$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/KGDXwLDzwDlMn0iinh4lrO45csc.roa File: KGDXwLDzwDlMn0iinh4lrO45csc.roa (raw, json) Hash identifier: iV0lJlca+/6vjX1FeukvsMDGVGmmA76i2z8ClviiLlk= Subject key identifier: 28:60:D7:C0:B0:F3:C0:39:4C:9F:48:A2:9E:1E:25:AC:EE:39:72:C7 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 122B Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/KGDXwLDzwDlMn0iinh4lrO45csc.roa Signing time: Mon 10 Feb 2025 14:28:08 +0000 ROA not before: Mon 10 Feb 2025 14:28:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131584 IP address blocks: 210.203.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4651 (0x122b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:08 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2860D7C0B0F3C0394C9F48A29E1E25ACEE3972C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6e:9d:0e:0f:bc:8d:8e:af:00:fb:59:47:d4: a2:22:19:cd:c2:be:92:89:7e:9e:8b:13:be:38:61: 86:a2:fc:f5:e9:ba:9a:45:6d:e4:12:5e:e3:35:1e: 35:4a:39:e5:77:d7:4d:5e:f9:2c:64:2b:12:57:f0: bc:97:c1:53:6d:6b:7f:de:65:e7:29:e0:9c:7c:37: b0:e0:2f:ee:ae:f2:a3:52:c5:01:39:36:93:8e:ba: c3:9d:ab:4d:36:63:51:ea:65:84:c2:bf:d8:0d:76: 94:e4:1a:9f:9c:ca:83:2d:c0:11:5f:ca:97:95:76: f2:eb:a2:d2:5f:fe:e3:ca:89:a9:09:b0:09:45:7d: 18:8f:a9:af:6e:a6:7e:5a:b3:34:fe:91:a1:c0:4e: 94:f5:a9:6f:b1:ec:b8:be:57:cc:80:38:08:0c:ad: 31:25:7f:6b:7c:44:9a:ef:8b:62:17:67:3e:bc:c7: 1e:d5:62:9e:64:58:42:f7:ac:b9:c5:c3:73:89:6a: fe:4a:c9:29:4f:6b:dc:82:b1:4f:ab:6a:ae:3b:46: 16:3e:f9:19:14:31:2a:9c:fc:a5:3c:ce:8f:68:df: e3:d1:2b:49:f6:fa:53:eb:78:19:a2:79:90:ba:bc: f8:76:d0:d8:f1:40:2b:61:04:03:82:6e:b1:1b:2f: 37:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:60:D7:C0:B0:F3:C0:39:4C:9F:48:A2:9E:1E:25:AC:EE:39:72:C7 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/KGDXwLDzwDlMn0iinh4lrO45csc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.203.48.0/20 Signature Algorithm: sha256WithRSAEncryption 41:8d:ec:39:8e:ee:93:18:8c:85:fe:02:28:61:42:fc:ca:25: 5c:24:3f:9e:10:04:aa:18:fb:ea:bd:95:87:58:05:89:6a:66: f9:18:d8:eb:2a:2d:b9:9a:10:44:e1:cb:0a:81:ef:e0:22:5a: a4:66:eb:af:9a:62:3b:e0:90:c9:5b:46:09:c0:22:50:dc:5c: 4f:ff:9c:03:d9:ff:7d:e4:86:b9:5b:8a:2d:09:00:a9:7a:33: b9:d3:7b:ca:08:78:d5:ba:8f:fe:f8:ef:59:ae:9c:43:51:2c: 49:8a:7e:26:61:f9:e0:76:19:82:cd:eb:92:32:06:97:5c:e3: 1b:69:9c:45:6a:93:f7:4e:03:e0:75:31:b9:97:ac:9a:ff:c1: 1d:dd:ad:b5:8b:d0:3c:62:99:dc:db:22:9b:23:01:17:61:b4: 22:a4:00:dc:46:fb:9b:fa:99:93:cc:8b:86:6c:84:48:1e:4b: ea:61:96:64:da:15:a2:cc:b7:8d:18:af:f0:4d:7a:f0:0a:68: e3:0c:4a:05:ed:6e:ef:93:85:c4:4e:78:78:7a:6b:e7:dc:d1: f0:8e:d8:da:79:d3:fb:ed:35:58:6f:36:a8:17:f5:7d:1b:69: c3:09:14:17:f7:d5:26:06:92:07:1a:c5:bc:30:f7:ea:74:7b: 4d:ad:22:68 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEiswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI4NjBEN0MwQjBGM0Mw Mzk0QzlGNDhBMjlFMUUyNUFDRUUzOTcyQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0bp0OD7yNjq8A+1lH1KIiGc3CvpKJfp6LE744YYai/PXpuppF beQSXuM1HjVKOeV3101e+SxkKxJX8LyXwVNta3/eZecp4Jx8N7DgL+6u8qNSxQE5 NpOOusOdq002Y1HqZYTCv9gNdpTkGp+cyoMtwBFfypeVdvLrotJf/uPKiakJsAlF fRiPqa9upn5aszT+kaHATpT1qW+x7Li+V8yAOAgMrTElf2t8RJrvi2IXZz68xx7V Yp5kWEL3rLnFw3OJav5KySlPa9yCsU+raq47RhY++RkUMSqc/KU8zo9o3+PRK0n2 +lPreBmieZC6vPh20NjxQCthBAOCbrEbLzcbAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUKGDXwLDzwDlMn0iinh4lrO45cscwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0tHRFh3TER6d0RsTW4waWluaDRsck80 NWNzYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATSyzAwDQYJ KoZIhvcNAQELBQADggEBAEGN7DmO7pMYjIX+AihhQvzKJVwkP54QBKoY++q9lYdY BYlqZvkY2OsqLbmaEEThywqB7+AiWqRm66+aYjvgkMlbRgnAIlDcXE//nAPZ/33k hrlbii0JAKl6M7nTe8oIeNW6j/7471munENRLEmKfiZh+eB2GYLN65IyBpdc4xtp nEVqk/dOA+B1MbmXrJr/wR3drbWL0DximdzbIpsjARdhtCKkANxG+5v6mZPMi4Zs hEgeS+phlmTaFaLMt40Yr/BNevAKaOMMSgXtbu+ThcROeHh6a+fc0fCO2Np50/vt NVhvNqgX9X0bacMJFBf31SYGkgcaxbww9+p0e02tImg= -----END CERTIFICATE-----Generated at Mon Apr 7 17:43:12 2025 by rpki-client