$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/Fzy5ZcCIQYy6f6lA6oebnObyTe4.roa File: Fzy5ZcCIQYy6f6lA6oebnObyTe4.roa (raw, json) Hash identifier: gQyxZclXD43SXzVO2Tj+iHZYE/Sm307UI+DvcRcRISA= Subject key identifier: 17:3C:B9:65:C0:88:41:8C:BA:7F:A9:40:EA:87:9B:9C:E6:F2:4D:EE Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0EEF Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Fzy5ZcCIQYy6f6lA6oebnObyTe4.roa Signing time: Mon 10 Feb 2025 14:16:13 +0000 ROA not before: Mon 10 Feb 2025 14:16:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 210.59.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3823 (0xeef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Feb 10 14:16:13 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=173CB965C088418CBA7FA940EA879B9CE6F24DEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:fa:08:31:ca:cf:dd:55:da:9b:5d:77:ee: d0:44:13:e1:a4:48:5c:35:fc:ba:e6:9b:7f:a8:b1: db:e7:df:46:5b:8e:8e:90:2d:7d:ab:11:18:f9:ec: bf:d0:b4:15:74:92:17:28:44:d0:4b:a8:d6:2c:3b: 2f:9f:35:ed:76:8d:5f:4c:ef:df:79:3f:8c:ea:4a: a1:a3:ac:a4:02:3d:1a:54:af:56:7a:53:94:66:f1: 1b:3f:6c:f1:33:1d:bf:c1:14:35:07:af:69:ca:6f: d4:39:fe:d5:ea:34:06:3b:e7:f8:6e:35:74:30:d2: 1b:d9:90:09:a5:82:5f:62:70:f0:81:81:bc:a3:b2: 07:ba:5d:27:5c:ce:59:18:3d:a9:2a:ab:1e:9d:a1: 1b:e7:5b:94:e3:8c:16:4e:e3:6a:08:06:20:d9:44: 68:15:83:d1:45:9d:10:44:ae:59:91:1d:ba:64:ac: fd:8d:16:20:c4:f9:5e:7e:f3:f2:e6:60:c8:66:8d: 49:06:d1:d7:25:b0:e3:fd:52:8d:f1:3a:9c:45:b4: c1:ac:4b:b6:c8:39:ba:ed:5b:67:c6:da:fe:7a:f4: 1e:9f:d0:64:59:d1:2e:60:4d:d3:1b:8e:ef:ae:75: bf:4b:60:0d:8f:a1:8a:0b:82:de:ea:92:74:50:78: 17:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3C:B9:65:C0:88:41:8C:BA:7F:A9:40:EA:87:9B:9C:E6:F2:4D:EE X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Fzy5ZcCIQYy6f6lA6oebnObyTe4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.59.0.0/17 Signature Algorithm: sha256WithRSAEncryption 0d:60:ab:19:96:5f:02:13:5c:6a:ef:5c:b1:1a:3f:7b:3c:8e: 86:03:28:52:33:e6:98:41:b2:e8:ec:30:b3:c5:62:ee:09:16: fa:6e:e9:b0:f8:bf:0c:63:e6:65:b7:e7:8d:60:ac:8c:d3:f2: 0f:a1:bd:11:18:fa:8a:f4:13:3b:94:b2:7a:60:38:09:73:c0: 86:35:ed:67:38:80:0c:5a:93:55:80:b2:52:71:0c:d2:ab:f6: e4:f8:61:67:2e:31:7e:2a:78:dd:bf:56:0b:33:82:5e:e4:c7: 6f:e1:61:d2:99:11:c0:1d:a9:a9:1a:bf:d0:3c:dd:60:4c:1a: f4:da:d7:66:7a:37:35:15:26:e0:26:99:bb:bb:3b:11:90:61: b5:9d:a3:56:8c:d3:63:fa:8f:07:b5:a7:49:a1:ad:02:a9:f1: 5f:1b:81:a3:8b:40:2d:51:b7:7b:4c:a1:c8:88:ee:c4:d0:e6: 1b:e9:c8:1a:3a:c6:5a:b4:18:9e:b2:2c:6e:58:91:0c:69:6e: c0:99:82:17:f0:55:fe:a7:84:ed:c7:c8:31:14:93:1d:98:5b: ae:af:79:b6:76:7e:5e:51:e9:26:e9:42:45:1f:c9:dd:80:43: e9:f6:a6:67:3e:40:17:e0:74:73:8e:7f:51:1b:e8:4a:18:7c: 63:2c:fb:1f -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDu8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTAx NDE2MTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE3M0NCOTY1QzA4ODQx OENCQTdGQTk0MEVBODc5QjlDRTZGMjRERUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtSvoIMcrP3VXam1137tBEE+GkSFw1/Lrmm3+osdvn30Zbjo6Q LX2rERj57L/QtBV0khcoRNBLqNYsOy+fNe12jV9M7995P4zqSqGjrKQCPRpUr1Z6 U5Rm8Rs/bPEzHb/BFDUHr2nKb9Q5/tXqNAY75/huNXQw0hvZkAmlgl9icPCBgbyj sge6XSdczlkYPakqqx6doRvnW5TjjBZO42oIBiDZRGgVg9FFnRBErlmRHbpkrP2N FiDE+V5+8/LmYMhmjUkG0dclsOP9Uo3xOpxFtMGsS7bIObrtW2fG2v569B6f0GRZ 0S5gTdMbju+udb9LYA2PoYoLgt7qknRQeBfVAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUFzy5ZcCIQYy6f6lA6oebnObyTe4wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9Genk1WmNDSVFZeTZmNmxBNm9l Ym5PYnlUZTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0jsA MA0GCSqGSIb3DQEBCwUAA4IBAQANYKsZll8CE1xq71yxGj97PI6GAyhSM+aYQbLo 7DCzxWLuCRb6bumw+L8MY+Zlt+eNYKyM0/IPob0RGPqK9BM7lLJ6YDgJc8CGNe1n OIAMWpNVgLJScQzSq/bk+GFnLjF+Knjdv1YLM4Je5Mdv4WHSmRHAHampGr/QPN1g TBr02tdmejc1FSbgJpm7uzsRkGG1naNWjNNj+o8HtadJoa0CqfFfG4Gji0AtUbd7 TKHIiO7E0OYb6cgaOsZatBiesixuWJEMaW7AmYIX8FX+p4Ttx8gxFJMdmFuur3m2 dn5eUekm6UJFH8ndgEPp9qZnPkAX4HRzjn9RG+hKGHxjLPsf -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net