$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/VmEfqDjQpG_RT3QARof9aYXESPk.roa File: VmEfqDjQpG_RT3QARof9aYXESPk.roa (raw, json) Hash identifier: ktI7q3+GrHBV5kfY33Z8LpwtmA/leGjWV/zqoops3Kg= Subject key identifier: 56:61:1F:A8:38:D0:A4:6F:D1:4F:74:00:46:87:FD:69:85:C4:48:F9 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 11BE Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/VmEfqDjQpG_RT3QARof9aYXESPk.roa Signing time: Mon 10 Feb 2025 14:27:40 +0000 ROA not before: Mon 10 Feb 2025 14:27:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9674 IP address blocks: 114.140.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 03:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4542 (0x11be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:40 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=56611FA838D0A46FD14F74004687FD6985C448F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ef:a0:8b:8d:55:37:14:42:38:4d:ad:45:63: 04:0f:a3:0a:d6:89:8c:fd:51:50:3a:ce:a0:da:a4: c9:5c:16:a1:a7:db:a8:31:1d:54:f9:0e:fb:28:d3: 09:96:d7:10:3a:9f:ea:cb:b0:bb:87:3a:6a:e2:8e: 1c:43:b8:98:37:1a:c9:86:fa:90:d6:01:97:bb:ea: 03:2e:01:49:16:ed:c9:1d:38:2a:fa:5c:80:1a:d4: 2d:2a:5a:dc:9c:ed:28:be:b4:c8:e7:94:85:c0:18: cc:56:c6:fd:a7:58:4a:85:7e:bf:0d:67:1e:62:c4: 38:f5:32:70:b4:ab:ba:6e:b0:c1:85:ff:19:f0:ff: 6f:84:ea:6a:fc:47:5d:c8:e7:4c:c9:64:19:a0:56: 28:e4:46:de:18:39:8d:71:1e:dd:e0:07:9b:0a:1b: 91:4e:cc:19:d5:e1:4b:51:87:0f:22:d4:06:4c:83: 28:82:2e:10:23:20:fa:ce:7e:01:a1:e3:9f:e1:a3: d3:ec:2a:4f:0f:aa:a1:16:e8:9b:70:25:21:d9:5b: 55:dc:8e:d5:8d:f4:a2:7d:d7:3c:fa:01:a9:85:89: a2:c2:ea:1f:99:17:e2:8b:47:33:6a:c3:43:a2:22: 95:ae:1b:ee:5e:83:b7:18:12:c2:f3:27:fc:4c:38: 32:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:61:1F:A8:38:D0:A4:6F:D1:4F:74:00:46:87:FD:69:85:C4:48:F9 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/VmEfqDjQpG_RT3QARof9aYXESPk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.140.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6c:1c:b6:10:f8:85:38:0a:6e:66:c6:73:db:a0:2e:cf:e4:85: 3b:18:d3:9d:f9:14:c2:cd:08:23:9a:86:c4:48:0a:43:df:b1: a0:d4:ab:e4:79:4e:e8:a4:1b:bb:63:63:12:33:da:ef:02:4f: 87:d8:54:f5:5e:c6:fc:70:c1:71:6c:65:bd:6d:3e:eb:c9:74: 2e:bd:ba:6c:cf:23:a4:4e:99:6b:f4:0b:ec:83:1b:85:8f:0b: ab:4f:54:d0:0f:a5:46:e1:14:64:26:fb:73:a0:ce:5b:04:f3: b0:52:d7:1e:5a:16:be:66:66:7c:69:1d:fc:d5:e3:c9:63:5c: 22:49:9a:a1:74:d1:2d:27:43:bb:93:dc:7a:ed:e0:a0:6d:48: 3d:19:fa:ab:2c:58:df:c3:64:60:15:e8:de:0a:ab:dc:68:06: 6b:78:d4:76:e1:28:49:74:2d:00:67:b5:db:5a:60:32:51:00: e8:5f:c8:28:a5:28:b2:ac:8e:5c:aa:40:d4:cf:2b:ee:75:5b: ef:ed:69:84:00:f5:53:26:a8:2e:89:b6:09:c4:14:cc:27:0d: a6:ff:53:d1:dd:04:e4:8d:16:ab:b3:f3:06:5e:04:17:bd:46: 60:0b:a9:07:6f:6d:69:bc:b9:a7:b2:b0:cf:e7:ea:5d:c4:b7: 35:00:4a:6e -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEb4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU2NjExRkE4MzhEMEE0 NkZEMTRGNzQwMDQ2ODdGRDY5ODVDNDQ4RjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC76CLjVU3FEI4Ta1FYwQPowrWiYz9UVA6zqDapMlcFqGn26gx HVT5Dvso0wmW1xA6n+rLsLuHOmrijhxDuJg3GsmG+pDWAZe76gMuAUkW7ckdOCr6 XIAa1C0qWtyc7Si+tMjnlIXAGMxWxv2nWEqFfr8NZx5ixDj1MnC0q7pusMGF/xnw /2+E6mr8R13I50zJZBmgVijkRt4YOY1xHt3gB5sKG5FOzBnV4UtRhw8i1AZMgyiC LhAjIPrOfgGh45/ho9PsKk8PqqEW6JtwJSHZW1XcjtWN9KJ91zz6AamFiaLC6h+Z F+KLRzNqw0OiIpWuG+5eg7cYEsLzJ/xMODLRAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUVmEfqDjQpG/RT3QARof9aYXESPkwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1ZtRWZxRGpRcEdfUlQzUUFSb2Y5YVlY RVNQay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwByjDANBgkq hkiG9w0BAQsFAAOCAQEAbBy2EPiFOApuZsZz26Auz+SFOxjTnfkUws0II5qGxEgK Q9+xoNSr5HlO6KQbu2NjEjPa7wJPh9hU9V7G/HDBcWxlvW0+68l0Lr26bM8jpE6Z a/QL7IMbhY8Lq09U0A+lRuEUZCb7c6DOWwTzsFLXHloWvmZmfGkd/NXjyWNcIkma oXTRLSdDu5Pceu3goG1IPRn6qyxY38NkYBXo3gqr3GgGa3jUduEoSXQtAGe121pg MlEA6F/IKKUosqyOXKpA1M8r7nVb7+1phAD1UyaoLom2CcQUzCcNpv9T0d0E5I0W q7PzBl4EF71GYAupB29taby5p7Kwz+fqXcS3NQBKbg== -----END CERTIFICATE-----Generated at Tue Apr 8 00:34:53 2025 by rpki-client