$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/lV6cqie8uvddM58aKuJUsCretJ4.roa File: lV6cqie8uvddM58aKuJUsCretJ4.roa (raw, json) Hash identifier: a14R6xbjAOeuUuLZZ3cNLez7Imzudth3O8BScXSnIh8= Subject key identifier: 95:5E:9C:AA:27:BC:BA:F7:5D:33:9F:1A:2A:E2:54:B0:2A:DE:B4:9E Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1199 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/lV6cqie8uvddM58aKuJUsCretJ4.roa Signing time: Mon 10 Feb 2025 14:27:31 +0000 ROA not before: Mon 10 Feb 2025 14:27:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 218.34.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4505 (0x1199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=955E9CAA27BCBAF75D339F1A2AE254B02ADEB49E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a9:b8:22:1a:c7:03:25:a0:9d:00:fd:f0:40: 59:93:1f:c5:d1:cc:18:de:8e:2e:00:03:37:fe:9a: 6c:dc:e1:1b:18:4f:ca:dd:23:8d:68:52:b6:66:2a: 65:a0:8c:46:cd:47:64:fd:2e:8d:57:11:9f:62:92: ed:11:67:ef:d2:fa:29:04:b0:1f:67:1c:39:9d:59: eb:e9:8b:c0:a4:8a:46:30:4c:d8:f3:b9:8e:f8:45: b9:d1:a9:69:50:75:b1:a9:17:1a:a8:74:9f:b9:76: d0:59:16:2d:5b:00:34:03:0d:aa:f1:3b:b1:12:58: 6a:37:c1:c8:d2:be:6f:ba:7e:97:a9:88:a1:bf:6d: 89:df:cb:da:4d:34:75:2f:2b:3e:9e:d6:c8:76:02: ea:ff:63:5d:7f:4e:af:fd:48:f8:fb:a6:b9:06:a8: 0a:e1:59:25:e5:f6:e5:69:bc:92:d3:59:d9:7d:54: c6:81:f1:27:1b:0b:e2:c1:1d:1d:02:e6:34:57:34: 7f:84:51:68:71:04:8e:41:94:f7:f4:48:db:f3:d3: d0:57:cc:db:90:4a:e3:00:a9:9f:b1:28:87:3f:d0: 5f:78:f4:9d:ae:e9:0e:2a:4d:e2:6a:aa:2d:ba:0e: 72:92:3b:d0:ad:4d:e3:18:00:25:9b:58:e2:75:e3: 3c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5E:9C:AA:27:BC:BA:F7:5D:33:9F:1A:2A:E2:54:B0:2A:DE:B4:9E X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/lV6cqie8uvddM58aKuJUsCretJ4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.34.0.0/16 Signature Algorithm: sha256WithRSAEncryption 06:68:61:54:3a:d6:05:b4:1b:24:63:71:da:2d:7a:3d:98:41: db:f2:1e:37:95:1b:26:f8:9b:f9:9b:90:1a:df:f8:d8:e1:a5: 87:9a:35:1b:d1:34:be:95:69:28:4d:ad:1b:f6:39:55:f4:3f: 55:3d:ce:00:09:33:35:b3:d7:79:64:cf:84:cd:2c:86:49:92: 9f:07:e8:dc:58:e6:73:47:b2:4e:9d:38:96:c3:ac:d3:72:17: c8:93:98:67:07:3f:23:c2:83:69:e9:b8:e9:6d:d6:b7:25:ab: 3d:90:08:dc:3b:b7:b7:8b:37:49:65:5e:bf:b7:a2:15:da:e3: 15:b4:a9:1c:f4:e1:06:4a:14:10:ed:c6:f2:f2:f1:2d:f8:34: 72:3a:c2:83:fc:0f:98:4a:f7:a4:a5:6e:5d:6e:fd:e8:ab:54: 06:49:12:b9:ba:51:cc:de:80:2f:90:7e:99:54:48:2a:32:4d: 34:93:09:bd:ba:18:de:f0:23:7f:0e:4c:46:9f:62:18:bd:d4: eb:dc:a5:42:69:d2:ed:5a:df:a1:80:05:a7:ae:d4:04:96:b1: 5a:61:8c:3d:c6:e0:bf:ed:7f:96:8e:fc:24:2d:07:8b:66:ce: 95:28:1e:c3:4a:9e:92:e7:bb:53:8c:77:19:ee:ed:3c:fa:87: 14:4f:8f:c3 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEZkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3MzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk1NUU5Q0FBMjdCQ0JB Rjc1RDMzOUYxQTJBRTI1NEIwMkFERUI0OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKqbgiGscDJaCdAP3wQFmTH8XRzBjeji4AAzf+mmzc4RsYT8rd I41oUrZmKmWgjEbNR2T9Lo1XEZ9iku0RZ+/S+ikEsB9nHDmdWevpi8CkikYwTNjz uY74RbnRqWlQdbGpFxqodJ+5dtBZFi1bADQDDarxO7ESWGo3wcjSvm+6fpepiKG/ bYnfy9pNNHUvKz6e1sh2Aur/Y11/Tq/9SPj7prkGqArhWSXl9uVpvJLTWdl9VMaB 8ScbC+LBHR0C5jRXNH+EUWhxBI5BlPf0SNvz09BXzNuQSuMAqZ+xKIc/0F949J2u 6Q4qTeJqqi26DnKSO9CtTeMYACWbWOJ14zyzAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUlV6cqie8uvddM58aKuJUsCretJ4wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2xWNmNxaWU4dXZkZE01OGFLdUpVc0Ny ZXRKNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDaIjANBgkq hkiG9w0BAQsFAAOCAQEABmhhVDrWBbQbJGNx2i16PZhB2/IeN5UbJvib+ZuQGt/4 2OGlh5o1G9E0vpVpKE2tG/Y5VfQ/VT3OAAkzNbPXeWTPhM0shkmSnwfo3Fjmc0ey Tp04lsOs03IXyJOYZwc/I8KDaem46W3WtyWrPZAI3Du3t4s3SWVev7eiFdrjFbSp HPThBkoUEO3G8vLxLfg0cjrCg/wPmEr3pKVuXW796KtUBkkSubpRzN6AL5B+mVRI KjJNNJMJvboY3vAjfw5MRp9iGL3U69ylQmnS7VrfoYAFp67UBJaxWmGMPcbgv+1/ lo78JC0Hi2bOlSgew0qekue7U4x3Ge7tPPqHFE+Pww== -----END CERTIFICATE-----Generated at Mon Apr 7 20:51:51 2025 by rpki-client