$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/vbxfqHen-Wi2VEkibA6entFw7rE.roa File: vbxfqHen-Wi2VEkibA6entFw7rE.roa (raw, json) Hash identifier: t/0xq3tntvMJBFfubtms2fQxQpTw7QZYqDRwGiaNpfw= Subject key identifier: BD:BC:5F:A8:77:A7:F9:68:B6:54:49:22:6C:0E:9E:9E:D1:70:EE:B1 Certificate issuer: /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF Certificate serial: 11B7 Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/vbxfqHen-Wi2VEkibA6entFw7rE.roa Signing time: Mon 10 Feb 2025 14:27:11 +0000 ROA not before: Mon 10 Feb 2025 14:27:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131633 IP address blocks: 2404:29c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4535 (0x11b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF Validity Not Before: Feb 10 14:27:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BDBC5FA877A7F968B65449226C0E9E9ED170EEB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:09:38:1c:26:8b:be:5e:7d:a8:7b:65:1a:69: 6c:65:a7:f8:a7:3c:2e:07:28:96:39:98:c5:52:47: 6d:98:5c:d0:67:8b:ce:1e:ca:3d:b7:5c:fd:64:d7: 74:09:52:8c:41:f9:8a:ca:f1:68:a1:62:36:d9:13: 39:8e:92:83:46:4d:e5:27:3f:58:9a:c5:5c:c6:49: ff:c9:6c:b5:17:6c:e0:b1:29:73:41:05:01:b0:59: 57:fe:30:5c:60:eb:06:c0:47:7b:48:a2:37:9d:2a: 54:a5:47:4c:a4:e6:8a:00:ab:57:d4:f2:67:8b:4f: cd:1e:21:b4:e6:0f:10:17:05:0e:44:32:1d:55:bb: e3:92:c6:a8:a6:42:50:72:49:27:f7:0e:45:45:43: a3:2b:85:7d:c9:b8:ae:6c:3b:5f:f5:27:10:ef:66: 46:96:6c:c7:58:c0:ac:4f:c9:e6:72:9d:ba:b3:ed: f6:3f:32:2a:88:4f:1f:f3:9a:bf:33:4e:a7:e3:d1: 63:18:e1:31:57:c4:65:ff:b6:71:c2:97:3f:bb:ac: 88:9e:0a:a5:76:94:07:72:5a:15:a2:c1:ad:14:9f: 3a:ad:a5:05:d0:cb:61:ea:3b:1d:1b:3d:d7:dc:87: 14:99:bd:75:42:d4:a3:32:96:ed:41:94:5e:c0:1c: ac:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BC:5F:A8:77:A7:F9:68:B6:54:49:22:6C:0E:9E:9E:D1:70:EE:B1 X509v3 Authority Key Identifier: keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/vbxfqHen-Wi2VEkibA6entFw7rE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:29c0::/32 Signature Algorithm: sha256WithRSAEncryption 9f:c8:e9:90:4b:28:8c:6f:ee:fc:fa:5d:f8:69:01:96:12:6d: c2:e5:db:4c:87:a6:df:d7:64:be:bc:fe:9f:49:73:cd:d8:2a: 8c:27:ae:50:0c:da:a7:d4:bb:8d:a5:2c:c0:aa:ce:85:51:94: a9:50:74:fc:44:18:a7:2a:ce:84:e2:1e:19:6c:4f:b8:6e:ef: 86:31:30:e5:cd:5e:f6:d3:1c:a9:d4:ac:14:da:4f:14:11:c2: 5a:75:97:f0:e3:54:67:35:61:7c:7f:14:4c:58:8f:af:dc:59: f8:fd:c7:ba:4f:9c:a6:0a:44:95:fc:a6:8a:eb:3c:7f:64:c8: 73:e3:d6:85:93:ba:c3:8b:55:a6:b8:f8:19:02:80:64:66:03: 79:99:c8:96:60:c2:1e:fc:be:19:0c:39:01:e9:0e:6c:64:bf: 9c:5e:eb:b9:b4:30:7b:73:8d:9b:b4:2c:11:a9:4b:b1:b4:a2: 87:26:a5:da:0d:8d:5c:dd:52:62:16:d6:fc:26:ba:26:20:8a: df:02:38:44:b2:72:f0:d3:13:14:52:36:84:61:bb:9b:66:e2: c4:5d:db:b9:00:1a:c0:84:4d:85:8d:ce:46:ec:d7:a2:e9:f2: d9:35:b3:73:0a:35:93:95:bf:96:7d:5d:51:2d:ed:32:24:f2: 50:84:2a:8c -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEbcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUQx ODZGNjMxNEQ3QjU3MTNFRkZFQ0ZCOTNFQkMzRTgyMTk3RTJFRjAeFw0yNTAyMTAx NDI3MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJEQkM1RkE4NzdBN0Y5 NjhCNjU0NDkyMjZDMEU5RTlFRDE3MEVFQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6CTgcJou+Xn2oe2UaaWxlp/inPC4HKJY5mMVSR22YXNBni84e yj23XP1k13QJUoxB+YrK8WihYjbZEzmOkoNGTeUnP1iaxVzGSf/JbLUXbOCxKXNB BQGwWVf+MFxg6wbAR3tIojedKlSlR0yk5ooAq1fU8meLT80eIbTmDxAXBQ5EMh1V u+OSxqimQlBySSf3DkVFQ6MrhX3JuK5sO1/1JxDvZkaWbMdYwKxPyeZynbqz7fY/ MiqITx/zmr8zTqfj0WMY4TFXxGX/tnHClz+7rIieCqV2lAdyWhWiwa0UnzqtpQXQ y2HqOx0bPdfchxSZvXVC1KMylu1BlF7AHKwJAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUvbxfqHen+Wi2VEkibA6entFw7rEwHwYDVR0jBBgwFoAU7RhvYxTXtXE+/+z7 k+vD6CGX4u8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hVTllJ TkcvN1Jodll4VFh0WEUtXy16N2stdkQ2Q0dYNHU4LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS83Umh2WXhUWHRYRS1fLXo3ay12RDZDR1g0dTguY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSFVOWUlORy92YnhmcUhlbi1XaTJW RWtpYkE2ZW50Rnc3ckUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAQpwDANBgkqhkiG9w0BAQsFAAOCAQEAn8jpkEsojG/u/Ppd+GkBlhJtwuXb TIem39dkvrz+n0lzzdgqjCeuUAzap9S7jaUswKrOhVGUqVB0/EQYpyrOhOIeGWxP uG7vhjEw5c1e9tMcqdSsFNpPFBHCWnWX8ONUZzVhfH8UTFiPr9xZ+P3Huk+cpgpE lfymius8f2TIc+PWhZO6w4tVprj4GQKAZGYDeZnIlmDCHvy+GQw5AekObGS/nF7r ubQwe3ONm7QsEalLsbSihyal2g2NXN1SYhbW/Ca6JiCK3wI4RLJy8NMTFFI2hGG7 m2bixF3buQAawIRNhY3ORuzXouny2TWzcwo1k5W/ln1dUS3tMiTyUIQqjA== -----END CERTIFICATE-----Generated at Fri Apr 11 21:32:44 2025 by rpki-client