$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/FWSoegp3_eeCQ1RtIV_S6PAXqHA.roa File: FWSoegp3_eeCQ1RtIV_S6PAXqHA.roa (raw, json) Hash identifier: AhKBMkxy8VnnHHwvtIYnPQmi/YOQzJ9/5NTO3fuAddU= Subject key identifier: 15:64:A8:7A:0A:77:FD:E7:82:43:54:6D:21:5F:D2:E8:F0:17:A8:70 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1220 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/FWSoegp3_eeCQ1RtIV_S6PAXqHA.roa Signing time: Mon 10 Feb 2025 14:28:05 +0000 ROA not before: Mon 10 Feb 2025 14:28:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9311 IP address blocks: 210.200.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4640 (0x1220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:05 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1564A87A0A77FDE78243546D215FD2E8F017A870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ee:d5:98:04:a6:28:80:2a:a0:f4:66:c0:9f: 8c:33:4d:36:4a:e6:0b:21:50:13:89:ec:26:f0:6f: 4c:f5:5a:3b:ea:f9:30:a3:69:00:2d:3d:ca:79:60: a2:2c:85:92:ad:66:bd:7b:d2:d4:2d:6f:fa:ab:be: fa:12:39:8b:69:c7:c5:01:1f:a4:17:22:86:1c:01: ee:a2:b4:8b:51:e5:2a:15:c5:b4:21:4b:c4:c7:c0: 31:bf:5a:f5:48:c9:c2:b2:e1:49:e2:49:42:c2:81: 3e:0b:0a:73:18:2b:b7:a0:2f:03:3f:7e:d8:8b:83: d6:c0:56:71:d3:f4:9d:4b:2d:67:95:a6:99:6d:6b: 63:08:9b:b3:ea:c3:01:c5:b3:b3:9d:98:5a:62:16: 8f:e2:7f:7a:f7:fd:76:a3:12:a6:70:40:77:00:e7: ae:81:48:91:53:3a:bf:c4:13:e3:73:83:dc:00:88: bf:8a:2b:99:eb:4b:f6:7e:8e:77:dc:24:d5:d4:98: d7:7d:10:24:10:88:0a:ec:e9:cb:b3:52:9b:39:c8: 6f:45:53:2f:1f:7e:3d:ea:93:fa:dd:3f:c8:43:25: 8c:72:a2:39:e2:3c:fd:75:0b:85:54:0c:06:27:ea: ec:4e:de:48:82:28:28:50:99:48:28:23:60:4d:b8: 75:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:64:A8:7A:0A:77:FD:E7:82:43:54:6D:21:5F:D2:E8:F0:17:A8:70 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/FWSoegp3_eeCQ1RtIV_S6PAXqHA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.79.0/24 Signature Algorithm: sha256WithRSAEncryption cb:5b:6b:66:d6:5a:d3:03:2c:d1:96:aa:1c:bf:5e:a4:23:e7: 78:8e:53:c2:27:5e:ed:57:84:df:3c:4e:19:b9:8a:06:18:a8: b9:5d:87:4c:61:26:d0:dc:47:a5:53:77:68:68:1d:0c:3e:f1: 3f:87:2d:18:6e:98:5d:8a:a5:19:0e:1b:83:73:e0:d8:45:df: a8:c0:f3:66:5b:99:4f:2d:cb:07:0d:2e:ee:8e:0e:d6:5e:77: f8:e7:49:55:86:2c:ae:77:99:ad:48:fc:c5:4b:bd:a0:85:08: 2b:38:18:08:02:ec:20:fc:10:0c:d5:2e:fe:42:29:18:10:6e: 63:6f:c4:2d:23:87:9a:5d:99:05:63:d1:f9:c2:5c:12:de:ea: 0d:89:ce:25:3d:c0:fd:0b:b8:26:c4:eb:0f:ce:cf:31:44:69: 06:c6:dc:ad:54:df:2e:d3:a5:6a:28:50:cd:44:c0:c8:c9:db: 59:38:b9:86:2d:c7:3b:03:dc:62:89:01:e0:e8:ab:43:6f:c5: 85:b7:4f:5e:50:16:b4:39:33:30:d3:37:cf:a6:b8:25:e0:55: c4:6e:e4:4d:97:d4:ba:6a:05:f6:fd:c1:ce:25:ff:4d:0d:73: c7:65:e6:b2:e1:18:d6:a1:7d:e3:4f:58:07:24:a7:75:26:3e: e2:a5:bc:0a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEiAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE1NjRBODdBMEE3N0ZE RTc4MjQzNTQ2RDIxNUZEMkU4RjAxN0E4NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCw7tWYBKYogCqg9GbAn4wzTTZK5gshUBOJ7Cbwb0z1Wjvq+TCj aQAtPcp5YKIshZKtZr170tQtb/qrvvoSOYtpx8UBH6QXIoYcAe6itItR5SoVxbQh S8THwDG/WvVIycKy4UniSULCgT4LCnMYK7egLwM/ftiLg9bAVnHT9J1LLWeVpplt a2MIm7PqwwHFs7OdmFpiFo/if3r3/XajEqZwQHcA566BSJFTOr/EE+Nzg9wAiL+K K5nrS/Z+jnfcJNXUmNd9ECQQiArs6cuzUps5yG9FUy8ffj3qk/rdP8hDJYxyojni PP11C4VUDAYn6uxO3kiCKChQmUgoI2BNuHV3AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUFWSoegp3/eeCQ1RtIV/S6PAXqHAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0ZXU29lZ3AzX2VlQ1ExUnRJVl9TNlBB WHFIQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSyE8wDQYJ KoZIhvcNAQELBQADggEBAMtba2bWWtMDLNGWqhy/XqQj53iOU8InXu1XhN88Thm5 igYYqLldh0xhJtDcR6VTd2hoHQw+8T+HLRhumF2KpRkOG4Nz4NhF36jA82ZbmU8t ywcNLu6ODtZed/jnSVWGLK53ma1I/MVLvaCFCCs4GAgC7CD8EAzVLv5CKRgQbmNv xC0jh5pdmQVj0fnCXBLe6g2JziU9wP0LuCbE6w/OzzFEaQbG3K1U3y7TpWooUM1E wMjJ21k4uYYtxzsD3GKJAeDoq0NvxYW3T15QFrQ5MzDTN8+muCXgVcRu5E2X1Lpq Bfb9wc4l/00Nc8dl5rLhGNahfeNPWAckp3UmPuKlvAo= -----END CERTIFICATE-----Generated at Mon Apr 7 20:54:14 2025 by rpki-client