$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/vuqr3Q0yDY2EtYH0iGnjSmtxj3I.roa File: vuqr3Q0yDY2EtYH0iGnjSmtxj3I.roa (raw, json) Hash identifier: PJ8YfnwX82IDCZR05s50LnQPEHsTapemR6fma+X8d/Q= Subject key identifier: BE:EA:AB:DD:0D:32:0D:8D:84:B5:81:F4:88:69:E3:4A:6B:71:8F:72 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1275 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vuqr3Q0yDY2EtYH0iGnjSmtxj3I.roa Signing time: Mon 10 Feb 2025 14:28:26 +0000 ROA not before: Mon 10 Feb 2025 14:28:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 218.34.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4725 (0x1275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BEEAABDD0D320D8D84B581F48869E34A6B718F72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:27:49:9c:93:cb:ba:fb:79:f1:59:a4:9b:29: 6c:96:22:c2:a1:04:8d:04:c2:a3:91:30:97:84:e1: cf:79:e5:43:d2:26:a9:63:a3:b3:cf:14:30:ca:dc: 58:3b:7e:ea:6c:f3:52:93:83:17:8d:53:c2:e3:4b: 45:20:8b:78:62:e8:1e:a3:05:5d:69:30:51:97:28: e3:6d:b8:0b:8b:c8:3c:b8:e3:da:4b:79:6e:00:c2: a1:60:50:60:b6:a4:1d:c7:71:ab:5a:b1:7b:30:d2: 9a:c2:a5:00:d9:07:12:50:46:06:7e:17:c2:97:28: e3:50:39:00:30:cf:c6:95:45:0b:8f:d1:17:78:34: 21:ab:41:49:57:dd:13:8c:af:84:bf:62:e0:b7:15: fb:24:ae:32:72:d6:8e:08:b5:c5:37:33:54:ed:00: f0:86:3a:b3:ab:bd:d1:93:bd:fb:f4:ab:89:50:70: 87:e6:03:6a:56:cf:ba:a9:5a:fd:69:eb:fd:7e:de: e7:b2:b6:03:3a:08:ea:83:6c:09:d8:0c:00:d7:4e: eb:35:64:8d:6c:06:f3:12:ed:2c:26:7c:ed:a3:34: bb:29:e3:42:4b:3b:a0:84:6b:44:64:8d:b4:3c:4e: 92:00:56:51:8d:38:85:a1:f5:83:89:18:75:31:82: 02:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EA:AB:DD:0D:32:0D:8D:84:B5:81:F4:88:69:E3:4A:6B:71:8F:72 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vuqr3Q0yDY2EtYH0iGnjSmtxj3I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.34.96.0/21 Signature Algorithm: sha256WithRSAEncryption cd:06:92:9e:1d:25:4c:64:f8:d1:72:a0:8e:d3:9f:e0:fc:4b: c2:9a:e8:6f:b4:74:b7:c6:43:b3:5f:57:29:3d:e2:a0:a7:6f: ef:5e:dc:9c:79:48:72:47:27:13:20:f2:d1:d5:4c:81:cc:47: c1:46:21:88:fc:f6:bb:88:63:5a:a8:e8:c1:48:cc:79:7f:fc: cd:57:63:68:b5:74:36:bc:1b:12:f6:07:33:73:7a:27:c9:e5: a5:57:d2:31:6e:d2:24:72:1f:cd:03:b9:e6:e9:ad:b0:14:2c: ef:ab:56:5b:dc:81:d4:41:38:9d:7c:5d:bf:d9:ba:d0:a1:6e: c4:75:d5:be:96:e7:b1:2a:61:30:95:2a:ac:52:51:54:cf:cd: a0:81:45:c2:54:43:0c:ea:9c:4e:aa:06:20:48:04:a7:00:1c: f8:50:84:8f:07:78:b4:64:59:73:bc:31:aa:0a:a5:4b:8f:cb: 5b:7f:d2:84:60:84:e0:32:d7:6b:e0:9c:b2:e8:34:7d:99:8b: e9:94:ea:d1:8f:b0:05:43:cf:66:f7:ba:a6:47:d7:4c:62:fb: 66:63:49:af:2e:cf:18:8c:48:28:9c:57:09:db:2a:2b:e5:6b: 8e:fc:c3:d0:32:fa:7d:cd:67:78:6e:0b:3f:76:7c:e5:2c:0f: c5:b0:81:93 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEnUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJFRUFBQkREMEQzMjBE OEQ4NEI1ODFGNDg4NjlFMzRBNkI3MThGNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXJ0mck8u6+3nxWaSbKWyWIsKhBI0EwqORMJeE4c955UPSJqlj o7PPFDDK3Fg7fups81KTgxeNU8LjS0Ugi3hi6B6jBV1pMFGXKONtuAuLyDy449pL eW4AwqFgUGC2pB3HcatasXsw0prCpQDZBxJQRgZ+F8KXKONQOQAwz8aVRQuP0Rd4 NCGrQUlX3ROMr4S/YuC3FfskrjJy1o4ItcU3M1TtAPCGOrOrvdGTvfv0q4lQcIfm A2pWz7qpWv1p6/1+3ueytgM6COqDbAnYDADXTus1ZI1sBvMS7SwmfO2jNLsp40JL O6CEa0RkjbQ8TpIAVlGNOIWh9YOJGHUxggL/AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUvuqr3Q0yDY2EtYH0iGnjSmtxj3IwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3Z1cXIzUTB5RFkyRXRZSDBpR25qU210 eGozSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPaImAwDQYJ KoZIhvcNAQELBQADggEBAM0Gkp4dJUxk+NFyoI7Tn+D8S8Ka6G+0dLfGQ7NfVyk9 4qCnb+9e3Jx5SHJHJxMg8tHVTIHMR8FGIYj89ruIY1qo6MFIzHl//M1XY2i1dDa8 GxL2BzNzeifJ5aVX0jFu0iRyH80DuebprbAULO+rVlvcgdRBOJ18Xb/ZutChbsR1 1b6W57EqYTCVKqxSUVTPzaCBRcJUQwzqnE6qBiBIBKcAHPhQhI8HeLRkWXO8MaoK pUuPy1t/0oRghOAy12vgnLLoNH2Zi+mU6tGPsAVDz2b3uqZH10xi+2ZjSa8uzxiM SCicVwnbKivla478w9Ay+n3NZ3huCz92fOUsD8WwgZM= -----END CERTIFICATE-----Generated at Mon Apr 7 20:44:31 2025 by rpki-client