$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/v9yXqQdB4cJ-js6gZvbJgfL5tXQ.roa File: v9yXqQdB4cJ-js6gZvbJgfL5tXQ.roa (raw, json) Hash identifier: rCQXP4q+MJok0J51SkdetOC62rQsEsybwjUbvjgvrK4= Subject key identifier: BF:DC:97:A9:07:41:E1:C2:7E:8E:CE:A0:66:F6:C9:81:F2:F9:B5:74 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1272 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/v9yXqQdB4cJ-js6gZvbJgfL5tXQ.roa Signing time: Mon 10 Feb 2025 14:28:25 +0000 ROA not before: Mon 10 Feb 2025 14:28:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 210.63.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4722 (0x1272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:25 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BFDC97A90741E1C27E8ECEA066F6C981F2F9B574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bc:d6:87:2e:25:61:95:72:ed:27:6d:3b:46: f6:34:45:fd:7a:b8:58:d7:ec:66:89:08:c4:a6:5c: c8:d9:24:f9:f5:76:13:e1:e8:41:bf:bd:78:71:51: 07:74:1f:6d:a2:94:6d:fc:2e:97:6c:35:45:8c:04: dc:47:59:09:2d:74:91:c6:d9:0d:d0:a4:fc:dc:6c: cf:47:41:fd:0d:70:a0:41:d4:c9:0b:c5:61:00:54: eb:79:a6:50:cd:b6:57:bd:0d:75:26:b4:66:82:47: b2:5e:00:68:9b:0f:e1:0d:d8:93:19:c7:01:f4:ef: 85:5a:06:9e:d5:af:6f:3e:6a:d3:35:ec:78:da:6a: 8b:8c:b8:07:95:7b:c5:bb:f3:3a:92:da:4a:c0:d6: f1:5c:90:15:9d:68:26:a9:88:52:e2:ce:d8:f6:60: 21:84:62:4c:2f:33:e1:ff:e7:26:5f:24:dc:02:fc: bf:fb:84:b3:4d:e1:60:19:c8:75:2a:af:d3:f8:82: 54:27:68:6a:41:48:6f:f5:2f:6a:49:f1:cc:64:86: 4c:98:55:9a:8e:b5:40:e6:76:98:c5:80:50:26:36: 6b:b3:ff:62:96:06:d7:c8:09:e0:1e:c3:82:09:ed: 34:35:a6:02:ae:de:d7:a2:53:ce:38:e7:2f:09:ca: 19:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DC:97:A9:07:41:E1:C2:7E:8E:CE:A0:66:F6:C9:81:F2:F9:B5:74 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/v9yXqQdB4cJ-js6gZvbJgfL5tXQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.200.0/21 Signature Algorithm: sha256WithRSAEncryption 90:27:e7:f7:3e:dc:de:4b:f3:9d:9b:3c:34:7d:bc:6e:0e:a6: 25:37:42:33:ad:b6:9b:a8:1b:00:03:f5:0c:d7:7a:13:05:51: 7a:c5:e0:21:6d:c1:d7:aa:a0:7b:4b:4a:c7:7b:53:4b:88:9c: 7d:13:e0:85:78:8c:d1:8c:87:2b:0b:69:cc:06:f5:4d:bb:ca: 8a:71:37:63:2d:72:b6:d9:7b:dd:36:bb:ac:9b:3e:5b:85:4f: a9:76:fb:c1:fb:c6:2e:2d:80:b6:2f:5a:9e:95:c4:e9:d4:48: c4:83:cc:4e:21:63:fb:ab:6f:a9:f9:14:15:46:31:f3:52:5a: c2:4b:5c:ba:b8:54:12:e5:23:94:18:5e:2d:cc:ea:1b:eb:60: e3:fa:04:c9:4e:4a:67:0d:a7:dd:ee:9d:cb:27:e7:cf:dd:7f: e4:6a:56:54:e1:e4:25:d1:aa:f2:d8:30:34:c3:7e:78:c0:02: 79:b9:8f:95:b1:55:74:bf:17:ac:6c:12:0d:b6:72:87:8c:6e: 32:11:2e:0a:27:29:95:5a:eb:05:eb:9f:c1:e4:7d:15:c3:d7: 11:f3:ee:a4:d7:37:42:01:a0:48:6e:36:c9:d9:d6:c2:5c:29: b2:94:be:a4:e1:10:b0:c1:af:48:40:d7:5e:e6:fd:a9:e3:1f: 42:b1:50:7d -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEnIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJGREM5N0E5MDc0MUUx QzI3RThFQ0VBMDY2RjZDOTgxRjJGOUI1NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6vNaHLiVhlXLtJ207RvY0Rf16uFjX7GaJCMSmXMjZJPn1dhPh 6EG/vXhxUQd0H22ilG38LpdsNUWMBNxHWQktdJHG2Q3QpPzcbM9HQf0NcKBB1MkL xWEAVOt5plDNtle9DXUmtGaCR7JeAGibD+EN2JMZxwH074VaBp7Vr28+atM17Hja aouMuAeVe8W78zqS2krA1vFckBWdaCapiFLiztj2YCGEYkwvM+H/5yZfJNwC/L/7 hLNN4WAZyHUqr9P4glQnaGpBSG/1L2pJ8cxkhkyYVZqOtUDmdpjFgFAmNmuz/2KW BtfICeAew4IJ7TQ1pgKu3teiU8445y8Jyhl/AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUv9yXqQdB4cJ+js6gZvbJgfL5tXQwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3Y5eVhxUWRCNGNKLWpzNmdadmJKZ2ZM NXRYUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPSP8gwDQYJ KoZIhvcNAQELBQADggEBAJAn5/c+3N5L852bPDR9vG4OpiU3QjOttpuoGwAD9QzX ehMFUXrF4CFtwdeqoHtLSsd7U0uInH0T4IV4jNGMhysLacwG9U27yopxN2MtcrbZ e902u6ybPluFT6l2+8H7xi4tgLYvWp6VxOnUSMSDzE4hY/urb6n5FBVGMfNSWsJL XLq4VBLlI5QYXi3M6hvrYOP6BMlOSmcNp93uncsn58/df+RqVlTh5CXRqvLYMDTD fnjAAnm5j5WxVXS/F6xsEg22coeMbjIRLgonKZVa6wXrn8HkfRXD1xHz7qTXN0IB oEhuNsnZ1sJcKbKUvqThELDBr0hA117m/anjH0KxUH0= -----END CERTIFICATE-----Generated at Mon Apr 7 17:43:37 2025 by rpki-client