$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/veUaXwCBCTUBE8d8Rws-wz1S0Io.roa File: veUaXwCBCTUBE8d8Rws-wz1S0Io.roa (raw, json) Hash identifier: Dg+nBeSKCPmeLzldhKpSkqURKnQze6Ja3EAc8Vs/bMY= Subject key identifier: BD:E5:1A:5F:00:81:09:35:01:13:C7:7C:47:0B:3E:C3:3D:52:D0:8A Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0D83 Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/veUaXwCBCTUBE8d8Rws-wz1S0Io.roa Signing time: Mon 10 Feb 2025 13:50:05 +0000 ROA not before: Mon 10 Feb 2025 13:50:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9244 IP address blocks: 210.67.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3459 (0xd83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Feb 10 13:50:05 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BDE51A5F008109350113C77C470B3EC33D52D08A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:02:38:ac:86:f5:18:c9:46:61:3f:6d:c5:16: 31:f3:13:3d:d3:e1:a9:50:0e:7f:e3:e0:80:00:b8: e8:76:58:88:14:29:a9:4f:55:e0:1b:94:d4:d7:d8: cb:5b:a2:bb:5a:8d:79:6f:5b:73:37:d9:83:c3:1b: 6c:f1:46:72:93:a3:0e:f7:29:21:91:81:13:7a:79: 32:4e:0f:56:0f:80:9c:d4:7f:c7:a4:b9:c3:3f:6f: 77:8b:86:c2:fc:10:ba:84:f4:f0:e9:e9:53:68:aa: 77:85:2b:39:82:2f:0c:57:79:14:c6:af:cc:c1:6f: 22:dc:6c:ba:3a:0e:9d:78:6a:57:51:f3:74:52:09: 5d:a6:15:47:cd:db:47:26:cd:c0:a8:b2:6d:b1:0d: 1d:08:3b:75:b9:1e:92:55:1f:7b:6c:33:ba:ef:2b: b8:89:e8:d8:54:17:1c:62:35:f0:40:1e:f5:98:9b: d1:68:0f:e6:cc:e9:b7:15:1b:6e:0a:55:28:14:8d: 4d:dd:50:6c:bf:5b:88:e6:a0:f5:67:e4:92:e2:73: d9:5b:9a:59:46:5d:5d:1a:9e:86:a9:0b:2f:68:b6: 47:3f:27:44:b9:a2:92:d2:03:ba:95:36:fa:a7:86: 30:00:fc:65:74:78:ef:dc:13:06:65:6e:f1:65:e6: 1c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E5:1A:5F:00:81:09:35:01:13:C7:7C:47:0B:3E:C3:3D:52:D0:8A X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/veUaXwCBCTUBE8d8Rws-wz1S0Io.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.67.96.0/20 Signature Algorithm: sha256WithRSAEncryption bc:d3:1e:21:cc:97:bf:ca:6d:02:dd:fe:88:3a:c6:95:37:ca: 56:f1:d9:3f:07:0b:16:50:20:e0:08:ab:d4:20:81:2c:a8:fb: f9:4c:81:9c:6a:cd:cf:53:70:6a:cf:ad:c4:6e:57:e8:f1:3f: 2e:7e:3c:7e:b8:ed:79:03:01:fb:24:fa:4c:16:5e:b3:83:ed: 27:07:cd:07:09:12:1e:8e:0a:21:42:2b:6b:45:f7:6d:8d:02: 80:10:40:de:b3:04:08:ab:78:be:f1:01:df:9f:16:a3:ce:cb: e6:3f:37:f0:57:1a:37:28:ce:65:98:79:df:5e:4d:e4:6a:1d: a3:48:c8:95:f0:66:97:e2:74:a0:dd:0a:57:80:ba:49:22:33: ff:f0:c0:cd:66:ef:c9:5e:ea:43:bc:76:ba:ed:b5:4b:54:95: 1a:2d:57:f2:43:af:73:41:ce:31:0b:34:de:52:8d:6a:d7:86: 89:b7:df:57:8b:4a:93:2d:8d:71:69:97:f7:ec:5b:c3:a1:88: cc:99:50:a3:ab:44:09:c2:d3:e5:d3:92:b3:a8:db:9c:67:ca: 51:22:87:be:ab:54:ed:c5:9c:85:78:f4:75:e6:dd:aa:51:13: 7d:f9:05:6a:91:7a:25:b3:a4:f1:04:25:79:e4:26:a4:bc:6b: 67:3b:d5:c9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDYMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNTAyMTAx MzUwMDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJERTUxQTVGMDA4MTA5 MzUwMTEzQzc3QzQ3MEIzRUMzM0Q1MkQwOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsAjishvUYyUZhP23FFjHzEz3T4alQDn/j4IAAuOh2WIgUKalP VeAblNTX2MtbortajXlvW3M32YPDG2zxRnKTow73KSGRgRN6eTJOD1YPgJzUf8ek ucM/b3eLhsL8ELqE9PDp6VNoqneFKzmCLwxXeRTGr8zBbyLcbLo6Dp14aldR83RS CV2mFUfN20cmzcCosm2xDR0IO3W5HpJVH3tsM7rvK7iJ6NhUFxxiNfBAHvWYm9Fo D+bM6bcVG24KVSgUjU3dUGy/W4jmoPVn5JLic9lbmllGXV0anoapCy9otkc/J0S5 opLSA7qVNvqnhjAA/GV0eO/cEwZlbvFl5hz/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUveUaXwCBCTUBE8d8Rws+wz1S0IowHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL3ZlVWFYd0NCQ1RVQkU4ZDhS d3Mtd3oxUzBJby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATS Q2AwDQYJKoZIhvcNAQELBQADggEBALzTHiHMl7/KbQLd/og6xpU3ylbx2T8HCxZQ IOAIq9QggSyo+/lMgZxqzc9TcGrPrcRuV+jxPy5+PH647XkDAfsk+kwWXrOD7ScH zQcJEh6OCiFCK2tF922NAoAQQN6zBAireL7xAd+fFqPOy+Y/N/BXGjcozmWYed9e TeRqHaNIyJXwZpfidKDdCleAukkiM//wwM1m78le6kO8drrttUtUlRotV/JDr3NB zjELNN5SjWrXhom331eLSpMtjXFpl/fsW8OhiMyZUKOrRAnC0+XTkrOo25xnylEi h76rVO3FnIV49HXm3apRE335BWqReiWzpPEEJXnkJqS8a2c71ck= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:35 2025 by rpki-client on console.sobornost.net