$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/_afOaSU7xNqlHS_bSQ-za9xLPBo.roa File: _afOaSU7xNqlHS_bSQ-za9xLPBo.roa (raw, json) Hash identifier: VZHH78NGtXqxyRM6V36oaR4OGrDTsE+RPwA06deMFcg= Subject key identifier: FD:A7:CE:69:25:3B:C4:DA:A5:1D:2F:DB:49:0F:B3:6B:DC:4B:3C:1A Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 11C5 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_afOaSU7xNqlHS_bSQ-za9xLPBo.roa Signing time: Mon 10 Feb 2025 14:27:43 +0000 ROA not before: Mon 10 Feb 2025 14:27:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 218.187.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4549 (0x11c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FDA7CE69253BC4DAA51D2FDB490FB36BDC4B3C1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:bb:91:9b:26:2c:4c:41:05:39:80:11:8e: 1a:26:87:ec:7f:d3:98:a4:bc:0f:1f:70:cc:92:21: 1e:e7:b2:28:a5:9e:14:4a:43:9b:76:29:32:19:ac: ce:da:96:6f:fc:b8:a7:09:bc:56:27:44:1e:81:f6: c4:0c:9d:34:7f:44:af:3d:27:b7:ec:c6:7b:97:b0: 25:79:01:b0:76:5a:f5:99:cd:c8:e7:b1:85:d9:cd: 59:5d:ca:84:30:c3:4e:20:bd:44:7d:9c:df:7b:ea: 17:cb:00:06:e8:8d:88:e7:92:56:51:13:4d:9c:cb: 61:b6:24:07:fb:93:93:f6:51:63:91:e6:f5:c6:9b: f2:d7:ce:7e:00:d4:c4:4a:cc:b2:e1:b4:7e:8a:f3: 98:4b:f4:c9:e6:f2:c6:e0:61:0a:9e:7c:0b:9f:25: 33:7c:52:78:a4:46:be:e7:e7:73:b1:87:00:c5:8c: ca:dd:06:62:56:7d:76:12:63:80:d0:a5:15:45:23: d6:97:0e:03:43:f7:51:6b:9d:5a:aa:02:45:bd:36: e9:8e:30:53:96:28:f4:3a:27:d2:65:cb:da:e6:dc: 86:73:ba:ed:d4:d0:81:da:a9:51:4f:0e:9d:76:4f: 2d:a5:18:f2:76:2b:de:72:8f:ef:1b:f3:f8:54:38: f7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A7:CE:69:25:3B:C4:DA:A5:1D:2F:DB:49:0F:B3:6B:DC:4B:3C:1A X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_afOaSU7xNqlHS_bSQ-za9xLPBo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.187.0.0/16 Signature Algorithm: sha256WithRSAEncryption ca:17:9f:63:6e:d0:c1:4f:34:8a:24:9a:6b:d0:bc:36:8a:51: a7:fb:8d:7f:77:a9:d8:e5:1a:4d:1e:9a:45:9c:00:28:f4:0c: d6:ac:d5:c0:f4:b4:38:60:64:86:75:01:1e:1e:4d:10:8f:62: f9:1a:70:f9:d8:6f:f8:df:b9:58:6b:27:82:bf:8f:59:6c:24: 1b:da:4f:6c:5b:d1:78:2c:d3:84:a8:4c:47:2a:56:d0:fe:2e: 66:7a:29:59:15:06:8a:28:2f:d2:45:6c:32:a8:cd:76:d3:ae: c6:a8:db:a2:32:44:56:82:c3:c1:76:6c:c1:f2:85:12:7e:c7: 80:9c:41:e2:8d:95:6d:1d:e1:8f:a0:80:01:1f:81:14:ba:98: 24:53:09:8d:9b:5d:da:99:10:49:95:93:22:b2:19:3b:4f:9f: fd:1e:ac:5d:45:70:16:ab:92:90:71:51:0c:f0:e5:1e:4d:e2: 82:76:3b:a5:31:4a:78:85:08:5e:3d:92:13:5b:ec:9b:ce:8d: cc:a6:a7:fe:c0:71:82:58:f3:58:49:b8:fd:2a:75:b1:53:e0: a5:2d:31:88:fa:5f:d5:c8:7c:29:06:c8:12:cd:15:d6:44:4b: a2:99:17:a2:93:26:0f:20:1a:3e:6b:ee:3b:24:40:18:65:07: 39:64:98:86 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEcUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZEQTdDRTY5MjUzQkM0 REFBNTFEMkZEQjQ5MEZCMzZCREM0QjNDMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIaLuRmyYsTEEFOYARjhomh+x/05ikvA8fcMySIR7nsiilnhRK Q5t2KTIZrM7alm/8uKcJvFYnRB6B9sQMnTR/RK89J7fsxnuXsCV5AbB2WvWZzcjn sYXZzVldyoQww04gvUR9nN976hfLAAbojYjnklZRE02cy2G2JAf7k5P2UWOR5vXG m/LXzn4A1MRKzLLhtH6K85hL9Mnm8sbgYQqefAufJTN8UnikRr7n53OxhwDFjMrd BmJWfXYSY4DQpRVFI9aXDgND91FrnVqqAkW9NumOMFOWKPQ6J9Jly9rm3IZzuu3U 0IHaqVFPDp12Ty2lGPJ2K95yj+8b8/hUOPdbAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQU/afOaSU7xNqlHS/bSQ+za9xLPBowHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL19hZk9hU1U3eE5xbEhTX2JTUS16YTl4 TFBCby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDauzANBgkq hkiG9w0BAQsFAAOCAQEAyhefY27QwU80iiSaa9C8NopRp/uNf3ep2OUaTR6aRZwA KPQM1qzVwPS0OGBkhnUBHh5NEI9i+Rpw+dhv+N+5WGsngr+PWWwkG9pPbFvReCzT hKhMRypW0P4uZnopWRUGiigv0kVsMqjNdtOuxqjbojJEVoLDwXZswfKFEn7HgJxB 4o2VbR3hj6CAAR+BFLqYJFMJjZtd2pkQSZWTIrIZO0+f/R6sXUVwFquSkHFRDPDl Hk3ignY7pTFKeIUIXj2SE1vsm86NzKan/sBxgljzWEm4/Sp1sVPgpS0xiPpf1ch8 KQbIEs0V1kRLopkXopMmDyAaPmvuOyRAGGUHOWSYhg== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:36 2025 by rpki-client on console.sobornost.net