$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/xfavR0huANfPa2WsSYMQ48SkEBY.roa File: xfavR0huANfPa2WsSYMQ48SkEBY.roa (raw, json) Hash identifier: Nb84WT5LMMbNLnjCOQ1Q6yEUoG8XEcQeLdJDxpoMD44= Subject key identifier: C5:F6:AF:47:48:6E:00:D7:CF:6B:65:AC:49:83:10:E3:C4:A4:10:16 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 11CE Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/xfavR0huANfPa2WsSYMQ48SkEBY.roa Signing time: Mon 10 Feb 2025 14:27:46 +0000 ROA not before: Mon 10 Feb 2025 14:27:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 210.202.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4558 (0x11ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:46 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C5F6AF47486E00D7CF6B65AC498310E3C4A41016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6d:39:04:13:3a:f3:ab:00:59:e4:94:84:80: 99:ae:38:73:f3:a3:3b:34:97:a1:05:31:d3:f3:11: 4f:24:2d:06:e0:27:44:e4:2d:07:11:72:54:c2:c9: f2:ee:76:e9:13:ed:5d:57:50:ff:50:3a:b9:1d:35: c6:4e:70:cf:32:93:52:de:8e:43:b7:56:0b:4e:bd: 8c:a6:80:74:6b:83:46:4f:ef:9a:4c:f1:96:b1:18: 90:23:c7:c1:21:da:31:72:0f:0f:bf:87:a2:a0:bf: 36:d3:c9:5a:80:4c:24:b7:d0:12:e6:ed:18:a2:d0: 54:e4:47:92:39:27:ec:e6:3b:47:35:9d:98:a9:66: 36:8f:55:3e:b1:c3:d4:bd:3f:cf:46:c7:c9:6f:17: 67:6b:a5:c9:8f:68:7a:4b:dc:8c:dc:dd:05:f0:84: d1:1b:27:7d:0f:82:2a:20:ee:33:f7:12:b7:5f:30: 3c:34:38:7c:bb:1f:ed:f0:db:ea:c5:79:51:20:bf: f0:53:8d:d8:bd:85:d0:d7:63:aa:8f:dc:0f:91:01: 4e:e6:9e:a1:94:01:87:e3:ad:a7:f0:6a:7c:1a:f4: c2:0b:38:0c:47:93:dd:cb:03:f3:6a:38:f6:4a:66: 8e:5b:69:a8:60:a6:21:59:45:ad:6e:ad:a8:31:79: f4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F6:AF:47:48:6E:00:D7:CF:6B:65:AC:49:83:10:E3:C4:A4:10:16 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/xfavR0huANfPa2WsSYMQ48SkEBY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.202.64.0/18 Signature Algorithm: sha256WithRSAEncryption 4e:bf:31:7d:e5:91:3a:80:11:61:0a:42:a0:18:e6:3e:ed:f4: bd:c1:c5:7a:c4:ef:02:2b:aa:71:6e:ba:06:08:a2:59:3c:d6: d1:bf:0c:f3:da:22:34:f1:3d:d2:ae:92:c8:c6:24:9d:4d:6f: 2e:36:09:da:95:38:40:99:aa:52:79:43:cd:55:e8:a1:7a:ad: cf:ca:5c:71:73:e1:b0:ac:d9:93:f3:6d:dc:0b:70:25:c6:3e: a2:47:7e:2f:85:09:f9:09:ad:1e:4d:55:10:88:3f:dc:a2:ca: d8:3f:9a:23:0b:a7:3f:6e:87:8b:19:73:32:bf:bd:b9:66:d8: 94:74:72:b8:01:21:a9:df:62:8b:a5:0d:de:21:c9:a6:9c:79: 71:96:26:e4:c6:4f:3c:ef:ef:16:e3:74:60:9d:54:7b:54:d6: 79:ac:b3:f1:0d:11:ae:ab:36:4e:be:43:c2:45:c6:67:63:16: 07:4b:34:72:bd:07:94:23:90:46:c3:a5:9d:23:cc:a5:8c:0b: 83:aa:58:16:19:a3:2e:0e:ee:47:5c:fb:15:f0:54:fb:57:c6: 7e:6a:83:a0:86:28:32:d0:cf:60:89:eb:da:e3:b4:6a:14:5f: 7a:38:63:2e:1c:4e:06:4e:fb:10:c5:02:72:f8:ac:cc:21:61: bb:ba:77:c5 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEc4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM1RjZBRjQ3NDg2RTAw RDdDRjZCNjVBQzQ5ODMxMEUzQzRBNDEwMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAbTkEEzrzqwBZ5JSEgJmuOHPzozs0l6EFMdPzEU8kLQbgJ0Tk LQcRclTCyfLudukT7V1XUP9QOrkdNcZOcM8yk1LejkO3VgtOvYymgHRrg0ZP75pM 8ZaxGJAjx8Eh2jFyDw+/h6KgvzbTyVqATCS30BLm7Rii0FTkR5I5J+zmO0c1nZip ZjaPVT6xw9S9P89Gx8lvF2drpcmPaHpL3Izc3QXwhNEbJ30Pgiog7jP3ErdfMDw0 OHy7H+3w2+rFeVEgv/BTjdi9hdDXY6qP3A+RAU7mnqGUAYfjrafwanwa9MILOAxH k93LA/NqOPZKZo5baahgpiFZRa1uragxefRbAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUxfavR0huANfPa2WsSYMQ48SkEBYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3hmYXZSMGh1QU5mUGEyV3NTWU1RNDhT a0VCWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSykAwDQYJ KoZIhvcNAQELBQADggEBAE6/MX3lkTqAEWEKQqAY5j7t9L3BxXrE7wIrqnFuugYI olk81tG/DPPaIjTxPdKuksjGJJ1Nby42CdqVOECZqlJ5Q81V6KF6rc/KXHFz4bCs 2ZPzbdwLcCXGPqJHfi+FCfkJrR5NVRCIP9yiytg/miMLpz9uh4sZczK/vblm2JR0 crgBIanfYoulDd4hyaaceXGWJuTGTzzv7xbjdGCdVHtU1nmss/ENEa6rNk6+Q8JF xmdjFgdLNHK9B5QjkEbDpZ0jzKWMC4OqWBYZoy4O7kdc+xXwVPtXxn5qg6CGKDLQ z2CJ69rjtGoUX3o4Yy4cTgZO+xDFAnL4rMwhYbu6d8U= -----END CERTIFICATE-----Generated at Mon Apr 7 20:54:10 2025 by rpki-client