$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/o9lR9WL7dw4xkkjNzg_PFShdSok.roa File: o9lR9WL7dw4xkkjNzg_PFShdSok.roa (raw, json) Hash identifier: 3Ls5m26s2rLTev4yIFeYGFfLwiQCeg/SsRm6b6fXufo= Subject key identifier: A3:D9:51:F5:62:FB:77:0E:31:92:48:CD:CE:0F:CF:15:28:5D:4A:89 Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Certificate serial: 0CF2 Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/o9lR9WL7dw4xkkjNzg_PFShdSok.roa Signing time: Mon 10 Feb 2025 13:50:57 +0000 ROA not before: Mon 10 Feb 2025 13:50:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 132819 IP address blocks: 61.58.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3314 (0xcf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Validity Not Before: Feb 10 13:50:57 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A3D951F562FB770E319248CDCE0FCF15285D4A89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:33:71:06:8e:da:83:be:ba:b4:ce:0b:1b:fa: 98:a2:65:87:ff:cd:ed:72:62:1d:e7:89:46:88:fc: f7:7e:0a:2c:37:7d:31:e8:85:30:6f:ef:40:56:18: b5:f7:cf:a9:b4:74:29:8d:ea:3c:f4:2d:66:c9:f9: a5:4a:4f:de:f1:69:48:32:17:a8:3d:8a:ca:27:9f: ba:5d:a3:80:1c:e7:a7:0b:f7:f5:7e:0f:af:f5:27: a2:bf:1e:58:48:cd:9b:ab:20:87:68:72:a9:32:24: 7e:c8:92:d8:8b:1b:bf:bd:5c:46:27:f8:f1:90:be: bb:fe:0d:d2:70:99:33:22:b3:e3:e6:5e:fc:d3:36: 07:c6:16:70:02:eb:a7:87:ca:60:91:2f:ce:55:00: d0:d3:87:3b:dd:d8:f3:be:71:ad:1d:dc:dd:91:fc: 31:58:2b:f4:11:83:6b:f8:67:5c:4f:ba:b4:f0:47: dc:6b:eb:a5:cd:7d:b3:f4:07:15:08:94:1d:c1:b6: 54:6f:3c:03:e9:af:33:92:57:ac:7c:6a:c2:6a:53: d6:a2:49:7d:d5:7b:a9:63:30:72:bd:39:79:d9:8d: f1:c9:05:b9:1e:6d:5d:27:55:af:84:58:6a:6f:e8: 2f:d3:be:5c:d9:8d:ae:9f:fb:23:b3:f6:da:47:37: 40:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D9:51:F5:62:FB:77:0E:31:92:48:CD:CE:0F:CF:15:28:5D:4A:89 X509v3 Authority Key Identifier: keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/o9lR9WL7dw4xkkjNzg_PFShdSok.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.38.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:b8:ba:39:51:82:18:c2:a0:1e:86:db:41:7c:7e:bb:49:aa: cc:2d:64:da:55:fe:c3:94:ab:93:86:0d:ca:ec:38:fc:fb:90: 6c:08:39:75:25:65:82:83:d0:e8:c4:c8:fe:89:1e:12:bc:25: ae:a6:0f:f6:c5:aa:12:20:c2:b4:3a:d6:0c:d5:23:18:bb:16: d0:14:27:cf:5e:fa:b6:26:62:9c:e4:49:3c:36:bb:6f:ca:fd: 03:97:c8:f4:32:66:6a:a5:24:31:fa:c2:1f:7d:47:07:3d:42: 36:9d:89:2e:d8:0f:e9:a1:dc:0f:6e:9f:85:60:87:8a:ae:38: 2a:8d:00:5b:ce:45:a3:a4:33:97:b1:02:87:2d:87:2a:86:10: a4:dd:03:26:1e:c2:1b:d9:62:db:45:f3:ff:07:c9:ff:21:35: 5e:0e:cf:62:f9:cf:d3:d3:7f:6c:3c:6f:29:d5:36:05:7b:a7: 08:f0:db:15:61:49:ed:ce:8c:84:73:0f:e7:e9:45:bb:9a:dd: 5a:1f:c8:34:0c:fb:07:bf:60:67:77:17:15:c2:47:e8:90:a2: b3:6d:71:5d:d1:ba:8e:10:fc:70:8a:64:66:79:6f:03:c9:c0: e8:24:3e:98:9e:24:95:8b:0e:ac:53:0a:67:1f:62:c3:3a:1f: 62:d1:07:54 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDPIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yNTAyMTAx MzUwNTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEzRDk1MUY1NjJGQjc3 MEUzMTkyNDhDRENFMEZDRjE1Mjg1RDRBODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqM3EGjtqDvrq0zgsb+piiZYf/ze1yYh3niUaI/Pd+Ciw3fTHo hTBv70BWGLX3z6m0dCmN6jz0LWbJ+aVKT97xaUgyF6g9isonn7pdo4Ac56cL9/V+ D6/1J6K/HlhIzZurIIdocqkyJH7IktiLG7+9XEYn+PGQvrv+DdJwmTMis+PmXvzT NgfGFnAC66eHymCRL85VANDThzvd2PO+ca0d3N2R/DFYK/QRg2v4Z1xPurTwR9xr 66XNfbP0BxUIlB3BtlRvPAPprzOSV6x8asJqU9aiSX3Ve6ljMHK9OXnZjfHJBbke bV0nVa+EWGpv6C/TvlzZja6f+yOz9tpHN0DvAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUo9lR9WL7dw4xkkjNzg/PFShdSokwHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC9vOWxSOVdMN2R3NHhra2pOemdf UEZTaGRTb2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPTom MA0GCSqGSIb3DQEBCwUAA4IBAQBbuLo5UYIYwqAehttBfH67SarMLWTaVf7DlKuT hg3K7Dj8+5BsCDl1JWWCg9DoxMj+iR4SvCWupg/2xaoSIMK0OtYM1SMYuxbQFCfP Xvq2JmKc5Ek8Nrtvyv0Dl8j0MmZqpSQx+sIffUcHPUI2nYku2A/podwPbp+FYIeK rjgqjQBbzkWjpDOXsQKHLYcqhhCk3QMmHsIb2WLbRfP/B8n/ITVeDs9i+c/T039s PG8p1TYFe6cI8NsVYUntzoyEcw/n6UW7mt1aH8g0DPsHv2BndxcVwkfokKKzbXFd 0bqOEPxwimRmeW8DycDoJD6YniSViw6sUwpnH2LDOh9i0QdU -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:53 2025 by rpki-client on console.sobornost.net