$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/eW9D9L720jtmA3KRY3O8SUZe_yg.roa File: eW9D9L720jtmA3KRY3O8SUZe_yg.roa (raw, json) Hash identifier: H07vXhVEWqB1zi8DRSMpwmWp3i5LDqky0BaNpcsXOw8= Subject key identifier: 79:6F:43:F4:BE:F6:D2:3B:66:03:72:91:63:73:BC:49:46:5E:FF:28 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1226 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/eW9D9L720jtmA3KRY3O8SUZe_yg.roa Signing time: Mon 10 Feb 2025 14:28:07 +0000 ROA not before: Mon 10 Feb 2025 14:28:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9674 IP address blocks: 211.77.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4646 (0x1226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=796F43F4BEF6D23B660372916373BC49465EFF28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b8:d4:80:83:34:87:45:1a:c1:57:8e:b8:e7: ec:c0:26:96:f5:35:cf:32:8e:00:9c:5b:ce:62:50: 1d:4b:e8:74:e9:4d:b5:2a:a7:cd:a7:aa:93:b5:34: 1a:e9:3f:fb:f0:bb:60:7a:99:81:5f:24:73:b8:12: d2:a0:51:36:36:35:80:f1:1d:1f:a9:ba:e5:8b:d9: da:34:28:3c:91:a1:7e:ed:3f:cf:c2:a8:54:22:bd: 20:1c:18:a8:27:89:e3:d7:7c:19:49:10:c5:6d:06: 3d:95:ed:58:df:0d:98:41:e7:9d:99:eb:59:ee:c1: ca:f6:79:bc:09:85:d8:bb:c6:b3:06:86:81:e3:c3: 65:1c:cc:b5:b1:cb:91:86:d2:70:d0:18:1b:4c:64: 77:5a:4e:1e:a1:5f:e1:e4:3b:44:b0:d7:79:d2:91: 79:c5:bc:cc:6e:63:b4:a4:0a:0e:c4:a4:2b:45:da: 66:e4:f5:5d:3f:3b:37:69:38:03:78:bf:2b:79:da: 0a:93:af:e0:83:d5:b4:8e:a4:cf:d4:c7:ca:59:51: 91:5e:22:60:c1:8e:69:13:c1:0f:62:e6:46:32:35: 3b:93:3f:e4:a4:8c:c4:d3:10:b5:b9:c2:ec:34:0e: 14:06:30:3d:a6:38:3b:a4:8a:92:e3:67:f9:0a:f4: 0b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6F:43:F4:BE:F6:D2:3B:66:03:72:91:63:73:BC:49:46:5E:FF:28 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/eW9D9L720jtmA3KRY3O8SUZe_yg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.77.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5a:e2:e7:cc:f8:14:dc:2a:bd:73:91:77:1c:d7:19:e5:b2:e8: a5:2e:cf:fe:72:25:5d:11:64:1c:54:16:83:cb:59:c3:75:b9: ed:3d:0c:2c:2a:a3:b1:1a:1c:5f:f9:8a:3f:1a:53:9d:60:fb: 0a:45:43:38:d7:d4:01:a7:4c:5f:b5:f2:07:0c:22:fb:b2:f0: fa:41:d0:c4:19:e6:16:2e:df:9b:14:a0:95:79:95:48:2d:7b: fd:dd:33:31:ab:a2:01:a2:ca:01:4d:08:77:68:dd:fc:19:93: 5e:a2:af:56:db:c1:3f:6d:e9:ff:56:d3:22:47:83:26:ec:cc: 85:55:6d:8f:03:8e:6d:3c:df:38:d7:0d:4f:9b:0d:e1:f7:f2: 17:77:18:ca:ae:dd:e7:6b:e9:7a:7e:f9:3a:80:bf:cc:a8:14: e4:57:5d:73:8c:03:4a:8d:2d:84:09:34:53:ac:ef:61:a2:be: de:bf:e2:a4:20:b0:8f:dc:c5:1e:ef:b6:32:4b:39:48:0b:e3: a9:fa:d8:23:5b:33:d8:43:33:34:e9:b8:52:c4:2d:69:a0:50: 41:8b:c3:6c:26:b8:6d:ff:ce:65:a9:d0:f3:02:00:ba:54:0e: 8c:d8:60:2e:b1:f5:0f:73:7b:9b:85:f2:ab:56:19:cb:26:dd: 43:39:e3:bf -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEiYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc5NkY0M0Y0QkVGNkQy M0I2NjAzNzI5MTYzNzNCQzQ5NDY1RUZGMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjuNSAgzSHRRrBV4645+zAJpb1Nc8yjgCcW85iUB1L6HTpTbUq p82nqpO1NBrpP/vwu2B6mYFfJHO4EtKgUTY2NYDxHR+puuWL2do0KDyRoX7tP8/C qFQivSAcGKgniePXfBlJEMVtBj2V7VjfDZhB552Z61nuwcr2ebwJhdi7xrMGhoHj w2UczLWxy5GG0nDQGBtMZHdaTh6hX+HkO0Sw13nSkXnFvMxuY7SkCg7EpCtF2mbk 9V0/OzdpOAN4vyt52gqTr+CD1bSOpM/Ux8pZUZFeImDBjmkTwQ9i5kYyNTuTP+Sk jMTTELW5wuw0DhQGMD2mODukipLjZ/kK9AtlAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUeW9D9L720jtmA3KRY3O8SUZe/ygwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2VXOUQ5TDcyMGp0bUEzS1JZM084U1Va ZV95Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDTTTANBgkq hkiG9w0BAQsFAAOCAQEAWuLnzPgU3Cq9c5F3HNcZ5bLopS7P/nIlXRFkHFQWg8tZ w3W57T0MLCqjsRocX/mKPxpTnWD7CkVDONfUAadMX7XyBwwi+7Lw+kHQxBnmFi7f mxSglXmVSC17/d0zMauiAaLKAU0Id2jd/BmTXqKvVtvBP23p/1bTIkeDJuzMhVVt jwOObTzfONcNT5sN4ffyF3cYyq7d52vpen75OoC/zKgU5Fddc4wDSo0thAk0U6zv YaK+3r/ipCCwj9zFHu+2Mks5SAvjqfrYI1sz2EMzNOm4UsQtaaBQQYvDbCa4bf/O ZanQ8wIAulQOjNhgLrH1D3N7m4Xyq1YZyybdQznjvw== -----END CERTIFICATE-----Generated at Mon Apr 7 20:56:37 2025 by rpki-client