$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Qnb-D_ZRexyTF9h3QROZBz1iGNA.roa File: Qnb-D_ZRexyTF9h3QROZBz1iGNA.roa (raw, json) Hash identifier: RlQM0Ut0QqAyGFfB9R9lb2CrewtYtD74/mW3eVNIp2A= Subject key identifier: 42:76:FE:0F:F6:51:7B:1C:93:17:D8:77:41:13:99:07:3D:62:18:D0 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 124B Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Qnb-D_ZRexyTF9h3QROZBz1iGNA.roa Signing time: Mon 10 Feb 2025 14:28:15 +0000 ROA not before: Mon 10 Feb 2025 14:28:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 210.202.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4683 (0x124b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:15 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4276FE0FF6517B1C9317D877411399073D6218D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:5d:8b:47:b5:0c:5b:20:03:db:d4:07:7e: ba:ee:da:dc:1d:d7:1b:d4:a6:cb:65:48:a3:7b:4f: c7:0d:b1:1f:39:13:c7:33:bf:a1:ee:b9:38:a0:a8: 84:c1:d7:f1:a4:14:9e:fc:1e:a2:31:08:f1:ce:06: 63:1e:d1:3a:f7:db:53:67:a6:b9:63:6a:85:dd:8c: e1:fe:60:49:e6:1e:45:89:b9:1d:52:8c:36:e5:d9: 63:e5:2e:34:f4:c8:fb:bf:8e:0c:3f:28:d4:9e:ba: 76:e2:b5:dd:a6:c4:d2:b6:8b:c5:54:97:31:05:8f: 61:5f:05:84:03:e3:73:ed:99:98:e7:f5:a0:26:be: 18:d5:e1:72:49:ac:7a:23:d4:82:df:ab:2b:d4:72: d3:a9:51:99:33:e8:b7:ff:e1:dc:d5:ed:37:37:05: 4c:be:4b:8b:ef:4f:78:65:e7:2b:98:4c:3f:26:01: 39:bd:4c:dc:a0:a7:d7:dc:3e:47:bd:0c:a2:01:56: 95:d6:3f:18:ca:8b:16:17:e0:7c:57:ec:c4:1c:70: c7:b1:90:e1:03:22:da:60:82:47:a2:32:86:39:73: d2:69:0d:ea:5b:db:e9:b1:bd:51:d3:30:d3:2a:29: 58:cd:07:cf:0f:5b:20:31:7d:68:61:67:55:ea:b8: e9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:76:FE:0F:F6:51:7B:1C:93:17:D8:77:41:13:99:07:3D:62:18:D0 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Qnb-D_ZRexyTF9h3QROZBz1iGNA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.202.0.0/19 Signature Algorithm: sha256WithRSAEncryption 2d:3a:6e:a1:0f:c8:36:a7:37:d6:f9:78:ee:05:6b:d4:a1:8e: d4:4e:e3:95:4c:46:1f:b8:56:fa:cb:45:9b:19:31:3f:cd:b2: 29:01:eb:e9:78:cc:31:ea:09:70:26:8a:89:68:58:f2:d1:d4: b7:32:0d:72:b7:73:9b:ae:e1:14:64:a6:84:25:8b:90:f9:53: bb:ac:3e:df:19:c6:df:51:0a:da:6c:8e:a0:49:a0:11:74:f6: 06:32:14:5c:0f:2b:b0:b1:66:6f:4b:d6:d9:6a:a7:e5:c4:e8: 74:e4:b8:46:d7:39:9c:d0:57:9a:7f:a1:9b:43:9b:c0:78:57: fb:5d:04:ea:b1:e9:2d:3e:9f:03:bc:8e:48:8e:d1:ff:5d:0f: 3f:f5:3a:84:a2:81:91:8f:76:d8:19:a5:64:e0:7f:20:b6:13: f1:f1:83:ec:bd:5a:c6:4e:0d:13:ba:9c:43:62:5f:73:a6:8c: 5c:76:14:47:9b:84:c3:8d:27:fb:39:8b:b6:37:05:d3:e4:fb: eb:86:23:10:f4:16:ef:d1:f6:71:3d:3e:45:10:fd:c8:a7:11: 94:a9:61:34:93:bc:f8:e6:41:e7:dd:bb:ea:84:d0:2c:5f:c3: ca:f4:8a:b9:38:f5:5c:7b:a8:2e:dd:da:29:8f:b8:2e:8e:f6: 77:cc:60:a4 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEkswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQyNzZGRTBGRjY1MTdC MUM5MzE3RDg3NzQxMTM5OTA3M0Q2MjE4RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHwl2LR7UMWyAD29QHfrru2twd1xvUpstlSKN7T8cNsR85E8cz v6HuuTigqITB1/GkFJ78HqIxCPHOBmMe0Tr321NnprljaoXdjOH+YEnmHkWJuR1S jDbl2WPlLjT0yPu/jgw/KNSeunbitd2mxNK2i8VUlzEFj2FfBYQD43PtmZjn9aAm vhjV4XJJrHoj1ILfqyvUctOpUZkz6Lf/4dzV7Tc3BUy+S4vvT3hl5yuYTD8mATm9 TNygp9fcPke9DKIBVpXWPxjKixYX4HxX7MQccMexkOEDItpggkeiMoY5c9JpDepb 2+mxvVHTMNMqKVjNB88PWyAxfWhhZ1XquOm3AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUQnb+D/ZRexyTF9h3QROZBz1iGNAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1FuYi1EX1pSZXh5VEY5aDNRUk9aQnox aUdOQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXSygAwDQYJ KoZIhvcNAQELBQADggEBAC06bqEPyDanN9b5eO4Fa9ShjtRO45VMRh+4VvrLRZsZ MT/NsikB6+l4zDHqCXAmioloWPLR1LcyDXK3c5uu4RRkpoQli5D5U7usPt8Zxt9R CtpsjqBJoBF09gYyFFwPK7CxZm9L1tlqp+XE6HTkuEbXOZzQV5p/oZtDm8B4V/td BOqx6S0+nwO8jkiO0f9dDz/1OoSigZGPdtgZpWTgfyC2E/Hxg+y9WsZODRO6nENi X3OmjFx2FEebhMONJ/s5i7Y3BdPk++uGIxD0Fu/R9nE9PkUQ/cinEZSpYTSTvPjm Qefdu+qE0Cxfw8r0irk49Vx7qC7d2imPuC6O9nfMYKQ= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:36 2025 by rpki-client on console.sobornost.net