$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/l7oKZLnxhlekWLkZqgZMFZaRscI.roa File: l7oKZLnxhlekWLkZqgZMFZaRscI.roa (raw, json) Hash identifier: FcgRmjKOWuUGW6b3mB51jK98jc+eS8Z1bcYuBPBJ5MQ= Subject key identifier: 97:BA:0A:64:B9:F1:86:57:A4:58:B9:19:AA:06:4C:15:96:91:B1:C2 Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Certificate serial: 0E1B Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/l7oKZLnxhlekWLkZqgZMFZaRscI.roa Signing time: Mon 10 Feb 2025 14:22:10 +0000 ROA not before: Mon 10 Feb 2025 14:22:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18424 IP address blocks: 103.30.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3611 (0xe1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Validity Not Before: Feb 10 14:22:10 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=97BA0A64B9F18657A458B919AA064C159691B1C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e3:7a:d0:9c:d5:e6:77:78:c1:dc:75:bf:71: 1b:30:b7:a3:d7:3b:e4:3c:e4:8b:b2:8a:9b:8b:fe: 64:21:5f:3b:50:85:0d:12:ad:aa:2c:c4:95:7e:bc: b7:03:33:98:b9:1d:6e:95:96:bc:57:4a:f7:a3:ae: 69:f0:0b:2d:62:00:51:22:5d:de:62:bd:9e:72:09: 07:65:48:57:0d:c2:37:e1:79:e2:fc:0c:e2:de:66: ac:81:9f:7b:25:81:79:c1:8d:95:24:d1:f4:f7:b5: 1b:7f:c4:49:cb:7a:0d:37:d3:59:fb:01:cd:e2:ef: d8:2c:67:2f:53:a9:70:7d:9b:20:e0:78:3d:fb:15: ac:42:36:4e:69:ed:b3:7d:53:a3:93:6c:b1:3e:24: e6:c0:49:af:80:b9:e9:aa:46:c6:41:2f:e8:24:c0: 05:11:69:31:73:17:e9:bd:f7:8d:2d:47:b7:ba:01: 57:50:78:df:2a:72:8c:7c:b5:44:38:d6:b2:0b:79: 1d:8b:4b:10:69:d9:be:85:dc:92:da:6a:68:8a:3c: 53:f3:2f:ef:23:f1:dd:43:1a:4e:d4:87:a0:94:5e: e4:b2:c0:6a:63:a6:5d:80:77:ce:17:59:84:63:e1: 5c:4b:30:06:85:40:8d:fb:75:c6:6d:30:aa:68:95: 2a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BA:0A:64:B9:F1:86:57:A4:58:B9:19:AA:06:4C:15:96:91:B1:C2 X509v3 Authority Key Identifier: keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/l7oKZLnxhlekWLkZqgZMFZaRscI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.30.47.0/24 Signature Algorithm: sha256WithRSAEncryption 46:9a:ad:ef:d3:de:51:44:29:f4:d1:b7:b6:11:d6:e2:f6:a9: ae:92:56:3b:5f:39:2e:0f:3a:1a:74:2d:69:89:f8:f7:27:0f: bb:28:e1:74:a6:26:ea:5f:09:3a:10:97:4c:76:9f:f0:d5:b6: 11:92:a2:61:d5:62:29:e5:31:c3:c2:86:3b:4e:a5:c5:42:9a: e1:12:90:80:cb:69:dd:d1:43:a5:09:4a:f0:34:6e:09:77:3a: 12:5e:81:55:7f:59:69:9e:b9:33:81:05:06:e0:86:b1:05:b8: 09:63:9c:55:58:31:2b:5f:b2:ef:5a:18:2f:ae:29:67:41:5a: 6d:70:31:b4:0e:d7:e1:be:3d:6a:23:14:2f:f4:d7:39:b6:37: c5:00:55:ec:06:bf:c6:ef:4f:0b:41:63:48:ac:44:3d:72:d1: be:dd:75:7c:b1:ac:05:6e:cd:5c:d8:f3:e3:60:02:76:16:64: 7c:db:fc:f3:15:fd:dc:c0:c9:c3:90:f4:cc:85:b8:a8:bc:94: da:5f:4b:d1:fb:58:a8:4e:c3:bc:d5:ba:72:e8:f1:72:a7:61: bd:da:3f:de:4c:ce:f0:a8:73:55:cb:dd:44:c5:bf:c1:d5:c2: db:93:9a:66:f9:d6:0b:a9:d9:31:de:1c:0b:df:40:e9:14:cc: ef:2b:96:12 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDhswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3 RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yNTAyMTAx NDIyMTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk3QkEwQTY0QjlGMTg2 NTdBNDU4QjkxOUFBMDY0QzE1OTY5MUIxQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCo43rQnNXmd3jB3HW/cRswt6PXO+Q85IuyipuL/mQhXztQhQ0S raosxJV+vLcDM5i5HW6VlrxXSvejrmnwCy1iAFEiXd5ivZ5yCQdlSFcNwjfheeL8 DOLeZqyBn3slgXnBjZUk0fT3tRt/xEnLeg0301n7Ac3i79gsZy9TqXB9myDgeD37 FaxCNk5p7bN9U6OTbLE+JObASa+AuemqRsZBL+gkwAURaTFzF+m9940tR7e6AVdQ eN8qcox8tUQ41rILeR2LSxBp2b6F3JLaamiKPFPzL+8j8d1DGk7Uh6CUXuSywGpj pl2Ad84XWYRj4VxLMAaFQI37dcZtMKpolSpjAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUl7oKZLnxhlekWLkZqgZMFZaRscIwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL2w3b0taTG54aGxl a1dMa1pxZ1pNRlphUnNjSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnHi8wDQYJKoZIhvcNAQELBQADggEBAEaare/T3lFEKfTRt7YR1uL2qa6S VjtfOS4POhp0LWmJ+PcnD7so4XSmJupfCToQl0x2n/DVthGSomHVYinlMcPChjtO pcVCmuESkIDLad3RQ6UJSvA0bgl3OhJegVV/WWmeuTOBBQbghrEFuAljnFVYMStf su9aGC+uKWdBWm1wMbQO1+G+PWojFC/01zm2N8UAVewGv8bvTwtBY0isRD1y0b7d dXyxrAVuzVzY8+NgAnYWZHzb/PMV/dzAycOQ9MyFuKi8lNpfS9H7WKhOw7zVunLo 8XKnYb3aP95MzvCoc1XL3UTFv8HVwtuTmmb51gup2THeHAvfQOkUzO8rlhI= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:56 2025 by rpki-client on console.sobornost.net