$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/iCR8js9Kjxo-UvFyLym6gMzzxnU.roa File: iCR8js9Kjxo-UvFyLym6gMzzxnU.roa (raw, json) Hash identifier: ii5aYtt5XhQPM2f3udyTyKM6wrUZcuHWOG4g66O9puU= Subject key identifier: 88:24:7C:8E:CF:4A:8F:1A:3E:52:F1:72:2F:29:BA:80:CC:F3:C6:75 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1277 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iCR8js9Kjxo-UvFyLym6gMzzxnU.roa Signing time: Mon 10 Feb 2025 14:28:26 +0000 ROA not before: Mon 10 Feb 2025 14:28:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 210.200.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4727 (0x1277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=88247C8ECF4A8F1A3E52F1722F29BA80CCF3C675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0a:8c:e9:b9:d3:ec:64:bc:18:a2:56:3d:81: 15:da:9f:2c:dd:86:7f:b7:00:03:02:32:30:4f:4a: b1:86:7b:62:3a:e5:01:70:ff:68:47:88:08:06:26: ff:ed:1c:c5:fc:18:50:21:b9:a7:bb:39:43:a6:88: 8f:d7:22:b5:3c:eb:9f:8d:ef:d6:c9:88:73:78:c6: 9c:e5:69:93:c4:10:c0:6a:56:20:ec:3a:6b:f4:d4: d4:f5:5d:14:2a:b5:a8:3d:e5:57:1e:fc:90:2d:ae: 58:fa:45:56:15:05:3c:29:ef:89:28:0f:c3:7c:a3: 9e:cf:b4:17:19:6d:13:30:76:c9:46:d7:85:d2:ef: 23:bd:28:76:a9:a9:38:72:a9:00:97:5b:4b:c0:b7: 4f:eb:14:a9:3b:5a:37:f1:10:03:0d:ec:19:dd:ed: 57:de:50:a8:fb:c0:4a:65:75:7e:3b:ad:4a:07:1a: fd:5c:f5:c6:b3:4d:9c:43:8c:e5:24:e1:59:51:7a: 92:86:02:9c:8c:1f:d7:76:09:94:db:07:92:88:3d: 76:c0:b1:b0:42:09:02:81:c6:b2:a6:a0:11:11:b6: fb:b1:3d:42:3e:c1:6e:0d:54:68:b3:18:de:42:8c: de:8f:4b:2e:3d:53:3f:68:8e:db:43:a7:20:58:c5: 1b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:24:7C:8E:CF:4A:8F:1A:3E:52:F1:72:2F:29:BA:80:CC:F3:C6:75 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iCR8js9Kjxo-UvFyLym6gMzzxnU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.128.0/18 Signature Algorithm: sha256WithRSAEncryption 4f:93:67:0e:3e:0b:f9:80:ae:b0:1c:f1:19:ae:aa:84:bc:06: 9d:a2:a6:cf:2e:02:c4:df:ec:75:70:4a:ef:95:13:09:bf:7a: 2b:a2:eb:a2:06:ad:ec:51:70:0c:15:00:74:62:1e:80:80:98: 0f:22:f7:ab:0e:5e:89:26:92:96:a1:a4:94:d3:3d:3f:d4:83: 04:eb:1a:2c:e5:a1:1d:f8:d7:65:b1:fd:6f:ad:fb:f7:90:9d: bc:5e:d7:e5:cc:17:0c:e2:05:31:b2:5e:fb:35:6f:c5:40:37: 9e:13:56:71:3a:40:c7:fe:79:d2:03:13:1a:fb:6f:8f:b5:76: 91:7d:53:3b:80:b5:dd:79:26:3b:55:b3:c1:55:0d:7f:3a:10: 38:a4:ea:75:17:46:00:7f:07:c8:f9:ac:83:6e:9a:f9:a8:b0: e4:e0:ed:30:68:82:f7:bb:fc:b9:a4:98:35:dd:bc:3e:ea:7b: f9:5e:a9:0d:41:f3:a6:41:bb:3f:b3:a4:d5:7d:c4:02:df:76: 3e:7b:66:54:c6:f5:57:3f:82:f9:24:f0:4a:84:66:b9:e5:0e: 2b:79:77:4d:ba:54:ef:81:3b:4d:d1:e8:c1:c8:f4:d0:4a:e8: 2e:0f:04:65:5b:4f:28:5b:5c:08:98:40:42:23:19:50:36:95: 2c:ee:fb:a8 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEncwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg4MjQ3QzhFQ0Y0QThG MUEzRTUyRjE3MjJGMjlCQTgwQ0NGM0M2NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+CozpudPsZLwYolY9gRXanyzdhn+3AAMCMjBPSrGGe2I65QFw /2hHiAgGJv/tHMX8GFAhuae7OUOmiI/XIrU865+N79bJiHN4xpzlaZPEEMBqViDs Omv01NT1XRQqtag95Vce/JAtrlj6RVYVBTwp74koD8N8o57PtBcZbRMwdslG14XS 7yO9KHapqThyqQCXW0vAt0/rFKk7WjfxEAMN7Bnd7VfeUKj7wEpldX47rUoHGv1c 9cazTZxDjOUk4VlRepKGApyMH9d2CZTbB5KIPXbAsbBCCQKBxrKmoBERtvuxPUI+ wW4NVGizGN5CjN6PSy49Uz9ojttDpyBYxRv1AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUiCR8js9Kjxo+UvFyLym6gMzzxnUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2lDUjhqczlLanhvLVV2RnlMeW02Z016 enhuVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSyIAwDQYJ KoZIhvcNAQELBQADggEBAE+TZw4+C/mArrAc8RmuqoS8Bp2ips8uAsTf7HVwSu+V Ewm/eiui66IGrexRcAwVAHRiHoCAmA8i96sOXokmkpahpJTTPT/UgwTrGizloR34 12Wx/W+t+/eQnbxe1+XMFwziBTGyXvs1b8VAN54TVnE6QMf+edIDExr7b4+1dpF9 UzuAtd15JjtVs8FVDX86EDik6nUXRgB/B8j5rINumvmosOTg7TBogve7/LmkmDXd vD7qe/leqQ1B86ZBuz+zpNV9xALfdj57ZlTG9Vc/gvkk8EqEZrnlDit5d026VO+B O03R6MHI9NBK6C4PBGVbTyhbXAiYQEIjGVA2lSzu+6g= -----END CERTIFICATE-----Generated at Mon Apr 7 20:54:12 2025 by rpki-client