$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/XLWjcZ0HN7IsJDHMbyw_ziK839E.roa File: XLWjcZ0HN7IsJDHMbyw_ziK839E.roa (raw, json) Hash identifier: cPdq+tB4TTmO6ivf3+qb7xdrWErgjbo8cR7kpL3qAYU= Subject key identifier: 5C:B5:A3:71:9D:07:37:B2:2C:24:31:CC:6F:2C:3F:CE:22:BC:DF:D1 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1276 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/XLWjcZ0HN7IsJDHMbyw_ziK839E.roa Signing time: Mon 10 Feb 2025 14:28:26 +0000 ROA not before: Mon 10 Feb 2025 14:28:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24154 IP address blocks: 210.63.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4726 (0x1276) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5CB5A3719D0737B22C2431CC6F2C3FCE22BCDFD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:df:ca:e9:48:c9:ac:f5:e7:b4:d1:cc:92:3b: 9e:41:2f:30:17:1a:33:0a:59:4e:7d:3d:0c:7e:49: c5:cc:6d:ff:fe:43:e2:00:c8:2f:7a:ce:be:63:da: 15:f6:a9:4d:71:ae:27:32:a9:6a:d8:37:b3:d4:8f: 08:fa:a4:38:0f:da:ec:e4:2d:06:cf:a0:d9:ef:4f: 67:77:33:61:f7:af:f5:c6:2a:fa:70:09:94:0a:84: 8d:64:d1:70:87:ff:69:83:c4:3c:79:72:35:0e:89: 4b:90:1f:00:1c:0f:ad:24:5c:2c:67:3d:21:4c:a4: d4:20:f2:15:32:bb:6a:db:d1:1d:c5:3d:cf:ba:dc: 7e:93:6b:62:41:42:b2:ae:2b:7a:7c:2f:31:ae:12: f8:0d:10:2d:6d:c9:d3:2e:5a:ec:53:a5:92:06:e6: 2a:6f:ce:c5:34:49:e7:1a:8c:16:4c:52:6f:79:e6: ac:7f:67:c2:13:fe:7b:8c:b4:2f:da:1d:4c:18:4a: a5:d8:fd:f4:80:2e:b3:89:2b:2e:37:44:e0:c2:48: e6:c9:f6:93:8f:32:eb:0b:17:f3:35:1b:d9:d2:7c: 09:91:68:5b:d9:43:9a:fe:6f:d1:ed:fa:d4:3d:33: 04:fe:70:7d:95:eb:bc:fd:b3:10:5e:29:7f:93:48: 7e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B5:A3:71:9D:07:37:B2:2C:24:31:CC:6F:2C:3F:CE:22:BC:DF:D1 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/XLWjcZ0HN7IsJDHMbyw_ziK839E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.220.0/22 Signature Algorithm: sha256WithRSAEncryption 60:e6:f8:49:7f:29:0a:59:d5:bd:31:84:6e:42:53:89:22:c3: 0a:96:58:81:1b:4a:e6:fe:fd:bc:26:54:54:83:b7:f3:58:af: ac:6c:70:d4:64:a5:6c:ed:6a:2d:e8:81:43:06:e1:2a:dd:68: b6:0a:9f:a7:f2:f5:ee:00:11:c0:3c:51:cf:5f:41:16:54:25: 3a:d0:77:d3:aa:f0:63:f8:09:85:d6:09:e4:5b:6f:d9:ad:cb: b6:96:25:7c:28:71:80:fa:39:a9:ca:d8:88:75:99:2f:d7:e8: 2f:7f:32:ac:a8:7b:66:79:64:fe:a8:b9:68:fa:45:f1:12:26: 86:33:09:11:a0:47:0f:1d:a0:e2:66:55:e9:cc:e4:cd:ee:60: 9d:28:10:b0:18:9c:bd:c7:45:a4:6b:4c:7b:7f:f7:c4:eb:27: 2a:2b:aa:a5:86:c1:82:0d:f5:21:e4:9d:7a:7e:ca:db:e8:6b: 36:ad:84:12:af:67:9e:e8:11:ec:0c:17:dd:de:3b:9b:9f:e5: cf:6f:89:22:b5:96:35:05:fa:b5:57:ab:60:26:ea:2b:79:38: 4b:ec:d9:18:df:db:77:4c:bb:5a:c5:44:51:84:6c:05:91:1a: dc:6b:b6:e3:af:98:60:27:ec:74:71:05:6e:f2:89:c6:5b:fd: 7b:91:12:0a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEnYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVDQjVBMzcxOUQwNzM3 QjIyQzI0MzFDQzZGMkMzRkNFMjJCQ0RGRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx38rpSMms9ee00cySO55BLzAXGjMKWU59PQx+ScXMbf/+Q+IA yC96zr5j2hX2qU1xricyqWrYN7PUjwj6pDgP2uzkLQbPoNnvT2d3M2H3r/XGKvpw CZQKhI1k0XCH/2mDxDx5cjUOiUuQHwAcD60kXCxnPSFMpNQg8hUyu2rb0R3FPc+6 3H6Ta2JBQrKuK3p8LzGuEvgNEC1tydMuWuxTpZIG5ipvzsU0SecajBZMUm955qx/ Z8IT/nuMtC/aHUwYSqXY/fSALrOJKy43RODCSObJ9pOPMusLF/M1G9nSfAmRaFvZ Q5r+b9Ht+tQ9MwT+cH2V67z9sxBeKX+TSH5RAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUXLWjcZ0HN7IsJDHMbyw/ziK839EwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1hMV2pjWjBITjdJc0pESE1ieXdfemlL ODM5RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSP9wwDQYJ KoZIhvcNAQELBQADggEBAGDm+El/KQpZ1b0xhG5CU4kiwwqWWIEbSub+/bwmVFSD t/NYr6xscNRkpWztai3ogUMG4SrdaLYKn6fy9e4AEcA8Uc9fQRZUJTrQd9Oq8GP4 CYXWCeRbb9mty7aWJXwocYD6OanK2Ih1mS/X6C9/Mqyoe2Z5ZP6ouWj6RfESJoYz CRGgRw8doOJmVenM5M3uYJ0oELAYnL3HRaRrTHt/98TrJyorqqWGwYIN9SHknXp+ ytvoazathBKvZ57oEewMF93eO5uf5c9viSK1ljUF+rVXq2Am6it5OEvs2Rjf23dM u1rFRFGEbAWRGtxrtuOvmGAn7HRxBW7yicZb/XuREgo= -----END CERTIFICATE-----Generated at Mon Apr 7 20:54:16 2025 by rpki-client