$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/nrqeoFzx1LtW8HQGVr6IH4xY-PM.roa File: nrqeoFzx1LtW8HQGVr6IH4xY-PM.roa (raw, json) Hash identifier: tpH0d1f79RKdUyk3I3tNXWB5QonXpVQeXlaLoZQMIiE= Subject key identifier: 9E:BA:9E:A0:5C:F1:D4:BB:56:F0:74:06:56:BE:88:1F:8C:58:F8:F3 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 118C Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/nrqeoFzx1LtW8HQGVr6IH4xY-PM.roa Signing time: Mon 10 Feb 2025 14:27:28 +0000 ROA not before: Mon 10 Feb 2025 14:27:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 218.34.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4492 (0x118c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9EBA9EA05CF1D4BB56F0740656BE881F8C58F8F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5e:69:20:d1:47:bf:8c:c6:26:65:00:0e:a5: 91:83:a9:64:3d:56:2c:59:0d:9f:7e:f9:a8:0e:94: 3d:85:f4:5f:71:ad:e4:33:52:77:e8:98:2f:56:a0: ad:6c:7c:be:2c:fc:ae:1c:94:28:0f:9f:56:b0:9b: 14:51:7f:4e:d5:33:c4:8b:b7:ad:e2:48:1d:88:59: da:fa:a5:b8:c3:5f:0e:6d:d9:6d:4c:d2:a6:9f:dc: ef:0a:b1:65:a9:da:ed:1f:de:47:f7:70:52:41:f9: 24:9c:83:4c:bc:13:4f:4f:dd:14:6c:2a:85:b3:d7: 71:88:f8:30:60:f3:4a:bc:5a:26:93:bc:1e:18:bf: ee:90:2a:e8:5d:c9:c0:af:c7:72:e7:0f:23:2a:4c: b6:08:4f:71:d9:e1:ed:bb:c5:95:46:09:f8:d4:c7: 8b:6e:72:b3:47:6a:b0:28:36:6e:ea:be:ff:1e:ae: 38:d9:d2:ca:37:b5:6e:74:13:0e:8d:77:f5:37:3c: d1:8d:c3:bd:d0:a1:07:0e:33:67:0b:22:70:b1:78: 59:06:f0:e7:db:05:3b:9c:d2:74:42:38:54:66:cd: f8:85:ad:0e:3f:07:54:09:03:41:89:2c:76:3c:41: 8c:44:9c:84:4a:9c:f4:5c:b7:91:7e:04:34:09:d6: 7d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BA:9E:A0:5C:F1:D4:BB:56:F0:74:06:56:BE:88:1F:8C:58:F8:F3 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/nrqeoFzx1LtW8HQGVr6IH4xY-PM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.34.104.0/23 Signature Algorithm: sha256WithRSAEncryption 41:f7:a0:f8:9c:d6:44:48:8d:d1:59:b6:18:12:c9:00:ff:f9: d4:23:9f:91:fb:63:a9:65:92:6f:bb:f9:a8:60:7d:76:95:95: b0:de:7e:df:90:99:b8:19:f6:89:12:e1:41:66:42:f5:bf:b4: f2:f8:89:ab:c6:0d:18:a1:a3:ac:43:63:09:c4:73:45:f0:4e: a2:6b:1f:ca:0b:f1:e0:b0:35:7c:c5:ab:de:46:43:70:6b:58: 80:4f:5f:11:e8:50:bf:ee:ae:a4:37:81:67:ee:38:35:23:e9: a5:83:46:eb:8f:f5:26:ba:d3:e2:7a:16:08:28:e0:6a:67:96: 7e:17:f5:aa:c4:53:a3:07:4d:07:38:fe:f1:32:b9:9d:46:40: e9:09:88:5a:c6:b8:a1:cb:39:b8:51:d0:52:e0:8a:01:59:f0: 28:f2:92:d8:5b:a7:fd:0d:35:12:80:6e:9c:72:cf:f4:32:43: e4:71:e0:13:4f:8a:22:5d:56:cb:dd:e9:3e:f8:97:c2:4b:74: 87:90:1e:61:61:74:93:f9:ce:39:88:8b:92:22:ff:01:5a:f8: a0:33:d2:9b:85:c8:6d:c6:5b:27:8f:88:d7:3a:77:be:df:8a: 2e:52:3c:0c:3d:be:4e:a1:20:6e:df:ac:af:22:db:d0:9e:05: f2:2e:8d:3f -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEYwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlFQkE5RUEwNUNGMUQ0 QkI1NkYwNzQwNjU2QkU4ODFGOEM1OEY4RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqXmkg0Ue/jMYmZQAOpZGDqWQ9VixZDZ9++agOlD2F9F9xreQz UnfomC9WoK1sfL4s/K4clCgPn1awmxRRf07VM8SLt63iSB2IWdr6pbjDXw5t2W1M 0qaf3O8KsWWp2u0f3kf3cFJB+SScg0y8E09P3RRsKoWz13GI+DBg80q8WiaTvB4Y v+6QKuhdycCvx3LnDyMqTLYIT3HZ4e27xZVGCfjUx4tucrNHarAoNm7qvv8erjjZ 0so3tW50Ew6Nd/U3PNGNw73QoQcOM2cLInCxeFkG8OfbBTuc0nRCOFRmzfiFrQ4/ B1QJA0GJLHY8QYxEnIRKnPRct5F+BDQJ1n0LAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUnrqeoFzx1LtW8HQGVr6IH4xY+PMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL25ycWVvRnp4MUx0VzhIUUdWcjZJSDR4 WS1QTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHaImgwDQYJ KoZIhvcNAQELBQADggEBAEH3oPic1kRIjdFZthgSyQD/+dQjn5H7Y6llkm+7+ahg fXaVlbDeft+QmbgZ9okS4UFmQvW/tPL4iavGDRiho6xDYwnEc0XwTqJrH8oL8eCw NXzFq95GQ3BrWIBPXxHoUL/urqQ3gWfuODUj6aWDRuuP9Sa60+J6Fggo4Gpnln4X 9arEU6MHTQc4/vEyuZ1GQOkJiFrGuKHLObhR0FLgigFZ8Cjykthbp/0NNRKAbpxy z/QyQ+Rx4BNPiiJdVsvd6T74l8JLdIeQHmFhdJP5zjmIi5Ii/wFa+KAz0puFyG3G WyePiNc6d77fii5SPAw9vk6hIG7frK8i29CeBfIujT8= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:37 2025 by rpki-client on console.sobornost.net