$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/jM2a_Q-hbwsXMWEOzyXSkVGNgfU.roa File: jM2a_Q-hbwsXMWEOzyXSkVGNgfU.roa (raw, json) Hash identifier: ZdVahmJk8lLVrsCamHN9FSVV2qU89K1sJOEvUo6bA88= Subject key identifier: 8C:CD:9A:FD:0F:A1:6F:0B:17:31:61:0E:CF:25:D2:91:51:8D:81:F5 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1212 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/jM2a_Q-hbwsXMWEOzyXSkVGNgfU.roa Signing time: Mon 10 Feb 2025 14:28:01 +0000 ROA not before: Mon 10 Feb 2025 14:28:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38843 IP address blocks: 210.58.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4626 (0x1212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:01 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8CCD9AFD0FA16F0B1731610ECF25D291518D81F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c8:64:e4:0d:47:16:82:39:0a:35:77:e3:50: dd:c7:35:b1:bb:ea:25:f4:19:d7:fe:28:d5:fe:c3: bb:c0:0e:16:e0:06:e2:6c:b3:de:a7:bd:9f:2b:d9: f7:47:37:c9:66:fb:dc:c3:26:85:73:61:02:ad:d0: c4:fb:6e:1c:c8:05:52:f8:cb:c2:55:81:37:6c:df: 84:f8:df:87:7d:9b:e7:72:28:72:31:be:90:c6:62: fd:03:33:ad:9a:53:77:2a:99:16:99:23:df:45:98: 73:2d:af:f0:45:37:15:1c:8d:6c:d1:21:ca:03:9e: 2b:6d:15:c1:a8:8c:8a:2d:e2:d6:54:9f:28:a7:ab: ba:d7:0c:74:ae:83:c9:93:1f:d7:07:ad:91:c6:22: 2b:e8:4e:79:3b:23:d2:d4:55:c6:5a:ad:fb:3f:87: ff:26:c0:8f:c3:3e:7b:eb:21:6b:78:f1:95:99:38: 74:01:1d:31:c6:6d:d4:5e:0f:68:75:f4:79:f6:e6: e7:22:72:dc:2e:c9:10:aa:d8:3f:92:a2:02:1e:1a: ad:68:0a:55:48:4f:79:ae:68:cf:37:2c:89:a0:80: 7d:d6:a7:bc:a4:c5:99:2a:37:19:bd:1e:71:5b:77: 7e:70:73:99:79:55:d9:c4:2b:7e:74:40:ce:b7:11: fc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CD:9A:FD:0F:A1:6F:0B:17:31:61:0E:CF:25:D2:91:51:8D:81:F5 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/jM2a_Q-hbwsXMWEOzyXSkVGNgfU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.58.92.0/24 Signature Algorithm: sha256WithRSAEncryption 64:63:50:58:ba:92:c7:fc:1d:1a:b1:3c:df:cf:2a:cc:5d:46: 91:9a:59:ea:96:c5:fb:f5:f9:59:5b:a7:ab:db:2b:e7:7f:75: f1:c7:00:5c:8e:15:a4:28:e0:0c:7e:22:62:9f:62:0b:ee:1b: 21:30:16:a9:2d:0f:ba:2c:e1:83:e4:5d:08:c4:12:23:e4:60: f1:dc:86:7b:e7:2d:e1:95:c7:c2:4e:b2:fe:ec:f7:1a:2c:af: 7e:44:ed:f8:6f:1d:ac:62:17:b7:06:ea:18:e6:2a:19:89:ac: 6d:9f:cb:e3:bf:a8:7f:08:9f:af:82:d7:79:2d:27:90:8d:49: de:16:81:4b:ce:e4:c3:aa:8b:0b:7b:cc:a5:50:1f:c0:a8:f7: 9d:d7:9d:50:e4:2c:0c:7d:af:18:8d:86:b4:43:1b:1c:1b:e8: ad:a6:15:ab:b0:24:82:ce:6b:17:16:48:e3:1b:b2:59:ff:a9: 96:9b:2c:1c:e8:3f:0f:b7:8b:d5:5f:ba:18:84:a6:47:1f:82: 0c:76:e0:c2:b3:eb:a5:93:40:de:3f:25:3f:bc:8f:1c:38:8d: 4b:cd:b8:32:01:97:d7:0d:76:0d:8d:36:d3:b8:c6:de:f5:06: 82:a2:4d:ec:86:8c:38:10:90:79:e3:cb:73:13:9f:53:83:c6: c7:cc:e4:59 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEhIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhDQ0Q5QUZEMEZBMTZG MEIxNzMxNjEwRUNGMjVEMjkxNTE4RDgxRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTyGTkDUcWgjkKNXfjUN3HNbG76iX0Gdf+KNX+w7vADhbgBuJs s96nvZ8r2fdHN8lm+9zDJoVzYQKt0MT7bhzIBVL4y8JVgTds34T434d9m+dyKHIx vpDGYv0DM62aU3cqmRaZI99FmHMtr/BFNxUcjWzRIcoDnittFcGojIot4tZUnyin q7rXDHSug8mTH9cHrZHGIivoTnk7I9LUVcZarfs/h/8mwI/DPnvrIWt48ZWZOHQB HTHGbdReD2h19Hn25ucictwuyRCq2D+SogIeGq1oClVIT3muaM83LImggH3Wp7yk xZkqNxm9HnFbd35wc5l5VdnEK350QM63EfyvAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUjM2a/Q+hbwsXMWEOzyXSkVGNgfUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2pNMmFfUS1oYndzWE1XRU96eVhTa1ZH TmdmVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSOlwwDQYJ KoZIhvcNAQELBQADggEBAGRjUFi6ksf8HRqxPN/PKsxdRpGaWeqWxfv1+Vlbp6vb K+d/dfHHAFyOFaQo4Ax+ImKfYgvuGyEwFqktD7os4YPkXQjEEiPkYPHchnvnLeGV x8JOsv7s9xosr35E7fhvHaxiF7cG6hjmKhmJrG2fy+O/qH8In6+C13ktJ5CNSd4W gUvO5MOqiwt7zKVQH8Co953XnVDkLAx9rxiNhrRDGxwb6K2mFauwJILOaxcWSOMb sln/qZabLBzoPw+3i9VfuhiEpkcfggx24MKz66WTQN4/JT+8jxw4jUvNuDIBl9cN dg2NNtO4xt71BoKiTeyGjDgQkHnjy3MTn1ODxsfM5Fk= -----END CERTIFICATE-----Generated at Mon Apr 7 20:51:56 2025 by rpki-client