$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/x7htcO1zB_pmIAIsCWUY_spT8kc.roa File: x7htcO1zB_pmIAIsCWUY_spT8kc.roa (raw, json) Hash identifier: kdoK+nm8iJEw8pTaIsoS5wlTWxdVYWR9LSxcVPol5Fk= Subject key identifier: C7:B8:6D:70:ED:73:07:FA:66:20:02:2C:09:65:18:FE:CA:53:F2:47 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1288 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/x7htcO1zB_pmIAIsCWUY_spT8kc.roa Signing time: Mon 10 Feb 2025 14:28:31 +0000 ROA not before: Mon 10 Feb 2025 14:28:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18049 IP address blocks: 60.244.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4744 (0x1288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C7B86D70ED7307FA6620022C096518FECA53F247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3a:53:07:50:8c:73:85:6f:69:53:0b:bc:2a: 0a:85:45:e5:4d:40:1f:be:33:cc:ac:c9:2f:25:48: 3d:f2:8a:77:e9:06:98:a5:a6:ef:60:98:6b:42:ed: 21:ed:23:a6:ae:5d:24:9e:e4:6c:75:eb:ea:ee:b5: b0:aa:51:89:31:bb:28:d8:13:a0:a5:85:db:1b:7b: d5:3a:84:ca:99:ac:8e:67:8c:94:27:b7:ba:01:4c: c9:ce:3b:fc:3f:ba:23:ed:f4:26:18:fe:e4:f4:6c: f6:7e:aa:9e:4f:83:af:bc:22:0e:c0:c5:a1:25:36: 5b:82:b3:60:19:b4:1f:96:a3:21:a4:07:dc:44:e4: 70:62:94:2e:2e:d3:d2:e0:5c:3b:b5:55:e7:34:09: 9f:68:58:74:d9:7d:5e:65:8b:14:00:4e:9d:1a:30: 53:39:92:5d:57:9c:b6:99:02:9a:7e:f0:48:64:ce: e4:e5:23:3b:23:cb:40:76:ee:a1:39:9f:69:e7:19: 71:19:f5:83:bf:5d:15:e7:31:e7:1a:66:3f:6d:41: e6:bb:ba:e0:ca:2b:01:de:d9:f6:88:4e:8e:c9:d9: 4e:c1:04:f0:1b:80:6e:67:5e:46:cf:89:dc:23:cc: 33:3b:07:7a:f7:ba:e3:f6:69:3b:f2:8a:53:22:c1: 57:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B8:6D:70:ED:73:07:FA:66:20:02:2C:09:65:18:FE:CA:53:F2:47 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/x7htcO1zB_pmIAIsCWUY_spT8kc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.244.136.0/21 Signature Algorithm: sha256WithRSAEncryption 3c:b5:13:52:b4:e1:f9:7a:b5:e4:ec:b3:92:21:d3:0c:ad:75: 51:02:f4:10:79:be:a2:e4:5d:6b:73:81:2f:7f:f4:7a:c5:c3: 67:e1:cc:76:99:82:1b:ea:7f:95:3f:ea:7d:cc:c9:bb:70:f6: e2:b9:70:57:af:4c:96:0c:10:e6:41:44:a6:a6:a3:2b:ed:65: 21:40:1a:66:b9:b8:3f:d5:1b:bb:27:2c:bf:a4:00:ec:1b:e4: ac:a8:5c:73:f2:0f:6b:9d:b5:31:a1:04:fd:0c:23:33:97:43: 8c:5a:7c:d8:7a:2d:c3:d9:d5:f5:0c:25:f0:03:1f:6a:53:89: d7:1e:a1:36:51:ec:cc:42:82:32:79:06:26:61:2a:b2:7c:5c: 39:8c:14:9d:65:82:21:93:59:a5:41:b8:2f:61:18:9f:2b:ae: 2b:f0:70:5b:fd:0d:71:9c:0c:e5:dc:16:bf:42:93:ce:3f:f3: 9b:37:21:60:23:e1:16:8a:10:9b:49:f1:00:b4:1e:87:bb:c2: 7e:13:8d:de:70:b3:2f:f9:ca:7f:d7:85:71:12:7e:93:16:0e: 92:1c:66:b2:08:35:ba:bc:d4:23:97:70:34:59:d6:12:28:e2: d3:74:37:ae:e2:2e:cb:54:3a:76:ae:7d:33:cb:34:f3:af:26: d2:ec:20:77 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEogwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM3Qjg2RDcwRUQ3MzA3 RkE2NjIwMDIyQzA5NjUxOEZFQ0E1M0YyNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/OlMHUIxzhW9pUwu8KgqFReVNQB++M8ysyS8lSD3yinfpBpil pu9gmGtC7SHtI6auXSSe5Gx16+rutbCqUYkxuyjYE6Clhdsbe9U6hMqZrI5njJQn t7oBTMnOO/w/uiPt9CYY/uT0bPZ+qp5Pg6+8Ig7AxaElNluCs2AZtB+WoyGkB9xE 5HBilC4u09LgXDu1Vec0CZ9oWHTZfV5lixQATp0aMFM5kl1XnLaZApp+8EhkzuTl Izsjy0B27qE5n2nnGXEZ9YO/XRXnMecaZj9tQea7uuDKKwHe2faITo7J2U7BBPAb gG5nXkbPidwjzDM7B3r3uuP2aTvyilMiwVfpAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUx7htcO1zB/pmIAIsCWUY/spT8kcwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3g3aHRjTzF6Ql9wbUlBSXNDV1VZX3Nw VDhrYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM89IgwDQYJ KoZIhvcNAQELBQADggEBADy1E1K04fl6teTss5Ih0wytdVEC9BB5vqLkXWtzgS9/ 9HrFw2fhzHaZghvqf5U/6n3Mybtw9uK5cFevTJYMEOZBRKamoyvtZSFAGma5uD/V G7snLL+kAOwb5KyoXHPyD2udtTGhBP0MIzOXQ4xafNh6LcPZ1fUMJfADH2pTidce oTZR7MxCgjJ5BiZhKrJ8XDmMFJ1lgiGTWaVBuC9hGJ8rrivwcFv9DXGcDOXcFr9C k84/85s3IWAj4RaKEJtJ8QC0Hoe7wn4Tjd5wsy/5yn/XhXESfpMWDpIcZrIINbq8 1COXcDRZ1hIo4tN0N67iLstUOnaufTPLNPOvJtLsIHc= -----END CERTIFICATE-----Generated at Mon Apr 7 20:49:21 2025 by rpki-client