$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/3LjIXTr-8qk_uE2W2acKlWBWMko.roa File: 3LjIXTr-8qk_uE2W2acKlWBWMko.roa (raw, json) Hash identifier: v5fROihQEMBph8QNfF/dfBih+SmjWo2CRQ5sUbmj1nI= Subject key identifier: DC:B8:C8:5D:3A:FE:F2:A9:3F:B8:4D:96:D9:A7:0A:95:60:56:32:4A Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0E77 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/3LjIXTr-8qk_uE2W2acKlWBWMko.roa Signing time: Mon 10 Feb 2025 14:16:23 +0000 ROA not before: Mon 10 Feb 2025 14:16:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9916 IP address blocks: 140.129.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 22:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3703 (0xe77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Feb 10 14:16:23 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DCB8C85D3AFEF2A93FB84D96D9A70A956056324A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:8a:22:02:4e:0f:d7:1e:10:dc:e6:fa:be: b7:3a:ef:93:91:6a:b9:30:da:63:ae:10:78:16:a0: 75:9d:6c:2c:4a:51:27:e8:bc:37:36:e2:f2:2a:52: 9c:31:b3:2c:6a:4d:08:e0:3b:a5:3b:94:68:a8:40: c5:7f:9a:8d:b5:f4:e4:08:95:b1:41:c2:ab:27:c4: ad:67:56:3a:ea:80:74:94:d0:ce:4c:c1:52:83:21: ab:1a:f9:8d:0e:24:a7:5e:be:55:d8:ed:89:e4:18: 51:cc:92:dc:07:dd:e8:18:b9:bb:8a:c9:41:54:4a: d3:ce:bd:9d:3d:cf:99:b7:25:81:bc:51:e2:bb:89: 1d:31:99:8f:22:bc:33:97:16:33:2a:bb:ac:fc:90: 0d:62:7b:a1:b3:cd:4a:da:24:e2:f0:98:eb:8b:82: 16:93:5b:c4:64:95:d2:00:ba:65:88:da:81:0c:a5: 0d:b7:14:cf:07:c2:eb:0f:3f:fe:ee:0e:19:88:50: e3:39:6e:a7:aa:42:be:d9:c3:e9:6f:5b:67:38:fb: ed:f0:43:5f:f8:27:f0:ac:2e:11:62:98:8b:5c:1b: 30:9a:25:fd:c9:6c:50:b9:6f:f3:aa:52:ef:0d:ca: 72:cc:b6:07:f0:cb:de:af:dd:2d:b7:aa:07:6d:b1: 80:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B8:C8:5D:3A:FE:F2:A9:3F:B8:4D:96:D9:A7:0A:95:60:56:32:4A X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/3LjIXTr-8qk_uE2W2acKlWBWMko.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.129.51.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:0d:ed:9f:1e:db:7a:7a:52:b9:47:6d:90:a9:e4:53:05:79: 48:cb:97:0e:74:03:2c:77:cc:b9:a3:4a:33:52:6b:21:76:b6: 7a:90:73:85:c2:71:83:f9:0e:cc:ba:da:63:ff:ee:5a:10:51: a6:6a:3b:2b:dd:ea:f8:6d:3d:c9:6e:de:ca:6b:dd:39:5c:3c: 06:01:7b:54:84:a4:83:45:ea:a1:d2:45:94:8d:8e:c3:ea:62: 08:c9:7b:39:d5:56:93:52:11:83:02:3d:17:05:8d:fa:cd:8a: 13:e7:61:a9:fa:91:4d:57:a2:b4:57:a2:ab:85:af:67:d6:d6: 91:05:9f:28:9d:e3:67:1f:bb:ea:8d:7d:63:0f:61:ca:46:77: 3b:8e:45:a8:fe:82:59:89:10:f4:33:3b:ed:7d:21:e7:95:4f: b7:d8:f7:1a:9c:98:17:30:23:1f:f3:06:2a:73:41:e7:cc:44: 05:54:44:d3:4d:39:a0:1b:3b:e9:c6:f3:4d:8d:91:25:c9:a7: 53:66:be:d7:14:d9:fb:95:2b:01:a6:66:6e:9a:02:b9:eb:91: 80:a9:26:18:89:3b:fd:22:07:fc:e3:a0:5f:a1:5f:65:6a:37: 23:3a:19:70:30:44:bb:f8:3a:56:29:ca:0f:76:d8:68:53:0a: 88:93:5c:e9 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDncwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNTAyMTAx NDE2MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERDQjhDODVEM0FGRUYy QTkzRkI4NEQ5NkQ5QTcwQTk1NjA1NjMyNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvYIoiAk4P1x4Q3Ob6vrc675ORarkw2mOuEHgWoHWdbCxKUSfo vDc24vIqUpwxsyxqTQjgO6U7lGioQMV/mo219OQIlbFBwqsnxK1nVjrqgHSU0M5M wVKDIasa+Y0OJKdevlXY7YnkGFHMktwH3egYubuKyUFUStPOvZ09z5m3JYG8UeK7 iR0xmY8ivDOXFjMqu6z8kA1ie6GzzUraJOLwmOuLghaTW8RkldIAumWI2oEMpQ23 FM8HwusPP/7uDhmIUOM5bqeqQr7Zw+lvW2c4++3wQ1/4J/CsLhFimItcGzCaJf3J bFC5b/OqUu8NynLMtgfwy96v3S23qgdtsYBRAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU3LjIXTr+8qk/uE2W2acKlWBWMkowHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC8zTGpJWFRyLThxa191RTJXMmFj S2xXQldNa28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjIEz MA0GCSqGSIb3DQEBCwUAA4IBAQCaDe2fHtt6elK5R22QqeRTBXlIy5cOdAMsd8y5 o0ozUmshdrZ6kHOFwnGD+Q7Mutpj/+5aEFGmajsr3er4bT3Jbt7Ka905XDwGAXtU hKSDReqh0kWUjY7D6mIIyXs51VaTUhGDAj0XBY36zYoT52Gp+pFNV6K0V6Krha9n 1taRBZ8oneNnH7vqjX1jD2HKRnc7jkWo/oJZiRD0MzvtfSHnlU+32PcanJgXMCMf 8wYqc0HnzEQFVETTTTmgGzvpxvNNjZElyadTZr7XFNn7lSsBpmZumgK565GAqSYY iTv9Igf846BfoV9lajcjOhlwMES7+DpWKcoPdthoUwqIk1zp -----END CERTIFICATE-----Generated at Wed Feb 19 22:10:52 2025 by rpki-client