$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/RevM6Jw-8WF1dzkLac56OnVbmaY.roa File: RevM6Jw-8WF1dzkLac56OnVbmaY.roa (raw, json) Hash identifier: EewbAobPSU0UTXIt+OpgNThycwkk8Ekc5YBlXpEFRuM= Subject key identifier: 45:EB:CC:E8:9C:3E:F1:61:75:77:39:0B:69:CE:7A:3A:75:5B:99:A6 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1213 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/RevM6Jw-8WF1dzkLac56OnVbmaY.roa Signing time: Mon 10 Feb 2025 14:28:02 +0000 ROA not before: Mon 10 Feb 2025 14:28:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 210.63.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4627 (0x1213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:02 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=45EBCCE89C3EF1617577390B69CE7A3A755B99A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:64:03:2f:b3:e2:b8:15:bf:80:0c:37:8d:33: d1:33:4d:14:70:ae:18:95:b0:98:41:a3:f8:87:27: b5:04:b6:44:5f:71:49:85:9e:32:4d:37:a0:ed:64: 27:be:da:4f:26:be:48:25:cb:68:9b:72:8b:87:7e: 7d:88:27:f1:68:3e:2f:f6:68:93:28:b0:28:1e:43: 88:a9:5b:c9:4a:aa:4a:26:06:72:4e:00:d2:0f:83: da:e0:38:5b:53:4f:a0:cb:f6:5b:f2:e1:6d:25:07: 50:b3:36:fd:63:6b:f6:af:af:78:34:ea:28:40:95: 56:9b:f6:bc:f7:88:a9:11:9e:ae:c6:71:52:f4:42: ad:b5:d9:17:b0:dd:a2:32:7a:5c:7d:90:8b:79:1f: 05:06:fa:6c:98:2e:c6:89:50:d0:c2:63:41:cd:31: 47:1e:66:f7:f6:cb:ed:68:e4:6b:08:8f:9a:94:3b: 34:4c:5c:f9:b7:92:a8:71:6e:ba:d2:5b:e8:aa:44: 92:90:0e:65:54:02:e8:1c:6c:d9:aa:67:4b:d9:c1: 70:d2:1f:ee:00:3d:88:de:4b:c0:b4:08:d8:20:e9: 00:76:26:0f:45:35:c9:37:29:2f:70:6c:7c:d1:17: 99:2b:99:20:8a:d0:5f:24:48:a9:40:31:5b:ef:c4: 91:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:EB:CC:E8:9C:3E:F1:61:75:77:39:0B:69:CE:7A:3A:75:5B:99:A6 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/RevM6Jw-8WF1dzkLac56OnVbmaY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.192.0/19 Signature Algorithm: sha256WithRSAEncryption b1:f4:19:cc:e2:27:05:60:12:fe:f4:aa:60:8d:6f:d8:dd:78: 04:0a:8e:44:87:d4:ba:e3:92:7f:f3:1d:e7:b6:0d:a7:8b:08: a1:8b:e5:da:17:8f:aa:b8:a8:3e:96:d6:b3:16:04:94:52:42: 24:a9:94:a8:6e:3f:bd:bc:31:17:2e:1e:c6:ca:6e:77:59:4d: 58:f7:68:8e:af:e6:c3:53:5c:bc:d3:c5:95:aa:27:22:28:6d: e3:99:ff:bf:96:a0:8e:f0:28:12:95:f6:ab:fb:3f:f1:93:34: d3:7c:ab:a9:6f:ba:f6:9a:6c:38:24:39:e3:75:69:6c:91:0a: 10:b4:76:ab:bc:c5:cc:50:2e:be:79:30:f5:a1:ca:ed:38:bc: 92:fd:9a:7f:96:ab:a8:46:a2:9e:5d:a6:bb:1e:4e:e1:86:20: fe:4d:0a:7c:88:d6:35:d8:ea:70:15:d7:db:de:d8:3a:24:bd: a5:c7:3b:d5:85:25:75:80:5a:8b:74:da:3f:27:5a:ab:f1:03: a6:8a:6c:ad:e3:d7:6a:b3:69:2e:fa:2d:8e:4c:e7:68:61:e7: 39:83:79:14:90:76:ab:2a:c1:94:c4:da:ea:e4:15:fb:10:22: d2:49:9b:90:ac:24:a8:e6:c7:dd:08:ad:a1:f5:53:c0:7e:52: 4b:0b:14:5a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEhMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ1RUJDQ0U4OUMzRUYx NjE3NTc3MzkwQjY5Q0U3QTNBNzU1Qjk5QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcZAMvs+K4Fb+ADDeNM9EzTRRwrhiVsJhBo/iHJ7UEtkRfcUmF njJNN6DtZCe+2k8mvkgly2ibcouHfn2IJ/FoPi/2aJMosCgeQ4ipW8lKqkomBnJO ANIPg9rgOFtTT6DL9lvy4W0lB1CzNv1ja/avr3g06ihAlVab9rz3iKkRnq7GcVL0 Qq212Rew3aIyelx9kIt5HwUG+myYLsaJUNDCY0HNMUceZvf2y+1o5GsIj5qUOzRM XPm3kqhxbrrSW+iqRJKQDmVUAugcbNmqZ0vZwXDSH+4APYjeS8C0CNgg6QB2Jg9F Nck3KS9wbHzRF5krmSCK0F8kSKlAMVvvxJFHAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQURevM6Jw+8WF1dzkLac56OnVbmaYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Jldk02SnctOFdGMWR6a0xhYzU2T25W Ym1hWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXSP8AwDQYJ KoZIhvcNAQELBQADggEBALH0GcziJwVgEv70qmCNb9jdeAQKjkSH1Lrjkn/zHee2 DaeLCKGL5doXj6q4qD6W1rMWBJRSQiSplKhuP728MRcuHsbKbndZTVj3aI6v5sNT XLzTxZWqJyIobeOZ/7+WoI7wKBKV9qv7P/GTNNN8q6lvuvaabDgkOeN1aWyRChC0 dqu8xcxQLr55MPWhyu04vJL9mn+Wq6hGop5dprseTuGGIP5NCnyI1jXY6nAV19ve 2DokvaXHO9WFJXWAWot02j8nWqvxA6aKbK3j12qzaS76LY5M52hh5zmDeRSQdqsq wZTE2urkFfsQItJJm5CsJKjmx90IraH1U8B+UksLFFo= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:36 2025 by rpki-client on console.sobornost.net