$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/BLKHpPH5Rx7XtQjAxBMT8S_kVz0.roa File: BLKHpPH5Rx7XtQjAxBMT8S_kVz0.roa (raw, json) Hash identifier: M5pBJfOr29rV2JKTCR/1L8D4q8Hn4kBw/7osyaF83Pw= Subject key identifier: 04:B2:87:A4:F1:F9:47:1E:D7:B5:08:C0:C4:13:13:F1:2F:E4:57:3D Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1175 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/BLKHpPH5Rx7XtQjAxBMT8S_kVz0.roa Signing time: Mon 10 Feb 2025 14:27:22 +0000 ROA not before: Mon 10 Feb 2025 14:27:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 222.157.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4469 (0x1175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:22 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=04B287A4F1F9471ED7B508C0C41313F12FE4573D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:eb:04:2d:2b:64:95:ce:b7:bd:99:10:9b:d3: ce:cc:da:b9:bc:12:9e:db:21:57:3e:f9:3b:b0:01: c7:94:12:9d:19:f2:0c:4b:ec:32:09:6c:a6:09:62: a2:95:8f:66:54:f7:78:8e:db:30:54:38:0c:aa:f1: 5b:e8:f5:f7:c5:6c:fd:10:88:e7:79:a6:8c:71:83: a9:6b:a4:60:ee:da:da:dd:38:d5:d3:c8:4d:61:14: 18:c8:9f:6a:35:7b:72:fe:0f:73:ab:e5:77:d4:f4: 41:7d:5a:f3:15:bc:44:48:b1:19:d9:ca:90:a3:a7: f1:bf:74:41:ce:cc:8d:be:97:95:a1:a9:86:d2:23: f4:ec:f8:34:41:71:ad:de:59:8a:27:67:6b:af:23: 56:dc:7d:9e:7d:77:d5:9d:5b:7a:42:34:e5:37:19: 53:c4:66:79:34:4a:7e:38:8e:45:a6:47:28:15:6f: 50:8e:85:24:d6:57:ca:e4:be:7e:c3:e9:b0:f4:a0: 64:fb:35:7a:ee:aa:9d:c3:19:2a:8e:42:1e:d7:58: e8:47:52:d5:1f:5d:c4:5f:c6:04:00:0a:97:63:f8: e0:3d:56:d7:e5:83:78:47:a7:49:2e:fb:54:5c:ec: 28:21:e5:26:b5:55:72:f1:e8:85:bc:ca:fa:4a:b7: ca:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B2:87:A4:F1:F9:47:1E:D7:B5:08:C0:C4:13:13:F1:2F:E4:57:3D X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/BLKHpPH5Rx7XtQjAxBMT8S_kVz0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.157.0.0/16 Signature Algorithm: sha256WithRSAEncryption c5:73:59:57:4b:51:64:d2:10:6c:f5:84:f8:1a:a5:f0:14:ee: d7:1b:24:08:01:c4:51:a1:75:72:bc:d5:85:10:ac:ed:d8:f5: 03:dc:11:ed:fc:ae:49:1e:f9:e0:83:ff:58:f3:61:3b:25:0e: c2:41:e8:4d:b7:ae:24:a7:96:2f:1b:fb:b7:3c:16:a1:c2:a0: b4:c9:ea:0c:fb:17:dd:ea:23:a8:ee:23:8b:8c:ca:39:09:65: 29:aa:47:c8:d5:3f:2e:ca:c2:d2:5f:1b:a8:9e:84:c6:f8:2b: 0c:97:ad:4a:83:f8:f9:6e:70:22:f6:91:2b:92:6e:b9:6a:c3: 96:4a:15:73:c2:91:39:5b:91:f3:fc:b1:a5:b8:5c:16:1b:39: ca:23:64:bb:7d:81:b1:00:ea:0f:c3:74:0c:1c:79:df:d3:cf: 98:ea:9c:a9:31:0c:1e:08:85:87:e5:be:45:3e:9d:dd:5d:2a: 73:fe:7a:7b:54:62:5c:97:08:ee:c6:8b:e4:33:5c:06:2c:1e: 77:5e:33:c2:d6:a9:ff:34:1a:bf:bb:26:72:f8:6c:62:11:ed: 8b:28:b9:56:eb:3e:28:c5:b9:5a:ba:ae:2d:5e:ab:fe:aa:de: 8f:f1:b3:0c:70:56:33:0a:e9:11:f6:bd:70:50:09:91:f9:e7: 0c:fa:18:47 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEXUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA0QjI4N0E0RjFGOTQ3 MUVEN0I1MDhDMEM0MTMxM0YxMkZFNDU3M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDi6wQtK2SVzre9mRCb087M2rm8Ep7bIVc++TuwAceUEp0Z8gxL 7DIJbKYJYqKVj2ZU93iO2zBUOAyq8Vvo9ffFbP0QiOd5poxxg6lrpGDu2trdONXT yE1hFBjIn2o1e3L+D3Or5XfU9EF9WvMVvERIsRnZypCjp/G/dEHOzI2+l5WhqYbS I/Ts+DRBca3eWYonZ2uvI1bcfZ59d9WdW3pCNOU3GVPEZnk0Sn44jkWmRygVb1CO hSTWV8rkvn7D6bD0oGT7NXruqp3DGSqOQh7XWOhHUtUfXcRfxgQACpdj+OA9Vtfl g3hHp0ku+1Rc7Cgh5Sa1VXLx6IW8yvpKt8ovAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUBLKHpPH5Rx7XtQjAxBMT8S/kVz0wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0JMS0hwUEg1Ung3WHRRakF4Qk1UOFNf a1Z6MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDenTANBgkq hkiG9w0BAQsFAAOCAQEAxXNZV0tRZNIQbPWE+Bql8BTu1xskCAHEUaF1crzVhRCs 7dj1A9wR7fyuSR754IP/WPNhOyUOwkHoTbeuJKeWLxv7tzwWocKgtMnqDPsX3eoj qO4ji4zKOQllKapHyNU/LsrC0l8bqJ6ExvgrDJetSoP4+W5wIvaRK5JuuWrDlkoV c8KROVuR8/yxpbhcFhs5yiNku32BsQDqD8N0DBx539PPmOqcqTEMHgiFh+W+RT6d 3V0qc/56e1RiXJcI7saL5DNcBiwed14zwtap/zQav7smcvhsYhHtiyi5Vus+KMW5 WrquLV6r/qrej/GzDHBWMwrpEfa9cFAJkfnnDPoYRw== -----END CERTIFICATE-----Generated at Mon Apr 7 20:43:50 2025 by rpki-client