$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/dRdx0vqtm_h5U6aEn4FC-w6o80U.roa File: dRdx0vqtm_h5U6aEn4FC-w6o80U.roa (raw, json) Hash identifier: FPDC6ZOYmv6o6oGNBqgIJFD/CMqqGekr/OkNVewkG9o= Subject key identifier: 75:17:71:D2:FA:AD:9B:F8:79:53:A6:84:9F:81:42:FB:0E:A8:F3:45 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1197 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/dRdx0vqtm_h5U6aEn4FC-w6o80U.roa Signing time: Mon 10 Feb 2025 14:27:30 +0000 ROA not before: Mon 10 Feb 2025 14:27:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9674 IP address blocks: 39.12.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4503 (0x1197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:30 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=751771D2FAAD9BF87953A6849F8142FB0EA8F345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e9:f0:30:64:26:b0:8e:88:65:c5:30:d7:f5: 61:74:dc:6c:9d:34:a4:02:05:ae:0c:33:6e:c9:55: b0:4b:9c:0e:57:26:ae:c7:6d:92:0e:91:0c:d6:e2: 95:32:76:70:b9:2a:8f:09:82:11:cc:8f:af:f7:28: 1c:56:4a:56:03:94:0f:fd:d1:7f:d8:6d:4d:ab:f0: e3:28:91:63:cf:5b:03:e2:3c:a2:da:d6:c2:2e:a2: 54:fc:22:b8:c2:80:7c:fd:83:17:51:8b:b8:3c:5e: 0e:bd:d5:50:8c:0a:87:86:93:75:c3:e0:76:70:4c: 5a:ea:ac:87:c5:f7:11:73:89:16:b6:da:c9:2a:77: 79:de:47:d3:92:b1:6d:79:51:38:85:91:a2:e4:ba: f3:39:5e:a2:01:1a:04:7a:ff:34:81:7f:9d:da:81: dc:37:e2:81:4a:f6:09:76:9f:6f:1f:4a:47:3b:ec: be:13:1d:fb:15:39:7b:e1:54:ba:ed:04:8d:b8:bb: 2e:c4:9b:d4:ad:10:b5:bd:5b:0c:47:43:3b:51:40: a8:8d:ec:24:63:4a:12:05:93:79:ba:35:42:2c:99: 4e:6e:af:43:3f:1a:c4:f8:35:69:fd:bc:e0:5f:18: 11:0b:84:d3:fb:3b:ae:14:14:d8:49:5c:d7:76:22: f9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:17:71:D2:FA:AD:9B:F8:79:53:A6:84:9F:81:42:FB:0E:A8:F3:45 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/dRdx0vqtm_h5U6aEn4FC-w6o80U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 39.12.0.0/14 Signature Algorithm: sha256WithRSAEncryption 0c:5c:9e:7d:9f:89:48:d9:b2:a0:b2:88:b9:4e:41:fb:9e:3e: 1c:ce:99:58:b8:5b:39:6b:a4:e6:4e:d1:33:52:f0:71:a2:16: bc:3c:f1:d2:78:fa:0d:6f:ac:a5:fd:87:36:67:f4:8a:76:0c: c4:2b:a8:e3:97:2b:64:ed:a5:d0:2e:a1:43:dc:95:15:a3:c2: 17:2b:45:ab:23:e8:aa:d1:4a:d8:fd:89:b2:31:0a:c6:e7:c7: 5f:1e:8b:8d:76:76:2f:5d:98:50:54:49:fa:49:8e:c9:fc:b6: 60:e3:1a:be:93:f8:db:d0:29:dc:db:f4:a3:98:f3:fc:7a:cd: 6f:1e:76:fe:b4:b8:87:35:58:c3:38:50:50:fc:b4:15:d5:7b: 45:cb:c1:1f:b3:35:7a:a4:0f:80:81:75:4a:13:0b:83:40:13: ad:6e:47:f6:02:ad:9b:b2:e8:73:b8:6d:de:8c:fa:99:64:17: c2:6b:d6:aa:15:73:7f:4f:2e:33:ab:74:a1:2e:e1:f5:f1:fa: 69:e6:f3:45:1c:2d:e8:07:5b:17:81:6e:45:84:fb:78:ca:5d: 75:4f:1f:7e:7e:eb:ca:f5:26:06:f2:6f:76:51:55:77:99:89: 7c:65:d2:bd:46:a4:55:7c:83:c8:7f:fa:79:3d:d6:7b:07:5a: aa:e0:75:d4 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEZcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3MzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc1MTc3MUQyRkFBRDlC Rjg3OTUzQTY4NDlGODE0MkZCMEVBOEYzNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCm6fAwZCawjohlxTDX9WF03GydNKQCBa4MM27JVbBLnA5XJq7H bZIOkQzW4pUydnC5Ko8JghHMj6/3KBxWSlYDlA/90X/YbU2r8OMokWPPWwPiPKLa 1sIuolT8IrjCgHz9gxdRi7g8Xg691VCMCoeGk3XD4HZwTFrqrIfF9xFziRa22skq d3neR9OSsW15UTiFkaLkuvM5XqIBGgR6/zSBf53agdw34oFK9gl2n28fSkc77L4T HfsVOXvhVLrtBI24uy7Em9StELW9WwxHQztRQKiN7CRjShIFk3m6NUIsmU5ur0M/ GsT4NWn9vOBfGBELhNP7O64UFNhJXNd2IvkrAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUdRdx0vqtm/h5U6aEn4FC+w6o80UwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2RSZHgwdnF0bV9oNVU2YUVuNEZDLXc2 bzgwVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwInDDANBgkq hkiG9w0BAQsFAAOCAQEADFyefZ+JSNmyoLKIuU5B+54+HM6ZWLhbOWuk5k7RM1Lw caIWvDzx0nj6DW+spf2HNmf0inYMxCuo45crZO2l0C6hQ9yVFaPCFytFqyPoqtFK 2P2JsjEKxufHXx6LjXZ2L12YUFRJ+kmOyfy2YOMavpP429Ap3Nv0o5jz/HrNbx52 /rS4hzVYwzhQUPy0FdV7RcvBH7M1eqQPgIF1ShMLg0ATrW5H9gKtm7Loc7ht3oz6 mWQXwmvWqhVzf08uM6t0oS7h9fH6aebzRRwt6AdbF4FuRYT7eMpddU8ffn7ryvUm BvJvdlFVd5mJfGXSvUakVXyDyH/6eT3WewdaquB11A== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:36 2025 by rpki-client on console.sobornost.net