$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/GzLnS2_zzq-55UgqLUSFPH7Uj38.roa File: GzLnS2_zzq-55UgqLUSFPH7Uj38.roa (raw, json) Hash identifier: 9e17os52vSmR/n//mV3cdPeuPcDxMXyY+W6gecZ31jY= Subject key identifier: 1B:32:E7:4B:6F:F3:CE:AF:B9:E5:48:2A:2D:44:85:3C:7E:D4:8F:7F Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1215 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/GzLnS2_zzq-55UgqLUSFPH7Uj38.roa Signing time: Mon 10 Feb 2025 14:28:03 +0000 ROA not before: Mon 10 Feb 2025 14:28:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 203.79.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4629 (0x1215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:03 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1B32E74B6FF3CEAFB9E5482A2D44853C7ED48F7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:62:2f:32:4b:39:62:00:df:90:e4:12:26:2e: 81:52:89:f3:05:f2:c6:5e:8c:f6:b2:a5:6c:47:0a: f0:b4:24:57:4a:a5:c1:5e:fd:92:30:d9:6c:2c:b2: a4:34:1b:c6:54:3f:e1:b0:b9:f9:21:49:8a:33:cd: 5e:76:18:f9:32:c9:2e:7d:ff:cb:e5:16:b5:d2:89: 63:45:7c:fe:24:3d:d6:8b:52:32:9d:64:bb:b0:a8: 2b:dc:3f:6c:df:75:97:7a:cd:ba:31:d8:8c:d8:db: 99:c1:43:53:7b:5d:ca:d7:e4:d9:6e:cc:f8:08:b4: a2:76:c9:93:cd:05:da:78:37:94:38:c6:52:72:99: 83:22:53:e1:29:63:a1:ad:8a:64:39:65:b1:dc:a2: 86:0d:ed:7f:53:48:e8:18:dc:0f:d1:4c:4d:b8:38: 30:f2:dd:14:29:45:cf:92:80:6e:36:51:88:16:ff: 04:cc:2e:eb:25:5d:12:f8:7e:9f:6a:00:e1:03:a2: 24:1d:3c:7b:8a:1e:cd:e9:4c:7a:ef:96:a1:c4:43: 77:d0:c9:58:41:b2:87:8a:1d:27:b1:e4:a1:5a:4d: b4:af:5e:fe:74:aa:ed:dd:fc:c5:97:04:e2:8e:44: c9:dd:4e:4b:1a:33:36:8a:4b:3a:a7:54:f7:6e:d2: 1c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:32:E7:4B:6F:F3:CE:AF:B9:E5:48:2A:2D:44:85:3C:7E:D4:8F:7F X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/GzLnS2_zzq-55UgqLUSFPH7Uj38.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.128.0/17 Signature Algorithm: sha256WithRSAEncryption 51:6a:31:a0:e0:10:93:1c:eb:3e:1f:2e:1a:b4:9f:85:5a:fc: df:34:b7:a8:0a:af:40:2a:95:8f:ac:21:8d:67:f9:f3:82:5b: 69:de:ff:03:8d:c8:a6:62:4b:26:d3:df:68:1f:6c:1b:ad:68: 31:53:a8:da:f7:23:84:2c:7a:5c:79:a1:1e:8b:9d:fa:30:67: ee:22:54:e0:ae:e7:8a:21:f3:97:16:79:b6:09:2a:a9:5c:86: d9:1d:ad:30:3a:7f:c3:93:8d:7c:ba:f4:98:f0:ba:be:ad:dc: 24:24:b1:f7:ed:36:a7:2d:8b:1c:1c:94:5a:94:ce:a3:2d:fc: a7:78:ce:1d:1e:7e:9c:1c:68:a2:3f:9a:66:23:09:7d:4f:4b: 2b:88:50:e3:7d:52:8b:75:70:eb:9e:84:fd:68:40:c6:f2:bc: 20:75:6c:3f:79:84:ad:b0:bc:91:14:7a:7a:3a:91:a6:bb:77: 99:db:d4:c2:e8:69:89:31:d0:7a:ee:7f:d7:f5:58:72:b6:59: e4:62:07:40:3c:5e:81:11:aa:13:f0:a1:6f:8c:94:44:b6:8d: 3e:18:bc:8d:9c:c6:83:3d:13:46:c6:9b:d7:2c:55:ec:08:92: 31:53:68:9a:be:58:be:54:e9:34:9e:21:87:dd:f0:27:06:1c: 45:79:12:ac -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEhUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFCMzJFNzRCNkZGM0NF QUZCOUU1NDgyQTJENDQ4NTNDN0VENDhGN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsYi8ySzliAN+Q5BImLoFSifMF8sZejPaypWxHCvC0JFdKpcFe /ZIw2WwssqQ0G8ZUP+GwufkhSYozzV52GPkyyS59/8vlFrXSiWNFfP4kPdaLUjKd ZLuwqCvcP2zfdZd6zbox2IzY25nBQ1N7XcrX5NluzPgItKJ2yZPNBdp4N5Q4xlJy mYMiU+EpY6GtimQ5ZbHcooYN7X9TSOgY3A/RTE24ODDy3RQpRc+SgG42UYgW/wTM LuslXRL4fp9qAOEDoiQdPHuKHs3pTHrvlqHEQ3fQyVhBsoeKHSex5KFaTbSvXv50 qu3d/MWXBOKORMndTksaMzaKSzqnVPdu0hzDAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUGzLnS2/zzq+55UgqLUSFPH7Uj38wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0d6TG5TMl96enEtNTVVZ3FMVVNGUEg3 VWozOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfLT4AwDQYJ KoZIhvcNAQELBQADggEBAFFqMaDgEJMc6z4fLhq0n4Va/N80t6gKr0AqlY+sIY1n +fOCW2ne/wONyKZiSybT32gfbButaDFTqNr3I4Qselx5oR6LnfowZ+4iVOCu54oh 85cWebYJKqlchtkdrTA6f8OTjXy69Jjwur6t3CQksfftNqctixwclFqUzqMt/Kd4 zh0efpwcaKI/mmYjCX1PSyuIUON9Uot1cOuehP1oQMbyvCB1bD95hK2wvJEUeno6 kaa7d5nb1MLoaYkx0Hruf9f1WHK2WeRiB0A8XoERqhPwoW+MlES2jT4YvI2cxoM9 E0bGm9csVewIkjFTaJq+WL5U6TSeIYfd8CcGHEV5Eqw= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:36 2025 by rpki-client on console.sobornost.net