$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/z8StN7Yf6aFr4Cd-0YRkErh2YBo.roa File: z8StN7Yf6aFr4Cd-0YRkErh2YBo.roa (raw, json) Hash identifier: 5ycb7IZ635tyVrFD0jh8le/yhRpMndCEseNViTRrxgY= Subject key identifier: CF:C4:AD:37:B6:1F:E9:A1:6B:E0:27:7E:D1:84:64:12:B8:76:60:1A Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 127F Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/z8StN7Yf6aFr4Cd-0YRkErh2YBo.roa Signing time: Mon 10 Feb 2025 14:28:28 +0000 ROA not before: Mon 10 Feb 2025 14:28:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 222.250.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 03:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4735 (0x127f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CFC4AD37B61FE9A16BE0277ED1846412B876601A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9b:6f:41:9a:58:1d:06:2e:e6:f4:a1:d5:50: 80:84:6c:74:a7:3b:ea:ee:73:94:40:96:d8:eb:93: 5e:82:68:20:f1:a3:f7:f3:ce:76:29:34:e4:68:c8: f5:32:0d:11:41:64:ae:e8:29:be:7c:bf:e2:7d:41: 54:97:72:b6:54:b0:5c:89:ff:d0:e9:90:3b:a2:70: 77:26:20:d1:51:07:f9:c1:c4:0c:b3:1d:24:db:01: 1f:b3:17:7c:1e:4f:c1:31:4d:46:ae:97:9e:b1:cd: de:ff:98:12:9f:84:b9:63:05:e8:d1:a3:5a:7d:b8: ba:1d:db:15:8b:33:83:8f:a0:3c:a1:4d:ab:b7:40: 5c:95:23:50:8a:24:4d:22:f7:17:c6:aa:b5:57:c8: f6:16:60:13:da:6e:23:93:ed:83:b6:af:c5:78:66: 4f:5b:a8:68:e7:60:d8:81:b1:4e:ea:89:e8:3e:e8: 03:5a:1f:a5:58:16:65:89:d1:9b:be:93:61:ce:35: 40:2c:46:0a:23:75:63:6e:44:6b:20:5e:ac:b0:0c: 34:80:bf:1e:71:73:ae:8e:22:22:62:89:de:55:ec: 92:5b:04:5c:0d:1d:37:70:e9:fb:92:55:76:d0:83: 22:1b:96:21:86:df:b2:84:3e:80:75:cf:93:6c:bc: 1f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C4:AD:37:B6:1F:E9:A1:6B:E0:27:7E:D1:84:64:12:B8:76:60:1A X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/z8StN7Yf6aFr4Cd-0YRkErh2YBo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.250.192.0/22 Signature Algorithm: sha256WithRSAEncryption 98:4b:b4:b6:c7:9f:10:8a:f5:c2:f2:85:6d:1a:f9:e4:90:6a: 47:e3:23:a5:d0:9b:b2:1f:f9:b4:a8:de:3f:e7:6f:40:8a:8c: 59:a0:1f:42:69:d3:9d:49:58:51:f1:cd:c1:6a:a2:7c:49:d1: b2:4c:e1:89:d6:b1:9c:29:fd:ec:8a:c3:d8:22:08:1a:83:b1: 7e:70:ae:02:b5:f6:cb:d6:08:70:ab:bf:98:6f:2c:a6:12:95: 9d:43:8e:c6:fd:75:95:ee:38:e3:ec:0c:8a:92:9b:06:43:eb: 5a:ef:3a:f8:32:68:46:e2:c8:77:68:fd:4f:a1:da:8b:d0:12: 87:a1:4d:d5:87:fc:cf:53:a3:f7:2d:7c:16:7e:75:79:0f:91: 40:f3:68:cb:7f:01:bc:c4:d7:f5:03:19:96:31:0a:a3:83:e5: 6f:e7:f2:a6:8e:6a:5d:8c:9a:ef:35:30:30:aa:47:da:c5:9a: 82:f0:c4:f5:85:9d:8d:a4:c7:61:44:b3:7f:6e:a3:1a:eb:74: 75:14:00:ff:e0:33:7c:de:ce:29:8f:f3:35:e8:67:b4:fe:8d: 0a:8a:fb:0c:3c:a5:20:25:1a:c4:0b:22:78:79:02:2b:c3:19: f7:0e:81:10:a5:f0:6c:9e:d2:76:eb:5c:96:df:ed:d7:3e:e3: 81:0b:95:e8 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEn8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENGQzRBRDM3QjYxRkU5 QTE2QkUwMjc3RUQxODQ2NDEyQjg3NjYwMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfm29BmlgdBi7m9KHVUICEbHSnO+ruc5RAltjrk16CaCDxo/fz znYpNORoyPUyDRFBZK7oKb58v+J9QVSXcrZUsFyJ/9DpkDuicHcmINFRB/nBxAyz HSTbAR+zF3weT8ExTUaul56xzd7/mBKfhLljBejRo1p9uLod2xWLM4OPoDyhTau3 QFyVI1CKJE0i9xfGqrVXyPYWYBPabiOT7YO2r8V4Zk9bqGjnYNiBsU7qieg+6ANa H6VYFmWJ0Zu+k2HONUAsRgojdWNuRGsgXqywDDSAvx5xc66OIiJiid5V7JJbBFwN HTdw6fuSVXbQgyIbliGG37KEPoB1z5NsvB87AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUz8StN7Yf6aFr4Cd+0YRkErh2YBowHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3o4U3RON1lmNmFGcjRDZC0wWVJrRXJo MllCby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALe+sAwDQYJ KoZIhvcNAQELBQADggEBAJhLtLbHnxCK9cLyhW0a+eSQakfjI6XQm7If+bSo3j/n b0CKjFmgH0Jp051JWFHxzcFqonxJ0bJM4YnWsZwp/eyKw9giCBqDsX5wrgK19svW CHCrv5hvLKYSlZ1Djsb9dZXuOOPsDIqSmwZD61rvOvgyaEbiyHdo/U+h2ovQEoeh TdWH/M9To/ctfBZ+dXkPkUDzaMt/AbzE1/UDGZYxCqOD5W/n8qaOal2Mmu81MDCq R9rFmoLwxPWFnY2kx2FEs39uoxrrdHUUAP/gM3zezimP8zXoZ7T+jQqK+ww8pSAl GsQLInh5AivDGfcOgRCl8Gye0nbrXJbf7dc+44ELleg= -----END CERTIFICATE-----Generated at Tue Apr 8 00:34:23 2025 by rpki-client