$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/iW9fp3p_2LiZvMpKe0JuG_pGKN0.roa File: iW9fp3p_2LiZvMpKe0JuG_pGKN0.roa (raw, json) Hash identifier: q3AU5HlSO3THP1vgCtG3Cbef9jB5BMzVMXsOEkJdamY= Subject key identifier: 89:6F:5F:A7:7A:7F:D8:B8:99:BC:CA:4A:7B:42:6E:1B:FA:46:28:DD Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1185 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iW9fp3p_2LiZvMpKe0JuG_pGKN0.roa Signing time: Mon 10 Feb 2025 14:27:26 +0000 ROA not before: Mon 10 Feb 2025 14:27:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 218.35.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4485 (0x1185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=896F5FA77A7FD8B899BCCA4A7B426E1BFA4628DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ae:04:7a:a4:54:69:ca:6a:37:b2:49:dc:cd: 59:08:f0:ee:52:1f:e7:29:0c:68:05:57:a2:5c:62: 60:4a:d4:4d:df:00:bb:15:22:52:94:a2:d5:02:79: 46:9b:cf:68:27:d4:8b:60:88:21:b6:05:a3:af:54: df:e9:95:a9:ac:e2:69:a2:c4:57:2a:9d:3b:ee:6a: 7b:01:de:85:64:6c:ab:c0:4b:df:05:4f:3c:0c:c5: c2:f0:a0:30:3d:14:4d:05:e0:bc:56:5e:18:1e:aa: db:23:51:50:40:16:97:31:c4:35:c6:af:76:1d:3a: 39:75:f9:77:35:3d:79:59:86:47:39:b7:6d:17:2a: 2d:40:00:50:f1:26:6b:f2:62:6b:d0:31:85:f7:ca: ed:3d:3a:22:65:3b:0a:0a:51:22:97:39:cd:1f:69: d8:55:24:f2:27:00:f8:d2:9c:3c:90:c4:99:73:44: 7c:66:2c:b8:c6:86:6c:25:a9:48:13:a2:40:40:85: ca:07:2b:d6:b5:b0:e8:c1:75:b6:76:49:80:ae:be: 67:d3:58:63:3b:5f:81:7c:2c:81:ec:06:59:c2:68: 23:4c:86:b6:1a:c8:be:f0:6b:09:bd:78:36:58:e6: 40:bc:ff:ed:c8:76:81:f2:17:f8:2d:59:9a:98:bd: e7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6F:5F:A7:7A:7F:D8:B8:99:BC:CA:4A:7B:42:6E:1B:FA:46:28:DD X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iW9fp3p_2LiZvMpKe0JuG_pGKN0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.35.0.0/16 Signature Algorithm: sha256WithRSAEncryption 44:1e:66:a2:95:fc:87:4a:8c:a1:ae:52:a9:ac:8f:c2:10:3d: f8:15:e8:cc:a9:bc:ea:5d:9a:4c:f9:18:bc:a1:fb:98:45:ef: 74:7f:d2:99:ae:e9:1e:e9:61:d7:01:c0:99:bc:8e:ae:56:b0: 48:80:68:bb:46:1f:4f:20:e4:c0:e7:2d:f7:4f:a5:4f:bb:2c: 88:e8:eb:62:af:fa:05:c6:d7:0a:7a:ad:0b:42:07:be:eb:0d: 09:cb:35:5b:97:f7:0a:20:59:2e:f9:3d:21:75:18:44:c1:15: 87:8e:62:48:29:74:4e:07:1c:bd:e4:0c:02:0d:b6:61:a6:b2: 3b:c1:64:78:fe:40:75:28:ae:e8:e2:95:e4:9a:12:04:bd:46: 42:53:a9:2a:09:2a:04:da:76:33:7c:5d:5d:08:45:f0:40:90: 3a:af:9a:f4:ce:6e:c2:d9:d5:34:4b:ac:5a:b2:71:59:42:19: ea:8f:38:8e:ce:a8:b4:bc:45:4c:52:a7:77:4f:1a:ff:3b:b4: 66:37:fa:a2:3c:ec:df:f5:61:65:0c:0b:76:0f:25:34:af:e5: d4:68:84:65:15:64:ae:5d:2c:43:3d:ca:d4:d0:33:db:5c:20: 5f:12:28:48:44:58:f7:25:de:89:ba:dd:1a:16:b6:77:e5:fa: 57:d1:cc:3f -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEYUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg5NkY1RkE3N0E3RkQ4 Qjg5OUJDQ0E0QTdCNDI2RTFCRkE0NjI4REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/rgR6pFRpymo3sknczVkI8O5SH+cpDGgFV6JcYmBK1E3fALsV IlKUotUCeUabz2gn1ItgiCG2BaOvVN/plams4mmixFcqnTvuansB3oVkbKvAS98F TzwMxcLwoDA9FE0F4LxWXhgeqtsjUVBAFpcxxDXGr3YdOjl1+Xc1PXlZhkc5t20X Ki1AAFDxJmvyYmvQMYX3yu09OiJlOwoKUSKXOc0fadhVJPInAPjSnDyQxJlzRHxm LLjGhmwlqUgTokBAhcoHK9a1sOjBdbZ2SYCuvmfTWGM7X4F8LIHsBlnCaCNMhrYa yL7wawm9eDZY5kC8/+3IdoHyF/gtWZqYvec1AgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUiW9fp3p/2LiZvMpKe0JuG/pGKN0wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2lXOWZwM3BfMkxpWnZNcEtlMEp1R19w R0tOMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDaIzANBgkq hkiG9w0BAQsFAAOCAQEARB5mopX8h0qMoa5SqayPwhA9+BXozKm86l2aTPkYvKH7 mEXvdH/Sma7pHulh1wHAmbyOrlawSIBou0YfTyDkwOct90+lT7ssiOjrYq/6BcbX CnqtC0IHvusNCcs1W5f3CiBZLvk9IXUYRMEVh45iSCl0TgccveQMAg22YaayO8Fk eP5AdSiu6OKV5JoSBL1GQlOpKgkqBNp2M3xdXQhF8ECQOq+a9M5uwtnVNEusWrJx WUIZ6o84js6otLxFTFKnd08a/zu0Zjf6ojzs3/VhZQwLdg8lNK/l1GiEZRVkrl0s Qz3K1NAz21wgXxIoSERY9yXeibrdGha2d+X6V9HMPw== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:36 2025 by rpki-client on console.sobornost.net