$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/z80KwdLzHXQsrRS4TQivhS8zbx8.roa File: z80KwdLzHXQsrRS4TQivhS8zbx8.roa (raw, json) Hash identifier: af0c5cyUwe7id25FQ1Bw4O4Qg6ZaJCoPbHaeNl+cDpE= Subject key identifier: CF:CD:0A:C1:D2:F3:1D:74:2C:AD:14:B8:4D:08:AF:85:2F:33:6F:1F Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 128A Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/z80KwdLzHXQsrRS4TQivhS8zbx8.roa Signing time: Mon 10 Feb 2025 14:28:32 +0000 ROA not before: Mon 10 Feb 2025 14:28:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 218.35.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4746 (0x128a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:32 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CFCD0AC1D2F31D742CAD14B84D08AF852F336F1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f5:a2:c7:c0:de:21:76:56:4b:cb:19:46:fd: ef:f2:1e:b2:33:e7:b6:17:fb:a2:f2:0b:c3:ce:41: e5:3f:7e:c0:d8:b6:f7:68:30:f1:5a:cb:0b:5f:ba: 31:86:eb:6c:bc:43:05:d0:d4:9f:12:b4:4e:d2:58: b8:83:50:39:d7:26:4e:4c:f1:fc:fc:84:2b:fa:13: b7:c0:f3:94:40:24:f1:63:d4:3f:cc:cf:05:ab:eb: 72:01:e6:23:8e:d9:2e:64:13:b0:06:45:de:d0:6a: 48:ca:75:36:ca:fd:35:a3:45:8e:d0:88:ae:2a:d0: 23:42:1a:ab:94:40:7f:ff:3f:a4:7a:c9:ea:c0:2b: a6:16:82:08:5c:e6:12:58:c6:eb:3e:c2:63:36:7d: 42:06:18:00:fc:d8:8b:cf:13:97:2c:85:0d:73:ea: 78:1a:d9:25:96:bd:4b:fb:d4:4b:4b:de:ce:11:eb: bb:6a:24:b4:5c:e9:cf:66:26:df:cd:90:6f:3a:ca: 1b:12:d6:9a:e9:85:36:7d:95:e3:fb:1c:5b:f8:d0: 5b:c4:04:01:e6:c5:0d:d3:2f:59:ef:72:37:83:ad: c3:5c:71:55:3a:21:60:d4:c6:e6:68:79:b6:27:19: 6c:ee:31:24:cd:47:52:f6:26:c6:a0:86:e6:be:31: 03:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CD:0A:C1:D2:F3:1D:74:2C:AD:14:B8:4D:08:AF:85:2F:33:6F:1F X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/z80KwdLzHXQsrRS4TQivhS8zbx8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.35.16.0/21 Signature Algorithm: sha256WithRSAEncryption 70:88:89:2f:55:1e:29:f3:5a:4f:2a:5c:3d:0a:d4:33:b1:64: 6f:4c:5a:de:7b:a7:fe:84:7d:19:f5:93:43:5b:af:b7:83:0c: a7:bc:47:c3:34:5d:d5:27:31:97:13:37:88:78:2d:e6:b0:5b: d0:ea:88:e6:6e:e5:89:cb:05:ab:83:3d:d8:2d:fd:b8:91:c6: 7e:0c:38:52:8f:e2:2f:59:04:d1:0b:f1:d2:c5:c2:46:6f:04: 50:23:cb:6e:70:47:12:92:74:0e:3e:13:14:0a:d3:51:6d:cd: 35:25:c4:3c:db:0a:62:45:94:f5:18:5b:01:c4:47:18:51:26: 07:2d:28:60:d1:7c:ea:c0:6d:8c:4c:d9:87:b1:f9:8c:74:52: 2f:cd:fa:15:e6:0f:7a:b3:57:b7:31:fa:0f:e9:65:a0:45:da: d0:03:d1:4e:70:5d:6b:96:28:51:3e:0d:78:b9:ee:3a:88:13: e4:ba:cc:df:4b:05:16:42:54:c2:8c:34:c1:c0:52:ff:7f:3f: 2b:2f:e3:48:c9:1e:94:21:71:93:9c:db:b8:70:da:15:64:9a: 1f:55:24:8a:91:60:cb:ca:74:88:04:17:f7:4e:5b:c1:bd:43: 1b:fc:1c:23:9f:8c:17:8c:dd:44:08:00:29:4c:c9:d4:2a:69: 8b:4a:12:d7 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEoowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENGQ0QwQUMxRDJGMzFE NzQyQ0FEMTRCODREMDhBRjg1MkYzMzZGMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCk9aLHwN4hdlZLyxlG/e/yHrIz57YX+6LyC8POQeU/fsDYtvdo MPFaywtfujGG62y8QwXQ1J8StE7SWLiDUDnXJk5M8fz8hCv6E7fA85RAJPFj1D/M zwWr63IB5iOO2S5kE7AGRd7QakjKdTbK/TWjRY7QiK4q0CNCGquUQH//P6R6yerA K6YWgghc5hJYxus+wmM2fUIGGAD82IvPE5cshQ1z6nga2SWWvUv71EtL3s4R67tq JLRc6c9mJt/NkG86yhsS1prphTZ9leP7HFv40FvEBAHmxQ3TL1nvcjeDrcNccVU6 IWDUxuZoebYnGWzuMSTNR1L2Jsaghua+MQOVAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUz80KwdLzHXQsrRS4TQivhS8zbx8wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3o4MEt3ZEx6SFhRc3JSUzRUUWl2aFM4 emJ4OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPaIxAwDQYJ KoZIhvcNAQELBQADggEBAHCIiS9VHinzWk8qXD0K1DOxZG9MWt57p/6EfRn1k0Nb r7eDDKe8R8M0XdUnMZcTN4h4LeawW9DqiOZu5YnLBauDPdgt/biRxn4MOFKP4i9Z BNEL8dLFwkZvBFAjy25wRxKSdA4+ExQK01FtzTUlxDzbCmJFlPUYWwHERxhRJgct KGDRfOrAbYxM2Yex+Yx0Ui/N+hXmD3qzV7cx+g/pZaBF2tAD0U5wXWuWKFE+DXi5 7jqIE+S6zN9LBRZCVMKMNMHAUv9/Pysv40jJHpQhcZOc27hw2hVkmh9VJIqRYMvK dIgEF/dOW8G9Qxv8HCOfjBeM3UQIAClMydQqaYtKEtc= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:37 2025 by rpki-client on console.sobornost.net