$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/anp_FSG5ByAeJRyspCxBtVteXbs.roa File: anp_FSG5ByAeJRyspCxBtVteXbs.roa (raw, json) Hash identifier: pQ7+TyUZcy5CCqi0ZDFXiwIJ5YqEQwjj/PaPrd6GeoQ= Subject key identifier: 6A:7A:7F:15:21:B9:07:20:1E:25:1C:AC:A4:2C:41:B5:5B:5E:5D:BB Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0E79 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/anp_FSG5ByAeJRyspCxBtVteXbs.roa Signing time: Mon 10 Feb 2025 14:16:24 +0000 ROA not before: Mon 10 Feb 2025 14:16:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 134.208.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 22:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3705 (0xe79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Feb 10 14:16:24 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6A7A7F1521B907201E251CACA42C41B55B5E5DBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:23:2b:21:fa:62:c6:be:4b:ae:d8:db:60:bf: 03:37:e9:37:be:ab:da:b7:9f:0e:13:73:e4:e2:d9: 98:3d:9e:36:60:e8:4a:06:1a:eb:77:10:73:48:55: cf:d1:16:f9:95:f2:a3:00:bb:f0:9c:af:af:76:c3: 8f:95:9c:87:05:f3:d8:0a:ad:8a:f8:e7:3d:8a:55: 4a:7b:25:ce:5e:4d:f0:c4:81:9e:a6:78:d9:5a:f5: a7:83:dd:fd:5f:e6:ce:4a:49:0b:16:41:bb:55:8c: 83:21:c7:f4:f5:69:1b:31:7f:da:54:df:e3:53:82: 71:9b:f0:54:21:f6:1e:b7:3a:d2:0f:aa:79:99:09: 5f:43:83:e2:53:35:2d:7d:4f:6a:eb:f2:d2:07:9a: 59:08:87:f2:b0:0d:8a:5a:53:ab:c1:f8:31:20:b2: 6e:59:25:e8:eb:59:0d:ad:9e:80:e5:2f:52:b8:32: bd:82:68:0c:b7:e3:28:9a:84:a2:c3:dc:cf:10:b7: ec:47:b8:5a:74:04:b2:c3:02:89:16:4f:42:7b:3a: 93:15:8d:f5:a8:5f:46:d9:07:72:58:cf:99:e8:4c: 8b:fa:52:9a:a4:66:d5:fa:40:50:bd:95:51:37:d2: 48:59:4a:9d:18:95:7e:bf:26:c0:1c:72:9d:34:61: 84:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7A:7F:15:21:B9:07:20:1E:25:1C:AC:A4:2C:41:B5:5B:5E:5D:BB X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/anp_FSG5ByAeJRyspCxBtVteXbs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 134.208.0.0/16 Signature Algorithm: sha256WithRSAEncryption 09:08:c6:a5:29:ec:c8:41:66:8b:3e:f4:dd:53:31:b1:be:d0: 4c:4b:6c:3b:94:33:2e:19:b1:48:22:9a:eb:63:21:3f:34:d3: 41:a2:1e:6b:b1:8f:1c:3e:00:5c:95:d3:0b:2c:36:be:ab:52: 0a:d7:43:51:c1:84:cf:a0:fd:fe:af:62:93:09:99:6e:db:ef: 5e:32:8f:a0:2d:ff:a5:da:a8:1f:8b:d4:82:a0:a4:a3:40:bf: 0d:00:b9:30:04:47:59:8a:8e:84:aa:d2:21:dc:4e:d3:e5:d4: b7:11:07:84:01:6d:84:73:fd:7d:a0:1c:70:58:13:39:4e:d5: 39:fb:e2:a2:6b:4a:05:2d:1b:b1:7d:3b:76:b3:d8:d1:f3:20: 70:dd:41:1a:57:26:e3:53:c8:cb:3e:57:66:10:ae:41:56:c0: de:43:56:09:e9:e3:5c:d4:89:96:44:27:29:2c:ca:58:5d:a1: e2:11:ce:17:90:ff:93:34:c1:1d:43:26:44:63:93:66:ef:04: ae:da:bc:12:7b:45:f9:a4:95:7e:cf:9c:48:c4:0c:08:e5:a0: a4:2a:36:78:1f:ad:26:0d:40:a5:eb:93:4f:98:d2:36:1a:c0: 1d:a3:7e:7e:1c:fd:8a:80:90:57:b2:78:55:89:82:b9:c9:be: 97:6a:af:22 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDnkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNTAyMTAx NDE2MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZBN0E3RjE1MjFCOTA3 MjAxRTI1MUNBQ0E0MkM0MUI1NUI1RTVEQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXIysh+mLGvkuu2NtgvwM36Te+q9q3nw4Tc+Ti2Zg9njZg6EoG Gut3EHNIVc/RFvmV8qMAu/Ccr692w4+VnIcF89gKrYr45z2KVUp7Jc5eTfDEgZ6m eNla9aeD3f1f5s5KSQsWQbtVjIMhx/T1aRsxf9pU3+NTgnGb8FQh9h63OtIPqnmZ CV9Dg+JTNS19T2rr8tIHmlkIh/KwDYpaU6vB+DEgsm5ZJejrWQ2tnoDlL1K4Mr2C aAy34yiahKLD3M8Qt+xHuFp0BLLDAokWT0J7OpMVjfWoX0bZB3JYz5noTIv6Upqk ZtX6QFC9lVE30khZSp0YlX6/JsAccp00YYQlAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUanp/FSG5ByAeJRyspCxBtVteXbswHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9hbnBfRlNHNUJ5QWVKUnlzcEN4 QnRWdGVYYnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhtAw DQYJKoZIhvcNAQELBQADggEBAAkIxqUp7MhBZos+9N1TMbG+0ExLbDuUMy4ZsUgi mutjIT8000GiHmuxjxw+AFyV0wssNr6rUgrXQ1HBhM+g/f6vYpMJmW7b714yj6At /6XaqB+L1IKgpKNAvw0AuTAER1mKjoSq0iHcTtPl1LcRB4QBbYRz/X2gHHBYEzlO 1Tn74qJrSgUtG7F9O3az2NHzIHDdQRpXJuNTyMs+V2YQrkFWwN5DVgnp41zUiZZE JyksylhdoeIRzheQ/5M0wR1DJkRjk2bvBK7avBJ7RfmklX7PnEjEDAjloKQqNngf rSYNQKXrk0+Y0jYawB2jfn4c/YqAkFeyeFWJgrnJvpdqryI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:06:54 2025 by rpki-client