$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/b7oCAl19Bn_idhZniaDkqCu7eAk.roa File: b7oCAl19Bn_idhZniaDkqCu7eAk.roa (raw, json) Hash identifier: yFRBqH+eaalNaQBvTM6aA7izpfJcLUl6BSz+9JxmHYQ= Subject key identifier: 6F:BA:02:02:5D:7D:06:7F:E2:76:16:67:89:A0:E4:A8:2B:BB:78:09 Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Certificate serial: 0D1C Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/b7oCAl19Bn_idhZniaDkqCu7eAk.roa Signing time: Mon 10 Feb 2025 14:08:21 +0000 ROA not before: Mon 10 Feb 2025 14:08:21 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4782 IP address blocks: 210.241.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3356 (0xd1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Validity Not Before: Feb 10 14:08:21 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6FBA02025D7D067FE276166789A0E4A82BBB7809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:af:eb:95:4b:44:0c:d9:5a:28:fa:e1:7d:b3: 1f:1d:6e:c0:49:14:bb:8d:cf:8e:c6:16:39:c8:59: 98:0f:1f:29:22:16:f9:2a:ee:ed:fc:d8:e7:d6:2b: 00:3b:64:04:79:df:5d:ab:30:06:88:30:4d:a9:cb: 16:2f:c8:2b:54:26:7e:0a:3e:e6:68:1c:98:94:6e: 61:90:34:da:be:9d:13:5f:87:2a:6c:17:4c:b4:dd: aa:36:5b:f0:ae:9c:0e:a2:52:1d:da:d0:2b:c4:93: a6:7d:90:cf:4d:3a:d2:90:6a:b7:d9:d3:81:93:ae: fa:62:41:ed:7f:06:3a:ed:97:63:2d:8e:37:31:c0: 62:0b:1b:82:5e:49:f5:55:ab:28:47:89:f1:48:32: 4f:2a:92:a1:2a:eb:4e:20:5e:67:df:81:3e:ec:bd: 2a:1d:04:76:ae:20:b5:f6:c2:54:08:d6:16:a5:c8: fc:67:6d:95:8f:83:90:fe:f2:44:e8:33:38:eb:d1: 57:cd:5a:51:7c:57:7c:89:3f:c6:0e:e9:8d:1f:e2: 2f:91:99:bc:55:99:0c:d4:ca:97:30:c8:83:a2:03: 38:bf:af:e0:5b:18:15:2a:76:5f:fa:2d:eb:50:53: 1c:cf:5d:81:0c:90:b8:82:98:ea:03:4b:a2:b5:9d: 2c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BA:02:02:5D:7D:06:7F:E2:76:16:67:89:A0:E4:A8:2B:BB:78:09 X509v3 Authority Key Identifier: keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/b7oCAl19Bn_idhZniaDkqCu7eAk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.241.0.0/17 Signature Algorithm: sha256WithRSAEncryption 65:b5:08:da:a7:99:99:0b:9a:c7:72:3f:8a:67:42:ae:e4:b2: e3:bf:3e:e1:9d:3a:9f:43:e3:42:66:35:a3:7d:b7:d1:03:e3: ac:3f:44:de:3c:5e:76:44:1e:d2:7d:47:0f:c7:75:60:22:42: 86:e4:3d:ce:47:f3:a7:69:4d:cf:ac:28:88:9e:5c:b9:e2:f5: 9d:59:dd:f1:28:fb:f6:82:e5:d6:38:00:68:49:e1:d5:07:bf: 0b:82:8d:83:cd:9e:80:11:b6:61:fa:92:43:2a:55:a0:ea:2f: 3c:ac:f5:d4:f9:3a:91:07:87:8d:ca:1b:1c:43:bc:ab:b1:9b: fd:46:49:5b:43:28:3b:49:6b:1c:8f:ed:49:5a:1c:4a:96:6e: d6:a2:a8:50:41:b9:33:aa:46:f5:e2:d1:74:5b:18:19:e9:d0: 03:86:90:57:20:bd:75:a3:8e:d5:98:e6:dd:f0:38:2d:74:92: cf:fd:0e:6d:97:c9:52:f3:6d:75:c0:c8:d3:48:b5:be:da:84: 88:a5:3c:3c:9c:8b:a4:5b:71:f5:af:f2:1b:3a:83:e0:0c:7c: 97:fe:9e:b0:b5:df:ce:2c:71:09:81:0d:f0:e9:e8:90:0f:44: ff:fd:05:33:4f:d5:70:3f:80:4b:ce:09:2c:e7:96:b6:e7:c9: bd:40:d7:0a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yNTAyMTAx NDA4MjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZGQkEwMjAyNUQ3RDA2 N0ZFMjc2MTY2Nzg5QTBFNEE4MkJCQjc4MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGr+uVS0QM2Voo+uF9sx8dbsBJFLuNz47GFjnIWZgPHykiFvkq 7u382OfWKwA7ZAR5312rMAaIME2pyxYvyCtUJn4KPuZoHJiUbmGQNNq+nRNfhyps F0y03ao2W/CunA6iUh3a0CvEk6Z9kM9NOtKQarfZ04GTrvpiQe1/Bjrtl2Mtjjcx wGILG4JeSfVVqyhHifFIMk8qkqEq604gXmffgT7svSodBHauILX2wlQI1halyPxn bZWPg5D+8kToMzjr0VfNWlF8V3yJP8YO6Y0f4i+RmbxVmQzUypcwyIOiAzi/r+Bb GBUqdl/6LetQUxzPXYEMkLiCmOoDS6K1nSyjAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUb7oCAl19Bn/idhZniaDkqCu7eAkwHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ 7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2I3b0NBbDE5Qm5faWRoWm5pYURrcUN1 N2VBay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfS8QAwDQYJ KoZIhvcNAQELBQADggEBAGW1CNqnmZkLmsdyP4pnQq7ksuO/PuGdOp9D40JmNaN9 t9ED46w/RN48XnZEHtJ9Rw/HdWAiQobkPc5H86dpTc+sKIieXLni9Z1Z3fEo+/aC 5dY4AGhJ4dUHvwuCjYPNnoARtmH6kkMqVaDqLzys9dT5OpEHh43KGxxDvKuxm/1G SVtDKDtJaxyP7UlaHEqWbtaiqFBBuTOqRvXi0XRbGBnp0AOGkFcgvXWjjtWY5t3w OC10ks/9Dm2XyVLzbXXAyNNItb7ahIilPDyci6RbcfWv8hs6g+AMfJf+nrC1384s cQmBDfDp6JAPRP/9BTNP1XA/gEvOCSznlrbnyb1A1wo= -----END CERTIFICATE-----Generated at Fri Apr 18 22:39:23 2025 by rpki-client