$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/YWZjBgCHXe9tAD0_1YkDW-O9IlY.roa File: YWZjBgCHXe9tAD0_1YkDW-O9IlY.roa (raw, json) Hash identifier: 9Pdcg+M+ZXRDrkRRvTe7wWeMMP6NTxWu6Nuy/JHSdtI= Subject key identifier: 61:66:63:06:00:87:5D:EF:6D:00:3D:3F:D5:89:03:5B:E3:BD:22:56 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 126F Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/YWZjBgCHXe9tAD0_1YkDW-O9IlY.roa Signing time: Mon 10 Feb 2025 14:28:24 +0000 ROA not before: Mon 10 Feb 2025 14:28:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 210.58.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4719 (0x126f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:24 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6166630600875DEF6D003D3FD589035BE3BD2256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d5:9e:e2:1f:9a:86:ae:71:87:c9:65:29:07: 06:e2:e9:9e:93:d7:36:38:dc:98:a3:79:ea:44:71: 75:e7:cc:fc:e0:6e:d0:73:c6:76:18:d4:bd:f6:c7: 3e:1a:62:d0:bc:f6:5f:0f:27:ec:ad:12:e5:26:be: 4c:fc:51:d3:98:85:cf:63:dc:3f:1f:e8:a1:f6:6c: ff:3f:df:2e:30:27:c0:2c:19:55:de:60:06:08:66: e7:6f:ba:21:31:06:20:91:86:ab:f0:59:f5:7d:c2: b6:87:92:f5:ff:eb:73:66:21:59:09:4f:32:3a:82: 73:ba:09:de:28:69:80:9f:78:66:f3:9c:6f:a8:fc: 4a:dc:3a:f7:f1:5b:42:7d:0f:8c:1f:3c:c7:dd:3d: bb:e6:ca:de:83:fa:9b:38:07:a8:33:bb:9e:e3:e8: 3d:fb:99:b4:44:34:de:a7:f0:57:58:23:cf:66:3e: 58:bf:ab:ba:fb:e6:dd:f0:54:ab:8a:31:a7:1d:fe: 64:5c:c0:34:63:bc:2a:57:1d:a2:b2:5a:30:75:2b: b2:5c:5f:05:a6:da:ca:ec:04:5d:99:15:ba:96:94: fa:f6:55:f5:40:71:f8:e3:9d:b2:b6:21:19:36:ef: b0:a9:f0:7e:7a:4e:8a:69:f9:06:5e:b3:e6:0d:65: 10:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:66:63:06:00:87:5D:EF:6D:00:3D:3F:D5:89:03:5B:E3:BD:22:56 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/YWZjBgCHXe9tAD0_1YkDW-O9IlY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.58.88.0/24 Signature Algorithm: sha256WithRSAEncryption 43:1c:86:8b:bb:a3:59:ea:88:a5:2f:6a:84:f9:9d:4c:d4:04: ef:2b:93:b3:0b:3f:b1:01:91:94:8e:e8:e1:ab:b7:14:d6:6f: 09:45:06:97:c4:a1:91:d9:bb:f6:e1:05:76:f9:3f:53:42:a2: 46:4a:c9:5b:9c:88:1d:03:4a:7d:24:58:ba:40:e6:81:1c:60: 1e:98:6e:7d:71:fa:56:51:5c:75:f0:a7:cd:62:53:31:a3:43: 5e:54:0b:d7:ac:92:5f:ae:1d:34:ab:9d:9e:d0:c6:f1:93:3b: 10:76:b1:b7:72:db:e4:d9:da:83:35:74:93:01:c1:74:e0:6d: 43:d8:b0:36:e0:12:68:8c:51:11:aa:22:70:9e:54:4b:3b:a8: d7:1a:30:43:55:48:72:9e:fd:93:91:37:24:e0:df:ef:6b:b2: 37:ee:43:9d:c9:4b:4a:0c:5a:04:f9:1a:da:1d:61:63:e5:36: 0d:ff:de:09:71:0f:b9:7e:4c:64:f3:89:06:93:7c:4d:29:84: bc:13:0e:de:0e:28:87:99:b0:f1:16:58:af:16:a3:50:a0:96: 0b:ce:96:8d:97:5a:da:9a:15:d9:c7:17:69:45:a5:57:6f:2e: 60:4c:df:e5:82:76:98:dc:ab:71:e1:fe:be:b8:04:d4:f0:aa: d8:8f:fa:c2 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEm8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYxNjY2MzA2MDA4NzVE RUY2RDAwM0QzRkQ1ODkwMzVCRTNCRDIyNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDX1Z7iH5qGrnGHyWUpBwbi6Z6T1zY43JijeepEcXXnzPzgbtBz xnYY1L32xz4aYtC89l8PJ+ytEuUmvkz8UdOYhc9j3D8f6KH2bP8/3y4wJ8AsGVXe YAYIZudvuiExBiCRhqvwWfV9wraHkvX/63NmIVkJTzI6gnO6Cd4oaYCfeGbznG+o /ErcOvfxW0J9D4wfPMfdPbvmyt6D+ps4B6gzu57j6D37mbRENN6n8FdYI89mPli/ q7r75t3wVKuKMacd/mRcwDRjvCpXHaKyWjB1K7JcXwWm2srsBF2ZFbqWlPr2VfVA cfjjnbK2IRk277Cp8H56Topp+QZes+YNZRANAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUYWZjBgCHXe9tAD0/1YkDW+O9IlYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1lXWmpCZ0NIWGU5dEFEMF8xWWtEVy1P OUlsWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSOlgwDQYJ KoZIhvcNAQELBQADggEBAEMchou7o1nqiKUvaoT5nUzUBO8rk7MLP7EBkZSO6OGr txTWbwlFBpfEoZHZu/bhBXb5P1NCokZKyVuciB0DSn0kWLpA5oEcYB6Ybn1x+lZR XHXwp81iUzGjQ15UC9eskl+uHTSrnZ7QxvGTOxB2sbdy2+TZ2oM1dJMBwXTgbUPY sDbgEmiMURGqInCeVEs7qNcaMENVSHKe/ZORNyTg3+9rsjfuQ53JS0oMWgT5Gtod YWPlNg3/3glxD7l+TGTziQaTfE0phLwTDt4OKIeZsPEWWK8Wo1CglgvOlo2XWtqa FdnHF2lFpVdvLmBM3+WCdpjcq3Hh/r64BNTwqtiP+sI= -----END CERTIFICATE-----Generated at Mon Apr 7 20:54:21 2025 by rpki-client