$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FISC/VZzn1T8EXwMQaSu2Qy1Ygeacxj4.roa File: VZzn1T8EXwMQaSu2Qy1Ygeacxj4.roa (raw, json) Hash identifier: zXPoGRf8/rxvghK2ppAghYX3fIj7S9zVpA/7A3vi1Pk= Subject key identifier: 55:9C:E7:D5:3F:04:5F:03:10:69:2B:B6:43:2D:58:81:E6:9C:C6:3E Certificate issuer: /CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2 Certificate serial: 0CA7 Authority key identifier: F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/VZzn1T8EXwMQaSu2Qy1Ygeacxj4.roa Signing time: Mon 10 Feb 2025 14:26:47 +0000 ROA not before: Mon 10 Feb 2025 14:26:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131588 IP address blocks: 2400:e480::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2 Validity Not Before: Feb 10 14:26:47 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=559CE7D53F045F0310692BB6432D5881E69CC63E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:69:b5:b5:ec:02:dd:0e:11:db:c5:94:dd:5c: 7e:db:a5:fd:bc:dd:1a:5a:ef:fa:77:c1:7f:c9:b5: ff:f0:8b:24:ee:28:cf:59:a8:66:e7:35:61:65:67: 12:f4:ab:11:e0:b8:07:e7:2c:31:ba:87:6f:1b:7b: 28:c1:60:f6:11:5d:c0:44:26:38:cd:cf:2b:9a:ec: e0:f4:30:2f:fc:47:e1:1b:26:60:18:74:dd:ed:e0: 33:fc:07:9d:02:2d:1f:90:56:7e:d3:de:43:00:7f: aa:79:32:e6:d0:42:0d:3a:66:37:8d:f6:8a:85:f3: b5:a4:4b:4e:f8:ed:96:ca:e0:a4:35:ce:00:a1:ad: 31:19:fa:40:c5:b8:b3:35:7e:9e:41:50:0c:32:be: 79:db:e6:ff:7a:4b:71:6d:ec:d4:b7:71:ff:61:86: d5:a9:55:1c:e8:6d:d1:6e:0e:77:d1:f6:3e:e4:f6: 35:e3:50:ef:ad:54:63:42:46:be:47:ec:13:0c:cb: 6b:aa:94:91:3f:a9:fa:38:3d:12:40:3b:46:5d:19: b0:66:8d:a9:6f:36:63:1d:62:88:e0:d0:68:3f:f0: a1:8f:24:3c:ca:26:bb:4e:9b:fe:10:de:dc:a5:bb: 93:52:c4:81:fd:f5:42:50:11:6f:72:b5:ca:50:32: ef:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9C:E7:D5:3F:04:5F:03:10:69:2B:B6:43:2D:58:81:E6:9C:C6:3E X509v3 Authority Key Identifier: keyid:F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/VZzn1T8EXwMQaSu2Qy1Ygeacxj4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:e480::/32 Signature Algorithm: sha256WithRSAEncryption c2:5e:72:6e:c8:a8:4f:9f:d7:89:f2:4b:57:82:65:4b:b3:ba: c1:0e:69:51:88:75:9a:07:8a:08:93:2d:76:41:10:2b:54:fa: 67:2e:74:86:a7:f9:e3:39:91:91:5f:ea:20:52:2b:08:a8:a6: b0:fc:04:d7:ab:02:27:94:f1:20:c6:89:83:40:5e:42:a7:89: e5:cf:d6:6e:f0:d5:ed:13:ed:b9:44:a4:3f:42:74:5a:c1:57: 03:44:a6:ab:4c:b2:4e:a6:b9:09:55:6e:77:a0:0d:9b:8a:a6: 8f:28:e4:fb:0c:df:f1:15:dd:19:0c:23:29:6d:d1:92:84:9b: 86:d4:56:e0:ec:2a:c3:52:75:b8:db:fc:8d:33:a3:8e:16:29: d6:a4:9e:80:07:9e:9d:e8:6a:1d:76:3b:cc:bd:6c:f9:46:dc: 5c:06:f1:d2:7f:f2:11:b0:fa:26:82:f4:2d:05:a7:a3:23:a3: c4:6e:de:6d:8e:6e:73:9c:7c:c6:57:68:0e:1c:0e:c0:0a:c6: d8:fb:d3:cb:98:96:c5:86:ea:38:3e:7c:52:6a:37:35:88:31: b1:5a:7f:5b:cf:84:83:3f:1b:d6:cc:0b:1a:4a:e0:b2:3d:d5: 48:92:44:5c:7b:e7:49:2a:dd:31:48:48:59:66:c6:dd:9c:9f: 23:67:d3:ae -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjBD RTEwQkQ3QzJCMzlBMDNBNzBDMzAyQkEyQjA4NjUyQzA4MDdEMjAeFw0yNTAyMTAx NDI2NDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU1OUNFN0Q1M0YwNDVG MDMxMDY5MkJCNjQzMkQ1ODgxRTY5Q0M2M0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+abW17ALdDhHbxZTdXH7bpf283Rpa7/p3wX/Jtf/wiyTuKM9Z qGbnNWFlZxL0qxHguAfnLDG6h28beyjBYPYRXcBEJjjNzyua7OD0MC/8R+EbJmAY dN3t4DP8B50CLR+QVn7T3kMAf6p5MubQQg06ZjeN9oqF87WkS0747ZbK4KQ1zgCh rTEZ+kDFuLM1fp5BUAwyvnnb5v96S3Ft7NS3cf9hhtWpVRzobdFuDnfR9j7k9jXj UO+tVGNCRr5H7BMMy2uqlJE/qfo4PRJAO0ZdGbBmjalvNmMdYojg0Gg/8KGPJDzK JrtOm/4Q3tylu5NSxIH99UJQEW9ytcpQMu/XAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUVZzn1T8EXwMQaSu2Qy1Ygeacxj4wHwYDVR0jBBgwFoAU8M4QvXwrOaA6cMMC uisIZSwIB9IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRklTQy84 TTRRdlh3ck9hQTZjTU1DdWlzSVpTd0lCOUkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzhNNFF2WHdyT2FBNmNNTUN1aXNJWlN3SUI5SS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0ZJU0MvVlp6bjFUOEVYd01RYVN1MlF5MVln ZWFjeGo0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQA5IAw DQYJKoZIhvcNAQELBQADggEBAMJecm7IqE+f14nyS1eCZUuzusEOaVGIdZoHigiT LXZBECtU+mcudIan+eM5kZFf6iBSKwioprD8BNerAieU8SDGiYNAXkKnieXP1m7w 1e0T7blEpD9CdFrBVwNEpqtMsk6muQlVbnegDZuKpo8o5PsM3/EV3RkMIylt0ZKE m4bUVuDsKsNSdbjb/I0zo44WKdaknoAHnp3oah12O8y9bPlG3FwG8dJ/8hGw+iaC 9C0Fp6Mjo8Ru3m2ObnOcfMZXaA4cDsAKxtj708uYlsWG6jg+fFJqNzWIMbFaf1vP hIM/G9bMCxpK4LI91UiSRFx750kq3TFISFlmxt2cnyNn064= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:37 2025 by rpki-client on console.sobornost.net