$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/FPzqdecgg_g9IlrujfBjR9aHLdM.roa File: FPzqdecgg_g9IlrujfBjR9aHLdM.roa (raw, json) Hash identifier: Low7jwHIpRAuY22B3Mze/LyheWZmSMy2mZJ0OV7D644= Subject key identifier: 14:FC:EA:75:E7:20:83:F8:3D:22:5A:EE:8D:F0:63:47:D6:87:2D:D3 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1240 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/FPzqdecgg_g9IlrujfBjR9aHLdM.roa Signing time: Mon 10 Feb 2025 14:28:13 +0000 ROA not before: Mon 10 Feb 2025 14:28:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 124.218.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4672 (0x1240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:13 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=14FCEA75E72083F83D225AEE8DF06347D6872DD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d7:32:af:09:a0:bb:4a:e1:86:c9:45:db:12: c6:bb:76:c4:e5:3f:a0:3d:89:30:52:9d:1e:52:c0: 50:85:5c:c6:ae:39:52:4a:c0:4c:f1:da:aa:20:12: e5:df:73:38:3a:38:76:39:fc:46:49:60:64:a0:23: 83:bd:49:83:44:5d:26:48:56:52:7d:02:9b:4e:5f: f1:bf:0c:de:c1:22:db:69:1a:d9:15:f3:8d:83:74: 0c:e6:d1:27:fb:9c:17:00:96:70:64:ef:74:7b:c6: d3:3e:ca:7c:3f:99:ac:59:e5:8a:1e:61:55:c0:fd: cb:6b:62:5c:85:53:a0:e6:2c:64:74:6d:9d:63:65: df:47:1c:d1:5d:21:56:c0:d6:f9:39:3e:4b:8a:5a: b9:0c:a1:12:c3:93:6d:a1:20:12:23:09:16:4c:de: 10:36:96:96:77:8a:7b:f0:5d:ed:5d:81:f0:b7:90: e4:38:39:13:01:45:40:1a:b6:80:c7:91:e6:75:d3: ad:fa:68:96:6b:d2:db:91:45:dc:eb:ad:52:2e:d3: 44:b6:c6:99:d9:0c:7f:e5:1d:85:e1:72:79:47:c8: bd:6d:43:db:49:d9:80:49:f4:7d:d9:b6:23:0e:6a: 0b:53:2d:f5:05:88:b8:e5:b8:9d:46:8e:a6:2b:88: 72:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FC:EA:75:E7:20:83:F8:3D:22:5A:EE:8D:F0:63:47:D6:87:2D:D3 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/FPzqdecgg_g9IlrujfBjR9aHLdM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.96.0/22 Signature Algorithm: sha256WithRSAEncryption aa:7c:08:83:a2:67:7b:ad:a2:e0:d3:ef:27:5f:1a:9a:c7:ea: cf:41:25:1d:e4:33:16:45:7f:13:92:e6:de:ae:d8:3a:0f:18: 41:b2:a1:55:ea:14:79:98:66:2a:21:e6:87:79:d1:93:b7:d1: fc:a9:2d:bf:de:8b:b8:c0:a4:ee:d3:9c:3d:57:99:f9:70:d1: 6a:7f:1f:14:e5:43:54:32:a6:41:ae:63:ce:74:2b:d0:0d:b7: 96:a6:d3:03:c5:60:90:64:71:1d:1f:15:22:da:52:6c:6a:03: d1:62:a6:a8:22:04:27:80:f1:00:ae:91:cc:75:60:e6:80:ee: 6e:db:5c:8f:61:98:fe:fc:a5:4b:f0:08:b1:35:bc:58:16:bc: 65:fb:57:24:c6:14:8e:4c:ea:e8:d8:59:9f:e6:30:67:67:90: ed:fb:ef:78:bc:0b:3b:5f:cc:f1:d2:f0:4e:13:d1:4c:9d:95: 25:6f:29:62:51:8d:3a:ed:df:69:21:e0:1c:28:e4:3e:5b:f9: ae:e6:4a:ec:2b:b7:37:f6:32:7a:fd:52:1c:ec:fc:0c:50:d8: ca:b8:e3:c6:5c:ea:34:4f:c8:fa:2b:0e:b0:e6:1c:15:38:5a: a4:7b:9b:ba:7c:fb:21:a6:7e:38:2b:dd:80:b3:3e:23:ca:b9: e9:ed:16:99 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEkAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE0RkNFQTc1RTcyMDgz RjgzRDIyNUFFRThERjA2MzQ3RDY4NzJERDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCe1zKvCaC7SuGGyUXbEsa7dsTlP6A9iTBSnR5SwFCFXMauOVJK wEzx2qogEuXfczg6OHY5/EZJYGSgI4O9SYNEXSZIVlJ9AptOX/G/DN7BIttpGtkV 842DdAzm0Sf7nBcAlnBk73R7xtM+ynw/maxZ5YoeYVXA/ctrYlyFU6DmLGR0bZ1j Zd9HHNFdIVbA1vk5PkuKWrkMoRLDk22hIBIjCRZM3hA2lpZ3invwXe1dgfC3kOQ4 ORMBRUAatoDHkeZ10636aJZr0tuRRdzrrVIu00S2xpnZDH/lHYXhcnlHyL1tQ9tJ 2YBJ9H3ZtiMOagtTLfUFiLjluJ1GjqYriHJBAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUFPzqdecgg/g9IlrujfBjR9aHLdMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0ZQenFkZWNnZ19nOUlscnVqZkJqUjlh SExkTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ82mAwDQYJ KoZIhvcNAQELBQADggEBAKp8CIOiZ3utouDT7ydfGprH6s9BJR3kMxZFfxOS5t6u 2DoPGEGyoVXqFHmYZioh5od50ZO30fypLb/ei7jApO7TnD1Xmflw0Wp/HxTlQ1Qy pkGuY850K9ANt5am0wPFYJBkcR0fFSLaUmxqA9FipqgiBCeA8QCukcx1YOaA7m7b XI9hmP78pUvwCLE1vFgWvGX7VyTGFI5M6ujYWZ/mMGdnkO3773i8CztfzPHS8E4T 0UydlSVvKWJRjTrt32kh4Bwo5D5b+a7mSuwrtzf2Mnr9Uhzs/AxQ2Mq448Zc6jRP yPorDrDmHBU4WqR7m7p8+yGmfjgr3YCzPiPKuentFpk= -----END CERTIFICATE-----Generated at Mon Apr 7 20:51:47 2025 by rpki-client