$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/QVvcaqFVHOwW374k_9n_yDthk4I.roa File: QVvcaqFVHOwW374k_9n_yDthk4I.roa (raw, json) Hash identifier: TA6ww9Ny8ZecSv1JVildNA/L32Lo8pe0NKv2uVQUMTU= Subject key identifier: 41:5B:DC:6A:A1:55:1C:EC:16:DF:BE:24:FF:D9:FF:C8:3B:61:93:82 Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Certificate serial: 0D52 Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/QVvcaqFVHOwW374k_9n_yDthk4I.roa Signing time: Mon 10 Feb 2025 14:12:15 +0000 ROA not before: Mon 10 Feb 2025 14:12:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 2402:2580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 04:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3410 (0xd52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Validity Not Before: Feb 10 14:12:15 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=415BDC6AA1551CEC16DFBE24FFD9FFC83B619382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5a:6b:9c:fc:6a:af:cf:43:66:fd:26:ca:46: 58:2a:90:16:e3:4f:8d:06:f9:de:46:d0:f2:42:04: 56:f2:26:4f:98:e9:22:93:0d:2a:8b:de:45:a5:76: 33:1c:cb:1f:3b:fe:3a:e2:ea:d5:e7:f5:3c:e3:92: 3d:61:e0:29:f7:d1:75:db:4a:d5:99:b6:d9:78:46: 9d:80:5c:83:7e:19:92:66:3c:28:43:ae:42:17:4e: d1:56:36:79:16:7f:45:f8:49:64:95:4b:a6:e1:a9: ed:53:be:2d:d8:6a:54:d4:e5:26:2c:12:74:c6:52: 96:d0:f5:b6:67:7a:1f:33:b5:08:50:de:46:2e:61: 36:06:6f:10:e3:76:10:7c:ff:a3:b9:22:44:cc:11: 15:5f:5e:27:c5:d0:51:0f:17:17:c7:2a:d8:eb:25: 2b:d1:60:5f:b1:a7:eb:d3:3f:dd:f2:0f:eb:67:58: 59:86:d5:e1:f4:24:01:a8:f5:a6:4d:e1:a8:ef:d7: 4c:7d:2f:f8:ed:0a:1c:cd:76:5f:bf:2d:9a:3a:05: 5d:b0:38:71:57:7b:83:9e:de:c7:c8:7e:d6:8c:c7: 90:5c:f6:7a:a1:72:44:3d:e7:5d:29:64:e0:38:d4: 4a:91:15:62:89:89:a0:56:ef:55:cb:cf:94:54:d0: 06:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5B:DC:6A:A1:55:1C:EC:16:DF:BE:24:FF:D9:FF:C8:3B:61:93:82 X509v3 Authority Key Identifier: keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/QVvcaqFVHOwW374k_9n_yDthk4I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:2580::/32 Signature Algorithm: sha256WithRSAEncryption b5:c6:20:94:04:19:d6:2d:c2:3a:82:a5:d8:97:60:08:94:80: 8a:e6:aa:71:7a:42:48:f7:92:68:4f:03:b9:f5:28:b4:9e:ab: 89:ef:01:02:60:05:59:c9:36:2b:2c:fc:59:6e:de:d5:4b:c0: 70:db:cf:1a:58:af:53:e7:e0:78:aa:aa:89:cb:71:5b:b0:ac: 7c:d2:3e:cc:c9:86:8e:70:9a:73:d8:bc:7a:4e:4c:4b:13:10: 50:a5:bf:81:6c:a6:a2:4d:bb:c9:cb:9b:78:bd:70:1f:25:3e: 33:25:54:7c:bb:2d:c6:dc:f0:dc:e3:e7:1d:d7:73:25:16:2b: 4c:8e:a3:18:c6:a8:10:97:9c:22:74:5b:65:ce:98:35:93:20: b8:e5:e5:ea:ee:39:98:05:bc:0e:76:a0:eb:23:05:86:61:e6: 3a:ea:ac:ab:03:af:03:2a:02:49:a4:b0:c0:5a:f6:c8:c4:fb: cd:4f:9b:a1:a1:83:9f:ec:1c:72:9c:17:53:5a:57:46:f8:cf: c1:53:c3:56:0b:7f:ac:aa:19:5d:87:49:9e:d3:76:6b:3b:a5: 7b:a6:cf:82:51:13:b3:5f:19:ba:c5:d2:eb:30:86:00:db:a3: 97:11:c0:f3:ea:01:83:43:3d:22:6c:9c:76:9e:8e:89:de:00: 45:6c:70:38 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yNTAyMTAx NDEyMTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQxNUJEQzZBQTE1NTFD RUMxNkRGQkUyNEZGRDlGRkM4M0I2MTkzODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrWmuc/Gqvz0Nm/SbKRlgqkBbjT40G+d5G0PJCBFbyJk+Y6SKT DSqL3kWldjMcyx87/jri6tXn9Tzjkj1h4Cn30XXbStWZttl4Rp2AXIN+GZJmPChD rkIXTtFWNnkWf0X4SWSVS6bhqe1Tvi3YalTU5SYsEnTGUpbQ9bZneh8ztQhQ3kYu YTYGbxDjdhB8/6O5IkTMERVfXifF0FEPFxfHKtjrJSvRYF+xp+vTP93yD+tnWFmG 1eH0JAGo9aZN4ajv10x9L/jtChzNdl+/LZo6BV2wOHFXe4Oe3sfIftaMx5Bc9nqh ckQ9510pZOA41EqRFWKJiaBW71XLz5RU0Ab3AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUQVvcaqFVHOwW374k/9n/yDthk4IwHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+ q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS9RVnZjYXFGVkhPd1czNzRrXzlu X3lEdGhrNEkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAIl gDANBgkqhkiG9w0BAQsFAAOCAQEAtcYglAQZ1i3COoKl2JdgCJSAiuaqcXpCSPeS aE8DufUotJ6rie8BAmAFWck2Kyz8WW7e1UvAcNvPGlivU+fgeKqqictxW7CsfNI+ zMmGjnCac9i8ek5MSxMQUKW/gWymok27ycubeL1wHyU+MyVUfLstxtzw3OPnHddz JRYrTI6jGMaoEJecInRbZc6YNZMguOXl6u45mAW8Dnag6yMFhmHmOuqsqwOvAyoC SaSwwFr2yMT7zU+boaGDn+wccpwXU1pXRvjPwVPDVgt/rKoZXYdJntN2azule6bP glETs18ZusXS6zCGANujlxHA8+oBg0M9Imycdp6Oid4ARWxwOA== -----END CERTIFICATE-----Generated at Thu May 8 01:01:01 2025 by rpki-client