwBr5VxERA8UqBh6ai5PHHlOqGuuQY KJTAMbfSn9zORNj35yVhodpG1QOIym/dOs/KV/Qxsz4LZbpKGNQhGHHJQr9WMqqC wyseiPVWSHqwDb6SlaRSecTsECeJaSDH1y/cnjh6mccA0c1G6s5NDJkVQ9DwqS9A pZFLkUktmsAJ8iCsRD9m2CDU0TL7dvZt2MvytNFRtI3Awnkk46RdSBk4 -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net