$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/_DlYsiK0eGK1bpMRqIH4JDDz3OU.roa File: _DlYsiK0eGK1bpMRqIH4JDDz3OU.roa (raw, json) Hash identifier: h4mN6FThFqTbYo8/TceB2wUmAfyFmyikxkLqWY7TLgU= Subject key identifier: FC:39:58:B2:22:B4:78:62:B5:6E:93:11:A8:81:F8:24:30:F3:DC:E5 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1214 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_DlYsiK0eGK1bpMRqIH4JDDz3OU.roa Signing time: Mon 10 Feb 2025 14:28:02 +0000 ROA not before: Mon 10 Feb 2025 14:28:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131591 IP address blocks: 222.250.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4628 (0x1214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:02 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FC3958B222B47862B56E9311A881F82430F3DCE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:54:c3:ac:68:fe:4e:72:69:9a:00:62:fd:79: b3:9c:8d:c7:78:b4:a8:f7:19:51:4e:5a:6f:85:ef: 71:85:6d:6d:79:cd:8e:1a:28:3e:3b:00:7f:11:9a: a6:3a:1b:14:08:0d:ac:22:88:97:3e:ac:0b:6d:c8: fa:11:d5:65:69:44:62:25:2c:9a:58:7e:9f:a3:9f: cc:0d:eb:2e:06:09:99:58:bd:90:b8:91:0e:a5:0d: 02:01:83:c3:31:cc:7e:17:43:da:41:9a:7d:f0:26: de:d5:92:6c:60:e4:c6:c9:06:dc:1f:31:f8:1d:5c: 99:ad:77:ac:bb:17:de:a8:bc:b8:dd:76:ed:21:74: 49:79:6b:79:b0:a6:25:84:e8:8e:a1:b4:f3:91:3f: 62:17:04:e2:fa:0a:cc:2d:c2:f8:e0:1a:a3:05:ea: 31:64:07:96:99:c7:6b:90:8e:0c:e8:69:fc:4a:09: d6:cd:de:1f:b8:fe:8e:b9:09:6e:35:bd:09:6c:8e: c8:38:ae:54:52:f0:b6:b8:e7:d8:3c:72:dc:49:e1: 2e:23:87:50:bc:cf:ab:1d:6e:63:2d:1c:1a:ad:f6: 43:82:50:4c:fc:87:f4:26:e8:1c:98:55:05:2e:1f: af:4d:34:a9:66:69:9e:cc:ba:11:63:4e:57:b2:be: 06:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:39:58:B2:22:B4:78:62:B5:6E:93:11:A8:81:F8:24:30:F3:DC:E5 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_DlYsiK0eGK1bpMRqIH4JDDz3OU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.250.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3f:34:a6:90:81:51:90:e2:95:ca:35:fd:e8:c5:ca:00:db:c8: e0:ee:6a:84:6f:1f:32:e5:58:53:1e:17:07:a1:97:17:82:83: 37:a8:42:70:6f:9a:4e:c2:5a:af:c0:9d:0f:1c:75:b9:60:e8: c1:19:6b:2d:fe:d6:3a:83:47:88:bf:22:5d:66:69:2d:4f:9e: 58:41:8e:a1:b4:bc:88:97:b3:1c:37:05:aa:71:b8:78:71:f2: e9:65:d5:4b:bb:50:45:f0:43:26:27:23:d0:0a:bd:3a:f2:53: 55:1e:81:e6:a4:69:2f:21:dd:17:cb:fd:76:60:e7:0f:47:90: 5d:7b:1d:78:fc:4e:bb:02:2a:56:ab:61:1a:fc:8a:0d:1f:e8: 94:0a:a2:65:c2:b2:b2:2f:21:b3:6f:bb:2b:68:dd:cf:92:6e: c4:68:a6:8e:b0:3a:a4:4a:9c:6b:18:66:9a:b7:2a:c6:48:64: 04:ef:14:9c:ad:fc:57:cd:e5:5b:20:16:01:ce:a8:18:04:1a: 55:1b:b8:57:56:25:23:78:fd:4f:d3:d5:df:2f:15:10:26:1b: 28:49:df:01:73:98:a8:d1:38:d8:44:81:61:12:65:67:4d:9a: f5:d1:ac:be:78:93:75:8d:b2:3f:1a:cf:72:3e:5e:db:d3:82: 34:49:25:87 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEhQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZDMzk1OEIyMjJCNDc4 NjJCNTZFOTMxMUE4ODFGODI0MzBGM0RDRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIVMOsaP5OcmmaAGL9ebOcjcd4tKj3GVFOWm+F73GFbW15zY4a KD47AH8RmqY6GxQIDawiiJc+rAttyPoR1WVpRGIlLJpYfp+jn8wN6y4GCZlYvZC4 kQ6lDQIBg8MxzH4XQ9pBmn3wJt7Vkmxg5MbJBtwfMfgdXJmtd6y7F96ovLjddu0h dEl5a3mwpiWE6I6htPORP2IXBOL6CswtwvjgGqMF6jFkB5aZx2uQjgzoafxKCdbN 3h+4/o65CW41vQlsjsg4rlRS8La459g8ctxJ4S4jh1C8z6sdbmMtHBqt9kOCUEz8 h/Qm6ByYVQUuH69NNKlmaZ7MuhFjTleyvgZvAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQU/DlYsiK0eGK1bpMRqIH4JDDz3OUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL19EbFlzaUswZUdLMWJwTVJxSUg0SkRE ejNPVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDe+jANBgkq hkiG9w0BAQsFAAOCAQEAPzSmkIFRkOKVyjX96MXKANvI4O5qhG8fMuVYUx4XB6GX F4KDN6hCcG+aTsJar8CdDxx1uWDowRlrLf7WOoNHiL8iXWZpLU+eWEGOobS8iJez HDcFqnG4eHHy6WXVS7tQRfBDJicj0Aq9OvJTVR6B5qRpLyHdF8v9dmDnD0eQXXsd ePxOuwIqVqthGvyKDR/olAqiZcKysi8hs2+7K2jdz5JuxGimjrA6pEqcaxhmmrcq xkhkBO8UnK38V83lWyAWAc6oGAQaVRu4V1YlI3j9T9PV3y8VECYbKEnfAXOYqNE4 2ESBYRJlZ02a9dGsvniTdY2yPxrPcj5e29OCNEklhw== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:36 2025 by rpki-client on console.sobornost.net