$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/OeQl39Pnm2bAGUR-6yCw28ZxhfI.roa File: OeQl39Pnm2bAGUR-6yCw28ZxhfI.roa (raw, json) Hash identifier: 5Tob5UPFLKFP3rD7LWYlzJbgJ6u+uFE7ybttQ6TO0iY= Subject key identifier: 39:E4:25:DF:D3:E7:9B:66:C0:19:44:7E:EB:20:B0:DB:C6:71:85:F2 Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0D16 Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/OeQl39Pnm2bAGUR-6yCw28ZxhfI.roa Signing time: Mon 10 Feb 2025 14:02:30 +0000 ROA not before: Mon 10 Feb 2025 14:02:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 32787 IP address blocks: 27.105.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 16:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3350 (0xd16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Feb 10 14:02:30 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=39E425DFD3E79B66C019447EEB20B0DBC67185F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:60:31:dc:f7:4e:a9:71:07:d4:84:ca:54:c7: 73:83:0f:a0:43:5d:56:ef:bb:a3:6d:da:ff:a7:b5: e6:be:d4:f4:89:d7:6a:dc:6e:97:b2:52:88:57:52: 58:4c:95:58:f8:c6:33:52:d8:73:14:b5:76:6d:5c: cc:f2:bd:08:bd:50:3a:7b:b7:de:48:6e:ad:ab:12: 0d:ba:be:ab:8b:5c:d7:e9:fb:9a:31:b0:af:90:ea: 4d:3b:d7:f9:37:86:24:f6:dd:6d:cd:62:b5:1b:0f: 2d:31:2e:22:23:37:c9:25:9c:46:7d:10:e4:64:51: ef:f2:70:41:96:3a:c1:ed:24:df:ad:76:75:dc:2a: a7:71:13:6c:ed:68:63:b0:8f:66:71:3c:68:13:93: 44:04:23:f5:3d:1c:fd:67:46:40:c0:ae:66:79:f9: ad:d4:3a:fb:47:01:7d:3b:38:61:68:80:f2:5a:d5: 67:66:41:68:23:f7:5f:7c:1e:63:54:35:76:ec:33: a8:0a:01:16:ad:81:1a:c2:11:4d:88:ab:37:dc:18: da:24:15:86:a0:03:0e:c1:3b:1e:07:cf:63:da:25: 9c:6a:94:35:43:20:55:ce:0e:b6:2b:f9:a4:13:32: 4e:f6:97:fc:7c:c7:4a:2c:89:91:5c:4b:e8:61:f7: 67:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E4:25:DF:D3:E7:9B:66:C0:19:44:7E:EB:20:B0:DB:C6:71:85:F2 X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/OeQl39Pnm2bAGUR-6yCw28ZxhfI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.105.82.0/24 Signature Algorithm: sha256WithRSAEncryption 72:da:f2:ee:69:79:61:70:3a:af:f7:3c:5d:4e:f1:52:27:8d: f3:9f:79:55:74:29:bf:e7:1e:08:1a:22:2d:4f:c5:67:5d:93: 4b:ec:96:0f:28:e0:20:2d:77:04:48:a3:ec:5a:20:e6:4f:ab: 12:8a:53:c4:17:24:7d:46:d8:08:bb:8a:cc:a6:82:cb:ad:ad: e0:7c:d9:21:41:91:5a:41:3d:e3:a5:34:e0:c3:33:01:8a:f5: a7:02:a9:b7:9e:fd:a5:0d:7f:e0:51:c5:d3:a4:a0:12:ad:58: 34:5e:99:21:6c:b2:f0:7d:99:87:90:83:28:91:8d:5d:36:48: fc:40:74:35:37:1b:61:54:16:5a:f5:4a:45:7e:75:fc:6f:6b: 05:51:a0:52:de:6c:e5:63:e0:3e:f8:00:87:37:05:7c:a2:75: ff:ce:14:a2:3b:57:9a:8b:85:c3:83:d5:5a:be:b9:c3:15:6c: d9:33:e8:a7:66:8e:8c:00:10:dc:9e:b2:36:00:67:84:52:0e: c5:5d:cb:88:d7:39:db:23:cd:d1:8a:6b:71:5c:c7:4b:0a:d0: 4c:58:fb:3e:40:92:fe:a1:3d:06:a1:63:c5:d1:ad:c2:67:c8: bf:92:25:4f:99:f0:35:7a:7f:e0:6c:d8:72:e2:6a:e5:b9:be: 8c:30:ed:e0 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDRYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNTAyMTAx NDAyMzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM5RTQyNURGRDNFNzlC NjZDMDE5NDQ3RUVCMjBCMERCQzY3MTg1RjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQYDHc906pcQfUhMpUx3ODD6BDXVbvu6Nt2v+ntea+1PSJ12rc bpeyUohXUlhMlVj4xjNS2HMUtXZtXMzyvQi9UDp7t95Ibq2rEg26vquLXNfp+5ox sK+Q6k071/k3hiT23W3NYrUbDy0xLiIjN8klnEZ9EORkUe/ycEGWOsHtJN+tdnXc KqdxE2ztaGOwj2ZxPGgTk0QEI/U9HP1nRkDArmZ5+a3UOvtHAX07OGFogPJa1Wdm QWgj9198HmNUNXbsM6gKARatgRrCEU2IqzfcGNokFYagAw7BOx4Hz2PaJZxqlDVD IFXODrYr+aQTMk72l/x8x0osiZFcS+hh92dpAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUOeQl39Pnm2bAGUR+6yCw28ZxhfIwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9PZVFsMzlQbm0yYkFHVVItNnlD dzI4WnhoZkkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAG2lS MA0GCSqGSIb3DQEBCwUAA4IBAQBy2vLuaXlhcDqv9zxdTvFSJ43zn3lVdCm/5x4I GiItT8VnXZNL7JYPKOAgLXcESKPsWiDmT6sSilPEFyR9RtgIu4rMpoLLra3gfNkh QZFaQT3jpTTgwzMBivWnAqm3nv2lDX/gUcXTpKASrVg0XpkhbLLwfZmHkIMokY1d Nkj8QHQ1NxthVBZa9UpFfnX8b2sFUaBS3mzlY+A++ACHNwV8onX/zhSiO1eai4XD g9VavrnDFWzZM+inZo6MABDcnrI2AGeEUg7FXcuI1znbI83RimtxXMdLCtBMWPs+ QJL+oT0GoWPF0a3CZ8i/kiVPmfA1en/gbNhy4mrlub6MMO3g -----END CERTIFICATE-----Generated at Sat Apr 26 15:41:40 2025 by rpki-client