$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EASPNET/4C3QcsCWjhzTpOJtrIAFEHvTj5s.roa File: 4C3QcsCWjhzTpOJtrIAFEHvTj5s.roa (raw, json) Hash identifier: pkAp58QSTGact7glnmsf6/uBLuma68Aitv2QN4Qy0Mg= Subject key identifier: E0:2D:D0:72:C0:96:8E:1C:D3:A4:E2:6D:AC:80:05:10:7B:D3:8F:9B Certificate issuer: /CN=552B16164C361040D88F32D36509448CF3BB9D25 Certificate serial: 0CA9 Authority key identifier: 55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/4C3QcsCWjhzTpOJtrIAFEHvTj5s.roa Signing time: Mon 10 Feb 2025 13:55:53 +0000 ROA not before: Mon 10 Feb 2025 13:55:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 10135 IP address blocks: 2405:5600::/32 maxlen: 36 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3241 (0xca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B16164C361040D88F32D36509448CF3BB9D25 Validity Not Before: Feb 10 13:55:53 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E02DD072C0968E1CD3A4E26DAC8005107BD38F9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:88:c0:2f:43:a4:64:ef:30:cf:ab:65:ae: 15:07:ed:86:e1:a5:68:19:6a:9b:28:87:a3:c1:a6: d7:fd:6c:59:7f:00:7e:97:b7:ba:5f:c7:d1:b6:b2: a9:7d:7d:8a:20:ba:c6:c5:01:60:03:74:fd:31:14: 45:c0:ad:c9:04:4c:16:7f:5f:1e:35:7a:28:62:9e: c7:94:a4:42:c7:19:f6:40:76:08:db:f8:83:24:a4: 2a:92:ba:e7:36:b8:50:cd:42:3b:b5:b0:9b:72:9e: 0e:91:1b:1e:99:ab:76:78:b1:38:59:32:e7:e9:e3: f2:0b:f3:98:91:5e:32:31:15:b0:79:c9:55:1b:1d: 45:0b:4c:b3:9a:ee:b9:a5:6e:9b:40:57:cc:af:06: 3d:9a:49:60:b5:61:03:56:20:87:87:56:3a:0c:ae: d5:24:20:d3:e7:7b:39:cd:17:ac:a2:b8:4a:ed:75: 6f:b0:03:a9:8f:42:50:8e:58:f7:5f:a4:1d:52:70: 3f:a7:c6:8e:8e:46:88:3d:da:70:5b:49:5f:1b:a5: f1:59:85:76:9d:53:0f:ff:1f:17:53:86:a5:10:0b: 68:87:a2:c0:44:be:0f:6c:9f:7d:69:b2:ac:3c:bb: de:5b:3e:57:a0:ee:33:9b:8a:c0:40:f8:4c:a4:f3: 68:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2D:D0:72:C0:96:8E:1C:D3:A4:E2:6D:AC:80:05:10:7B:D3:8F:9B X509v3 Authority Key Identifier: keyid:55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/4C3QcsCWjhzTpOJtrIAFEHvTj5s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:5600::/32 Signature Algorithm: sha256WithRSAEncryption 77:13:94:64:24:74:f1:53:6b:40:7e:99:a2:06:42:46:ff:08: 9b:d0:67:b2:42:e6:16:df:9f:da:17:24:83:e9:e1:47:3e:43: 34:12:ae:8c:3f:21:aa:ec:48:b8:88:0a:94:ab:fa:67:b9:c3: d8:95:6c:b5:ee:ff:e4:e9:07:06:b7:42:a0:03:86:e5:c8:80: 4a:7f:89:e0:30:92:97:47:ca:9f:09:f7:10:8f:32:a5:ec:24: 75:6a:b0:f3:4c:81:19:a8:df:b4:21:3e:4d:8e:c6:a1:d0:bd: d7:29:6c:d8:ac:e7:4d:e8:c6:42:6f:45:38:db:48:9d:17:f4: fd:17:67:3f:ba:b1:46:b5:4f:f3:fe:fd:f0:39:ef:37:69:f9: d3:f6:d5:9c:0d:d6:eb:af:d1:98:d1:d8:49:45:69:90:9c:c8: 7b:c0:26:a4:72:2e:a3:80:10:2b:23:90:ae:8d:ff:45:3b:71: cc:3a:de:ba:68:fe:8f:4e:5e:6d:34:93:83:a4:a8:d7:8f:44: cc:16:b3:a9:bf:38:e2:0b:00:b9:8b:14:e1:4b:45:af:77:6a: 19:72:29:2b:11:cc:0c:ac:ea:9c:3a:ef:03:0f:99:28:62:01: df:06:38:66:81:fc:5b:da:73:a7:28:8d:dd:21:14:9a:d7:48: 70:34:7e:e9 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTUy QjE2MTY0QzM2MTA0MEQ4OEYzMkQzNjUwOTQ0OENGM0JCOUQyNTAeFw0yNTAyMTAx MzU1NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUwMkREMDcyQzA5NjhF MUNEM0E0RTI2REFDODAwNTEwN0JEMzhGOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3DojAL0OkZO8wz6tlrhUH7YbhpWgZapsoh6PBptf9bFl/AH6X t7pfx9G2sql9fYogusbFAWADdP0xFEXArckETBZ/Xx41eihinseUpELHGfZAdgjb +IMkpCqSuuc2uFDNQju1sJtyng6RGx6Zq3Z4sThZMufp4/IL85iRXjIxFbB5yVUb HUULTLOa7rmlbptAV8yvBj2aSWC1YQNWIIeHVjoMrtUkINPneznNF6yiuErtdW+w A6mPQlCOWPdfpB1ScD+nxo6ORog92nBbSV8bpfFZhXadUw//HxdThqUQC2iHosBE vg9sn31psqw8u95bPleg7jObisBA+Eyk82hNAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU4C3QcsCWjhzTpOJtrIAFEHvTj5swHwYDVR0jBBgwFoAUVSsWFkw2EEDYjzLT ZQlEjPO7nSUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRUFTUE5F VC9WU3NXRmt3MkVFRFlqekxUWlFsRWpQTzduU1UuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1ZTc1dGa3cyRUVEWWp6TFRaUWxFalBPN25TVS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0VBU1BORVQvNEMzUWNzQ1dqaHpUcE9K dHJJQUZFSHZUajVzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACQFVgAwDQYJKoZIhvcNAQELBQADggEBAHcTlGQkdPFTa0B+maIGQkb/CJvQZ7JC 5hbfn9oXJIPp4Uc+QzQSrow/IarsSLiICpSr+me5w9iVbLXu/+TpBwa3QqADhuXI gEp/ieAwkpdHyp8J9xCPMqXsJHVqsPNMgRmo37QhPk2OxqHQvdcpbNis503oxkJv RTjbSJ0X9P0XZz+6sUa1T/P+/fA57zdp+dP21ZwN1uuv0ZjR2ElFaZCcyHvAJqRy LqOAECsjkK6N/0U7ccw63rpo/o9OXm00k4OkqNePRMwWs6m/OOILALmLFOFLRa93 ahlyKSsRzAys6pw67wMPmShiAd8GOGaB/Fvac6cojd0hFJrXSHA0fuk= -----END CERTIFICATE-----Generated at Fri Apr 18 22:20:32 2025 by rpki-client