$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/4QPCe-OfTQnzOMMyP2E9Qe4H-Ag.roa File: 4QPCe-OfTQnzOMMyP2E9Qe4H-Ag.roa (raw, json) Hash identifier: omKMW2PZVMs92Vn8l4oA7Ui8TUBETc2DT2t9OdFmyL0= Subject key identifier: E1:03:C2:7B:E3:9F:4D:09:F3:38:C3:32:3F:61:3D:41:EE:07:F8:08 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 11DC Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/4QPCe-OfTQnzOMMyP2E9Qe4H-Ag.roa Signing time: Mon 10 Feb 2025 14:27:48 +0000 ROA not before: Mon 10 Feb 2025 14:27:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 222.156.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4572 (0x11dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:48 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E103C27BE39F4D09F338C3323F613D41EE07F808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:87:2e:19:5d:7c:03:25:b0:b1:17:b1:08:e4: 58:76:03:6d:20:4f:08:34:de:d1:ac:67:29:b8:34: 1e:7c:c0:59:7e:ef:97:7a:b3:47:4d:82:29:bf:3e: 1d:9f:a4:41:b8:97:ea:76:a1:f4:d4:0b:ec:3b:2a: 61:af:17:7b:c5:44:3a:4d:f1:b9:26:c2:e0:b4:13: 85:aa:1c:c8:13:3b:0d:3f:ff:a0:e5:47:f9:55:ea: 5c:48:b7:23:f7:db:1e:9a:0d:07:49:5a:ff:25:3b: 6d:3e:80:13:de:29:84:1f:d1:95:50:be:b8:94:7f: cc:7a:40:a8:dc:31:52:f4:b4:89:cf:5b:ae:56:cd: 31:11:4c:c0:26:d3:74:12:1d:01:32:7c:e2:b9:9c: 03:34:76:93:91:41:40:23:9b:ad:dd:d2:42:c6:43: e9:f8:ba:70:96:0c:53:f1:bb:ba:8b:ee:14:b4:6e: e8:f3:71:94:07:97:22:1c:94:1f:e4:2e:53:5d:1d: 78:ea:5f:9b:02:43:6d:17:bb:93:a6:78:8b:04:d9: 75:b9:8a:2d:2a:e9:f7:e4:ba:de:1f:d1:c2:4d:bf: 93:ac:38:25:29:23:4f:d8:51:c9:8a:37:1f:10:2f: 9a:00:9a:22:82:dc:73:73:a4:15:74:bc:55:f9:97: d6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:03:C2:7B:E3:9F:4D:09:F3:38:C3:32:3F:61:3D:41:EE:07:F8:08 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/4QPCe-OfTQnzOMMyP2E9Qe4H-Ag.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.156.0.0/16 Signature Algorithm: sha256WithRSAEncryption 12:2e:b6:1e:ed:9f:b3:8e:87:f0:91:92:67:0c:43:0a:8a:f8: cf:0f:ab:54:53:2f:ad:be:e2:b7:39:0a:a7:21:76:78:d1:d1: d3:46:40:4d:74:46:9b:66:af:ea:51:b8:c4:78:a9:b0:7a:95: f7:21:e0:3b:c7:fa:7d:bf:64:92:20:26:df:9a:f5:21:f2:0a: 65:6c:1d:d9:1e:a7:71:8d:a8:cc:fa:58:74:2d:40:61:c4:90: 5b:ff:30:7c:80:c5:12:e9:11:da:8b:68:46:22:91:65:46:45: 4f:6a:2a:a5:52:c9:78:07:56:71:0d:7f:21:14:5a:c0:c7:1e: aa:5b:b9:5f:f5:81:f5:47:6d:bc:6a:d0:dd:6b:fb:f6:cb:29: 2c:9a:a2:9b:ba:87:1b:8b:76:57:7a:34:69:07:bb:b8:0f:6b: b5:2f:46:88:08:fc:f9:95:69:07:66:8d:b7:96:7c:07:3b:f3: 2a:5e:1a:c2:ad:c1:c8:71:66:36:54:f4:7c:43:50:ce:3f:79: 08:37:23:a9:73:6a:85:87:88:0c:a3:96:f5:22:38:97:eb:88: fd:85:b8:87:2d:de:c3:68:26:6f:85:f4:9e:bc:ad:d2:e0:ef: fc:9d:57:30:5e:ae:34:63:9e:e3:85:b2:15:6c:ab:1f:69:80: 36:21:a7:6c -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEdwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUxMDNDMjdCRTM5RjRE MDlGMzM4QzMzMjNGNjEzRDQxRUUwN0Y4MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0hy4ZXXwDJbCxF7EI5Fh2A20gTwg03tGsZym4NB58wFl+75d6 s0dNgim/Ph2fpEG4l+p2ofTUC+w7KmGvF3vFRDpN8bkmwuC0E4WqHMgTOw0//6Dl R/lV6lxItyP32x6aDQdJWv8lO20+gBPeKYQf0ZVQvriUf8x6QKjcMVL0tInPW65W zTERTMAm03QSHQEyfOK5nAM0dpORQUAjm63d0kLGQ+n4unCWDFPxu7qL7hS0bujz cZQHlyIclB/kLlNdHXjqX5sCQ20Xu5OmeIsE2XW5ii0q6ffkut4f0cJNv5OsOCUp I0/YUcmKNx8QL5oAmiKC3HNzpBV0vFX5l9YhAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQU4QPCe+OfTQnzOMMyP2E9Qe4H+AgwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzRRUENlLU9mVFFuek9NTXlQMkU5UWU0 SC1BZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDenDANBgkq hkiG9w0BAQsFAAOCAQEAEi62Hu2fs46H8JGSZwxDCor4zw+rVFMvrb7itzkKpyF2 eNHR00ZATXRGm2av6lG4xHipsHqV9yHgO8f6fb9kkiAm35r1IfIKZWwd2R6ncY2o zPpYdC1AYcSQW/8wfIDFEukR2otoRiKRZUZFT2oqpVLJeAdWcQ1/IRRawMceqlu5 X/WB9UdtvGrQ3Wv79sspLJqim7qHG4t2V3o0aQe7uA9rtS9GiAj8+ZVpB2aNt5Z8 BzvzKl4awq3ByHFmNlT0fENQzj95CDcjqXNqhYeIDKOW9SI4l+uI/YW4hy3ew2gm b4X0nryt0uDv/J1XMF6uNGOe44WyFWyrH2mANiGnbA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:36 2025 by rpki-client on console.sobornost.net