$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/_oqyUYkYbOc_tyLqFJzoIqU7Bmc.roa File: _oqyUYkYbOc_tyLqFJzoIqU7Bmc.roa (raw, json) Hash identifier: sBprBkPX+W4ShYGXMMqzDg8a+7C+iy0Fuh281DHs3ps= Subject key identifier: FE:8A:B2:51:89:18:6C:E7:3F:B7:22:EA:14:9C:E8:22:A5:3B:06:67 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1270 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_oqyUYkYbOc_tyLqFJzoIqU7Bmc.roa Signing time: Mon 10 Feb 2025 14:28:24 +0000 ROA not before: Mon 10 Feb 2025 14:28:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 124.218.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4720 (0x1270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:24 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FE8AB25189186CE73FB722EA149CE822A53B0667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:68:33:04:26:ea:10:db:ec:3b:cd:4e:b9:75: 2f:64:e4:a6:4a:74:17:b8:29:2d:6b:4f:2b:0c:9f: fb:4d:d4:94:f2:d4:f5:53:d1:0b:d6:56:5b:df:ef: 01:3e:75:f0:c1:7e:49:e6:fc:77:21:f6:de:9d:f0: 30:a8:58:72:8a:15:10:6e:a3:79:77:31:19:ab:39: d5:2a:b5:09:6a:02:32:32:44:19:1b:cb:6b:79:e9: 54:c0:0d:5d:8c:c9:bd:4c:7f:9a:7b:c1:68:55:6d: 6b:a4:83:26:fd:a7:8a:6f:dc:73:f4:b0:d8:c6:35: f7:cc:19:ef:12:80:79:69:b5:fa:e8:61:76:b6:2d: cb:c0:9c:02:d9:c8:c2:37:0b:19:c8:58:a3:02:c0: 21:64:ea:e3:78:4d:2f:10:a6:ad:f3:36:93:2b:92: 8d:a5:dc:1b:1b:31:53:c8:11:7e:06:7a:bb:7a:7c: 56:1a:75:37:50:1c:1c:5a:7a:83:1f:00:3b:d6:f7: 96:e0:a5:54:f8:88:eb:57:7d:ff:43:e9:4d:d9:f1: 11:54:e7:88:b9:38:59:82:55:49:ef:dd:11:d5:7e: 01:a1:e0:80:30:c4:bd:1f:86:df:b1:55:0a:34:7b: 7f:47:15:57:8d:7d:a4:1b:4b:f8:71:61:50:f0:1e: cb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8A:B2:51:89:18:6C:E7:3F:B7:22:EA:14:9C:E8:22:A5:3B:06:67 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_oqyUYkYbOc_tyLqFJzoIqU7Bmc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.96.0/21 Signature Algorithm: sha256WithRSAEncryption a2:c8:e2:46:b0:4b:d7:f5:a7:35:e0:07:40:ab:1a:83:2f:ad: 68:e2:89:95:68:2a:22:7a:b7:b1:1a:db:a8:2d:69:c3:c8:34: 36:f2:2b:5a:d6:3e:85:8e:a2:94:fc:9a:a7:03:dc:d5:cf:a7: 6e:b0:85:0e:88:e5:f9:43:2f:9d:50:a7:6f:6d:31:70:bd:dd: b0:22:a3:33:80:41:6b:23:9a:17:b2:40:5b:17:7f:43:9e:f4: 5e:6a:01:e4:60:a4:06:fd:23:fe:ed:29:e7:b7:48:57:a8:99: 1f:ea:23:78:0f:eb:a7:4f:b1:11:04:3e:33:38:da:cc:a9:83: 59:39:d1:f5:22:4e:cf:e0:e7:34:60:35:0b:0a:4b:c3:01:85: f9:50:d7:ac:7e:18:f4:20:b7:01:a9:e7:0b:0f:29:c6:0a:28: 4a:b4:ad:2e:73:79:fc:74:b5:29:02:35:66:ec:2d:fc:84:c6: 0f:05:63:42:21:47:3c:6d:4f:54:91:9e:a2:66:d8:56:72:5b: 79:70:1e:3b:1d:b6:0f:eb:3d:44:7f:1f:e4:de:46:91:3f:6e: 3b:d0:b2:36:17:1e:df:b8:d8:1c:c1:7e:95:dd:16:f3:a4:1a: 7c:90:21:af:22:81:a4:fa:45:44:5b:9b:7f:1d:de:94:73:9a: df:89:ee:d1 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEnAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZFOEFCMjUxODkxODZD RTczRkI3MjJFQTE0OUNFODIyQTUzQjA2NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzaDMEJuoQ2+w7zU65dS9k5KZKdBe4KS1rTysMn/tN1JTy1PVT 0QvWVlvf7wE+dfDBfknm/Hch9t6d8DCoWHKKFRBuo3l3MRmrOdUqtQlqAjIyRBkb y2t56VTADV2Myb1Mf5p7wWhVbWukgyb9p4pv3HP0sNjGNffMGe8SgHlptfroYXa2 LcvAnALZyMI3CxnIWKMCwCFk6uN4TS8Qpq3zNpMrko2l3BsbMVPIEX4Gert6fFYa dTdQHBxaeoMfADvW95bgpVT4iOtXff9D6U3Z8RFU54i5OFmCVUnv3RHVfgGh4IAw xL0fht+xVQo0e39HFVeNfaQbS/hxYVDwHsvbAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU/oqyUYkYbOc/tyLqFJzoIqU7BmcwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL19vcXlVWWtZYk9jX3R5THFGSnpvSXFV N0JtYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN82mAwDQYJ KoZIhvcNAQELBQADggEBAKLI4kawS9f1pzXgB0CrGoMvrWjiiZVoKiJ6t7Ea26gt acPINDbyK1rWPoWOopT8mqcD3NXPp26whQ6I5flDL51Qp29tMXC93bAiozOAQWsj mheyQFsXf0Oe9F5qAeRgpAb9I/7tKee3SFeomR/qI3gP66dPsREEPjM42sypg1k5 0fUiTs/g5zRgNQsKS8MBhflQ16x+GPQgtwGp5wsPKcYKKEq0rS5zefx0tSkCNWbs LfyExg8FY0IhRzxtT1SRnqJm2FZyW3lwHjsdtg/rPUR/H+TeRpE/bjvQsjYXHt+4 2BzBfpXdFvOkGnyQIa8igaT6RURbm38d3pRzmt+J7tE= -----END CERTIFICATE-----Generated at Mon Apr 7 20:49:26 2025 by rpki-client