$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/GqEVy4Ppqikr_CHUUojZ8VuioVY.roa File: GqEVy4Ppqikr_CHUUojZ8VuioVY.roa (raw, json) Hash identifier: QyomSSC9AIzno252qtwOTi6JWosoFLB2K/6FFgpYSx4= Subject key identifier: 1A:A1:15:CB:83:E9:AA:29:2B:FC:21:D4:52:88:D9:F1:5B:A2:A1:56 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 11D7 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/GqEVy4Ppqikr_CHUUojZ8VuioVY.roa Signing time: Mon 10 Feb 2025 14:27:47 +0000 ROA not before: Mon 10 Feb 2025 14:27:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 222.251.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4567 (0x11d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:47 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1AA115CB83E9AA292BFC21D45288D9F15BA2A156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:e7:db:ef:4e:42:8d:21:4e:a1:bc:0d:b7: 45:9e:4e:db:79:d4:f8:f4:e7:b8:fb:fb:1c:22:0c: 16:58:7f:5f:d6:19:fa:9b:70:60:38:40:1e:83:2b: 79:76:20:1a:73:28:75:68:00:96:de:d3:cf:f9:43: 17:be:b4:a6:71:71:27:e3:02:67:69:36:99:3e:3d: 33:68:7d:70:0a:e3:6a:b2:43:f5:5e:c5:63:90:c3: 19:d7:25:c5:6e:e1:bd:7b:8a:46:52:4d:89:80:34: 6c:31:44:cb:72:22:d3:6e:b5:fb:2f:70:6d:68:bc: 0c:e4:3a:7c:e9:54:1c:fc:2f:15:de:c5:20:04:eb: f8:c7:b8:8c:87:5d:7e:0f:a3:db:45:c9:30:0d:5e: 42:c6:64:ed:1b:1a:08:6b:b9:ef:8e:1c:8b:b0:da: 08:52:f3:8b:45:02:bf:11:e0:ee:d9:8d:22:db:16: 57:d9:8f:f8:6f:af:fb:9b:50:92:2a:5c:06:f4:ef: f9:89:6e:60:b4:b9:7b:92:ab:b1:d6:fe:aa:3e:53: 3d:71:8c:3d:a1:56:91:24:e3:14:ae:4c:f4:fd:50: 7f:57:26:d2:a3:dd:d2:87:c4:e2:81:df:37:f1:1f: 21:d3:df:5c:35:eb:97:f0:4c:48:50:eb:74:92:a1: 49:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A1:15:CB:83:E9:AA:29:2B:FC:21:D4:52:88:D9:F1:5B:A2:A1:56 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/GqEVy4Ppqikr_CHUUojZ8VuioVY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.251.0.0/17 Signature Algorithm: sha256WithRSAEncryption 9b:cb:35:67:1b:91:27:86:bb:4b:0f:55:9d:5d:bc:cd:69:4f: bd:0f:e9:dc:76:86:00:3f:dc:b5:da:b6:be:96:3e:8f:83:58: d8:29:fb:6c:b4:60:3b:30:a2:f1:d0:a5:e3:2b:2b:09:94:d7: 44:1e:3b:07:af:91:99:05:56:c7:55:95:a9:b3:10:f9:c8:e4: 34:ec:72:e5:69:4e:fd:48:df:7a:b6:02:ab:88:f3:fa:4f:00: d7:cb:3b:35:2d:fa:e1:14:b6:11:e7:2a:ae:62:1f:47:74:0c: df:ec:46:bb:9d:e8:26:30:a3:d0:37:dd:f8:f7:4f:0b:9a:16: 80:ed:f5:69:fc:d3:5c:82:b5:47:50:bc:48:c3:df:0c:65:3d: c0:0b:1c:00:49:fd:dd:b5:d2:5d:f1:79:cf:98:a7:ba:62:4e: e9:f5:4b:19:47:ed:01:44:b1:53:a9:08:d2:76:f6:74:8d:f6: 6a:34:c7:85:ca:f9:63:41:5d:25:30:a9:16:a4:53:cb:40:70: 56:9a:a4:a0:e5:57:9d:17:a8:d6:2e:53:be:d5:d0:ba:f8:c6: 11:7c:df:9c:63:e2:1b:c5:64:66:47:2a:5e:ef:9f:d4:e5:f3: ce:5b:8e:ab:52:15:48:a7:cc:d3:3d:7d:7a:d2:a1:dc:b6:6f: 4a:9f:9f:45 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEdcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3NDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFBQTExNUNCODNFOUFB MjkyQkZDMjFENDUyODhEOUYxNUJBMkExNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCywOfb705CjSFOobwNt0WeTtt51Pj057j7+xwiDBZYf1/WGfqb cGA4QB6DK3l2IBpzKHVoAJbe08/5Qxe+tKZxcSfjAmdpNpk+PTNofXAK42qyQ/Ve xWOQwxnXJcVu4b17ikZSTYmANGwxRMtyItNutfsvcG1ovAzkOnzpVBz8LxXexSAE 6/jHuIyHXX4Po9tFyTANXkLGZO0bGghrue+OHIuw2ghS84tFAr8R4O7ZjSLbFlfZ j/hvr/ubUJIqXAb07/mJbmC0uXuSq7HW/qo+Uz1xjD2hVpEk4xSuTPT9UH9XJtKj 3dKHxOKB3zfxHyHT31w165fwTEhQ63SSoUmdAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUGqEVy4Ppqikr/CHUUojZ8VuioVYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0dxRVZ5NFBwcWlrcl9DSFVVb2paOFZ1 aW9WWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfe+wAwDQYJ KoZIhvcNAQELBQADggEBAJvLNWcbkSeGu0sPVZ1dvM1pT70P6dx2hgA/3LXatr6W Po+DWNgp+2y0YDswovHQpeMrKwmU10QeOwevkZkFVsdVlamzEPnI5DTscuVpTv1I 33q2AquI8/pPANfLOzUt+uEUthHnKq5iH0d0DN/sRrud6CYwo9A33fj3TwuaFoDt 9Wn801yCtUdQvEjD3wxlPcALHABJ/d210l3xec+Yp7piTun1SxlH7QFEsVOpCNJ2 9nSN9mo0x4XK+WNBXSUwqRakU8tAcFaapKDlV50XqNYuU77V0Lr4xhF835xj4hvF ZGZHKl7vn9Tl885bjqtSFUinzNM9fXrSody2b0qfn0U= -----END CERTIFICATE-----Generated at Mon Apr 7 17:48:52 2025 by rpki-client