$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/P5aLkhDy2G84iFGtbICq9cQ1pnY.roa File: P5aLkhDy2G84iFGtbICq9cQ1pnY.roa (raw, json) Hash identifier: DFVfe4M13EF8rHAhGQabswsQDZ+5cerXe9sod9WvRVw= Subject key identifier: 3F:96:8B:92:10:F2:D8:6F:38:88:51:AD:6C:80:AA:F5:C4:35:A6:76 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1172 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/P5aLkhDy2G84iFGtbICq9cQ1pnY.roa Signing time: Mon 10 Feb 2025 14:27:21 +0000 ROA not before: Mon 10 Feb 2025 14:27:21 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131142 IP address blocks: 210.200.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4466 (0x1172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:21 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3F968B9210F2D86F388851AD6C80AAF5C435A676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b4:3b:6f:b2:18:82:0f:c2:1f:c9:db:80:41: 32:62:5c:93:0e:e7:80:72:d9:40:97:10:cc:4a:0b: 16:b2:71:b7:d5:0c:0f:e2:5b:f7:ac:25:bb:d1:81: 7f:ea:b3:51:19:b6:53:90:81:2d:10:4a:ab:08:10: 1f:bc:46:ae:1a:35:00:d3:6e:58:e0:c4:a6:5f:5a: 6f:c3:3f:dd:a0:c7:bd:3f:45:db:d9:7c:7e:6f:69: b2:14:f9:67:19:ee:ab:7a:ed:77:0a:a6:b1:d3:70: f0:ee:be:1e:1e:76:b8:02:a8:08:3d:8a:17:61:df: 1e:82:58:79:3b:20:fd:24:1f:af:8e:8c:97:e5:85: ab:ae:96:84:18:67:dc:76:29:df:f6:f1:c9:53:29: 9c:d0:bd:41:34:38:7e:53:7b:9d:1d:7e:99:20:e8: e6:6e:b2:29:c3:1d:b0:1d:8e:a9:aa:6d:3d:2c:8a: 7d:96:8f:b1:0c:24:37:dc:61:dc:ef:2d:d7:bb:db: a3:a9:eb:af:af:6c:aa:72:c1:81:63:01:b3:4e:dd: 21:a5:7b:00:2e:17:98:93:d8:49:b7:85:89:e6:7e: ee:df:b8:27:01:21:8a:0d:4f:68:c6:ac:bf:ca:55: 25:26:6e:3d:d4:ec:f2:a8:29:db:82:8d:22:4c:3c: 08:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:96:8B:92:10:F2:D8:6F:38:88:51:AD:6C:80:AA:F5:C4:35:A6:76 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/P5aLkhDy2G84iFGtbICq9cQ1pnY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.80.0/22 Signature Algorithm: sha256WithRSAEncryption 25:61:6d:0c:49:94:cf:76:c8:e7:16:b6:81:38:ff:0a:1a:25: 13:89:13:97:30:3f:bc:de:d8:49:83:f8:2c:85:d3:ca:1d:30: 31:76:1f:09:d8:ce:1d:9e:4c:f7:7f:45:90:4b:d6:f7:25:d6: a2:64:63:06:94:69:3b:5b:38:a6:96:cc:78:44:f6:79:ae:fe: 13:83:a4:49:3d:95:a4:c3:f7:e3:c1:4b:34:4c:76:e6:39:3a: ff:3a:bd:e8:00:31:a0:80:7d:64:f8:c0:77:5d:7f:da:13:31: 10:ad:9c:b3:e1:62:c0:8b:89:ea:2e:ce:25:38:da:1e:0f:2c: 23:c9:a5:60:53:4b:04:1a:cb:22:60:a7:23:77:f9:73:44:a7: 74:11:df:5b:d3:e4:58:64:67:cd:c6:85:0f:09:59:d4:60:f8: a1:11:ac:2c:b9:88:e4:d4:ee:d9:fe:6e:d7:86:e7:c4:b6:e8: 70:8f:71:b4:a2:17:58:6f:9f:65:be:92:3a:0f:78:5c:6e:60: bb:bf:86:0b:c1:e1:15:fd:7f:c9:a8:a7:1b:49:64:83:8e:51: 23:be:0f:76:3e:b7:54:0b:53:93:94:79:e4:a6:69:6c:a4:08: dc:7c:2c:5b:a5:b8:d4:2e:2c:94:f8:55:80:f4:72:6a:16:c9: 90:f2:d3:1e -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEXIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3MjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNGOTY4QjkyMTBGMkQ4 NkYzODg4NTFBRDZDODBBQUY1QzQzNUE2NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDktDtvshiCD8IfyduAQTJiXJMO54By2UCXEMxKCxaycbfVDA/i W/esJbvRgX/qs1EZtlOQgS0QSqsIEB+8Rq4aNQDTbljgxKZfWm/DP92gx70/RdvZ fH5vabIU+WcZ7qt67XcKprHTcPDuvh4edrgCqAg9ihdh3x6CWHk7IP0kH6+OjJfl hauuloQYZ9x2Kd/28clTKZzQvUE0OH5Te50dfpkg6OZusinDHbAdjqmqbT0sin2W j7EMJDfcYdzvLde726Op66+vbKpywYFjAbNO3SGlewAuF5iT2Em3hYnmfu7fuCcB IYoNT2jGrL/KVSUmbj3U7PKoKduCjSJMPAiRAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUP5aLkhDy2G84iFGtbICq9cQ1pnYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1A1YUxraER5Mkc4NGlGR3RiSUNxOWNR MXBuWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSyFAwDQYJ KoZIhvcNAQELBQADggEBACVhbQxJlM92yOcWtoE4/woaJROJE5cwP7ze2EmD+CyF 08odMDF2HwnYzh2eTPd/RZBL1vcl1qJkYwaUaTtbOKaWzHhE9nmu/hODpEk9laTD 9+PBSzRMduY5Ov86vegAMaCAfWT4wHddf9oTMRCtnLPhYsCLieouziU42h4PLCPJ pWBTSwQayyJgpyN3+XNEp3QR31vT5FhkZ83GhQ8JWdRg+KERrCy5iOTU7tn+bteG 58S26HCPcbSiF1hvn2W+kjoPeFxuYLu/hgvB4RX9f8mopxtJZIOOUSO+D3Y+t1QL U5OUeeSmaWykCNx8LFuluNQuLJT4VYD0cmoWyZDy0x4= -----END CERTIFICATE-----Generated at Mon Apr 7 20:51:51 2025 by rpki-client