$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/_IcskZQddZkNfXYIHRZeFCa8vMg.roa File: _IcskZQddZkNfXYIHRZeFCa8vMg.roa (raw, json) Hash identifier: 8emINybz8zdBgjqKRHqSFP1iYRejqRpMr/Wet47bgNY= Subject key identifier: FC:87:2C:91:94:1D:75:99:0D:7D:76:08:1D:16:5E:14:26:BC:BC:C8 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 11F9 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_IcskZQddZkNfXYIHRZeFCa8vMg.roa Signing time: Mon 10 Feb 2025 14:27:55 +0000 ROA not before: Mon 10 Feb 2025 14:27:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131142 IP address blocks: 223.22.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4601 (0x11f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:55 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FC872C91941D75990D7D76081D165E1426BCBCC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:4a:ed:b4:7c:0e:e1:10:1e:7a:fb:ba:95: 34:95:f0:16:6d:b6:a3:5f:e1:fb:cc:51:d2:a2:bb: fc:3d:e3:7f:81:7f:af:e6:15:9d:5c:7c:63:8a:90: 5f:c6:31:38:98:6d:7c:f5:91:7c:e5:d0:6d:0c:aa: e3:ec:55:c7:6b:ce:5d:a9:a5:b8:65:b0:51:fd:a4: 04:fc:b1:06:57:85:b5:1b:a3:2b:4f:3d:2f:46:7c: e3:63:aa:fe:40:a8:39:7b:3f:21:87:35:dd:15:86: 84:39:c8:a2:f4:a9:e1:76:c7:f2:13:15:9d:53:72: a5:2f:ba:0a:70:84:83:9b:b1:fd:81:71:c6:2c:a0: 38:0b:7e:a6:53:c9:2a:3a:8f:5e:bb:f3:a4:42:81: 6a:33:4b:35:8f:3e:0e:af:ef:34:52:c3:4a:c6:8a: 6d:bf:92:1d:84:82:40:a8:88:28:6f:b2:af:c5:9b: e8:42:7e:4c:81:4b:ed:9d:55:4b:66:1d:2f:32:57: 3e:72:8f:ef:9e:71:a9:ac:25:74:e8:57:4a:e0:bd: 4e:f9:4f:46:0b:18:58:fc:38:01:30:80:fa:fd:f4: 60:5f:49:2c:ad:8b:d3:12:aa:a0:1c:ac:36:38:4e: e6:bf:17:8d:1d:6c:db:11:c6:91:b8:38:7b:ac:db: a3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:87:2C:91:94:1D:75:99:0D:7D:76:08:1D:16:5E:14:26:BC:BC:C8 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_IcskZQddZkNfXYIHRZeFCa8vMg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.22.252.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:2a:6f:db:1d:19:95:d6:2d:96:8e:b7:ca:ee:c2:33:56:ff: f3:3f:90:42:69:5a:0e:85:c4:a9:79:3c:a5:fd:97:8d:17:4f: e3:85:a5:2c:30:9f:ce:09:93:b5:d4:27:2f:3d:db:29:21:d8: 52:57:da:36:8f:c2:ea:ac:55:c2:15:4d:04:a0:8a:0c:76:af: d8:e5:9e:17:5e:ba:9e:cb:ad:a0:26:83:bc:38:23:ce:c6:38: 2a:4b:7a:fa:4a:9c:15:3c:0f:b3:dd:7d:5c:e5:ff:53:87:9a: 24:84:36:1e:b7:8a:1f:c9:8c:db:39:86:2c:4e:46:72:95:d9: c3:a9:5e:3d:66:0f:f3:5a:1f:b2:29:f6:a5:b1:b9:16:ef:4a: 8e:df:11:f0:00:72:ad:9b:30:4e:c2:1a:1e:0d:e1:2d:e3:95: 15:20:9e:18:18:16:64:a9:9b:aa:90:80:c8:54:25:00:8f:e6: b3:41:c4:37:b0:4e:bf:1e:4b:5b:1c:e9:1a:29:18:1f:cb:b5: d1:78:44:9c:cd:cc:db:b6:a0:1a:ad:0b:39:47:5e:a6:c0:46: 2c:bb:17:71:bf:36:de:66:6e:72:2f:7f:38:5f:66:e2:fb:8b: 42:12:06:e0:cb:70:d0:d1:48:7c:69:f8:84:55:15:b2:ba:d8: 8f:19:14:65 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEfkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3NTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZDODcyQzkxOTQxRDc1 OTkwRDdENzYwODFEMTY1RTE0MjZCQ0JDQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuXUrttHwO4RAeevu6lTSV8BZttqNf4fvMUdKiu/w943+Bf6/m FZ1cfGOKkF/GMTiYbXz1kXzl0G0MquPsVcdrzl2ppbhlsFH9pAT8sQZXhbUboytP PS9GfONjqv5AqDl7PyGHNd0VhoQ5yKL0qeF2x/ITFZ1TcqUvugpwhIObsf2BccYs oDgLfqZTySo6j16786RCgWozSzWPPg6v7zRSw0rGim2/kh2EgkCoiChvsq/Fm+hC fkyBS+2dVUtmHS8yVz5yj++ecamsJXToV0rgvU75T0YLGFj8OAEwgPr99GBfSSyt i9MSqqAcrDY4Tua/F40dbNsRxpG4OHus26NbAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU/IcskZQddZkNfXYIHRZeFCa8vMgwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL19JY3NrWlFkZFprTmZYWUlIUlplRkNh OHZNZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALfFvwwDQYJ KoZIhvcNAQELBQADggEBAHwqb9sdGZXWLZaOt8ruwjNW//M/kEJpWg6FxKl5PKX9 l40XT+OFpSwwn84Jk7XUJy892ykh2FJX2jaPwuqsVcIVTQSgigx2r9jlnhdeup7L raAmg7w4I87GOCpLevpKnBU8D7PdfVzl/1OHmiSENh63ih/JjNs5hixORnKV2cOp Xj1mD/NaH7Ip9qWxuRbvSo7fEfAAcq2bME7CGh4N4S3jlRUgnhgYFmSpm6qQgMhU JQCP5rNBxDewTr8eS1sc6RopGB/LtdF4RJzNzNu2oBqtCzlHXqbARiy7F3G/Nt5m bnIvfzhfZuL7i0ISBuDLcNDRSHxp+IRVFbK62I8ZFGU= -----END CERTIFICATE-----Generated at Mon Apr 7 20:49:21 2025 by rpki-client