$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/mSLRxSpZ0pva_7veH8ZoUDhHb60.roa File: mSLRxSpZ0pva_7veH8ZoUDhHb60.roa (raw, json) Hash identifier: eOtSzypMNVaKSzK5dcdMRVhdNbQ0VsYI8koBNOdo+rk= Subject key identifier: 99:22:D1:C5:2A:59:D2:9B:DA:FF:BB:DE:1F:C6:68:50:38:47:6F:AD Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 11BC Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/mSLRxSpZ0pva_7veH8ZoUDhHb60.roa Signing time: Mon 10 Feb 2025 14:27:40 +0000 ROA not before: Mon 10 Feb 2025 14:27:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 210.202.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4540 (0x11bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:40 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9922D1C52A59D29BDAFFBBDE1FC6685038476FAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:14:ba:32:d5:74:98:64:af:f4:44:5a:2f:12: b6:53:96:24:18:2c:1a:cc:8b:1b:f6:9e:b5:45:b7: 88:cc:3f:dd:95:9b:c9:f4:5b:bd:b7:f8:c2:4a:5b: af:0a:4f:ef:ba:34:9f:13:a4:cb:11:97:d2:9e:64: 92:df:0c:f6:94:2d:f7:6a:a2:65:b9:bb:8a:10:50: e4:b7:ba:9b:a5:e7:a9:dd:9d:50:44:dc:d7:f3:17: 9a:18:29:7a:2b:13:a9:48:11:77:b8:65:76:f4:02: 4c:2e:a3:5c:d3:a3:fc:66:cb:49:dc:f4:e7:a8:57: 00:1b:07:8c:47:86:f6:55:64:fb:33:aa:cc:60:d2: 0e:9a:c2:3c:9c:7b:70:9e:8e:55:00:1b:72:c3:cb: 5b:4b:62:a0:66:38:82:38:5a:59:6f:cd:cc:91:a2: e2:ed:00:fd:14:13:1d:2c:f5:a5:be:4f:09:23:93: 71:e4:22:d6:e0:2e:0f:ce:53:13:da:a1:a4:3c:df: 9b:b7:8c:9a:f4:73:13:c7:41:33:f7:6b:fe:a6:e2: e9:6d:e4:ac:c4:45:79:f1:03:8d:a4:64:e6:89:c3: 91:f1:44:fd:73:0d:ab:d4:08:cb:25:f8:2d:78:32: bf:57:1a:0f:86:c6:1d:19:3c:ae:22:42:7f:76:7c: 0b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:22:D1:C5:2A:59:D2:9B:DA:FF:BB:DE:1F:C6:68:50:38:47:6F:AD X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/mSLRxSpZ0pva_7veH8ZoUDhHb60.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.202.128.0/17 Signature Algorithm: sha256WithRSAEncryption 67:0d:51:48:01:0f:b5:09:c0:c5:49:2d:13:3e:d7:ac:04:35: 1e:9a:bb:80:aa:46:70:1a:25:f6:09:b3:b1:69:d8:62:da:02: cc:f7:00:62:09:d0:3e:dc:68:ed:12:d4:55:4c:90:ca:39:60: dd:1c:f5:d1:58:e4:06:0f:e1:4f:02:49:ce:bd:27:56:f8:14: 8e:de:c9:cf:e9:29:f5:9c:50:bf:8e:57:45:dc:ff:ff:9b:2d: 3d:84:70:e3:a1:5a:03:d1:f1:4d:75:74:3c:3d:9e:1d:2d:aa: fe:ad:1b:1a:17:75:9b:99:21:ef:54:9e:3b:0f:0a:a9:85:47: 2a:9c:c6:a3:d6:86:83:16:66:5a:87:a8:80:ee:42:43:eb:35: 4b:0d:3a:a0:36:12:17:1a:61:ad:56:9d:53:08:18:12:0f:00: 41:63:15:b7:51:e8:1d:b1:39:6a:1f:d0:ba:9d:4e:04:ef:ed: 8b:7e:95:4a:51:73:82:c5:43:59:ab:9b:69:c4:ca:28:54:d1: b8:6c:bd:bf:be:0e:63:6e:36:3c:ed:82:87:fe:42:48:21:5e: 9e:7c:ea:7b:e1:81:e0:e9:db:f3:d9:c1:21:d7:ab:6a:5a:ea: 38:e6:37:d5:b7:1c:aa:21:1a:0d:25:9a:b7:a3:c0:3b:a5:f0: 5d:89:58:86 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk5MjJEMUM1MkE1OUQy OUJEQUZGQkJERTFGQzY2ODUwMzg0NzZGQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKFLoy1XSYZK/0RFovErZTliQYLBrMixv2nrVFt4jMP92Vm8n0 W723+MJKW68KT++6NJ8TpMsRl9KeZJLfDPaULfdqomW5u4oQUOS3upul56ndnVBE 3NfzF5oYKXorE6lIEXe4ZXb0Akwuo1zTo/xmy0nc9OeoVwAbB4xHhvZVZPszqsxg 0g6awjyce3CejlUAG3LDy1tLYqBmOII4WllvzcyRouLtAP0UEx0s9aW+Twkjk3Hk ItbgLg/OUxPaoaQ835u3jJr0cxPHQTP3a/6m4ult5KzERXnxA42kZOaJw5HxRP1z DavUCMsl+C14Mr9XGg+Gxh0ZPK4iQn92fAtPAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUmSLRxSpZ0pva/7veH8ZoUDhHb60wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL21TTFJ4U3BaMHB2YV83dmVIOFpvVURo SGI2MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfSyoAwDQYJ KoZIhvcNAQELBQADggEBAGcNUUgBD7UJwMVJLRM+16wENR6au4CqRnAaJfYJs7Fp 2GLaAsz3AGIJ0D7caO0S1FVMkMo5YN0c9dFY5AYP4U8CSc69J1b4FI7eyc/pKfWc UL+OV0Xc//+bLT2EcOOhWgPR8U11dDw9nh0tqv6tGxoXdZuZIe9UnjsPCqmFRyqc xqPWhoMWZlqHqIDuQkPrNUsNOqA2EhcaYa1WnVMIGBIPAEFjFbdR6B2xOWof0Lqd TgTv7Yt+lUpRc4LFQ1mrm2nEyihU0bhsvb++DmNuNjztgof+QkghXp586nvhgeDp 2/PZwSHXq2pa6jjmN9W3HKohGg0lmrejwDul8F2JWIY= -----END CERTIFICATE-----Generated at Mon Apr 7 20:56:41 2025 by rpki-client