$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/AWOdl5MzRWNpk1R4cLk_35-gxkY.roa File: AWOdl5MzRWNpk1R4cLk_35-gxkY.roa (raw, json) Hash identifier: Taztqqnk4pvTiTq/1ju8h/Ryq5YhDEvumSKu4u+Y0ss= Subject key identifier: 01:63:9D:97:93:33:45:63:69:93:54:78:70:B9:3F:DF:9F:A0:C6:46 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 122E Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/AWOdl5MzRWNpk1R4cLk_35-gxkY.roa Signing time: Mon 10 Feb 2025 14:28:08 +0000 ROA not before: Mon 10 Feb 2025 14:28:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24154 IP address blocks: 60.244.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4654 (0x122e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:08 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=01639D97933345636993547870B93FDF9FA0C646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7e:46:e1:d7:e1:f8:9a:57:bc:9d:c1:1b:7a: f9:da:3d:f8:65:c7:18:49:3d:2f:7f:83:b0:fd:3d: 45:12:0d:83:b9:3c:67:3b:6e:51:48:ae:be:a2:95: d0:73:a2:50:43:b6:74:ed:32:45:95:ff:26:28:d0: 0b:f8:98:16:63:df:01:50:f6:89:f3:2c:a2:7f:7a: 99:3b:c5:2d:83:e3:67:14:07:79:bd:4b:12:99:c0: 45:04:00:cb:0f:5c:fd:8c:56:ac:41:41:44:55:93: a1:c8:71:83:5a:af:8a:d8:11:e9:01:42:e8:60:ff: a8:c0:5e:a8:6f:db:0a:5d:78:f2:c4:ce:2a:70:35: 6f:94:40:e0:58:d7:52:c9:a2:4d:70:8f:88:27:0e: 5c:f4:3a:9a:14:f4:5e:96:c6:e7:90:d1:b5:1a:72: f1:48:5e:30:10:34:d2:55:b0:30:74:76:1f:29:1f: bf:20:29:9f:d1:9a:4c:54:ff:d7:74:8b:f4:b7:f6: 9d:fc:9c:87:51:28:ba:6b:23:94:a1:88:54:c8:d7: 6e:0f:c0:dd:5a:9f:e8:e0:bc:48:f2:15:9c:1b:01: 11:88:92:71:fb:ad:ea:a8:ff:0f:32:21:56:46:b7: 03:bd:10:bf:42:c1:4d:1f:bd:33:43:9c:d4:4a:b9: 1e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:63:9D:97:93:33:45:63:69:93:54:78:70:B9:3F:DF:9F:A0:C6:46 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/AWOdl5MzRWNpk1R4cLk_35-gxkY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.244.1.0/24 Signature Algorithm: sha256WithRSAEncryption 64:0a:ca:4c:7e:9c:e8:84:3c:63:45:73:b6:e8:99:b4:10:e3: b6:77:08:a7:16:27:cc:b3:a8:3b:93:7f:bd:99:89:26:19:37: 9d:62:4a:62:a1:38:d4:3a:1f:8d:63:e7:3c:e4:41:11:2f:a6: ca:a6:f5:0e:d1:7b:f5:c2:25:da:ea:dc:ad:12:5e:d2:f2:80: ad:d8:37:7c:2e:1f:4f:a4:a9:ae:e7:c6:a8:63:80:c0:f5:68: f9:e7:bc:be:70:6a:57:98:a2:a8:d0:16:87:9a:a2:1b:fe:47: 88:07:14:cc:d7:96:4c:ae:b1:6d:d5:23:07:41:7f:62:e9:1f: bb:0b:f4:a9:39:0d:18:1f:15:0a:5b:6b:f1:33:ef:7f:d7:52: fa:19:d1:11:29:84:72:eb:0a:49:7c:5b:68:77:d2:70:55:ee: 09:21:66:5c:96:55:14:a6:38:0e:39:37:7a:65:ce:35:1f:aa: 7b:b3:9e:f3:fc:9a:48:f8:0c:44:9e:8b:40:00:a7:9f:b8:b6: 3c:a5:90:42:76:c7:2a:e1:a5:91:44:5e:ab:4c:21:07:b0:91: cf:ac:fc:95:1f:7a:cb:9c:4f:bd:82:51:52:fe:05:18:10:27: 4a:01:d5:9b:93:b4:ff:4f:91:85:fd:88:de:74:d5:2f:96:bf: 8d:df:f3:9f -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEi4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAxNjM5RDk3OTMzMzQ1 NjM2OTkzNTQ3ODcwQjkzRkRGOUZBMEM2NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCffkbh1+H4mle8ncEbevnaPfhlxxhJPS9/g7D9PUUSDYO5PGc7 blFIrr6ildBzolBDtnTtMkWV/yYo0Av4mBZj3wFQ9onzLKJ/epk7xS2D42cUB3m9 SxKZwEUEAMsPXP2MVqxBQURVk6HIcYNar4rYEekBQuhg/6jAXqhv2wpdePLEzipw NW+UQOBY11LJok1wj4gnDlz0OpoU9F6WxueQ0bUacvFIXjAQNNJVsDB0dh8pH78g KZ/RmkxU/9d0i/S39p38nIdRKLprI5ShiFTI124PwN1an+jgvEjyFZwbARGIknH7 reqo/w8yIVZGtwO9EL9CwU0fvTNDnNRKuR7FAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUAWOdl5MzRWNpk1R4cLk/35+gxkYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0FXT2RsNU16UldOcGsxUjRjTGtfMzUt Z3hrWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA89AEwDQYJ KoZIhvcNAQELBQADggEBAGQKykx+nOiEPGNFc7bombQQ47Z3CKcWJ8yzqDuTf72Z iSYZN51iSmKhONQ6H41j5zzkQREvpsqm9Q7Re/XCJdrq3K0SXtLygK3YN3wuH0+k qa7nxqhjgMD1aPnnvL5waleYoqjQFoeaohv+R4gHFMzXlkyusW3VIwdBf2LpH7sL 9Kk5DRgfFQpba/Ez73/XUvoZ0REphHLrCkl8W2h30nBV7gkhZlyWVRSmOA45N3pl zjUfqnuznvP8mkj4DESei0AAp5+4tjylkEJ2xyrhpZFEXqtMIQewkc+s/JUfesuc T72CUVL+BRgQJ0oB1ZuTtP9PkYX9iN501S+Wv43f858= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:36 2025 by rpki-client on console.sobornost.net