$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/BJj3a8HXZnXk6DKG1EZeqpsjq6U.roa File: BJj3a8HXZnXk6DKG1EZeqpsjq6U.roa (raw, json) Hash identifier: E0OrtpDPn7MaBX3whK5GD40usIeeLiwWfAGsSI/Bt0w= Subject key identifier: 04:98:F7:6B:C1:D7:66:75:E4:E8:32:86:D4:46:5E:AA:9B:23:AB:A5 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 124F Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/BJj3a8HXZnXk6DKG1EZeqpsjq6U.roa Signing time: Mon 10 Feb 2025 14:28:17 +0000 ROA not before: Mon 10 Feb 2025 14:28:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 210.63.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4687 (0x124f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:17 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0498F76BC1D76675E4E83286D4465EAA9B23ABA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:31:be:79:c9:eb:9d:69:f9:70:3e:2f:46: b0:b9:c9:8c:f9:99:7e:a5:a7:c4:58:ff:96:fc:55: b8:4e:0a:ae:e1:71:b1:58:93:03:43:62:a0:e4:8b: 11:9c:03:de:3c:ab:37:32:a1:34:74:82:11:79:87: 78:53:52:b5:f3:e7:93:be:cb:0b:c1:98:fa:83:75: ba:9a:e8:32:4e:d3:8f:63:0b:ba:d2:44:65:b9:1c: 74:06:32:a6:a9:5a:04:80:63:7e:08:0c:27:79:41: dd:71:9c:0f:a6:9e:ae:fc:1d:a9:d7:42:32:b2:58: f9:81:f9:81:db:e8:c9:78:57:ce:9b:bf:85:da:6f: bb:fd:68:e0:f4:d8:00:98:a9:4a:86:de:a5:08:1c: 5b:cd:60:c8:f8:10:ba:fe:4e:a3:5a:26:09:2a:a3: 67:b4:32:05:c1:62:1d:eb:a3:5c:f8:cc:4f:2d:93: 97:dc:73:7d:c6:66:0b:e7:3c:4e:75:ec:5a:78:31: 4e:b3:91:e8:20:30:5e:f2:f5:22:cb:4f:5c:08:6f: 81:0b:ba:6e:81:17:a8:2f:06:71:28:ac:16:64:ff: 42:a1:2b:e2:47:e2:e8:cd:91:2e:0f:d3:99:74:83: 8a:94:22:0e:cf:cb:64:eb:06:ef:e6:3d:87:78:72: 05:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:98:F7:6B:C1:D7:66:75:E4:E8:32:86:D4:46:5E:AA:9B:23:AB:A5 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/BJj3a8HXZnXk6DKG1EZeqpsjq6U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.253.0/24 Signature Algorithm: sha256WithRSAEncryption 08:1a:c9:b3:27:3f:b2:ce:89:e5:41:cc:0d:02:0f:e9:d5:c1: d5:f9:ee:e4:42:c4:8e:64:38:03:1c:b0:d2:4c:02:b6:79:9b: 58:5f:da:30:74:dd:97:7f:70:ae:25:e1:f6:85:c4:dd:98:fb: 09:60:aa:b3:2f:72:f5:0f:3e:57:17:a5:19:d1:a3:82:07:b3: 4e:89:ef:f9:1b:b7:32:25:8c:76:38:7d:64:9e:44:c1:bb:9a: df:81:d7:fe:76:db:9c:68:8b:24:0a:f7:e2:00:f3:f3:76:33: 37:3b:c0:e6:be:75:03:2d:18:b5:1b:22:ed:35:36:8f:cf:9c: de:b1:47:ab:e2:43:59:97:06:fa:5c:e2:af:b9:2b:96:61:fa: 19:00:ac:4a:23:ce:53:61:5a:9f:b7:82:23:a4:c2:22:dc:56: 36:6b:61:4e:ca:51:2e:6d:e2:39:50:4e:54:c4:0a:47:0d:be: 43:5f:05:1a:ed:ab:e5:44:41:9e:17:ca:cb:4c:4c:95:c9:c7: 96:d1:2d:fe:ea:3a:29:0c:be:8e:a5:b2:7c:02:b6:30:42:06: 68:b4:f9:b0:b1:fe:00:38:20:4d:a0:ff:02:e0:64:5b:28:a7: 8a:9a:0b:6a:d8:a5:9e:d6:af:c5:9b:24:27:f7:1a:f6:c0:58: 2c:a8:11:f8 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEk8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA0OThGNzZCQzFENzY2 NzVFNEU4MzI4NkQ0NDY1RUFBOUIyM0FCQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0ezG+ecnrnWn5cD4vRrC5yYz5mX6lp8RY/5b8VbhOCq7hcbFY kwNDYqDkixGcA948qzcyoTR0ghF5h3hTUrXz55O+ywvBmPqDdbqa6DJO049jC7rS RGW5HHQGMqapWgSAY34IDCd5Qd1xnA+mnq78HanXQjKyWPmB+YHb6Ml4V86bv4Xa b7v9aOD02ACYqUqG3qUIHFvNYMj4ELr+TqNaJgkqo2e0MgXBYh3ro1z4zE8tk5fc c33GZgvnPE517Fp4MU6zkeggMF7y9SLLT1wIb4ELum6BF6gvBnEorBZk/0KhK+JH 4ujNkS4P05l0g4qUIg7Py2TrBu/mPYd4cgWlAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUBJj3a8HXZnXk6DKG1EZeqpsjq6UwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0JKajNhOEhYWm5YazZES0cxRVplcXBz anE2VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSP/0wDQYJ KoZIhvcNAQELBQADggEBAAgaybMnP7LOieVBzA0CD+nVwdX57uRCxI5kOAMcsNJM ArZ5m1hf2jB03Zd/cK4l4faFxN2Y+wlgqrMvcvUPPlcXpRnRo4IHs06J7/kbtzIl jHY4fWSeRMG7mt+B1/5225xoiyQK9+IA8/N2Mzc7wOa+dQMtGLUbIu01No/PnN6x R6viQ1mXBvpc4q+5K5Zh+hkArEojzlNhWp+3giOkwiLcVjZrYU7KUS5t4jlQTlTE CkcNvkNfBRrtq+VEQZ4XystMTJXJx5bRLf7qOikMvo6lsnwCtjBCBmi0+bCx/gA4 IE2g/wLgZFsop4qaC2rYpZ7Wr8WbJCf3GvbAWCyoEfg= -----END CERTIFICATE-----Generated at Mon Apr 7 20:51:53 2025 by rpki-client