$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/EQcTko4ZSBSFYOIYA4vRhsbkspo.roa File: EQcTko4ZSBSFYOIYA4vRhsbkspo.roa (raw, json) Hash identifier: v12oN9ik2bMxdrVcIJleYHCUPMHOyaVEHoj8fRa5uG0= Subject key identifier: 11:07:13:92:8E:19:48:14:85:60:E2:18:03:8B:D1:86:C6:E4:B2:9A Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Certificate serial: 0CC3 Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/EQcTko4ZSBSFYOIYA4vRhsbkspo.roa Signing time: Mon 10 Feb 2025 13:58:26 +0000 ROA not before: Mon 10 Feb 2025 13:58:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17420 IP address blocks: 211.73.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3267 (0xcc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Validity Not Before: Feb 10 13:58:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=110713928E1948148560E218038BD186C6E4B29A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:81:7b:8f:b6:68:a8:c7:63:8b:62:f4:fd:ba: 19:18:e9:74:ca:27:95:42:c3:b5:b8:7e:5b:80:93: cd:43:62:64:20:01:32:9f:a1:28:f5:de:eb:07:75: 49:29:51:01:03:1c:44:ae:83:73:fe:c4:b4:19:49: 7c:c3:94:c2:a8:b9:8a:45:f0:c4:6c:45:d4:99:9d: 02:9f:0b:48:a4:ec:41:ea:3a:0d:3e:70:b2:8f:7b: 90:c6:55:88:c3:f8:be:63:79:8f:89:32:0e:8d:01: 53:3c:22:d6:36:c6:74:ec:f8:16:41:36:ea:43:af: 4c:b7:b4:47:05:e0:1e:5f:19:41:a6:01:a4:e4:b5: 25:53:18:33:e2:ed:da:34:33:cf:6a:ae:0c:fa:c6: b5:4f:02:f3:2d:fd:e0:d5:01:79:7d:ec:9e:db:36: 34:32:c1:39:02:45:22:6b:04:1d:18:c7:52:6f:06: fc:ae:ad:ed:74:7b:dd:1f:f8:dd:ae:ee:b2:15:d3: eb:91:3f:08:bb:61:24:a6:04:f7:f2:f6:5f:1b:7c: 50:c0:be:69:8d:9a:cb:9c:e6:fb:2a:b1:21:f9:c5: 50:fb:fd:14:d1:40:7c:ef:55:d1:c7:73:b6:88:fe: 23:fb:23:08:1e:a7:c2:3f:94:c7:47:19:aa:01:a7: d2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:07:13:92:8E:19:48:14:85:60:E2:18:03:8B:D1:86:C6:E4:B2:9A X509v3 Authority Key Identifier: keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/EQcTko4ZSBSFYOIYA4vRhsbkspo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.73.224.0/19 Signature Algorithm: sha256WithRSAEncryption 66:cc:a2:0a:66:90:07:ca:06:9b:e0:58:fd:1f:d9:b5:c3:db: 4a:46:6e:21:a7:33:c2:c0:94:a6:bc:b3:e2:7b:1d:ff:26:56: 9d:71:1e:d2:3a:4d:2a:65:6f:12:0f:22:53:75:3f:70:bf:62: d1:3e:d3:f7:fe:27:61:be:ed:96:60:29:69:a5:62:27:71:1d: 06:ea:d1:f2:31:69:7d:37:f0:d7:66:90:97:77:f6:16:8b:b2: d2:c6:da:82:7b:06:8a:e6:26:71:99:f1:62:f1:9a:46:05:5b: 11:60:99:d8:50:5d:86:68:77:98:91:5f:cc:59:8d:4a:9b:a7: 17:e3:b7:9e:b5:33:a6:7b:4a:ed:20:b5:d8:11:35:4c:fc:db: 40:75:4c:ab:6a:9e:66:b1:43:de:c0:f1:bd:0a:9c:b7:3e:46: db:4c:91:95:af:20:63:45:df:44:0c:7e:69:ca:fe:a9:e5:d0: 29:d5:2e:37:73:0e:81:92:08:a4:77:2e:ba:4c:8d:0d:c7:d1: f4:5e:5f:d2:55:ec:b6:6c:40:5c:47:a9:b7:9b:03:68:64:d4: 58:a9:ab:d5:81:de:06:ff:bd:4a:4c:38:f8:3c:e8:1c:d6:d2: a3:3e:e4:f0:0e:44:42:a4:6d:07:82:bd:4d:59:46:8f:b5:50: 39:68:f2:d3 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTI5 QjYwNkRCODYyODNCRDRBMDhBRjdFQjMzRUYzOEEyNTY2MzFCQjAeFw0yNTAyMTAx MzU4MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDExMDcxMzkyOEUxOTQ4 MTQ4NTYwRTIxODAzOEJEMTg2QzZFNEIyOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDgXuPtmiox2OLYvT9uhkY6XTKJ5VCw7W4fluAk81DYmQgATKf oSj13usHdUkpUQEDHESug3P+xLQZSXzDlMKouYpF8MRsRdSZnQKfC0ik7EHqOg0+ cLKPe5DGVYjD+L5jeY+JMg6NAVM8ItY2xnTs+BZBNupDr0y3tEcF4B5fGUGmAaTk tSVTGDPi7do0M89qrgz6xrVPAvMt/eDVAXl97J7bNjQywTkCRSJrBB0Yx1JvBvyu re10e90f+N2u7rIV0+uRPwi7YSSmBPfy9l8bfFDAvmmNmsuc5vsqsSH5xVD7/RTR QHzvVdHHc7aI/iP7Iwgep8I/lMdHGaoBp9LTAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUEQcTko4ZSBSFYOIYA4vRhsbkspowHwYDVR0jBBgwFoAUUptgbbhig71KCK9+ sz7ziiVmMbswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFHSUMv VXB0Z2JiaGlnNzFLQ0s5LXN6N3ppaVZtTWJzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9VcHRnYmJoaWc3MUtDSzktc3o3emlpVm1NYnMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQUdJQy9FUWNUa280WlNCU0ZZT0lZQTR2 UmhzYmtzcG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF00ng MA0GCSqGSIb3DQEBCwUAA4IBAQBmzKIKZpAHygab4Fj9H9m1w9tKRm4hpzPCwJSm vLPiex3/JladcR7SOk0qZW8SDyJTdT9wv2LRPtP3/idhvu2WYClppWIncR0G6tHy MWl9N/DXZpCXd/YWi7LSxtqCewaK5iZxmfFi8ZpGBVsRYJnYUF2GaHeYkV/MWY1K m6cX47eetTOme0rtILXYETVM/NtAdUyrap5msUPewPG9Cpy3PkbbTJGVryBjRd9E DH5pyv6p5dAp1S43cw6Bkgikdy66TI0Nx9H0Xl/SVey2bEBcR6m3mwNoZNRYqavV gd4G/71KTDj4POgc1tKjPuTwDkRCpG0Hgr1NWUaPtVA5aPLT -----END CERTIFICATE-----Generated at Fri Apr 18 23:57:43 2025 by rpki-client