$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/_oUNMSypNZ45z9h6DIRrEJx7N8s.roa File: _oUNMSypNZ45z9h6DIRrEJx7N8s.roa (raw, json) Hash identifier: hBfcrOk8ASmGEsiyPaKfjNNwQBYUk6DXqEjYNJ3O6e0= Subject key identifier: FE:85:0D:31:2C:A9:35:9E:39:CF:D8:7A:0C:84:6B:10:9C:7B:37:CB Certificate issuer: /CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB Certificate serial: 08A6 Authority key identifier: 2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/_oUNMSypNZ45z9h6DIRrEJx7N8s.roa Signing time: Mon 10 Feb 2025 14:03:49 +0000 ROA not before: Mon 10 Feb 2025 14:03:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131674 IP address blocks: 2405:e4c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2214 (0x8a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB Validity Not Before: Feb 10 14:03:49 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FE850D312CA9359E39CFD87A0C846B109C7B37CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:16:ee:d4:e7:92:2e:ee:55:16:88:c9:0c:bc: 22:6c:3b:19:4e:bc:5e:83:59:33:03:8a:f6:52:5f: 46:35:4c:cf:40:f8:ff:8f:55:fc:19:1b:29:0e:75: 95:69:7d:51:b1:76:b8:0d:e2:73:e2:87:14:33:88: bf:3d:46:30:bb:11:23:81:b9:d2:e4:7c:81:1b:c4: 51:62:fa:0e:79:a0:c3:2b:83:9d:09:61:70:84:29: 5d:dc:23:d4:2d:46:71:22:15:f9:2b:10:71:bb:a2: 5d:7b:83:d4:36:23:76:54:08:ff:60:c4:99:67:e4: d8:32:44:aa:b2:be:a2:56:d7:4e:e9:4c:7a:3a:02: 67:62:70:96:b2:5c:80:f8:37:63:fb:26:7f:e4:72: 23:76:45:b3:ab:d6:0d:7d:ed:1e:91:b3:cf:44:22: 84:4e:bf:f8:ba:36:76:62:5a:63:85:e2:ce:e6:78: 67:77:ec:8e:f5:57:76:0b:9c:35:8b:1c:42:3d:02: 5d:f2:e0:27:9e:f0:a0:36:d9:e0:ec:f6:88:7f:6e: 92:a7:f5:8b:70:f6:3c:ca:5b:a9:26:52:e6:ad:33: 65:b8:79:1a:45:d6:c3:5e:38:72:2f:ee:07:1e:e5: 2d:e5:e4:96:8b:97:96:0b:6f:b4:51:92:fe:a0:51: 30:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:85:0D:31:2C:A9:35:9E:39:CF:D8:7A:0C:84:6B:10:9C:7B:37:CB X509v3 Authority Key Identifier: keyid:2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/_oUNMSypNZ45z9h6DIRrEJx7N8s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:e4c0::/32 Signature Algorithm: sha256WithRSAEncryption 0d:1b:56:a2:b2:c3:77:67:de:d2:d7:40:b8:44:bb:86:75:94: 3b:7e:33:eb:b2:00:4e:0f:b2:69:48:99:e0:c1:4b:20:02:f9: 62:cd:1e:0a:5a:ce:97:5e:78:ac:e5:48:a1:50:9f:5e:15:67: ec:4d:a4:5e:6d:41:d1:9b:d8:38:82:74:cb:5a:b5:23:72:c9: 3d:96:92:b2:9b:17:da:1b:2e:2d:78:14:13:33:8a:8f:37:97: 62:74:d1:ee:82:a2:16:36:96:50:0b:cd:95:3b:f3:2b:e0:57: db:e8:94:78:08:b9:97:6f:a5:3c:9e:3f:86:78:6a:5f:19:8a: 1b:40:64:aa:ff:7e:1c:13:6b:6e:39:ae:b4:80:a0:01:34:13: 07:be:52:5d:89:ac:59:f1:69:a2:87:6c:ed:42:e6:02:35:32: ec:cc:b4:35:35:57:88:8c:4a:3a:67:82:c3:04:bf:17:d9:5d: a3:ce:00:86:35:88:b0:9a:92:6e:27:ab:b6:94:4b:69:f1:aa: 8a:70:ae:ef:de:0f:03:43:1a:f6:49:aa:36:e3:bd:23:92:84: 70:97:0b:b7:5a:2d:7f:c1:04:de:be:42:63:e7:cb:e8:55:35: d7:81:99:b8:0c:36:55:96:e7:f0:82:6c:14:9c:6d:b3:19:2c: 0e:91:96:f6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICCKYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRF RjJCM0MzQTlBMUI1M0MxNkMxQzcwRTU1MTFBRDU5MDMyODRGQjAeFw0yNTAyMTAx NDAzNDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZFODUwRDMxMkNBOTM1 OUUzOUNGRDg3QTBDODQ2QjEwOUM3QjM3Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNFu7U55Iu7lUWiMkMvCJsOxlOvF6DWTMDivZSX0Y1TM9A+P+P VfwZGykOdZVpfVGxdrgN4nPihxQziL89RjC7ESOBudLkfIEbxFFi+g55oMMrg50J YXCEKV3cI9QtRnEiFfkrEHG7ol17g9Q2I3ZUCP9gxJln5NgyRKqyvqJW107pTHo6 AmdicJayXID4N2P7Jn/kciN2RbOr1g197R6Rs89EIoROv/i6NnZiWmOF4s7meGd3 7I71V3YLnDWLHEI9Al3y4Cee8KA22eDs9oh/bpKn9Ytw9jzKW6kmUuatM2W4eRpF 1sNeOHIv7gce5S3l5JaLl5YLb7RRkv6gUTChAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU/oUNMSypNZ45z9h6DIRrEJx7N8swHwYDVR0jBBgwFoAULe8rPDqaG1PBbBxw 5VEa1ZAyhPswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT1BFTkZP Ui9MZThyUERxYUcxUEJiQnh3NVZFYTFaQXloUHMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0xlOHJQRHFhRzFQQmJCeHc1VkVhMVpBeWhQcy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL09QRU5GT1IvX29VTk1TeXBOWjQ1ejlo NkRJUnJFSng3TjhzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACQF5MAwDQYJKoZIhvcNAQELBQADggEBAA0bVqKyw3dn3tLXQLhEu4Z1lDt+M+uy AE4PsmlImeDBSyAC+WLNHgpazpdeeKzlSKFQn14VZ+xNpF5tQdGb2DiCdMtatSNy yT2WkrKbF9obLi14FBMzio83l2J00e6CohY2llALzZU78yvgV9volHgIuZdvpTye P4Z4al8ZihtAZKr/fhwTa245rrSAoAE0Ewe+Ul2JrFnxaaKHbO1C5gI1MuzMtDU1 V4iMSjpngsMEvxfZXaPOAIY1iLCakm4nq7aUS2nxqopwru/eDwNDGvZJqjbjvSOS hHCXC7daLX/BBN6+QmPny+hVNdeBmbgMNlWW5/CCbBScbbMZLA6RlvY= -----END CERTIFICATE-----Generated at Fri Apr 18 22:41:31 2025 by rpki-client