$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Mi9RIXufR9GV7L-U3IGisvXNJR8.roa File: Mi9RIXufR9GV7L-U3IGisvXNJR8.roa (raw, json) Hash identifier: 74V6nwC9LgXBpbTPwgHZwAftNCm/pdFLVDIZlxyE8GA= Subject key identifier: 32:2F:51:21:7B:9F:47:D1:95:EC:BF:94:DC:81:A2:B2:F5:CD:25:1F Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 119E Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Mi9RIXufR9GV7L-U3IGisvXNJR8.roa Signing time: Mon 10 Feb 2025 14:27:33 +0000 ROA not before: Mon 10 Feb 2025 14:27:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 210.85.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4510 (0x119e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:33 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=322F51217B9F47D195ECBF94DC81A2B2F5CD251F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:dd:26:9a:be:22:bf:15:2c:25:ab:8f:52: 33:41:8b:79:57:bb:c1:fd:3a:46:4b:ac:48:12:4b: 59:f7:17:17:94:f5:2e:ec:23:ea:4a:6e:e5:9e:be: 03:f2:5a:b1:e8:bc:1c:1b:46:73:a4:ec:6b:9a:8a: 22:42:40:1c:72:6c:21:ba:c8:20:42:30:e3:2c:07: ed:c9:78:c7:de:37:a9:a5:01:e7:99:23:54:d0:3f: 86:ba:5d:01:39:d2:9a:17:10:8a:c0:c8:ff:72:64: 21:98:10:69:a6:38:7c:9a:27:33:69:22:0c:53:53: 4e:8e:41:1c:51:86:b0:e0:fb:05:a1:df:03:04:21: 4b:7f:ed:05:77:84:65:58:32:36:9f:cf:5c:95:42: cc:e5:2c:9f:f0:6b:de:8f:7c:cb:2e:27:62:17:b5: cc:e6:82:28:a9:b6:73:10:a3:36:b7:80:b7:8a:09: 8a:68:dd:ab:da:00:45:a6:66:b5:21:c4:dc:a1:20: fc:42:3e:02:ad:1c:6b:6f:ab:92:35:d0:7e:06:a0: 8e:8d:f2:ba:d0:ce:9e:30:2b:9e:7f:8f:be:b8:bd: c4:6c:7e:73:f9:b6:5b:f7:e8:d4:8a:3a:7e:a9:f9: 8e:a9:c4:7f:17:14:b0:24:3a:15:2c:87:56:53:de: 14:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2F:51:21:7B:9F:47:D1:95:EC:BF:94:DC:81:A2:B2:F5:CD:25:1F X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Mi9RIXufR9GV7L-U3IGisvXNJR8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.85.0.0/16 Signature Algorithm: sha256WithRSAEncryption 04:ad:71:e1:4d:64:fb:52:79:a5:e2:88:e0:0a:64:50:5e:04: 5d:74:1d:72:18:2b:9d:cd:89:98:70:9a:a2:be:91:59:7f:57: 8f:25:6b:27:6c:1b:01:83:d9:e9:65:c9:d2:2d:b6:bf:54:7c: 22:71:de:c9:99:e8:9e:d7:6e:ee:12:e6:61:5d:71:14:f9:63: ea:2e:5a:d6:8d:67:49:75:cd:2b:f6:46:33:35:77:25:74:51: 51:01:94:72:9b:fc:4f:2a:64:e9:0e:ca:f6:00:b7:09:3e:fb: 90:59:ef:b4:e5:88:2d:95:d2:6b:8f:bf:69:c5:e4:d2:39:b2: 7c:2f:d5:a5:51:9a:ff:1c:62:36:e9:c7:ce:be:cd:51:b8:db: 78:fe:14:bf:4e:6b:fc:d4:67:9d:34:7b:87:47:d0:30:4c:25: ae:41:da:07:02:db:ea:ae:36:e3:12:fc:07:59:88:1c:67:2b: ee:1d:2b:d2:e0:cf:58:07:8d:6d:40:6e:e9:ab:9a:f0:6b:e9: 94:50:de:f9:ed:08:dd:11:e9:b5:e1:40:37:40:8d:3a:43:62: 66:b0:55:38:96:b7:e7:8c:af:95:66:eb:32:8c:08:81:d9:73: 5c:3f:d2:eb:5b:7a:d5:8c:7f:a8:35:b6:82:a1:ff:ef:e1:fd: ef:64:81:e3 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEZ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3MzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMyMkY1MTIxN0I5RjQ3 RDE5NUVDQkY5NERDODFBMkIyRjVDRDI1MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwct0mmr4ivxUsJauPUjNBi3lXu8H9OkZLrEgSS1n3FxeU9S7s I+pKbuWevgPyWrHovBwbRnOk7GuaiiJCQBxybCG6yCBCMOMsB+3JeMfeN6mlAeeZ I1TQP4a6XQE50poXEIrAyP9yZCGYEGmmOHyaJzNpIgxTU06OQRxRhrDg+wWh3wME IUt/7QV3hGVYMjafz1yVQszlLJ/wa96PfMsuJ2IXtczmgiiptnMQoza3gLeKCYpo 3avaAEWmZrUhxNyhIPxCPgKtHGtvq5I10H4GoI6N8rrQzp4wK55/j764vcRsfnP5 tlv36NSKOn6p+Y6pxH8XFLAkOhUsh1ZT3hTvAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUMi9RIXufR9GV7L+U3IGisvXNJR8wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL01pOVJJWHVmUjlHVjdMLVUzSUdpc3ZY TkpSOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDSVTANBgkq hkiG9w0BAQsFAAOCAQEABK1x4U1k+1J5peKI4ApkUF4EXXQdchgrnc2JmHCaor6R WX9XjyVrJ2wbAYPZ6WXJ0i22v1R8InHeyZnontdu7hLmYV1xFPlj6i5a1o1nSXXN K/ZGMzV3JXRRUQGUcpv8Typk6Q7K9gC3CT77kFnvtOWILZXSa4+/acXk0jmyfC/V pVGa/xxiNunHzr7NUbjbeP4Uv05r/NRnnTR7h0fQMEwlrkHaBwLb6q424xL8B1mI HGcr7h0r0uDPWAeNbUBu6aua8GvplFDe+e0I3RHpteFAN0CNOkNiZrBVOJa354yv lWbrMowIgdlzXD/S61t61Yx/qDW2gqH/7+H972SB4w== -----END CERTIFICATE-----Generated at Mon Apr 7 20:51:56 2025 by rpki-client