$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/i_8SCFsqvcQc_0t9pgMAAhi5Big.roa File: i_8SCFsqvcQc_0t9pgMAAhi5Big.roa (raw, json) Hash identifier: 7UFz5Y4MKHV4AuLFFj08aXbrUQCJOEq8ArDP1OOqe7c= Subject key identifier: 8B:FF:12:08:5B:2A:BD:C4:1C:FF:4B:7D:A6:03:00:02:18:B9:06:28 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 126B Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/i_8SCFsqvcQc_0t9pgMAAhi5Big.roa Signing time: Mon 10 Feb 2025 14:28:23 +0000 ROA not before: Mon 10 Feb 2025 14:28:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9922 IP address blocks: 124.218.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4715 (0x126b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:23 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8BFF12085B2ABDC41CFF4B7DA603000218B90628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:15:ce:36:16:c3:4d:98:e5:8d:0f:17:09:5b: bf:0f:2c:3b:b1:cb:e8:a7:5f:c6:f3:6b:f5:29:3c: d4:57:c8:aa:7b:88:9b:37:81:f9:c0:f0:6e:23:37: 48:4e:a0:32:e0:ac:82:92:cf:bf:8f:72:19:e0:b4: 34:2f:f3:fb:f2:c7:65:50:2a:b7:b0:41:8c:8d:4c: a2:09:cd:b7:c7:4a:68:40:07:70:1c:a1:d4:1b:77: 41:8f:b3:89:45:87:ad:a2:70:13:0f:8f:ee:64:fd: 01:36:5c:c0:c8:08:6f:47:0f:02:9e:37:96:58:a0: 7c:49:d0:b5:c0:bd:0c:fb:a9:31:1b:da:14:28:a0: 88:93:f6:01:03:b1:57:6f:bd:5f:5c:a3:bc:8e:53: a6:e1:7e:38:b6:31:d9:38:3e:20:28:00:cb:60:44: 83:4d:cb:22:e2:a9:b3:82:4a:0d:94:06:a7:0e:98: ce:a7:9f:91:d1:e8:82:c4:83:83:01:06:9a:44:4b: 24:46:6c:b0:cc:33:9a:d9:8d:6f:2a:9b:51:d0:8f: b4:87:55:1f:25:5a:46:d9:21:20:2f:22:90:67:7a: 59:77:07:6c:5c:b9:9c:8d:9b:39:ba:42:4b:49:db: fc:a3:96:13:ad:20:91:86:77:ff:de:c0:e7:81:34: 26:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FF:12:08:5B:2A:BD:C4:1C:FF:4B:7D:A6:03:00:02:18:B9:06:28 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/i_8SCFsqvcQc_0t9pgMAAhi5Big.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.176.0/24 Signature Algorithm: sha256WithRSAEncryption 11:ca:79:4c:4a:36:42:1b:74:40:3d:a7:2b:6b:44:f2:2a:0c: ed:7b:08:0e:0d:95:b8:60:86:31:83:15:d5:c1:97:8d:b4:fe: 60:00:c6:ae:5b:ec:d4:3d:9c:84:e0:15:40:5d:62:8e:81:ce: 36:40:cb:6c:bc:92:f3:b4:53:24:2c:67:b2:11:4c:af:7e:83: 83:02:73:6d:af:be:75:c7:2a:c5:89:08:9d:1b:3e:9f:f4:f7: a4:da:99:b8:62:d2:c5:c4:67:fa:f6:bd:3d:4a:0d:26:94:1a: 19:75:dc:05:ef:78:24:d4:1f:d6:2e:43:51:fd:df:84:48:de: 7f:0f:7b:77:3c:01:0d:60:fc:a8:ee:ae:d0:82:85:31:a2:80: 28:c8:b7:30:10:ab:47:d6:4c:b2:03:f8:81:16:28:c1:bf:71: 03:77:9c:36:b1:60:31:fa:18:10:70:f5:51:74:c4:1f:8f:85: 89:ca:9c:61:1e:4b:21:5f:5a:d3:20:7a:83:3f:8f:4f:0e:14: 9a:9b:7a:63:9a:5d:e5:c1:43:5c:66:9a:f7:a1:6c:3e:2e:e5: 91:30:d0:9e:ef:c2:cf:c9:c1:1e:ee:d1:b1:30:0c:dd:1e:11: f6:18:30:89:08:12:cf:cc:24:06:9b:da:23:c3:09:d4:a5:f5: d8:7e:28:38 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEmswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhCRkYxMjA4NUIyQUJE QzQxQ0ZGNEI3REE2MDMwMDAyMThCOTA2MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAFc42FsNNmOWNDxcJW78PLDuxy+inX8bza/UpPNRXyKp7iJs3 gfnA8G4jN0hOoDLgrIKSz7+PchngtDQv8/vyx2VQKrewQYyNTKIJzbfHSmhAB3Ac odQbd0GPs4lFh62icBMPj+5k/QE2XMDICG9HDwKeN5ZYoHxJ0LXAvQz7qTEb2hQo oIiT9gEDsVdvvV9co7yOU6bhfji2Mdk4PiAoAMtgRINNyyLiqbOCSg2UBqcOmM6n n5HR6ILEg4MBBppESyRGbLDMM5rZjW8qm1HQj7SHVR8lWkbZISAvIpBnell3B2xc uZyNmzm6QktJ2/yjlhOtIJGGd//ewOeBNCZLAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUi/8SCFsqvcQc/0t9pgMAAhi5BigwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2lfOFNDRnNxdmNRY18wdDlwZ01BQWhp NUJpZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB82rAwDQYJ KoZIhvcNAQELBQADggEBABHKeUxKNkIbdEA9pytrRPIqDO17CA4NlbhghjGDFdXB l420/mAAxq5b7NQ9nITgFUBdYo6BzjZAy2y8kvO0UyQsZ7IRTK9+g4MCc22vvnXH KsWJCJ0bPp/096Tambhi0sXEZ/r2vT1KDSaUGhl13AXveCTUH9YuQ1H934RI3n8P e3c8AQ1g/KjurtCChTGigCjItzAQq0fWTLID+IEWKMG/cQN3nDaxYDH6GBBw9VF0 xB+PhYnKnGEeSyFfWtMgeoM/j08OFJqbemOaXeXBQ1xmmvehbD4u5ZEw0J7vws/J wR7u0bEwDN0eEfYYMIkIEs/MJAab2iPDCdSl9dh+KDg= -----END CERTIFICATE-----Generated at Mon Apr 7 20:54:16 2025 by rpki-client