$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/aLEmh-X-lzmcPor43wM5K0Am9sc.roa File: aLEmh-X-lzmcPor43wM5K0Am9sc.roa (raw, json) Hash identifier: ZfrmsxxlCQLfDxYrPrETAX9UT93yu55nkLW4hpQJfX4= Subject key identifier: 68:B1:26:87:E5:FE:97:39:9C:3E:8A:F8:DF:03:39:2B:40:26:F6:C7 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 11F4 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/aLEmh-X-lzmcPor43wM5K0Am9sc.roa Signing time: Mon 10 Feb 2025 14:27:54 +0000 ROA not before: Mon 10 Feb 2025 14:27:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 210.202.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4596 (0x11f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:54 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=68B12687E5FE97399C3E8AF8DF03392B4026F6C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:08:5e:fc:cb:95:93:17:72:c2:5f:da:71:b7: ef:6c:1c:9a:93:27:ee:72:a3:07:9f:6f:f6:22:91: c9:95:42:47:c7:7f:b8:f2:6a:37:95:39:da:6a:4d: 39:da:43:26:66:b2:55:55:54:40:fe:03:08:13:96: 0e:6b:a9:b3:33:14:7a:67:dc:4b:0b:a0:d2:70:32: c1:15:80:28:18:c1:fb:5a:40:01:bf:04:13:03:73: f7:21:3e:7d:6c:c7:f7:2f:a9:56:29:7c:3a:46:c4: af:b9:b4:ad:c9:e6:b1:54:6e:87:9d:e7:e3:1c:b1: ea:8a:e9:c9:61:29:b5:07:86:11:6d:e5:32:a6:e1: 20:40:c7:98:38:29:d7:58:13:3d:06:26:95:4b:a9: 04:e8:d5:75:ff:54:40:df:a6:59:6f:f0:3e:42:00: 92:7c:4a:f2:de:04:46:47:ce:67:25:06:39:33:ce: 9b:85:92:3e:94:d9:f2:d5:35:13:f9:9e:a5:fc:86: 8d:0a:46:32:cc:91:36:68:96:97:ba:c4:8a:2d:33: d2:55:e7:b0:25:ca:95:01:99:43:6c:e3:85:26:2f: d9:5e:f5:44:57:0d:a2:5b:72:7c:b6:9b:cb:39:28: be:aa:56:37:6a:00:58:27:00:2c:5f:07:a7:15:0a: be:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B1:26:87:E5:FE:97:39:9C:3E:8A:F8:DF:03:39:2B:40:26:F6:C7 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/aLEmh-X-lzmcPor43wM5K0Am9sc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.202.128.0/18 Signature Algorithm: sha256WithRSAEncryption c8:bc:bb:35:64:6d:3e:71:a9:8d:b7:bb:98:85:df:e2:2d:f4: 0b:78:4b:ac:bc:c6:1c:55:64:bb:6e:de:bd:7d:78:46:77:06: b9:be:45:8d:02:e3:12:05:06:11:b4:bb:63:d7:41:42:28:98: e6:95:87:b8:72:18:ef:b7:5a:37:2f:9b:5f:d4:44:cb:4b:f4: 5d:82:49:32:4f:38:74:a6:df:e5:83:2f:3d:52:cf:77:f4:cb: e3:49:9c:65:d7:c8:ce:ba:79:52:c0:49:82:e6:f3:d9:02:6a: 60:0a:80:a6:ce:07:ab:4d:9d:32:33:e1:d9:3c:73:6c:96:5b: e6:23:53:a8:f6:fe:6c:5e:d4:4a:ca:b5:27:8c:bc:e9:a2:df: da:d9:f9:8f:0f:10:54:25:1b:8d:6c:2b:4f:dd:bb:a4:3d:a4: 2e:33:0c:15:72:e5:8d:00:da:3f:b6:ca:26:4d:d5:67:8d:a9: 99:0e:00:be:db:0f:8b:a7:bf:e3:05:ff:22:6c:0e:ac:23:8f: 0b:ef:f3:8c:b8:8a:1c:e1:cc:c0:80:81:45:73:a4:d1:e2:1c: 50:e4:33:d8:f8:67:cf:96:91:22:8a:7d:f2:15:39:9f:f6:0b: 7f:ba:f5:25:3d:c9:ef:a4:f5:0c:fa:6b:a5:f9:df:d1:8f:e9: b9:1d:c1:78 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEfQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY4QjEyNjg3RTVGRTk3 Mzk5QzNFOEFGOERGMDMzOTJCNDAyNkY2QzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwCF78y5WTF3LCX9pxt+9sHJqTJ+5yowefb/YikcmVQkfHf7jy ajeVOdpqTTnaQyZmslVVVED+AwgTlg5rqbMzFHpn3EsLoNJwMsEVgCgYwftaQAG/ BBMDc/chPn1sx/cvqVYpfDpGxK+5tK3J5rFUboed5+McseqK6clhKbUHhhFt5TKm 4SBAx5g4KddYEz0GJpVLqQTo1XX/VEDfpllv8D5CAJJ8SvLeBEZHzmclBjkzzpuF kj6U2fLVNRP5nqX8ho0KRjLMkTZolpe6xIotM9JV57AlypUBmUNs44UmL9le9URX DaJbcny2m8s5KL6qVjdqAFgnACxfB6cVCr4LAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUaLEmh+X+lzmcPor43wM5K0Am9scwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2FMRW1oLVgtbHptY1BvcjQzd001SzBB bTlzYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSyoAwDQYJ KoZIhvcNAQELBQADggEBAMi8uzVkbT5xqY23u5iF3+It9At4S6y8xhxVZLtu3r19 eEZ3Brm+RY0C4xIFBhG0u2PXQUIomOaVh7hyGO+3Wjcvm1/URMtL9F2CSTJPOHSm 3+WDLz1Sz3f0y+NJnGXXyM66eVLASYLm89kCamAKgKbOB6tNnTIz4dk8c2yWW+Yj U6j2/mxe1ErKtSeMvOmi39rZ+Y8PEFQlG41sK0/du6Q9pC4zDBVy5Y0A2j+2yiZN 1WeNqZkOAL7bD4unv+MF/yJsDqwjjwvv84y4ihzhzMCAgUVzpNHiHFDkM9j4Z8+W kSKKffIVOZ/2C3+69SU9ye+k9Qz6a6X539GP6bkdwXg= -----END CERTIFICATE-----Generated at Mon Apr 7 20:51:44 2025 by rpki-client