$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/FeAMDm9qccijoyI9Ffbw1vCASAU.roa File: FeAMDm9qccijoyI9Ffbw1vCASAU.roa (raw, json) Hash identifier: v9ASdzTON3Hi71cqK379nVHH1s8vlafaTgjUjA7ut38= Subject key identifier: 15:E0:0C:0E:6F:6A:71:C8:A3:A3:22:3D:15:F6:F0:D6:F0:80:48:05 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1205 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/FeAMDm9qccijoyI9Ffbw1vCASAU.roa Signing time: Mon 10 Feb 2025 14:27:58 +0000 ROA not before: Mon 10 Feb 2025 14:27:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 218.35.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4613 (0x1205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=15E00C0E6F6A71C8A3A3223D15F6F0D6F0804805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:13:d3:9c:42:a8:04:34:b0:05:5c:20:de:38: 4e:c5:ef:ef:3d:53:ca:cb:3b:16:29:b8:c4:33:41: 50:89:de:25:a2:d3:4a:98:98:72:b1:75:f4:7e:76: 92:01:89:3d:47:8d:e3:1f:9b:40:1f:88:bb:bd:16: e1:68:d8:d0:8d:d7:61:5c:89:de:43:cc:fb:11:22: d3:53:df:28:ed:26:7a:1f:da:b9:3d:6b:52:d9:cc: 11:97:36:da:ac:37:d6:d0:24:97:ee:10:f7:cb:7b: e8:27:98:e4:a5:15:b3:50:a7:1f:74:1f:8c:6a:19: ed:52:8c:34:39:7b:5a:16:10:19:25:be:5a:8a:9c: 6b:c7:b2:de:f7:7e:01:e2:03:10:0f:d2:e1:77:7b: af:81:3b:a5:8d:13:55:84:b5:4a:2a:bc:34:b7:35: 85:ea:7a:60:3e:b3:04:81:ad:5f:11:70:69:13:83: 2f:b2:b6:6a:89:21:28:84:4b:9e:88:e1:6b:45:a3: 51:90:cf:76:21:ce:64:e5:2c:4b:ad:f4:e9:04:3e: d3:eb:5f:e6:dd:b9:20:d9:a9:3f:7b:8d:ef:77:0e: 87:87:64:8e:90:37:b7:ef:c4:9e:e0:eb:5a:0c:35: c9:50:a0:d6:bd:73:5c:02:57:34:c9:5b:68:dd:16: 4d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E0:0C:0E:6F:6A:71:C8:A3:A3:22:3D:15:F6:F0:D6:F0:80:48:05 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/FeAMDm9qccijoyI9Ffbw1vCASAU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.35.8.0/21 Signature Algorithm: sha256WithRSAEncryption 9d:39:ff:34:9e:e2:50:03:8c:7c:ee:40:48:42:9c:05:2b:c7: f6:f1:69:97:36:4a:75:2f:d3:99:d6:1c:4f:11:ea:ee:0d:24: 93:52:94:15:7a:39:75:23:60:38:1a:cc:0f:4a:45:b2:a9:23: 75:39:92:6c:52:d3:52:60:c9:26:40:96:03:cd:0a:3a:02:f9: 3a:ce:4e:50:4b:ca:52:58:f8:eb:43:04:e9:f9:92:e6:c0:25: 74:db:79:6d:80:9c:37:76:a7:e9:af:9d:b4:66:1f:35:8e:26: 25:9b:47:1f:7c:6b:e9:c2:f1:dc:96:1d:76:fa:31:c2:44:af: 16:f1:b1:e4:b5:35:e8:ac:93:e3:65:fc:8b:45:9b:15:bf:58: 6c:e1:b8:c7:0a:42:2f:c2:1c:ee:28:45:20:68:dc:8e:6d:89: c9:00:1b:d4:c5:67:ee:81:86:c9:80:21:4f:d4:77:d0:ea:dc: cb:98:a1:a4:be:c6:f2:6c:3f:a3:aa:0d:35:be:2c:ed:f6:23: d9:72:a3:75:69:0f:73:fa:8a:59:d7:35:31:6a:80:83:48:5d: ec:f3:ba:27:63:b4:ec:08:92:bc:14:cc:30:f1:b4:2d:bd:db: a2:63:29:c5:67:74:c3:bd:d1:cc:52:01:42:7c:5e:ba:f8:27: e0:45:cb:22 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEgUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE1RTAwQzBFNkY2QTcx QzhBM0EzMjIzRDE1RjZGMEQ2RjA4MDQ4MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQE9OcQqgENLAFXCDeOE7F7+89U8rLOxYpuMQzQVCJ3iWi00qY mHKxdfR+dpIBiT1HjeMfm0AfiLu9FuFo2NCN12Fcid5DzPsRItNT3yjtJnof2rk9 a1LZzBGXNtqsN9bQJJfuEPfLe+gnmOSlFbNQpx90H4xqGe1SjDQ5e1oWEBklvlqK nGvHst73fgHiAxAP0uF3e6+BO6WNE1WEtUoqvDS3NYXqemA+swSBrV8RcGkTgy+y tmqJISiES56I4WtFo1GQz3YhzmTlLEut9OkEPtPrX+bduSDZqT97je93DoeHZI6Q N7fvxJ7g61oMNclQoNa9c1wCVzTJW2jdFk2VAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUFeAMDm9qccijoyI9Ffbw1vCASAUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0ZlQU1EbTlxY2Npam95STlGZmJ3MXZD QVNBVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPaIwgwDQYJ KoZIhvcNAQELBQADggEBAJ05/zSe4lADjHzuQEhCnAUrx/bxaZc2SnUv05nWHE8R 6u4NJJNSlBV6OXUjYDgazA9KRbKpI3U5kmxS01JgySZAlgPNCjoC+TrOTlBLylJY +OtDBOn5kubAJXTbeW2AnDd2p+mvnbRmHzWOJiWbRx98a+nC8dyWHXb6McJErxbx seS1Neisk+Nl/ItFmxW/WGzhuMcKQi/CHO4oRSBo3I5tickAG9TFZ+6BhsmAIU/U d9Dq3MuYoaS+xvJsP6OqDTW+LO32I9lyo3VpD3P6ilnXNTFqgINIXezzuidjtOwI krwUzDDxtC2926JjKcVndMO90cxSAUJ8Xrr4J+BFyyI= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:36 2025 by rpki-client on console.sobornost.net