$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/xfFrPWKHExghKa8tEQc6j8nxloA.roa File: xfFrPWKHExghKa8tEQc6j8nxloA.roa (raw, json) Hash identifier: rJmJWqBXRoZbhmxcwqEEREGX/DjluHAw6uhsjUjVUtE= Subject key identifier: C5:F1:6B:3D:62:87:13:18:21:29:AF:2D:11:07:3A:8F:C9:F1:96:80 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 12C5 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/xfFrPWKHExghKa8tEQc6j8nxloA.roa Signing time: Mon 10 Feb 2025 14:15:13 +0000 ROA not before: Mon 10 Feb 2025 14:15:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17408 IP address blocks: 113.21.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4805 (0x12c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Feb 10 14:15:13 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C5F16B3D628713182129AF2D11073A8FC9F19680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:03:4c:3d:33:72:21:99:15:40:36:c7:6c: bd:4a:3a:31:44:15:35:89:51:dd:69:80:06:23:30: 5b:76:39:b1:e0:a6:38:a2:f5:20:91:3b:79:d1:44: e9:89:5b:b3:c8:7d:07:69:4d:7c:83:8d:dd:38:8f: 3d:05:64:8d:ea:2b:ef:d7:c7:7a:e3:d4:da:34:e0: ab:01:57:52:83:bf:cc:19:98:1a:42:72:6c:77:07: 8d:62:fa:1e:4a:ec:ff:f0:8f:71:33:0f:12:70:26: 4c:fa:6b:cd:e7:49:93:e5:60:c3:85:ee:b7:ae:b9: a3:ef:fb:eb:56:14:55:9c:3c:50:f4:60:74:45:c9: 77:17:a4:c8:15:bf:7c:3b:73:87:7c:94:7c:4b:c5: 76:6d:0b:1c:f3:81:6d:71:0b:78:c3:c1:4d:59:54: fd:dd:59:57:1a:eb:81:cc:e7:ff:a3:82:88:c7:c8: 23:bc:e7:d0:3d:c9:bc:a3:86:08:02:bb:f7:d1:88: 37:91:e6:46:44:9c:ff:49:95:fa:fb:a2:58:76:99: 6f:97:70:12:f2:5e:12:dd:54:46:7e:08:76:d1:19: 40:9a:79:1b:46:4f:f8:32:0e:89:03:f2:47:2c:fa: 5a:f4:bb:df:fa:16:bd:91:ac:16:bd:73:9b:c0:f1: 83:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F1:6B:3D:62:87:13:18:21:29:AF:2D:11:07:3A:8F:C9:F1:96:80 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/xfFrPWKHExghKa8tEQc6j8nxloA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.21.90.0/24 Signature Algorithm: sha256WithRSAEncryption 67:8d:44:4e:49:92:67:92:df:a9:4c:92:93:33:65:e3:38:5e: cc:8d:52:dd:cd:e2:56:df:ca:7c:3c:2b:b9:9c:f6:29:d8:37: 72:2e:5a:f0:4e:72:3c:33:e7:9b:88:a7:05:87:42:73:f7:a4: 0c:b9:43:6a:bd:e8:a7:82:ef:ae:ad:fd:6a:a8:b5:2e:78:38: 8e:6f:3a:16:cb:d2:8f:8d:e5:2b:af:dd:95:68:f4:20:cb:09: 9a:e2:2f:f5:c7:18:ee:ef:2c:ae:f6:44:2e:cc:64:d4:f0:50: 63:a8:c5:da:4b:a1:de:3b:3b:b6:55:83:43:c7:8a:db:1d:c5: e8:1d:6a:cd:0f:3a:e6:85:b2:a3:e4:77:a4:fe:61:4a:4f:73: 29:d2:37:97:95:9f:bb:9f:69:bc:8e:42:44:cc:e4:de:2f:f1: 55:21:bd:54:ab:ba:87:23:5b:db:eb:cf:51:f5:a8:97:77:0a: b1:18:b9:ec:28:08:6e:15:bd:b4:50:bf:3a:03:20:1d:4f:16: bc:5e:89:e7:86:dc:c9:2e:20:db:ad:1e:74:c6:b7:7c:b9:7a: 48:d3:e9:5a:6b:ba:d7:60:c2:74:77:cb:ce:7c:7a:e2:97:b6: c4:33:8f:3d:71:4e:b4:fe:0e:db:93:db:48:c0:a9:57:e8:67: 79:7c:e5:59 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEsUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx NDE1MTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM1RjE2QjNENjI4NzEz MTgyMTI5QUYyRDExMDczQThGQzlGMTk2ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsjgNMPTNyIZkVQDbHbL1KOjFEFTWJUd1pgAYjMFt2ObHgpjii 9SCRO3nRROmJW7PIfQdpTXyDjd04jz0FZI3qK+/Xx3rj1No04KsBV1KDv8wZmBpC cmx3B41i+h5K7P/wj3EzDxJwJkz6a83nSZPlYMOF7reuuaPv++tWFFWcPFD0YHRF yXcXpMgVv3w7c4d8lHxLxXZtCxzzgW1xC3jDwU1ZVP3dWVca64HM5/+jgojHyCO8 59A9ybyjhggCu/fRiDeR5kZEnP9Jlfr7olh2mW+XcBLyXhLdVEZ+CHbRGUCaeRtG T/gyDokD8kcs+lr0u9/6Fr2RrBa9c5vA8YOfAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUxfFrPWKHExghKa8tEQc6j8nxloAwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy94ZkZyUFdLSEV4Z2hL YTh0RVFjNmo4bnhsb0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAcRVaMA0GCSqGSIb3DQEBCwUAA4IBAQBnjUROSZJnkt+pTJKTM2XjOF7MjVLd zeJW38p8PCu5nPYp2DdyLlrwTnI8M+ebiKcFh0Jz96QMuUNqveingu+urf1qqLUu eDiObzoWy9KPjeUrr92VaPQgywma4i/1xxju7yyu9kQuzGTU8FBjqMXaS6HeOzu2 VYNDx4rbHcXoHWrNDzrmhbKj5Hek/mFKT3Mp0jeXlZ+7n2m8jkJEzOTeL/FVIb1U q7qHI1vb689R9aiXdwqxGLnsKAhuFb20UL86AyAdTxa8XonnhtzJLiDbrR50xrd8 uXpI0+laa7rXYMJ0d8vOfHril7bEM489cU60/g7bk9tIwKlX6Gd5fOVZ -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:34 2025 by rpki-client on console.sobornost.net