$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/moYjKYpoSr1SG0C7NjYHk97zPac.roa File: moYjKYpoSr1SG0C7NjYHk97zPac.roa (raw, json) Hash identifier: oQxeX+Po8bMuw0wUvGrt5ZAl7iTwohEsFbUadpoSG+c= Subject key identifier: 9A:86:23:29:8A:68:4A:BD:52:1B:40:BB:36:36:07:93:DE:F3:3D:A7 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 11BF Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/moYjKYpoSr1SG0C7NjYHk97zPac.roa Signing time: Mon 10 Feb 2025 14:27:40 +0000 ROA not before: Mon 10 Feb 2025 14:27:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131591 IP address blocks: 2404:0:8000::/36 maxlen: 56 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4543 (0x11bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:40 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9A8623298A684ABD521B40BB36360793DEF33DA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1a:35:07:12:5f:d7:8f:1a:df:07:fd:de:4f: 65:9c:fd:37:b3:1b:cd:48:5b:9a:0f:b5:32:c7:e7: 8f:44:b0:90:3d:4d:89:32:a2:02:96:42:9a:d4:c0: 7d:a6:62:06:87:1e:48:5a:75:47:a0:6c:5b:e0:b8: 49:04:76:e0:a9:da:35:67:49:21:9e:27:32:e4:c4: 88:3d:24:0f:cb:55:0e:b6:ab:31:da:c4:79:a3:2d: 50:26:bd:f0:d2:06:62:d9:8a:14:0c:df:4d:48:37: 47:28:cd:c0:6a:5f:0c:6c:ce:d1:d8:d2:b4:e0:b8: 15:9a:36:49:cf:b9:11:77:df:37:d6:b6:39:37:08: f3:0a:6b:f1:66:2b:e5:e3:1a:21:f6:e4:60:fd:20: 7a:75:84:bd:9f:a4:f8:e1:d1:43:03:14:bc:37:da: 00:d4:9f:9b:6a:5a:b0:14:8e:be:23:2c:c7:60:d4: 73:51:71:94:93:29:62:ef:3a:85:80:69:2d:8a:12: ff:61:9e:9c:8f:c6:72:4e:04:e4:c0:bb:9b:49:a6: 80:24:44:cf:4d:2d:c8:69:bf:e2:68:73:70:68:71: 71:4a:51:9d:f2:ca:e6:8d:c6:40:19:e4:8f:32:e8: 71:07:67:f9:0a:bd:23:11:44:e9:50:67:fa:4a:f3: 29:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:86:23:29:8A:68:4A:BD:52:1B:40:BB:36:36:07:93:DE:F3:3D:A7 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/moYjKYpoSr1SG0C7NjYHk97zPac.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:0:8000::/36 Signature Algorithm: sha256WithRSAEncryption 11:be:dd:85:4e:e3:46:c3:8d:31:1e:65:2e:9d:67:76:a2:52: 8a:13:b0:17:f1:9e:43:00:13:5c:aa:90:d8:c8:11:d7:15:db: 3f:79:fc:fa:d4:1f:fe:dc:34:f5:bf:5f:29:13:2f:5e:c4:df: 58:65:23:90:9b:d0:20:fc:6f:a1:22:ff:20:7f:7d:2a:27:b2: 55:73:5e:cb:bd:53:0b:b1:79:1c:31:8f:15:e3:8b:c7:9e:25: 4d:34:00:19:ad:25:87:ad:16:00:5d:0a:4d:74:55:8d:dd:1f: 65:54:2d:d6:76:93:9f:de:f6:a3:a6:af:10:72:27:16:10:b2: b3:0e:54:16:b2:60:3a:42:d0:82:2f:55:b5:c4:68:54:6b:67: ab:7c:37:56:29:15:39:9b:1d:bc:0f:12:c6:fc:5c:64:4c:38: bd:bc:51:63:19:a9:83:f1:64:d9:1c:b7:92:52:26:b9:eb:ee: 13:f8:77:cd:85:2f:21:13:28:0e:b0:b2:81:96:98:ea:1c:43: 44:84:41:40:18:9c:82:e2:30:33:ce:ca:49:ec:97:c2:f5:34: f6:b6:44:f2:87:54:54:cd:e5:b8:26:01:3c:07:69:08:80:c3: 45:e7:ca:8b:be:45:ba:b2:06:21:79:d7:34:30:40:e6:fb:58: 20:3d:83:d3 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEb8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlBODYyMzI5OEE2ODRB QkQ1MjFCNDBCQjM2MzYwNzkzREVGMzNEQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6GjUHEl/XjxrfB/3eT2Wc/TezG81IW5oPtTLH549EsJA9TYky ogKWQprUwH2mYgaHHkhadUegbFvguEkEduCp2jVnSSGeJzLkxIg9JA/LVQ62qzHa xHmjLVAmvfDSBmLZihQM301IN0cozcBqXwxsztHY0rTguBWaNknPuRF33zfWtjk3 CPMKa/FmK+XjGiH25GD9IHp1hL2fpPjh0UMDFLw32gDUn5tqWrAUjr4jLMdg1HNR cZSTKWLvOoWAaS2KEv9hnpyPxnJOBOTAu5tJpoAkRM9NLchpv+Joc3BocXFKUZ3y yuaNxkAZ5I8y6HEHZ/kKvSMRROlQZ/pK8ylJAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUmoYjKYpoSr1SG0C7NjYHk97zPacwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL21vWWpLWXBvU3IxU0cwQzdOallIazk3 elBhYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkBAAAgDAN BgkqhkiG9w0BAQsFAAOCAQEAEb7dhU7jRsONMR5lLp1ndqJSihOwF/GeQwATXKqQ 2MgR1xXbP3n8+tQf/tw09b9fKRMvXsTfWGUjkJvQIPxvoSL/IH99KieyVXNey71T C7F5HDGPFeOLx54lTTQAGa0lh60WAF0KTXRVjd0fZVQt1naTn972o6avEHInFhCy sw5UFrJgOkLQgi9VtcRoVGtnq3w3VikVOZsdvA8SxvxcZEw4vbxRYxmpg/Fk2Ry3 klImuevuE/h3zYUvIRMoDrCygZaY6hxDRIRBQBicguIwM87KSeyXwvU09rZE8odU VM3luCYBPAdpCIDDRefKi75FurIGIXnXNDBA5vtYID2D0w== -----END CERTIFICATE-----Generated at Mon Apr 7 20:51:51 2025 by rpki-client