$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/SiItwHSVzuANsCtoevfOgxOldkg.roa File: SiItwHSVzuANsCtoevfOgxOldkg.roa (raw, json) Hash identifier: K/R3CGLNTPoScMLVSARZxnH2d7Q9B5XjiWZndpVgIUA= Subject key identifier: 4A:22:2D:C0:74:95:CE:E0:0D:B0:2B:68:7A:F7:CE:83:13:A5:76:48 Certificate issuer: /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B Certificate serial: 0D54 Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/SiItwHSVzuANsCtoevfOgxOldkg.roa Signing time: Tue 11 Mar 2025 07:19:50 +0000 ROA not before: Tue 11 Mar 2025 07:19:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131606 IP address blocks: 103.124.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3412 (0xd54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B Validity Not Before: Mar 11 07:19:50 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4A222DC07495CEE00DB02B687AF7CE8313A57648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a5:ed:fc:f7:b2:f8:d4:b2:25:39:7d:92:21: 51:d4:9b:39:f5:fe:4e:ba:0d:1a:ff:2c:98:09:22: fe:1b:b7:7c:5e:e0:1e:ac:c1:a5:8f:cf:49:4e:db: 5c:8d:80:c1:15:78:77:6d:01:e3:0d:da:13:9e:a0: 7b:ea:3a:0f:d5:c7:2f:21:32:f4:7a:b3:66:a3:c1: 8f:90:20:6a:88:9b:38:0a:c0:1c:89:f9:6f:d7:88: 92:dd:0d:ba:5b:4d:6d:d9:be:ea:2a:f8:ce:d0:02: 23:06:48:b1:bb:23:a1:85:02:1f:5e:1e:0d:ca:1b: 3b:cb:f1:da:b4:01:a0:09:9f:99:9d:09:a0:72:7f: a8:db:73:c9:58:76:00:ce:4d:81:34:19:3e:d6:86: 68:e4:53:59:44:b8:97:11:17:a3:7e:a9:42:42:0b: 39:0e:2b:9b:39:a6:96:6c:aa:7a:ca:40:8b:8d:51: ca:2e:d5:e4:4a:b6:b1:5e:d1:06:6a:3c:a0:e8:f3: 87:f8:e0:58:c2:7f:b5:9c:9d:de:78:1d:67:b2:fb: b5:30:25:9e:0b:b7:5a:1c:e8:1c:42:d3:5b:57:68: 9f:75:65:54:17:2a:00:e6:74:7a:fe:b6:9d:65:fa: b8:bf:8a:9b:4b:ac:06:b0:51:60:d7:f3:d7:09:3e: fa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:22:2D:C0:74:95:CE:E0:0D:B0:2B:68:7A:F7:CE:83:13:A5:76:48 X509v3 Authority Key Identifier: keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/SiItwHSVzuANsCtoevfOgxOldkg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.124.40.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:9d:ae:19:de:2a:83:d3:4a:26:01:d3:9d:44:30:4b:44:82: e3:70:c3:9c:12:88:28:e6:af:95:d5:00:32:df:bf:86:17:79: ef:e3:d4:f8:03:58:21:82:4f:64:ea:b8:8f:00:a6:e0:67:31: 0d:1c:2f:95:02:a8:f2:4d:3c:f7:b0:89:3f:47:54:9a:4a:d1: a6:43:a9:25:f0:34:00:e5:99:61:73:86:aa:ef:69:93:31:02: 03:ad:f3:92:82:b3:9c:b9:d3:d0:3f:32:cf:69:6e:28:95:54: c6:4d:e6:2e:59:d8:97:d3:31:2f:ab:57:f0:40:c6:30:96:43: a9:ae:91:f8:e9:fa:9d:98:4f:d7:7b:6c:bf:26:db:16:dd:1d: 7f:8b:7d:39:15:bb:e8:fc:f7:76:d5:74:83:44:93:86:f3:9e: 95:4e:30:02:48:03:80:4a:e0:d1:ca:dd:af:5f:f0:4b:21:d9: 01:bc:af:73:f4:77:76:cc:d7:f8:0a:99:4e:2c:ce:d4:7d:19: 54:41:87:ad:7b:d4:82:9e:17:17:e2:f8:b3:71:81:68:4e:ba: e3:3a:23:ab:39:61:d3:14:10:15:1b:d8:97:c1:be:7b:08:2d: 2e:23:10:69:2b:b6:0a:0c:47:77:6f:ed:9a:d0:8c:d5:c9:3a: c7:b4:3a:66 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDVQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzkw QTA0MTJGOEI1RUM0RjNGOUZEQkIzQTYxMjcwREJEMEVBOUU2QjAeFw0yNTAzMTEw NzE5NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRBMjIyREMwNzQ5NUNF RTAwREIwMkI2ODdBRjdDRTgzMTNBNTc2NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIpe3897L41LIlOX2SIVHUmzn1/k66DRr/LJgJIv4bt3xe4B6s waWPz0lO21yNgMEVeHdtAeMN2hOeoHvqOg/Vxy8hMvR6s2ajwY+QIGqImzgKwByJ +W/XiJLdDbpbTW3Zvuoq+M7QAiMGSLG7I6GFAh9eHg3KGzvL8dq0AaAJn5mdCaBy f6jbc8lYdgDOTYE0GT7WhmjkU1lEuJcRF6N+qUJCCzkOK5s5ppZsqnrKQIuNUcou 1eRKtrFe0QZqPKDo84f44FjCf7Wcnd54HWey+7UwJZ4Lt1oc6BxC01tXaJ91ZVQX KgDmdHr+tp1l+ri/iptLrAawUWDX89cJPvp/AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUSiItwHSVzuANsCtoevfOgxOldkgwHwYDVR0jBBgwFoAUOQoEEvi17E8/n9uz phJw29DqnmswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVU5JR0FU RS9PUW9FRXZpMTdFOF9uOXV6cGhKdzI5RHFubXMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL09Rb0VFdmkxN0U4X245dXpwaEp3MjlEcW5tcy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1VOSUdBVEUvU2lJdHdIU1Z6dUFOc0N0 b2V2Zk9neE9sZGtnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWd8KDANBgkqhkiG9w0BAQsFAAOCAQEAOp2uGd4qg9NKJgHTnUQwS0SC43DDnBKI KOavldUAMt+/hhd57+PU+ANYIYJPZOq4jwCm4GcxDRwvlQKo8k0897CJP0dUmkrR pkOpJfA0AOWZYXOGqu9pkzECA63zkoKznLnT0D8yz2luKJVUxk3mLlnYl9MxL6tX 8EDGMJZDqa6R+On6nZhP13tsvybbFt0df4t9ORW76Pz3dtV0g0SThvOelU4wAkgD gErg0crdr1/wSyHZAbyvc/R3dszX+AqZTizO1H0ZVEGHrXvUgp4XF+L4s3GBaE66 4zojqzlh0xQQFRvYl8G+ewgtLiMQaSu2CgxHd2/tmtCM1ck6x7Q6Zg== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:56 2025 by rpki-client on console.sobornost.net