$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/08NYTTN9rLPX-7Z8JM58tyFwpaE.roa File: 08NYTTN9rLPX-7Z8JM58tyFwpaE.roa (raw, json) Hash identifier: sJlCTPBdox1YWfF+j1IWc76Z00J3GrYXF7gXRNxDGJk= Subject key identifier: D3:C3:58:4D:33:7D:AC:B3:D7:FB:B6:7C:24:CE:7C:B7:21:70:A5:A1 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 11F1 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/08NYTTN9rLPX-7Z8JM58tyFwpaE.roa Signing time: Mon 10 Feb 2025 14:27:54 +0000 ROA not before: Mon 10 Feb 2025 14:27:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 210.202.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4593 (0x11f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:54 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D3C3584D337DACB3D7FBB67C24CE7CB72170A5A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:38:1f:a7:13:f2:4b:c4:94:bd:ef:5f:fe: 06:dd:c0:17:8c:f9:01:c4:e4:02:f8:e7:7b:54:65: be:dd:99:81:bb:db:6d:c6:ea:93:07:00:34:6d:6d: db:ec:a7:bc:29:7d:1b:40:89:43:f8:3d:d8:59:ba: 26:fe:55:80:9b:ed:1b:91:a3:91:d8:b8:9a:31:7c: 08:fc:7a:a5:e7:e8:06:98:41:b8:81:d3:17:f2:5c: 39:c2:d9:b0:af:27:66:1b:76:39:2e:ee:d1:71:7d: 96:43:5f:f9:37:fd:6a:27:98:9a:02:2b:fe:41:0e: af:1d:1d:e0:9c:cc:cd:6d:65:d6:c9:be:71:2b:27: 17:41:96:73:b0:d9:60:5d:41:31:b6:a9:26:34:cf: bf:c0:6e:b0:a3:fe:9d:5e:0f:6a:ec:fa:10:33:2c: de:5e:b8:e6:af:7a:76:3e:1a:b4:57:96:62:d6:46: 7b:11:70:4e:e1:0d:58:7a:3d:39:3e:71:d0:7f:a5: 83:3e:45:b9:54:ee:3e:5d:3c:c1:ae:5c:7a:0b:b5: 4b:d3:01:79:6f:31:01:04:28:85:f7:e8:15:e6:69: af:a9:04:c2:89:3a:43:5f:c6:4d:4b:1b:58:c5:44: 63:de:e9:81:cf:e0:3d:ac:ac:a8:b3:9a:d5:8a:99: a0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C3:58:4D:33:7D:AC:B3:D7:FB:B6:7C:24:CE:7C:B7:21:70:A5:A1 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/08NYTTN9rLPX-7Z8JM58tyFwpaE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.202.192.0/18 Signature Algorithm: sha256WithRSAEncryption 48:e3:fb:90:8d:51:39:4d:7c:62:bb:70:1e:3c:c5:2b:8d:d9: 80:36:d5:61:b4:86:3b:f7:ca:0d:09:f6:6b:8e:7d:b7:1f:58: 6d:6f:9d:6b:a5:7e:c5:56:2b:c3:53:07:f5:ec:1b:94:a7:cb: a3:55:c7:de:8e:f0:9a:88:be:94:4c:ad:48:1b:33:80:c9:7e: 8e:37:a1:f0:4c:0e:21:5f:b0:40:06:8a:f5:f4:5f:11:cc:95: bf:5b:1e:cf:49:3d:40:e0:47:75:8b:79:58:2d:76:ce:f7:86: 42:52:90:82:af:2a:b6:f3:0c:45:5b:0f:a0:bc:cd:c5:7d:37: 83:c6:62:97:be:f0:66:3f:23:53:fd:9e:bc:07:99:98:47:08: a5:77:82:02:95:15:b1:73:dc:5f:97:a0:2d:b4:ca:e1:ad:c2: 49:88:12:5c:64:8a:c0:e9:e0:b9:43:c5:a6:f3:a5:61:f3:17: 4b:b1:79:67:17:e1:69:05:78:5c:c4:88:b5:e5:d6:e7:26:6c: a8:9d:f5:f6:4c:c4:88:7d:58:fe:24:fc:55:59:33:c3:cc:a1: f2:4e:f3:11:bb:58:03:c8:2d:6b:6d:35:cb:38:46:07:74:33: 88:6e:18:55:91:4f:28:46:c4:e0:05:4f:45:3c:07:30:2d:de: 87:7c:75:89 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEfEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQzQzM1ODREMzM3REFD QjNEN0ZCQjY3QzI0Q0U3Q0I3MjE3MEE1QTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDasTgfpxPyS8SUve9f/gbdwBeM+QHE5AL453tUZb7dmYG7223G 6pMHADRtbdvsp7wpfRtAiUP4PdhZuib+VYCb7RuRo5HYuJoxfAj8eqXn6AaYQbiB 0xfyXDnC2bCvJ2Ybdjku7tFxfZZDX/k3/WonmJoCK/5BDq8dHeCczM1tZdbJvnEr JxdBlnOw2WBdQTG2qSY0z7/AbrCj/p1eD2rs+hAzLN5euOavenY+GrRXlmLWRnsR cE7hDVh6PTk+cdB/pYM+RblU7j5dPMGuXHoLtUvTAXlvMQEEKIX36BXmaa+pBMKJ OkNfxk1LG1jFRGPe6YHP4D2srKizmtWKmaDnAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU08NYTTN9rLPX+7Z8JM58tyFwpaEwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzA4TllUVE45ckxQWC03WjhKTTU4dHlG d3BhRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSysAwDQYJ KoZIhvcNAQELBQADggEBAEjj+5CNUTlNfGK7cB48xSuN2YA21WG0hjv3yg0J9muO fbcfWG1vnWulfsVWK8NTB/XsG5Sny6NVx96O8JqIvpRMrUgbM4DJfo43ofBMDiFf sEAGivX0XxHMlb9bHs9JPUDgR3WLeVgtds73hkJSkIKvKrbzDEVbD6C8zcV9N4PG Ype+8GY/I1P9nrwHmZhHCKV3ggKVFbFz3F+XoC20yuGtwkmIElxkisDp4LlDxabz pWHzF0uxeWcX4WkFeFzEiLXl1ucmbKid9fZMxIh9WP4k/FVZM8PMofJO8xG7WAPI LWttNcs4Rgd0M4huGFWRTyhGxOAFT0U8BzAt3od8dYk= -----END CERTIFICATE-----Generated at Mon Apr 7 20:56:32 2025 by rpki-client