$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/3EUX6Lwlwomx4r6BSauBeqNPeTc.roa File: 3EUX6Lwlwomx4r6BSauBeqNPeTc.roa (raw, json) Hash identifier: yTDy2shZUlPnxvCCIwdxi+MFClr9/6wMZ5cxGOeKfNc= Subject key identifier: DC:45:17:E8:BC:25:C2:89:B1:E2:BE:81:49:AB:81:7A:A3:4F:79:37 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0F8E Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/3EUX6Lwlwomx4r6BSauBeqNPeTc.roa Signing time: Wed 19 Feb 2025 02:07:09 +0000 ROA not before: Wed 19 Feb 2025 02:07:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9916 IP address blocks: 163.19.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3982 (0xf8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Feb 19 02:07:09 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DC4517E8BC25C289B1E2BE8149AB817AA34F7937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cd:cb:f9:e4:c7:1c:53:0c:18:47:30:c3:a5: e7:31:45:95:4f:09:de:7c:9c:94:7d:76:9d:bc:6c: 94:de:cc:7a:bc:61:74:55:d7:4c:f1:75:51:79:8c: 3f:5d:7a:0b:7a:37:1b:0f:95:00:6c:b7:54:a8:22: 60:50:c1:77:4b:d1:26:f9:b1:45:3e:13:db:e3:df: a1:cf:3e:b3:d4:21:f4:36:b3:0f:0b:17:16:14:b0: ad:64:ea:02:d2:0b:26:49:28:72:50:c7:68:65:4d: 31:86:c3:9b:4e:49:cd:58:93:1f:bc:09:4e:21:95: 8a:52:6d:5a:21:d4:40:be:e2:37:2b:b1:1b:4a:24: fa:3b:9a:66:7b:60:65:6e:56:99:f0:79:0e:10:08: cf:68:eb:7a:62:ef:63:e1:81:9b:37:e5:c6:0f:f3: 39:d5:0a:a1:c2:98:97:38:34:78:fd:ce:36:f5:d0: f4:c1:ee:96:38:5e:6d:f2:96:7c:e5:fc:56:23:95: 91:5f:84:07:fd:94:5c:74:90:ea:20:01:a1:40:1b: 2d:08:a1:ed:b6:fb:76:71:ef:88:0a:bd:e0:6d:92: ca:72:b4:85:75:2f:1b:85:c3:98:8e:e0:f2:ec:8b: 5f:31:05:a9:93:42:ce:6b:f1:ce:09:c7:2d:4c:1c: c6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:45:17:E8:BC:25:C2:89:B1:E2:BE:81:49:AB:81:7A:A3:4F:79:37 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/3EUX6Lwlwomx4r6BSauBeqNPeTc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.19.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4c:65:fc:75:1a:b5:31:dc:63:b4:72:a8:84:f6:83:12:b9:31: 4c:54:51:bf:d6:9d:48:7b:3e:86:1c:41:04:53:aa:23:48:2a: cc:b2:c2:7c:98:f7:86:bd:e7:dc:87:2b:72:03:8e:f8:65:6e: e5:cf:be:26:3c:d8:8b:1f:d8:4a:c9:54:78:95:e4:b6:48:2d: bd:ec:82:cf:42:76:91:30:82:2d:42:d3:4b:93:5c:45:f0:5c: d1:97:fd:91:3f:0a:e8:d4:06:1b:c9:d4:02:c8:a0:d0:98:f3: aa:03:a0:fd:c0:77:ce:28:89:4a:a8:e2:19:ef:bc:3f:44:0c: d6:25:5c:aa:02:7c:40:97:07:24:51:86:cb:fb:60:7d:c9:8f: df:ea:f3:46:a8:b9:9a:48:14:58:97:0b:e1:f3:69:2e:37:fb: 31:09:1e:6b:83:2c:34:d8:a9:23:7a:40:5f:3d:19:83:7d:1e: e0:76:7e:43:ab:37:da:b4:14:bd:e5:e5:89:c6:74:3b:87:e6: ae:9a:bb:a2:70:2f:29:94:ef:6b:88:70:bc:b6:d2:2b:b0:ec: 01:5a:6f:3c:b0:82:09:53:07:35:a3:d6:29:0f:16:50:0c:91: 68:32:a6:a1:af:9e:54:d0:a8:d7:f6:dd:77:a3:fa:26:eb:42: 5f:90:ad:42 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTkw MjA3MDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERDNDUxN0U4QkMyNUMy ODlCMUUyQkU4MTQ5QUI4MTdBQTM0Rjc5MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPzcv55MccUwwYRzDDpecxRZVPCd58nJR9dp28bJTezHq8YXRV 10zxdVF5jD9degt6NxsPlQBst1SoImBQwXdL0Sb5sUU+E9vj36HPPrPUIfQ2sw8L FxYUsK1k6gLSCyZJKHJQx2hlTTGGw5tOSc1Ykx+8CU4hlYpSbVoh1EC+4jcrsRtK JPo7mmZ7YGVuVpnweQ4QCM9o63pi72PhgZs35cYP8znVCqHCmJc4NHj9zjb10PTB 7pY4Xm3ylnzl/FYjlZFfhAf9lFx0kOogAaFAGy0Ioe22+3Zx74gKveBtkspytIV1 LxuFw5iO4PLsi18xBamTQs5r8c4Jxy1MHMYDAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU3EUX6Lwlwomx4r6BSauBeqNPeTcwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC8zRVVYNkx3bHdvbXg0cjZCU2F1 QmVxTlBlVGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoxMw DQYJKoZIhvcNAQELBQADggEBAExl/HUatTHcY7RyqIT2gxK5MUxUUb/WnUh7PoYc QQRTqiNIKsyywnyY94a959yHK3IDjvhlbuXPviY82Isf2ErJVHiV5LZILb3sgs9C dpEwgi1C00uTXEXwXNGX/ZE/CujUBhvJ1ALIoNCY86oDoP3Ad84oiUqo4hnvvD9E DNYlXKoCfECXByRRhsv7YH3Jj9/q80aouZpIFFiXC+HzaS43+zEJHmuDLDTYqSN6 QF89GYN9HuB2fkOrN9q0FL3l5YnGdDuH5q6au6JwLymU72uIcLy20iuw7AFabzyw gglTBzWj1ikPFlAMkWgypqGvnlTQqNf23Xej+ibrQl+QrUI= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net