$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/XKLpCUWSbOk2UzRGGWRiBdssaSA.roa File: XKLpCUWSbOk2UzRGGWRiBdssaSA.roa (raw, json) Hash identifier: cQU9oZ8GdRdxh39Xhm9RbfqY1aU6Xp1JSX9xyQRWOrc= Subject key identifier: 5C:A2:E9:09:45:92:6C:E9:36:53:34:46:19:64:62:05:DB:2C:69:20 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 125D Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/XKLpCUWSbOk2UzRGGWRiBdssaSA.roa Signing time: Mon 10 Feb 2025 14:28:20 +0000 ROA not before: Mon 10 Feb 2025 14:28:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9922 IP address blocks: 124.218.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4701 (0x125d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:20 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5CA2E90945926CE93653344619646205DB2C6920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5d:e8:8f:95:1b:40:0c:ff:9b:ba:f9:75:fb: f8:83:2f:e9:0e:58:21:99:f7:d2:ac:0a:ed:bc:90: 66:82:ee:4e:2a:36:de:95:cc:b6:69:2b:c7:8b:d2: 4d:25:5f:c6:d8:b9:0b:58:94:38:60:91:ee:18:6a: 09:70:3e:06:7b:cf:55:55:74:b1:91:71:83:72:dd: 07:76:43:7b:12:c3:37:96:76:5b:86:5f:e5:d9:71: e8:b0:44:41:d1:44:fe:0f:c2:a4:69:b7:e3:ef:cd: 6b:6c:39:9c:44:e0:71:38:af:ce:07:08:3d:f0:14: 62:2e:c1:46:01:6e:33:84:de:40:64:90:83:a6:44: ce:b6:d4:55:89:70:cb:57:65:42:f1:24:4b:8e:c7: 30:f3:7d:02:f0:96:98:6e:58:23:42:73:40:c0:86: d0:55:2f:92:6a:07:e3:a7:ab:6b:94:b4:56:84:1a: 1d:de:ad:23:8c:89:28:5b:23:5e:4a:ea:06:56:6c: 28:64:d3:a5:85:17:7d:78:f9:9b:12:d5:cc:a6:33: c1:2c:62:32:65:c8:48:07:ae:98:f1:64:4d:7f:b6: 73:a1:ec:8a:db:b4:22:ce:f2:f0:3c:9b:d2:d2:7a: 72:e8:45:08:76:ce:a3:f0:72:34:fb:7e:fa:58:74: fe:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A2:E9:09:45:92:6C:E9:36:53:34:46:19:64:62:05:DB:2C:69:20 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/XKLpCUWSbOk2UzRGGWRiBdssaSA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.172.0/24 Signature Algorithm: sha256WithRSAEncryption 43:70:82:e5:8d:67:e3:97:1e:98:01:15:71:b1:3c:30:a3:59: 96:5b:b5:fa:da:4f:21:c9:5d:05:e3:d8:30:e6:d4:ec:9f:92: 3d:60:54:3d:9d:92:68:07:5f:10:70:89:c5:37:f0:43:0f:f0: b8:28:05:7a:f4:40:85:80:fd:9f:ed:c3:2d:ed:bc:30:41:60: 23:c9:29:da:24:64:ca:1a:fe:74:44:84:64:c9:06:e6:65:4d: f0:69:e3:db:17:b1:87:43:19:4f:6b:1e:aa:60:e1:5d:ca:5d: 70:f1:1d:51:43:d4:c7:5d:ce:24:46:58:18:7f:9a:c2:d8:b9: a9:27:06:f5:ea:bc:17:a4:59:a8:58:aa:d3:e8:8b:ce:a6:75: cb:1c:7f:c8:13:0f:b3:8c:f1:59:b3:77:38:5f:a7:84:53:df: 54:c1:bf:9f:71:e5:2a:9e:f4:87:d6:92:13:ee:c9:d7:03:40: 84:41:a8:db:52:cb:4c:37:7b:ed:75:bc:59:da:0f:aa:27:1c: 60:b4:9d:7b:fd:67:33:07:1c:22:33:1b:bd:de:f0:82:d1:b0: 97:f4:01:9e:af:d0:6e:c3:fe:5e:fc:e7:cf:17:ff:49:1a:ff: 2b:b3:9d:c5:ee:ac:3c:4a:c0:e0:d7:eb:45:e5:d0:64:9b:1c: 25:a6:0a:bd -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEl0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVDQTJFOTA5NDU5MjZD RTkzNjUzMzQ0NjE5NjQ2MjA1REIyQzY5MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFXeiPlRtADP+buvl1+/iDL+kOWCGZ99KsCu28kGaC7k4qNt6V zLZpK8eL0k0lX8bYuQtYlDhgke4YaglwPgZ7z1VVdLGRcYNy3Qd2Q3sSwzeWdluG X+XZceiwREHRRP4PwqRpt+PvzWtsOZxE4HE4r84HCD3wFGIuwUYBbjOE3kBkkIOm RM621FWJcMtXZULxJEuOxzDzfQLwlphuWCNCc0DAhtBVL5JqB+Onq2uUtFaEGh3e rSOMiShbI15K6gZWbChk06WFF314+ZsS1cymM8EsYjJlyEgHrpjxZE1/tnOh7Irb tCLO8vA8m9LSenLoRQh2zqPwcjT7fvpYdP7RAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUXKLpCUWSbOk2UzRGGWRiBdssaSAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1hLTHBDVVdTYk9rMlV6UkdHV1JpQmRz c2FTQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB82qwwDQYJ KoZIhvcNAQELBQADggEBAENwguWNZ+OXHpgBFXGxPDCjWZZbtfraTyHJXQXj2DDm 1Oyfkj1gVD2dkmgHXxBwicU38EMP8LgoBXr0QIWA/Z/twy3tvDBBYCPJKdokZMoa /nREhGTJBuZlTfBp49sXsYdDGU9rHqpg4V3KXXDxHVFD1MddziRGWBh/msLYuakn BvXqvBekWahYqtPoi86mdcscf8gTD7OM8Vmzdzhfp4RT31TBv59x5Sqe9IfWkhPu ydcDQIRBqNtSy0w3e+11vFnaD6onHGC0nXv9ZzMHHCIzG73e8ILRsJf0AZ6v0G7D /l78588X/0ka/yuzncXurDxKwODX60Xl0GSbHCWmCr0= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:36 2025 by rpki-client on console.sobornost.net