$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/EwR3B4lxuu1cauOZTLDJGBur2KQ.roa File: EwR3B4lxuu1cauOZTLDJGBur2KQ.roa (raw, json) Hash identifier: O39hbNRuDInZvyaaba32jGEZNAJm64jkNgMQtP+rO/k= Subject key identifier: 13:04:77:07:89:71:BA:ED:5C:6A:E3:99:4C:B0:C9:18:1B:AB:D8:A4 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 125C Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/EwR3B4lxuu1cauOZTLDJGBur2KQ.roa Signing time: Mon 10 Feb 2025 14:28:19 +0000 ROA not before: Mon 10 Feb 2025 14:28:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 124.219.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4700 (0x125c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=130477078971BAED5C6AE3994CB0C9181BABD8A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ee:02:dd:ac:6d:08:0a:60:ec:2b:d0:a3:0d: 05:8c:0f:92:7c:f1:c9:af:ae:79:c7:88:f5:bc:b5: c5:f4:a3:07:aa:e4:1d:dc:c7:73:20:6b:af:49:b4: a4:1f:ec:50:1c:f4:3d:59:9b:92:79:c5:a0:37:43: 42:ab:f1:ee:61:6f:af:a7:0f:8c:51:c0:03:4a:43: af:7b:c8:36:5c:26:d6:5a:0a:60:6e:59:ce:8c:4c: 08:81:2b:07:07:15:c2:2e:83:9e:dd:6f:ac:e2:ca: a5:1a:55:0a:89:cb:aa:51:83:53:cb:d3:34:78:20: 12:2e:7a:35:72:ce:29:df:0d:27:58:7f:8d:61:88: 8c:d2:8f:4a:0f:8d:2d:57:0c:3f:e0:61:1b:df:f5: 56:63:1e:e7:eb:83:c9:1e:44:3f:93:7a:2f:ec:55: 0e:b1:84:5b:10:a2:78:24:77:20:7d:84:96:96:5f: 52:03:e9:a1:a8:1f:1e:0b:92:b5:d0:85:76:43:02: c7:ed:35:17:b3:25:3d:d0:6c:db:e5:c1:b4:4d:47: de:c7:bc:0a:41:ec:aa:e3:53:bb:a9:5c:af:3f:09: 19:74:87:a7:2d:81:63:f8:2a:20:31:81:64:72:fc: 32:e9:92:7c:91:e8:52:c5:c7:97:6c:1f:aa:3f:48: df:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:04:77:07:89:71:BA:ED:5C:6A:E3:99:4C:B0:C9:18:1B:AB:D8:A4 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/EwR3B4lxuu1cauOZTLDJGBur2KQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.219.0.0/17 Signature Algorithm: sha256WithRSAEncryption 34:47:17:91:56:af:bd:1b:36:75:84:cb:fc:01:43:76:a6:45: 15:8e:2e:5e:37:38:37:76:bb:95:d4:95:6b:23:97:73:a2:74: 16:de:f5:48:8f:cd:28:79:49:c2:bd:ac:3b:50:d6:6b:4e:ef: 81:71:5b:9d:0c:3b:f4:2d:f1:9d:59:c2:ea:ea:2f:41:cf:30: d4:c5:99:b7:4d:8c:fd:52:1a:16:d8:4e:12:85:e1:e0:e8:66: f6:8b:33:92:a0:43:75:91:70:a9:c1:fd:b7:c8:60:e9:8d:1d: 99:3d:e5:cc:89:9a:36:38:6e:77:a2:59:f7:ba:80:a5:67:98: db:ae:20:8b:75:4a:f6:8f:67:2b:b8:18:2b:c3:6a:09:86:ef: 24:84:51:42:6c:e4:a8:eb:9d:dc:64:c3:af:b8:bb:f9:fb:ec: ec:84:dc:bf:67:5e:b1:48:93:a6:93:1d:35:0b:4c:30:e0:2c: e1:e3:60:4c:fa:05:88:78:6c:00:84:1c:79:85:12:f4:da:6a: c2:41:d7:eb:95:5f:a1:39:eb:ad:5a:ca:dd:46:1e:32:9e:a2: 8c:f4:35:be:ef:42:7f:57:df:5e:7f:2b:c7:90:5b:78:3d:aa: 68:12:ff:d2:90:f7:6c:a5:ad:92:fb:86:2c:95:f7:79:52:95: 30:7f:2b:c9 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICElwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEzMDQ3NzA3ODk3MUJB RUQ1QzZBRTM5OTRDQjBDOTE4MUJBQkQ4QTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDU7gLdrG0ICmDsK9CjDQWMD5J88cmvrnnHiPW8tcX0oweq5B3c x3Mga69JtKQf7FAc9D1Zm5J5xaA3Q0Kr8e5hb6+nD4xRwANKQ697yDZcJtZaCmBu Wc6MTAiBKwcHFcIug57db6ziyqUaVQqJy6pRg1PL0zR4IBIuejVyzinfDSdYf41h iIzSj0oPjS1XDD/gYRvf9VZjHufrg8keRD+Tei/sVQ6xhFsQongkdyB9hJaWX1ID 6aGoHx4LkrXQhXZDAsftNRezJT3QbNvlwbRNR97HvApB7KrjU7upXK8/CRl0h6ct gWP4KiAxgWRy/DLpknyR6FLFx5dsH6o/SN/FAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUEwR3B4lxuu1cauOZTLDJGBur2KQwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0V3UjNCNGx4dXUxY2F1T1pUTERKR0J1 cjJLUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd82wAwDQYJ KoZIhvcNAQELBQADggEBADRHF5FWr70bNnWEy/wBQ3amRRWOLl43ODd2u5XUlWsj l3OidBbe9UiPzSh5ScK9rDtQ1mtO74FxW50MO/Qt8Z1ZwurqL0HPMNTFmbdNjP1S GhbYThKF4eDoZvaLM5KgQ3WRcKnB/bfIYOmNHZk95cyJmjY4bneiWfe6gKVnmNuu IIt1SvaPZyu4GCvDagmG7ySEUUJs5Kjrndxkw6+4u/n77OyE3L9nXrFIk6aTHTUL TDDgLOHjYEz6BYh4bACEHHmFEvTaasJB1+uVX6E5661ayt1GHjKeooz0Nb7vQn9X 315/K8eQW3g9qmgS/9KQ92ylrZL7hiyV93lSlTB/K8k= -----END CERTIFICATE-----Generated at Mon Apr 7 17:43:29 2025 by rpki-client