$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/fQDPGVLxFciI12zmEPWW3qaiBpU.roa File: fQDPGVLxFciI12zmEPWW3qaiBpU.roa (raw, json) Hash identifier: qTlI53+FRXrkV3nGE4MMgxihmZ9+XxtoIckag+wRlKw= Subject key identifier: 7D:00:CF:19:52:F1:15:C8:88:D7:6C:E6:10:F5:96:DE:A6:A2:06:95 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 11E8 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/fQDPGVLxFciI12zmEPWW3qaiBpU.roa Signing time: Mon 10 Feb 2025 14:27:52 +0000 ROA not before: Mon 10 Feb 2025 14:27:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9311 IP address blocks: 210.201.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4584 (0x11e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7D00CF1952F115C888D76CE610F596DEA6A20695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:18:72:07:77:92:a2:b7:b8:c1:c7:fc:ed:c6: e0:1e:8a:7a:fd:5d:4b:d6:13:ca:4e:2f:c3:83:42: f3:31:85:1e:8c:9b:bc:8f:9a:71:6e:a6:c0:e1:ea: 67:45:00:d8:72:cf:63:0c:d0:19:b6:1c:e1:1a:d1: 32:e3:e1:13:c2:c0:4d:a7:1c:17:dc:8a:d4:a7:a5: 3d:73:dd:09:c8:b2:30:2d:7d:37:30:29:64:5d:56: b2:73:9b:54:96:d2:e5:68:fe:d4:38:96:81:cb:02: e6:c9:ec:78:5c:fc:44:16:fd:2a:2c:28:61:32:5f: 21:e5:e6:f7:db:c4:45:d2:0e:3b:a5:c5:61:46:68: 25:b0:ac:d9:01:63:c7:47:b6:10:0d:1f:7a:8b:c6: 78:3b:64:71:96:ac:cf:9d:6d:88:72:7c:b3:ad:6a: be:d5:4b:9d:14:a3:00:e6:e8:b3:fe:47:c8:9f:69: dc:7e:77:49:37:d0:aa:63:dc:44:3f:da:8e:58:1c: e4:14:d0:66:49:0c:4d:69:6f:21:31:8f:6b:0c:3e: 25:b9:6c:48:fe:69:b5:65:4f:b6:38:6c:76:dc:5a: 0a:4e:61:c7:69:04:76:38:97:f1:47:2b:2e:7f:0a: 09:bc:23:42:d7:1f:74:02:7a:0f:fa:f9:49:36:57: 07:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:00:CF:19:52:F1:15:C8:88:D7:6C:E6:10:F5:96:DE:A6:A2:06:95 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/fQDPGVLxFciI12zmEPWW3qaiBpU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.201.80.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:ac:30:b4:32:f9:03:30:2e:db:0a:7c:39:7e:3c:34:d8:12: 64:09:07:77:ca:35:ff:f0:2d:21:1a:e7:3a:85:3e:67:7a:29: 2b:cb:2c:44:c4:f0:ac:30:07:21:71:bd:cf:86:65:cb:30:a9: ca:9f:07:8a:f6:e8:94:c8:a7:35:38:5f:a5:a8:17:f3:8a:52: bd:50:6d:cc:19:9a:9d:9f:7f:09:ce:9d:24:21:ba:be:e2:c5: 3b:c6:1f:74:c9:dd:94:38:56:4e:19:20:a8:8d:a6:38:ed:79: a8:11:54:3a:17:bc:b6:8f:1e:6e:c9:b2:61:db:f0:a6:5b:c8: b7:ce:ef:88:2e:94:04:e6:e0:82:65:a5:af:80:e7:70:c0:94: de:90:06:7b:0f:75:a0:2d:47:9a:21:fc:43:5d:7d:c9:93:77: 8b:77:1a:01:ad:03:1b:40:1a:b9:c0:17:2a:9c:bf:88:ad:22: 6b:b2:a0:f6:09:98:30:c2:06:64:b1:4a:02:5e:cb:fc:a2:58: 82:fb:8a:41:8b:d1:d3:72:26:c6:0f:50:5b:21:4d:a3:76:c7: fa:9c:21:e1:f5:5a:20:d4:83:85:ec:a8:5d:fd:c5:30:ad:88: d8:2a:55:a4:5d:70:a9:f0:23:ce:c5:a1:77:bb:aa:86:d8:46: a1:a7:84:e5 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEegwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdEMDBDRjE5NTJGMTE1 Qzg4OEQ3NkNFNjEwRjU5NkRFQTZBMjA2OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJGHIHd5Kit7jBx/ztxuAeinr9XUvWE8pOL8ODQvMxhR6Mm7yP mnFupsDh6mdFANhyz2MM0Bm2HOEa0TLj4RPCwE2nHBfcitSnpT1z3QnIsjAtfTcw KWRdVrJzm1SW0uVo/tQ4loHLAubJ7Hhc/EQW/SosKGEyXyHl5vfbxEXSDjulxWFG aCWwrNkBY8dHthANH3qLxng7ZHGWrM+dbYhyfLOtar7VS50UowDm6LP+R8ifadx+ d0k30Kpj3EQ/2o5YHOQU0GZJDE1pbyExj2sMPiW5bEj+abVlT7Y4bHbcWgpOYcdp BHY4l/FHKy5/Cgm8I0LXH3QCeg/6+Uk2VwfPAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUfQDPGVLxFciI12zmEPWW3qaiBpUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2ZRRFBHVkx4RmNpSTEyem1FUFdXM3Fh aUJwVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSyVAwDQYJ KoZIhvcNAQELBQADggEBAC6sMLQy+QMwLtsKfDl+PDTYEmQJB3fKNf/wLSEa5zqF Pmd6KSvLLETE8KwwByFxvc+GZcswqcqfB4r26JTIpzU4X6WoF/OKUr1QbcwZmp2f fwnOnSQhur7ixTvGH3TJ3ZQ4Vk4ZIKiNpjjteagRVDoXvLaPHm7JsmHb8KZbyLfO 74gulATm4IJlpa+A53DAlN6QBnsPdaAtR5oh/ENdfcmTd4t3GgGtAxtAGrnAFyqc v4itImuyoPYJmDDCBmSxSgJey/yiWIL7ikGL0dNyJsYPUFshTaN2x/qcIeH1WiDU g4XsqF39xTCtiNgqVaRdcKnwI87FoXe7qobYRqGnhOU= -----END CERTIFICATE-----Generated at Mon Apr 7 20:51:45 2025 by rpki-client