$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/L1x6PVDCaxm2fmpHBOl_alxPmSA.roa File: L1x6PVDCaxm2fmpHBOl_alxPmSA.roa (raw, json) Hash identifier: cU37L1f/cc5nLe6CYgcGd+nGBadZlkx19qDDtt1HbA0= Subject key identifier: 2F:5C:7A:3D:50:C2:6B:19:B6:7E:6A:47:04:E9:7F:6A:5C:4F:99:20 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1233 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/L1x6PVDCaxm2fmpHBOl_alxPmSA.roa Signing time: Mon 10 Feb 2025 14:28:09 +0000 ROA not before: Mon 10 Feb 2025 14:28:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 60.244.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4659 (0x1233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:09 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2F5C7A3D50C26B19B67E6A4704E97F6A5C4F9920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:73:f9:f5:a8:3c:f2:60:1e:bf:88:6a:ec:b3: 33:82:be:03:76:23:a4:95:e4:83:b9:b7:8c:02:2f: cf:86:c7:31:0d:c8:c4:b5:49:a1:c7:6b:87:de:e0: d1:14:ac:27:1b:6b:01:fb:c9:01:cd:0e:a3:4f:87: 71:1c:97:e8:96:0c:12:84:2b:dc:94:4f:d3:a3:77: 07:36:00:45:a1:36:59:66:09:09:c2:07:29:b4:da: 27:b1:65:ac:73:ac:9d:42:c8:c8:ac:d0:83:70:42: cb:16:41:9b:b8:d1:c3:80:f9:e5:b8:16:c1:36:52: c6:ea:7b:99:14:9d:b2:1b:95:71:ad:f0:88:7f:f9: 72:15:45:f5:bc:fd:20:b9:f6:6b:b4:c9:67:32:29: c4:89:0b:1b:db:5b:1a:a5:0c:eb:de:f3:8a:bb:80: f5:6d:2c:b8:0e:e1:d1:3d:c2:04:95:3d:9e:52:09: d5:94:ec:79:ec:51:73:42:83:5c:3a:45:70:c2:6c: ad:ca:d4:f2:a1:7a:a3:65:7b:96:5f:79:31:36:aa: 54:ce:99:47:fb:5d:e0:04:f4:f5:b5:b4:e4:ea:09: bd:3b:77:8e:da:06:3c:f2:fe:e1:c2:eb:08:72:5d: 56:5c:4b:d5:02:71:ca:2d:98:39:b7:bd:cc:32:49: e3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5C:7A:3D:50:C2:6B:19:B6:7E:6A:47:04:E9:7F:6A:5C:4F:99:20 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/L1x6PVDCaxm2fmpHBOl_alxPmSA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.244.192.0/18 Signature Algorithm: sha256WithRSAEncryption 6b:0d:0d:37:64:1b:d0:95:4a:ec:2b:e4:24:e1:99:7f:fb:af: 3c:30:8b:23:fe:d9:92:e3:b0:15:cd:6f:df:7e:88:1a:b4:66: b6:9d:b4:99:b2:6f:6d:22:90:9d:11:40:8e:c1:28:79:2e:0e: a3:6d:bb:58:96:56:45:b5:e5:ea:78:a7:b2:6c:c6:00:b9:95: 27:b7:59:e1:5b:6f:3b:d8:01:79:c6:da:4d:f0:c8:dd:5f:3d: cf:e0:5f:85:8b:5e:42:b0:aa:ba:ab:38:04:04:d2:21:aa:fc: ac:76:23:c4:3f:d4:ef:3c:de:7d:c7:6d:32:fb:18:4d:97:aa: 9c:96:59:bd:b2:70:c8:2a:c2:6c:e0:fd:13:86:1e:01:13:a3: 1c:8b:94:af:13:fd:54:76:e8:10:9c:5b:65:14:fa:19:de:b0: 82:61:45:9b:e3:64:32:f5:4e:c4:37:44:4e:78:0b:e3:6f:f5: b8:bd:6a:56:31:2c:33:8d:26:f4:2a:de:7a:ab:ad:f4:49:af: 6f:b5:5f:05:85:11:6e:b5:b5:a8:18:c9:ec:87:51:22:da:8a: 3f:52:48:13:70:4c:4d:54:85:a3:bb:46:3e:47:f9:95:54:94: 0d:84:74:66:3f:a0:d4:40:f7:8a:93:53:9d:55:12:17:25:79: a8:14:e3:2e -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEjMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJGNUM3QTNENTBDMjZC MTlCNjdFNkE0NzA0RTk3RjZBNUM0Rjk5MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFc/n1qDzyYB6/iGrsszOCvgN2I6SV5IO5t4wCL8+GxzENyMS1 SaHHa4fe4NEUrCcbawH7yQHNDqNPh3Ecl+iWDBKEK9yUT9Ojdwc2AEWhNllmCQnC Bym02iexZaxzrJ1CyMis0INwQssWQZu40cOA+eW4FsE2Usbqe5kUnbIblXGt8Ih/ +XIVRfW8/SC59mu0yWcyKcSJCxvbWxqlDOve84q7gPVtLLgO4dE9wgSVPZ5SCdWU 7HnsUXNCg1w6RXDCbK3K1PKheqNle5ZfeTE2qlTOmUf7XeAE9PW1tOTqCb07d47a Bjzy/uHC6whyXVZcS9UCccotmDm3vcwySeNVAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUL1x6PVDCaxm2fmpHBOl/alxPmSAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0wxeDZQVkRDYXhtMmZtcEhCT2xfYWx4 UG1TQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAY89MAwDQYJ KoZIhvcNAQELBQADggEBAGsNDTdkG9CVSuwr5CThmX/7rzwwiyP+2ZLjsBXNb99+ iBq0ZradtJmyb20ikJ0RQI7BKHkuDqNtu1iWVkW15ep4p7JsxgC5lSe3WeFbbzvY AXnG2k3wyN1fPc/gX4WLXkKwqrqrOAQE0iGq/Kx2I8Q/1O883n3HbTL7GE2XqpyW Wb2ycMgqwmzg/ROGHgEToxyLlK8T/VR26BCcW2UU+hnesIJhRZvjZDL1TsQ3RE54 C+Nv9bi9alYxLDONJvQq3nqrrfRJr2+1XwWFEW61tagYyeyHUSLaij9SSBNwTE1U haO7Rj5H+ZVUlA2EdGY/oNRA94qTU51VEhcleagU4y4= -----END CERTIFICATE-----Generated at Mon Apr 7 20:29:20 2025 by rpki-client