$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/xcLpGIkhVcg2rv6rQ4llV8gO9R0.roa File: xcLpGIkhVcg2rv6rQ4llV8gO9R0.roa (raw, json) Hash identifier: Qa+wukiYguxE80oeUKSwupowPbXJwJWtHQOX9YN0Vgw= Subject key identifier: C5:C2:E9:18:89:21:55:C8:36:AE:FE:AB:43:89:65:57:C8:0E:F5:1D Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Certificate serial: 0CF5 Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/xcLpGIkhVcg2rv6rQ4llV8gO9R0.roa Signing time: Mon 10 Feb 2025 13:50:58 +0000 ROA not before: Mon 10 Feb 2025 13:50:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18018 IP address blocks: 122.255.94.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3317 (0xcf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Validity Not Before: Feb 10 13:50:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C5C2E918892155C836AEFEAB43896557C80EF51D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8f:0b:95:03:8b:24:17:5c:1b:2f:3f:45:4d: 46:18:6a:df:f0:78:df:2a:72:7a:ac:e4:88:21:58: c4:85:cf:b6:97:1d:55:34:95:b2:6d:73:06:58:95: 7c:e5:f9:11:4c:88:dd:2c:91:f8:45:c6:8d:8a:30: 27:43:ec:7f:33:97:d3:8e:7e:59:85:eb:66:50:54: 4f:e2:1c:6c:0e:b1:2e:be:49:e9:a8:14:35:79:d9: ca:07:0c:d8:f2:c8:8c:ea:f3:b9:16:b5:e8:cf:c8: 5c:9c:e3:e6:14:d6:44:4d:50:24:4a:b0:52:a3:a8: 89:68:c6:df:2e:90:8b:6c:b9:31:be:a0:43:ea:fc: 9b:87:1b:83:0c:f1:cd:3f:75:30:94:60:87:6b:52: 06:35:b4:26:a7:7d:29:95:e1:87:f0:c0:d1:70:48: 00:48:e8:78:b9:61:63:ac:95:84:43:91:fd:d2:10: d0:98:a1:e1:c7:5f:51:36:8b:c9:5f:16:49:63:51: 1d:32:de:35:f1:55:d6:4f:f5:1c:9e:20:8e:64:cb: a5:c6:66:c5:3f:68:ec:05:2c:22:7b:70:71:5e:0e: b1:f9:ec:fc:60:b7:7b:c9:ee:18:5c:b4:ad:ac:e8: 85:a1:95:2a:4c:f1:03:41:77:4c:df:bd:19:fc:3b: e9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C2:E9:18:89:21:55:C8:36:AE:FE:AB:43:89:65:57:C8:0E:F5:1D X509v3 Authority Key Identifier: keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/xcLpGIkhVcg2rv6rQ4llV8gO9R0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.255.94.64/26 Signature Algorithm: sha256WithRSAEncryption 96:79:41:9d:13:25:85:57:a5:08:64:6d:f9:6d:b9:67:27:22: b3:06:b2:e5:f3:2b:26:09:22:25:eb:88:7f:53:4f:d7:f2:c6: ef:01:44:ec:50:02:70:a6:6a:2c:8b:64:2f:07:89:48:4a:55: 45:f3:49:28:c9:5b:ed:28:8a:2b:7e:6e:64:ab:e2:f9:6b:3b: c8:72:3b:95:79:af:e5:27:02:c5:96:1e:32:94:5f:18:01:07: bb:0f:fb:c8:f5:4e:48:1b:13:fc:db:87:b4:a6:38:14:bf:49: 9e:9a:87:4a:63:08:a5:ee:cc:e1:aa:f2:d2:cc:c6:1c:6c:85: 58:57:bb:17:6f:97:0e:f8:ae:46:36:2e:5e:7d:6c:8f:68:58: e3:86:99:02:e2:24:31:1f:93:4d:4a:ab:92:b3:ab:38:bb:71: 43:cb:0c:b1:86:ee:9a:b6:5b:24:dd:0c:0a:66:5b:11:bb:cb: 99:5f:61:95:ca:1f:3d:f5:3a:87:7b:35:11:ac:77:24:2e:14: f1:90:6c:ae:02:5b:40:fe:d8:1c:6d:14:23:17:a9:2f:b7:bc: bd:73:a1:e3:c6:23:8b:fe:6a:43:5c:e4:4c:1a:48:ec:4c:f0: 73:98:48:84:7a:ac:95:d0:0c:4e:2c:f5:50:f0:d8:e0:a7:cd: 4b:62:ea:d5 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDPUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yNTAyMTAx MzUwNThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM1QzJFOTE4ODkyMTU1 QzgzNkFFRkVBQjQzODk2NTU3QzgwRUY1MUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCljwuVA4skF1wbLz9FTUYYat/weN8qcnqs5IghWMSFz7aXHVU0 lbJtcwZYlXzl+RFMiN0skfhFxo2KMCdD7H8zl9OOflmF62ZQVE/iHGwOsS6+Semo FDV52coHDNjyyIzq87kWtejPyFyc4+YU1kRNUCRKsFKjqIloxt8ukItsuTG+oEPq /JuHG4MM8c0/dTCUYIdrUgY1tCanfSmV4YfwwNFwSABI6Hi5YWOslYRDkf3SENCY oeHHX1E2i8lfFkljUR0y3jXxVdZP9RyeII5ky6XGZsU/aOwFLCJ7cHFeDrH57Pxg t3vJ7hhctK2s6IWhlSpM8QNBd0zfvRn8O+kHAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUxcLpGIkhVcg2rv6rQ4llV8gO9R0wHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC94Y0xwR0lraFZjZzJydjZyUTRs bFY4Z085UjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGev9e QDANBgkqhkiG9w0BAQsFAAOCAQEAlnlBnRMlhVelCGRt+W25Zycisway5fMrJgki JeuIf1NP1/LG7wFE7FACcKZqLItkLweJSEpVRfNJKMlb7SiKK35uZKvi+Ws7yHI7 lXmv5ScCxZYeMpRfGAEHuw/7yPVOSBsT/NuHtKY4FL9JnpqHSmMIpe7M4ary0szG HGyFWFe7F2+XDviuRjYuXn1sj2hY44aZAuIkMR+TTUqrkrOrOLtxQ8sMsYbumrZb JN0MCmZbEbvLmV9hlcofPfU6h3s1Eax3JC4U8ZBsrgJbQP7YHG0UIxepL7e8vXOh 48Yji/5qQ1zkTBpI7Ezwc5hIhHqsldAMTiz1UPDY4KfNS2Lq1Q== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:53 2025 by rpki-client on console.sobornost.net