$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/j2txO-1uU0yor-gOVggZ3X7ZrHU.roa File: j2txO-1uU0yor-gOVggZ3X7ZrHU.roa (raw, json) Hash identifier: O+o/AGxCvKvKwBE97uMgeE2RYD5rx6I1yk5C+XWbDXQ= Subject key identifier: 8F:6B:71:3B:ED:6E:53:4C:A8:AF:E8:0E:56:08:19:DD:7E:D9:AC:75 Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B Certificate serial: 0CD3 Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/j2txO-1uU0yor-gOVggZ3X7ZrHU.roa Signing time: Mon 10 Feb 2025 14:12:58 +0000 ROA not before: Mon 10 Feb 2025 14:12:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 61.60.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 13:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3283 (0xcd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B Validity Not Before: Feb 10 14:12:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8F6B713BED6E534CA8AFE80E560819DD7ED9AC75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:24:fb:b2:a5:f2:c6:fb:83:e1:8e:49:9f: 5b:a4:8c:71:c5:7a:2f:a2:1a:56:58:a5:3d:9e:f8: ef:aa:e0:47:28:f1:59:db:eb:a6:6f:bd:0d:33:79: 52:41:06:9c:d8:60:c7:f1:80:bc:f5:8a:a6:d6:72: a7:72:be:3e:c6:f5:02:5e:9f:c5:ff:25:df:7b:4b: b4:ac:ac:95:97:e2:ae:ca:16:84:3d:fe:2b:73:e3: 79:21:e0:16:fd:30:4a:a8:a4:ab:ef:8d:3f:fa:fb: 1b:2b:19:b9:63:bb:92:b7:00:2f:48:4d:05:66:08: e6:61:69:1b:b5:de:23:f8:b7:47:b9:6e:99:45:10: cf:f8:b7:f4:8e:ef:cd:79:c3:b2:54:94:8b:64:33: e4:e0:71:44:2c:53:1d:71:48:9b:d3:f5:70:4b:f4: a9:77:6d:fa:af:c9:6b:b4:f0:3b:bf:6d:61:dc:a3: 1a:2a:4b:f3:67:aa:c0:d0:eb:6d:c6:4b:bc:b3:e1: 86:ff:f2:8e:f5:1f:db:da:58:6f:56:52:2a:3b:5a: 92:e8:8b:7e:fe:47:b7:7f:10:d4:2c:e2:0a:5c:7f: 47:e0:d6:fe:5c:e4:db:2a:68:b3:84:59:31:3d:b3: 78:92:d1:08:af:a4:2b:35:a2:e7:17:65:c8:ab:e0: bc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6B:71:3B:ED:6E:53:4C:A8:AF:E8:0E:56:08:19:DD:7E:D9:AC:75 X509v3 Authority Key Identifier: keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/j2txO-1uU0yor-gOVggZ3X7ZrHU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.60.240.0/20 Signature Algorithm: sha256WithRSAEncryption ba:96:e6:a6:66:94:68:9a:71:23:40:ef:71:0e:f0:4e:8a:fc: 9e:c4:70:73:85:ca:98:25:eb:0b:86:d4:2e:1f:ef:67:a0:87: 6d:12:2a:ef:7b:d2:7c:40:7a:b5:66:26:d0:56:65:43:20:b1: 33:a9:21:78:90:4c:35:fe:5a:e6:c2:a0:3d:6d:f8:fe:dc:ca: 7a:9e:c8:bb:a2:80:9c:cd:dc:35:cf:bf:c0:5e:46:aa:4c:8a: 8b:84:05:d1:b3:2f:f9:1f:9b:64:b0:7f:84:81:20:46:28:4f: 7f:61:f3:6e:a6:9e:04:55:ce:92:94:e8:7e:b4:88:ab:43:26: 0b:38:d8:f1:25:5b:b7:cf:46:f6:ed:71:2f:b3:fb:0b:a6:32: 45:7b:ec:13:cd:32:27:a4:d6:65:ee:c3:69:de:51:f4:ad:6a: 7e:99:38:ef:bf:2b:b2:33:f0:59:a6:c0:70:d5:95:97:e4:c7: 33:c1:59:93:48:26:a4:f5:48:eb:cb:fa:c2:81:6a:42:4d:87: 81:e9:5c:66:a3:31:1d:71:9c:bc:4a:62:1d:ca:da:b6:b1:45: 2c:83:88:dc:b7:fc:a5:ca:ae:8b:fb:30:cc:25:6c:fb:9e:7d: 94:68:37:e4:9d:96:a5:de:dd:13:b0:38:9c:e0:47:7b:fe:e0: 9d:7e:de:f8 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDNMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE RUEzNDcwNzE1MjI5MEMxRDI2MDZGRkJGQzY5QjkyN0Q0MEE1QjAeFw0yNTAyMTAx NDEyNThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhGNkI3MTNCRUQ2RTUz NENBOEFGRTgwRTU2MDgxOUREN0VEOUFDNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2EST7sqXyxvuD4Y5Jn1ukjHHFei+iGlZYpT2e+O+q4Eco8Vnb 66ZvvQ0zeVJBBpzYYMfxgLz1iqbWcqdyvj7G9QJen8X/Jd97S7SsrJWX4q7KFoQ9 /itz43kh4Bb9MEqopKvvjT/6+xsrGblju5K3AC9ITQVmCOZhaRu13iP4t0e5bplF EM/4t/SO7815w7JUlItkM+TgcUQsUx1xSJvT9XBL9Kl3bfqvyWu08Du/bWHcoxoq S/NnqsDQ623GS7yz4Yb/8o71H9vaWG9WUio7WpLoi37+R7d/ENQs4gpcf0fg1v5c 5NsqaLOEWTE9s3iS0QivpCs1oucXZcir4LzDAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUj2txO+1uU0yor+gOVggZ3X7ZrHUwHwYDVR0jBBgwFoAUb96jRwcVIpDB0mBv +/xpuSfUClswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lDQ0FU Vi9iOTZqUndjVklwREIwbUJ2LV94cHVTZlVDbHMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2I5NmpSd2NWSXBEQjBtQnYtX3hwdVNmVUNscy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NZQ0NBVFYvajJ0eE8tMXVVMHlvci1n T1ZnZ1ozWDdackhVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BD088DANBgkqhkiG9w0BAQsFAAOCAQEAupbmpmaUaJpxI0DvcQ7wTor8nsRwc4XK mCXrC4bULh/vZ6CHbRIq73vSfEB6tWYm0FZlQyCxM6kheJBMNf5a5sKgPW34/tzK ep7Iu6KAnM3cNc+/wF5GqkyKi4QF0bMv+R+bZLB/hIEgRihPf2HzbqaeBFXOkpTo frSIq0MmCzjY8SVbt89G9u1xL7P7C6YyRXvsE80yJ6TWZe7Dad5R9K1qfpk4778r sjPwWabAcNWVl+THM8FZk0gmpPVI68v6woFqQk2HgelcZqMxHXGcvEpiHcratrFF LIOI3Lf8pcqui/swzCVs+559lGg35J2Wpd7dE7A4nOBHe/7gnX7e+A== -----END CERTIFICATE-----Generated at Thu May 8 11:56:56 2025 by rpki-client