$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/cupjYXh-s67ivxCqxDdtV5BHWF8.roa File: cupjYXh-s67ivxCqxDdtV5BHWF8.roa (raw, json) Hash identifier: Tk8AHTwSvG0wAjNN8YT720mABqxi7HOVY6St8YcJ6nI= Subject key identifier: 72:EA:63:61:78:7E:B3:AE:E2:BF:10:AA:C4:37:6D:57:90:47:58:5F Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1207 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/cupjYXh-s67ivxCqxDdtV5BHWF8.roa Signing time: Mon 10 Feb 2025 14:27:59 +0000 ROA not before: Mon 10 Feb 2025 14:27:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131601 IP address blocks: 210.58.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4615 (0x1207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:59 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=72EA6361787EB3AEE2BF10AAC4376D579047585F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0e:66:e2:64:f0:d9:19:8a:48:be:35:e1:a9: 7d:a9:54:2b:77:26:7f:24:8e:9b:0b:8a:c9:70:39: 7d:17:b0:cd:40:bd:29:34:aa:24:02:f6:60:0b:7e: 70:b3:0f:4d:73:ec:d5:5f:3e:d6:ba:18:54:a7:3c: 4b:84:05:88:80:fc:6e:eb:c5:ae:b6:04:bc:b7:5e: 9d:32:8a:e6:72:ae:8d:4d:75:7c:12:63:7a:58:69: 4c:5f:23:53:1f:86:57:f4:fb:f0:e5:7a:d1:64:27: 4b:73:fa:5d:2c:91:e0:93:7b:c6:ca:3c:ea:7e:f3: a5:30:5a:70:40:2b:3d:a5:e9:ec:b5:c7:84:a2:58: 8d:1c:d6:b0:b9:f3:71:77:5c:19:74:60:e7:03:a0: eb:00:11:31:03:3c:22:7a:e2:ff:89:07:b6:65:ff: a4:a4:a3:45:4b:48:dc:76:79:ac:8d:f1:8e:c3:d6: ab:91:6f:c6:d0:54:bc:2e:8a:92:13:e7:98:25:11: 19:7b:83:52:d6:68:64:16:69:bd:06:0d:a7:05:2a: 32:03:57:28:05:18:74:fe:7c:8a:58:06:df:55:73: 7d:1c:1d:1d:c4:28:c0:ef:13:cf:c5:8b:a9:b1:c8: 81:1c:7c:fd:59:34:f8:52:32:d4:61:ec:f0:b9:1c: 68:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EA:63:61:78:7E:B3:AE:E2:BF:10:AA:C4:37:6D:57:90:47:58:5F X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/cupjYXh-s67ivxCqxDdtV5BHWF8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.58.112.0/21 Signature Algorithm: sha256WithRSAEncryption 65:f1:19:82:8e:f3:5e:fb:0a:e8:02:8e:e1:19:9f:05:7c:74: 6f:ce:55:7f:7a:a9:13:e5:a6:0d:d3:5e:5c:2c:a0:10:1e:35: 19:6f:1a:99:c7:c5:a6:8e:7a:35:a7:49:64:d0:b9:03:43:90: 52:e2:1d:dc:b8:2c:9e:a9:3d:d4:6a:39:02:3f:67:38:89:9c: 27:32:43:8f:bd:9c:81:e2:eb:53:4c:70:ae:c8:25:b4:91:34: 57:9d:bf:5d:5a:a8:04:e1:91:54:2c:1f:77:f8:14:4d:9e:c7: 0e:4b:9f:ab:c2:ab:13:9b:4c:ec:0c:1e:80:7e:22:16:9e:b0: 1a:30:18:b9:3c:96:d6:17:4c:af:a1:40:33:fa:23:d8:d2:d6: 84:43:6d:bd:f4:75:c8:da:20:4e:00:c9:ed:24:1d:9c:ba:a0: b4:c8:b4:1f:02:89:ef:e6:c0:c3:8d:db:28:7d:f9:12:20:ed: 27:17:ba:33:23:19:f9:37:22:a7:a1:e5:df:fd:ff:db:62:6a: 9b:e2:be:dc:1f:f8:43:2f:10:3b:56:18:cc:62:2e:17:6d:44: 88:de:70:05:b8:dc:4f:d9:6b:f2:a1:9e:28:97:31:d4:81:79: 8e:29:e1:aa:d9:64:c6:19:67:eb:e1:45:80:cb:fa:98:08:ed: 71:c2:a0:91 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEgcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcyRUE2MzYxNzg3RUIz QUVFMkJGMTBBQUM0Mzc2RDU3OTA0NzU4NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDODmbiZPDZGYpIvjXhqX2pVCt3Jn8kjpsLislwOX0XsM1AvSk0 qiQC9mALfnCzD01z7NVfPta6GFSnPEuEBYiA/G7rxa62BLy3Xp0yiuZyro1NdXwS Y3pYaUxfI1Mfhlf0+/DletFkJ0tz+l0skeCTe8bKPOp+86UwWnBAKz2l6ey1x4Si WI0c1rC583F3XBl0YOcDoOsAETEDPCJ64v+JB7Zl/6Sko0VLSNx2eayN8Y7D1quR b8bQVLwuipIT55glERl7g1LWaGQWab0GDacFKjIDVygFGHT+fIpYBt9Vc30cHR3E KMDvE8/Fi6mxyIEcfP1ZNPhSMtRh7PC5HGghAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUcupjYXh+s67ivxCqxDdtV5BHWF8wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2N1cGpZWGgtczY3aXZ4Q3F4RGR0VjVC SFdGOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPSOnAwDQYJ KoZIhvcNAQELBQADggEBAGXxGYKO8177CugCjuEZnwV8dG/OVX96qRPlpg3TXlws oBAeNRlvGpnHxaaOejWnSWTQuQNDkFLiHdy4LJ6pPdRqOQI/ZziJnCcyQ4+9nIHi 61NMcK7IJbSRNFedv11aqAThkVQsH3f4FE2exw5Ln6vCqxObTOwMHoB+IhaesBow GLk8ltYXTK+hQDP6I9jS1oRDbb30dcjaIE4Aye0kHZy6oLTItB8Cie/mwMON2yh9 +RIg7ScXujMjGfk3Iqeh5d/9/9tiapvivtwf+EMvEDtWGMxiLhdtRIjecAW43E/Z a/KhniiXMdSBeY4p4arZZMYZZ+vhRYDL+pgI7XHCoJE= -----END CERTIFICATE-----Generated at Mon Apr 7 20:51:46 2025 by rpki-client