$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FISC/8mVsgUZMJ3H28Ku52Nf26QFrrUo.roa File: 8mVsgUZMJ3H28Ku52Nf26QFrrUo.roa (raw, json) Hash identifier: wO+f2/wIRff8Sc2Dg0wK9lmtRqZbrV7GsIF6KO/6Qk4= Subject key identifier: F2:65:6C:81:46:4C:27:71:F6:F0:AB:B9:D8:D7:F6:E9:01:6B:AD:4A Certificate issuer: /CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2 Certificate serial: 0CA9 Authority key identifier: F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8mVsgUZMJ3H28Ku52Nf26QFrrUo.roa Signing time: Mon 10 Feb 2025 14:26:47 +0000 ROA not before: Mon 10 Feb 2025 14:26:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131588 IP address blocks: 103.229.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3241 (0xca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2 Validity Not Before: Feb 10 14:26:47 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F2656C81464C2771F6F0ABB9D8D7F6E9016BAD4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:73:7f:6b:b9:a3:7a:2e:8a:21:21:0a:60:6b: de:09:99:b5:aa:cb:a3:e5:e5:e8:96:0a:bf:c4:46: ec:2c:e7:8b:da:70:d6:d6:77:a3:df:a9:f3:ba:b4: 69:a1:69:8b:18:b3:ae:d9:52:a7:aa:21:b8:56:6c: b9:d8:37:10:07:15:af:33:21:a5:53:05:d7:57:52: 89:8a:82:26:de:38:a8:54:fb:fc:23:73:eb:79:73: e4:b6:78:a7:5a:73:ed:8c:d6:71:98:d5:62:3a:e2: 19:a6:47:63:ab:46:fd:b9:1c:37:ac:33:36:f4:fe: a3:2e:28:21:bd:8d:16:3e:66:5b:b7:ba:ae:cd:44: c2:0f:67:a6:b9:e7:95:b7:bc:c2:1f:4e:20:0d:6d: ea:c6:85:08:91:a2:2d:e7:8e:af:09:21:ac:59:c4: 88:67:19:c5:c5:4f:60:5e:94:c3:78:17:83:3a:d3: f7:d6:c3:92:54:c8:7b:93:46:82:dc:99:40:56:93: 4f:88:00:41:e6:bb:0f:a3:08:63:9a:33:99:1b:b0: 07:64:4f:0a:92:10:b9:65:3a:bb:aa:7f:32:ef:39: 5c:8d:00:32:84:a5:ee:0d:7d:34:ff:5c:e3:59:9c: 27:17:f2:03:89:fb:d2:d8:b3:cc:a4:b2:d8:62:27: 06:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:65:6C:81:46:4C:27:71:F6:F0:AB:B9:D8:D7:F6:E9:01:6B:AD:4A X509v3 Authority Key Identifier: keyid:F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8mVsgUZMJ3H28Ku52Nf26QFrrUo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.229.132.0/24 Signature Algorithm: sha256WithRSAEncryption 60:1e:36:9f:12:73:60:37:5d:24:30:7d:f0:15:af:f0:27:e9: 88:23:f0:5c:b8:d2:89:85:9f:af:32:33:34:84:a4:7d:82:8b: 98:8d:bf:e3:9c:82:7f:08:53:93:eb:bb:5d:8a:e4:7b:ec:79: 30:06:57:c3:82:8d:ca:e5:76:be:62:cb:6f:f7:64:95:99:de: 5e:1e:bc:7d:7e:ec:fb:2f:9f:03:d1:3a:6d:53:e0:e2:0d:c3: df:6d:da:80:de:6c:21:dd:87:c5:23:28:24:a0:a5:51:c1:fa: 1e:9e:44:6d:2d:49:60:24:16:e6:f5:ff:56:12:5f:84:b2:b0: 81:eb:c8:ee:40:1f:84:f0:9b:89:71:1f:de:73:d4:77:c4:c0: bb:09:26:cf:8b:60:80:33:5a:90:4c:03:15:a4:2d:1a:82:b3: fc:f3:62:27:a3:6a:a1:0c:47:4d:32:7c:4e:35:1e:e9:bc:37: ac:20:24:a8:11:d5:99:9d:66:1a:db:2f:3c:f2:95:d6:6e:43: 94:60:3b:a6:c3:dc:96:9b:d2:2b:de:83:e8:7f:e9:a1:11:e1: 36:a6:4f:85:a8:53:cd:e0:ac:c4:96:8f:c9:e9:1c:59:8a:91: 58:ab:92:28:3c:a6:5b:a2:6d:4d:35:82:f2:0e:5c:53:4b:d7: e7:53:15:d4 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjBD RTEwQkQ3QzJCMzlBMDNBNzBDMzAyQkEyQjA4NjUyQzA4MDdEMjAeFw0yNTAyMTAx NDI2NDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYyNjU2QzgxNDY0QzI3 NzFGNkYwQUJCOUQ4RDdGNkU5MDE2QkFENEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyc39ruaN6LoohIQpga94JmbWqy6Pl5eiWCr/ERuws54vacNbW d6PfqfO6tGmhaYsYs67ZUqeqIbhWbLnYNxAHFa8zIaVTBddXUomKgibeOKhU+/wj c+t5c+S2eKdac+2M1nGY1WI64hmmR2OrRv25HDesMzb0/qMuKCG9jRY+Zlu3uq7N RMIPZ6a555W3vMIfTiANberGhQiRoi3njq8JIaxZxIhnGcXFT2BelMN4F4M60/fW w5JUyHuTRoLcmUBWk0+IAEHmuw+jCGOaM5kbsAdkTwqSELllOruqfzLvOVyNADKE pe4NfTT/XONZnCcX8gOJ+9LYs8yksthiJwbrAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU8mVsgUZMJ3H28Ku52Nf26QFrrUowHwYDVR0jBBgwFoAU8M4QvXwrOaA6cMMC uisIZSwIB9IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRklTQy84 TTRRdlh3ck9hQTZjTU1DdWlzSVpTd0lCOUkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzhNNFF2WHdyT2FBNmNNTUN1aXNJWlN3SUI5SS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0ZJU0MvOG1Wc2dVWk1KM0gyOEt1NTJOZjI2 UUZyclVvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGflhDAN BgkqhkiG9w0BAQsFAAOCAQEAYB42nxJzYDddJDB98BWv8CfpiCPwXLjSiYWfrzIz NISkfYKLmI2/45yCfwhTk+u7XYrke+x5MAZXw4KNyuV2vmLLb/dklZneXh68fX7s +y+fA9E6bVPg4g3D323agN5sId2HxSMoJKClUcH6Hp5EbS1JYCQW5vX/VhJfhLKw gevI7kAfhPCbiXEf3nPUd8TAuwkmz4tggDNakEwDFaQtGoKz/PNiJ6NqoQxHTTJ8 TjUe6bw3rCAkqBHVmZ1mGtsvPPKV1m5DlGA7psPclpvSK96D6H/poRHhNqZPhahT zeCsxJaPyekcWYqRWKuSKDymW6JtTTWC8g5cU0vX51MV1A== -----END CERTIFICATE-----Generated at Fri Apr 18 21:22:34 2025 by rpki-client