$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/xxeX1JCK6r5T5ZiotndmmJRT6eI.roa File: xxeX1JCK6r5T5ZiotndmmJRT6eI.roa (raw, json) Hash identifier: YxSq205eBtHhcVo3VFzZSKcnWke9Bd4zi0ZMNkd32jo= Subject key identifier: C7:17:97:D4:90:8A:EA:BE:53:E5:98:A8:B6:77:66:98:94:53:E9:E2 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 11E7 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/xxeX1JCK6r5T5ZiotndmmJRT6eI.roa Signing time: Mon 10 Feb 2025 14:27:52 +0000 ROA not before: Mon 10 Feb 2025 14:27:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 219.91.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 17:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4583 (0x11e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C71797D4908AEABE53E598A8B67766989453E9E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:1f:f4:d3:c7:ca:57:68:e0:8e:7b:a4:2c: 03:2c:97:74:32:4f:09:27:89:24:96:f5:35:e5:50: eb:54:a1:1e:ef:35:50:1d:25:b8:03:7f:54:ce:65: 3e:08:88:42:9c:87:8a:48:3d:a9:f9:86:9f:67:f2: 26:c8:dd:45:db:66:6a:d4:24:00:57:c9:25:ba:37: 9d:31:b1:33:1a:f7:4d:2d:c0:0b:88:d4:b9:20:e9: 1a:5c:62:c6:66:5d:43:48:cf:81:5a:7a:a7:51:1d: 3c:a1:1f:e5:82:55:54:6b:8b:13:d4:57:9a:31:d7: e2:fa:2e:61:2f:d8:73:1a:75:d6:68:82:02:51:2f: 58:43:38:e3:11:63:41:2a:2a:47:4f:79:e9:f4:c8: bf:17:a9:a9:03:37:95:19:87:1d:97:79:7d:0a:f3: 9e:40:6c:a6:bc:95:82:3d:24:62:81:3d:26:53:a9: 2d:87:4c:d6:40:1a:38:fd:47:5b:d2:dd:b0:81:f1: b8:6a:c6:8c:46:c7:e7:f9:ca:1f:30:a6:80:50:76: 16:1f:b4:c2:b3:3c:3b:1e:c7:94:e0:32:41:71:15: e2:b5:54:e5:8f:8c:6b:8a:33:06:1c:29:8c:10:16: ad:41:54:52:50:fa:e0:03:62:6b:92:28:33:fc:d3: 98:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:17:97:D4:90:8A:EA:BE:53:E5:98:A8:B6:77:66:98:94:53:E9:E2 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/xxeX1JCK6r5T5ZiotndmmJRT6eI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.91.68.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:f1:32:b7:50:4f:24:b2:f0:e0:77:16:8c:c8:8e:d0:b5:8e: d4:27:c7:00:2b:04:03:b5:60:f4:65:eb:94:eb:1c:37:c4:55: 23:dd:98:87:08:ce:48:34:0e:ac:85:80:f5:2f:1e:b8:3d:89: 84:9f:cb:8e:5d:36:4f:c8:d2:f3:25:76:5f:4e:1f:50:10:a9: cc:74:87:b4:ed:03:28:1e:9a:c1:07:31:c9:30:39:b0:4d:e7: dc:8d:73:7d:22:6b:91:7e:4f:b2:b0:73:39:a6:62:3e:e3:46: 46:1b:73:b3:7d:53:0e:df:86:60:a6:10:80:a2:c7:b8:cd:33: 77:92:55:57:f7:93:b1:92:50:64:94:34:7d:c6:24:fb:a4:52: 7d:9d:68:e6:02:e1:87:8f:44:5b:f1:01:d2:a1:3d:27:29:19: cb:52:1a:d2:af:6f:0c:b4:7d:9e:c4:05:cf:fa:94:73:b1:f9: 38:bd:b3:2e:be:2d:6e:86:b5:2d:70:39:08:00:d6:c7:a2:32: e1:98:0e:fd:a1:14:14:b3:76:97:8a:3a:72:13:18:23:81:23: eb:77:b1:c0:ce:74:5b:79:d5:98:d8:a0:6d:67:ce:fc:e4:4d: c0:2c:2a:fc:72:8b:04:7b:cc:5d:30:4f:59:8b:fa:72:63:96: 05:95:0d:53 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEecwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM3MTc5N0Q0OTA4QUVB QkU1M0U1OThBOEI2Nzc2Njk4OTQ1M0U5RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3iR/008fKV2jgjnukLAMsl3QyTwkniSSW9TXlUOtUoR7vNVAd JbgDf1TOZT4IiEKch4pIPan5hp9n8ibI3UXbZmrUJABXySW6N50xsTMa900twAuI 1Lkg6RpcYsZmXUNIz4FaeqdRHTyhH+WCVVRrixPUV5ox1+L6LmEv2HMaddZoggJR L1hDOOMRY0EqKkdPeen0yL8XqakDN5UZhx2XeX0K855AbKa8lYI9JGKBPSZTqS2H TNZAGjj9R1vS3bCB8bhqxoxGx+f5yh8wpoBQdhYftMKzPDsex5TgMkFxFeK1VOWP jGuKMwYcKYwQFq1BVFJQ+uADYmuSKDP805jxAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUxxeX1JCK6r5T5ZiotndmmJRT6eIwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3h4ZVgxSkNLNnI1VDVaaW90bmRtbUpS VDZlSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHbW0QwDQYJ KoZIhvcNAQELBQADggEBAAvxMrdQTySy8OB3FozIjtC1jtQnxwArBAO1YPRl65Tr HDfEVSPdmIcIzkg0DqyFgPUvHrg9iYSfy45dNk/I0vMldl9OH1AQqcx0h7TtAyge msEHMckwObBN59yNc30ia5F+T7KwczmmYj7jRkYbc7N9Uw7fhmCmEICix7jNM3eS VVf3k7GSUGSUNH3GJPukUn2daOYC4YePRFvxAdKhPScpGctSGtKvbwy0fZ7EBc/6 lHOx+Ti9sy6+LW6GtS1wOQgA1seiMuGYDv2hFBSzdpeKOnITGCOBI+t3scDOdFt5 1ZjYoG1nzvzkTcAsKvxyiwR7zF0wT1mL+nJjlgWVDVM= -----END CERTIFICATE-----Generated at Sat Apr 5 16:36:19 2025 by rpki-client