$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/An6a5r2l8Bn6-PNDgl-z_-PkktU.roa File: An6a5r2l8Bn6-PNDgl-z_-PkktU.roa (raw, json) Hash identifier: M2wU8EHsE8zGmswpx5A+bcrdFkQjhz6g3cVc40sEQiU= Subject key identifier: 02:7E:9A:E6:BD:A5:F0:19:FA:F8:F3:43:82:5F:B3:FF:E3:E4:92:D5 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0F02 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/An6a5r2l8Bn6-PNDgl-z_-PkktU.roa Signing time: Mon 10 Feb 2025 14:16:17 +0000 ROA not before: Mon 10 Feb 2025 14:16:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 203.71.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3842 (0xf02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Feb 10 14:16:17 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=027E9AE6BDA5F019FAF8F343825FB3FFE3E492D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f6:0b:ab:2e:50:ad:2b:59:aa:d4:1f:3a:62: 15:1c:65:59:14:f7:d0:50:4a:a6:cd:b0:62:00:eb: ad:62:9e:4b:8e:18:a0:1e:6d:11:0e:1c:5a:ad:d1: f3:34:c0:28:ca:5b:7b:2a:d7:71:ad:ea:54:fe:20: e8:73:31:26:f8:1f:82:fe:eb:a0:af:5f:31:ec:20: 06:52:32:91:8b:ff:ab:02:28:da:15:e8:cf:e3:80: 66:01:19:9b:89:24:bb:cd:54:2f:4c:c6:de:45:58: b0:d2:6c:a9:78:26:49:aa:fe:32:69:19:0c:52:30: 51:aa:83:07:bb:4c:24:ad:23:43:98:74:ba:35:e6: 87:05:ce:51:10:1f:a2:f6:9a:c6:20:db:38:d3:39: d5:84:08:ed:4d:12:a6:7c:fe:fe:ec:e5:00:87:2f: 05:30:50:c6:d6:dd:e4:9d:8a:3a:6b:dd:42:d5:0f: fb:bf:dc:ba:c1:e5:a9:aa:76:b7:d6:c2:02:03:68: dc:fa:9d:49:c2:00:9d:1d:67:d5:e1:fd:52:05:65: 0a:5c:e3:f0:4a:1c:d0:99:41:14:5e:6c:97:77:f9: 8b:b2:ff:59:3f:48:19:fd:d0:3a:cc:7c:5d:00:d4: 19:87:cf:db:97:eb:a9:2d:e4:1f:f5:fd:74:1b:32: 4e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7E:9A:E6:BD:A5:F0:19:FA:F8:F3:43:82:5F:B3:FF:E3:E4:92:D5 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/An6a5r2l8Bn6-PNDgl-z_-PkktU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.71.0.0/16 Signature Algorithm: sha256WithRSAEncryption 32:07:a6:e4:7a:08:c9:00:db:27:b4:63:d9:56:67:52:84:48: 69:2f:37:94:35:e5:d5:11:9c:24:64:a8:81:9b:84:f4:ee:32: f7:bb:72:6e:cd:c4:19:1c:3a:93:eb:08:19:e1:90:cd:f3:a0: a9:78:3b:e7:c2:00:9a:d9:40:c6:7f:d5:a5:95:32:9f:39:47: 45:77:4a:ee:a0:b4:b0:a3:cc:c1:8c:e3:67:06:c7:d3:61:83: 2c:73:94:83:24:41:b3:5f:07:4a:9e:de:c7:7b:19:67:b5:31: 3d:cf:8d:73:a6:6b:86:0a:be:6d:6a:6c:92:47:05:38:b1:cd: 3b:39:00:6b:1e:da:e1:3d:fe:ca:23:ad:de:94:d3:d2:c9:c5: ae:f4:9a:82:ed:39:42:17:7c:7f:d3:58:b1:86:4c:f6:07:db: da:6e:92:f0:ff:a7:ac:fc:87:81:c7:df:1f:c4:ca:2b:9f:88: 6f:3f:26:bb:af:7e:74:13:fe:d6:f0:92:73:bc:17:40:d1:0b: ff:7f:c0:2c:d1:9d:bc:99:a3:cc:46:30:0d:a6:07:d3:ce:df: 86:e7:19:d2:cf:be:5c:3b:40:08:a8:53:2d:8f:ba:eb:fc:ce: a2:f5:61:df:be:20:75:9c:e4:2b:64:88:ce:55:0a:fa:e7:87: 7d:9d:3e:48 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDwIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTAx NDE2MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAyN0U5QUU2QkRBNUYw MTlGQUY4RjM0MzgyNUZCM0ZGRTNFNDkyRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ9gurLlCtK1mq1B86YhUcZVkU99BQSqbNsGIA661inkuOGKAe bREOHFqt0fM0wCjKW3sq13Gt6lT+IOhzMSb4H4L+66CvXzHsIAZSMpGL/6sCKNoV 6M/jgGYBGZuJJLvNVC9Mxt5FWLDSbKl4Jkmq/jJpGQxSMFGqgwe7TCStI0OYdLo1 5ocFzlEQH6L2msYg2zjTOdWECO1NEqZ8/v7s5QCHLwUwUMbW3eSdijpr3ULVD/u/ 3LrB5amqdrfWwgIDaNz6nUnCAJ0dZ9Xh/VIFZQpc4/BKHNCZQRRebJd3+Yuy/1k/ SBn90DrMfF0A1BmHz9uX66kt5B/1/XQbMk6VAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUAn6a5r2l8Bn6+PNDgl+z/+PkktUwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9BbjZhNXIybDhCbjYtUE5EZ2wt el8tUGtrdFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAy0cw DQYJKoZIhvcNAQELBQADggEBADIHpuR6CMkA2ye0Y9lWZ1KESGkvN5Q15dURnCRk qIGbhPTuMve7cm7NxBkcOpPrCBnhkM3zoKl4O+fCAJrZQMZ/1aWVMp85R0V3Su6g tLCjzMGM42cGx9NhgyxzlIMkQbNfB0qe3sd7GWe1MT3PjXOma4YKvm1qbJJHBTix zTs5AGse2uE9/sojrd6U09LJxa70moLtOUIXfH/TWLGGTPYH29pukvD/p6z8h4HH 3x/EyiufiG8/JruvfnQT/tbwknO8F0DRC/9/wCzRnbyZo8xGMA2mB9PO34bnGdLP vlw7QAioUy2Puuv8zqL1Yd++IHWc5CtkiM5VCvrnh32dPkg= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net