$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/slHOVmWJPd5NObJVhx39xC4ZN_c.roa File: slHOVmWJPd5NObJVhx39xC4ZN_c.roa (raw, json) Hash identifier: OPGfp28FY5DmsOk+D5iZaWpiVv8B4lN7yyaEbuqbHJE= Subject key identifier: B2:51:CE:56:65:89:3D:DE:4D:39:B2:55:87:1D:FD:C4:2E:19:37:F7 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1187 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/slHOVmWJPd5NObJVhx39xC4ZN_c.roa Signing time: Mon 10 Feb 2025 14:27:27 +0000 ROA not before: Mon 10 Feb 2025 14:27:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 22787 IP address blocks: 210.58.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4487 (0x1187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B251CE5665893DDE4D39B255871DFDC42E1937F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:08:b8:65:d9:fc:b5:a0:4b:22:26:5f:5f:06: 6c:c7:9f:e2:0f:7a:63:f1:01:65:4d:eb:8f:71:db: a0:25:6c:14:11:12:1b:02:fa:e8:1b:ed:f3:68:9f: ab:90:fb:b6:89:13:0b:90:58:dd:f0:74:e1:77:79: 20:80:01:fe:bf:41:a3:8c:0b:42:c3:3c:8c:12:a0: 2d:0a:42:cd:ab:db:50:fe:a6:32:08:87:32:77:ca: 66:30:ff:08:f3:72:fb:8b:62:14:13:2c:43:6f:e7: b6:4c:8c:35:45:23:d6:4c:b5:aa:e6:bb:d7:e3:f0: cd:7c:f8:90:72:d7:59:ae:9d:d5:4f:86:a7:da:cb: 8f:c3:4a:fd:a7:a5:30:2f:22:47:08:57:8b:5c:41: df:c6:0d:21:c3:17:61:1f:4a:15:15:ac:4b:a6:59: 18:71:79:88:12:f4:a5:49:5e:ee:9f:1b:56:52:c1: bc:41:04:e8:97:de:e2:5f:a5:19:eb:74:25:70:50: 20:eb:ea:7c:72:4f:fd:f7:97:00:71:09:67:63:c7: 70:41:1d:28:b0:05:d3:fc:c9:f8:c9:07:51:12:ad: 9d:b3:e8:5d:a4:79:eb:e5:2d:19:77:c2:c6:35:ff: 81:aa:d9:7f:aa:1f:cd:33:2f:27:80:a2:ed:75:9a: 04:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:51:CE:56:65:89:3D:DE:4D:39:B2:55:87:1D:FD:C4:2E:19:37:F7 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/slHOVmWJPd5NObJVhx39xC4ZN_c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.58.90.0/23 Signature Algorithm: sha256WithRSAEncryption 95:7e:55:16:8b:b7:8d:ae:f6:26:14:c1:56:92:04:37:36:41: e1:8c:98:61:56:26:fb:42:fe:64:c9:e1:53:5c:af:0f:a2:82: 7d:4a:ee:a4:58:c8:5a:3f:81:fc:83:4c:cf:ec:92:71:46:63: 1b:a1:c2:50:d0:0b:66:68:4f:60:3d:4e:56:1f:19:dd:e6:2f: ab:eb:5a:d4:ea:b4:c8:5f:90:6d:61:bd:b4:dd:63:cb:c0:6b: c4:a4:71:19:79:6d:cf:83:6f:d6:c0:ee:0f:a0:4f:0a:16:42: 92:99:05:29:00:77:bc:88:d8:7a:ef:a0:82:db:2c:15:43:fd: 77:77:20:2a:45:84:53:72:b4:08:a1:bf:7b:aa:8d:d7:27:54: 46:4f:3c:ae:89:5b:10:46:27:91:be:a3:83:18:e4:c7:e5:23: dc:7b:fb:f4:87:fc:80:ab:98:45:94:74:8b:87:92:6b:f5:1c: 2f:9a:bd:3c:b0:00:29:3c:c4:46:e6:4a:18:81:8a:80:6a:66: fd:51:25:e2:4a:1b:0c:af:34:ae:57:4d:0c:13:0d:93:84:a2: c9:eb:4f:43:81:ca:a7:d9:52:b8:cd:24:90:85:4b:c4:7a:5a: a5:fd:33:3d:19:13:3e:33:61:2e:6e:e3:85:9e:66:17:6f:e4: ab:bf:61:6c -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3MjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIyNTFDRTU2NjU4OTNE REU0RDM5QjI1NTg3MURGREM0MkUxOTM3RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGCLhl2fy1oEsiJl9fBmzHn+IPemPxAWVN649x26AlbBQREhsC +ugb7fNon6uQ+7aJEwuQWN3wdOF3eSCAAf6/QaOMC0LDPIwSoC0KQs2r21D+pjII hzJ3ymYw/wjzcvuLYhQTLENv57ZMjDVFI9ZMtarmu9fj8M18+JBy11mundVPhqfa y4/DSv2npTAvIkcIV4tcQd/GDSHDF2EfShUVrEumWRhxeYgS9KVJXu6fG1ZSwbxB BOiX3uJfpRnrdCVwUCDr6nxyT/33lwBxCWdjx3BBHSiwBdP8yfjJB1ESrZ2z6F2k eevlLRl3wsY1/4Gq2X+qH80zLyeAou11mgQ/AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUslHOVmWJPd5NObJVhx39xC4ZN/cwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3NsSE9WbVdKUGQ1Tk9iSlZoeDM5eEM0 Wk5fYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHSOlowDQYJ KoZIhvcNAQELBQADggEBAJV+VRaLt42u9iYUwVaSBDc2QeGMmGFWJvtC/mTJ4VNc rw+ign1K7qRYyFo/gfyDTM/sknFGYxuhwlDQC2ZoT2A9TlYfGd3mL6vrWtTqtMhf kG1hvbTdY8vAa8SkcRl5bc+Db9bA7g+gTwoWQpKZBSkAd7yI2HrvoILbLBVD/Xd3 ICpFhFNytAihv3uqjdcnVEZPPK6JWxBGJ5G+o4MY5MflI9x7+/SH/ICrmEWUdIuH kmv1HC+avTywACk8xEbmShiBioBqZv1RJeJKGwyvNK5XTQwTDZOEosnrT0OByqfZ UrjNJJCFS8R6WqX9Mz0ZEz4zYS5u44WeZhdv5Ku/YWw= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:37 2025 by rpki-client on console.sobornost.net