$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/MP1KhUj5eJUX5RUdPERCimyA6dU.roa File: MP1KhUj5eJUX5RUdPERCimyA6dU.roa (raw, json) Hash identifier: Dzbl+8aASQGco+4uyXQh9OdKaiGShbUbwqbNpsAZV8I= Subject key identifier: 30:FD:4A:85:48:F9:78:95:17:E5:15:1D:3C:44:42:8A:6C:80:E9:D5 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0F8C Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/MP1KhUj5eJUX5RUdPERCimyA6dU.roa Signing time: Wed 19 Feb 2025 02:06:28 +0000 ROA not before: Wed 19 Feb 2025 02:06:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17713 IP address blocks: 163.18.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3980 (0xf8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Feb 19 02:06:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=30FD4A8548F9789517E5151D3C44428A6C80E9D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4b:d2:d4:23:a2:0a:f0:6d:6b:ad:57:6a:f3: 96:f6:dd:74:05:2f:18:99:e7:56:c0:00:53:c3:ae: f5:be:5d:f7:98:0b:ee:e5:0c:e1:a8:ca:06:41:d8: d2:5c:56:02:6f:e0:f4:86:c1:d8:e6:76:46:af:8e: 48:80:06:ad:f0:48:df:08:75:c3:ac:9f:0a:14:3d: 03:cd:5f:d5:1b:db:c4:56:85:a0:0f:3d:07:a3:a1: 2a:a8:73:60:94:fa:3a:4a:2e:32:cb:53:91:1e:b0: 30:f5:8d:70:45:32:3e:3f:c7:32:b3:c6:4b:61:25: e4:3d:ea:ff:2d:77:44:a2:50:c8:80:7d:b0:3e:c7: db:bf:1c:00:ba:f6:04:89:41:42:b9:c5:38:60:70: 0e:59:86:6e:49:74:a7:9c:1b:52:0b:6d:ad:22:99: dd:85:1e:0c:e7:70:9d:90:29:8f:50:f5:31:ce:53: 4d:6a:a8:3c:e2:68:e8:c4:ae:d4:8a:a6:d7:c1:1d: 6e:0a:44:22:f4:82:81:79:38:68:f6:78:f4:4e:70: 37:2a:df:cd:40:6d:76:84:20:c4:e8:36:d7:19:49: f6:04:11:e1:f2:f7:d7:9d:c8:f8:f6:a5:cc:ec:d6: 47:1d:2f:25:91:18:bd:ed:5c:e8:71:37:19:ca:f9: c6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FD:4A:85:48:F9:78:95:17:E5:15:1D:3C:44:42:8A:6C:80:E9:D5 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/MP1KhUj5eJUX5RUdPERCimyA6dU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.18.0.0/16 Signature Algorithm: sha256WithRSAEncryption 92:b2:78:74:da:0f:dc:4e:c8:7d:ef:5a:ba:1e:57:cf:82:b1: d0:3b:ea:b4:a0:29:a8:d1:9a:d2:aa:0a:61:46:5e:1e:25:86: 3f:44:e6:18:9f:b4:b2:c9:66:cf:77:b1:78:92:f6:6e:0d:53: 30:38:8a:49:00:94:3e:d8:97:74:24:97:56:38:b8:0b:66:d3: 84:a8:f7:ce:66:b5:6d:03:d1:08:fd:dc:34:7a:fe:50:38:85: 2c:e3:58:4f:f9:29:42:74:d3:2f:01:97:8e:0c:05:12:0c:da: 53:a0:14:1e:6f:f0:e7:68:df:27:3b:97:f2:8b:b2:a9:7b:2c: c7:bc:39:bb:c6:ab:41:36:32:e4:2a:b8:69:b5:c0:6c:1a:9c: e4:9c:3f:b4:a4:6c:02:be:95:f7:a9:ee:6d:18:54:5d:b9:9a: 3e:91:53:f8:a9:5b:0d:7f:5d:af:7b:d4:c9:ab:67:a7:3d:0f: d5:29:5a:17:36:4e:6c:ba:0b:bb:cb:8a:ae:ed:be:cc:c8:18: 20:f0:86:68:1f:93:4c:71:57:87:0c:e2:2c:02:d6:c7:2c:53: 3c:5c:12:24:78:56:de:e1:f1:10:bb:9a:a5:2a:a1:f7:2d:c9: a9:15:74:5b:59:e9:3a:44:26:c7:b2:cd:9f:99:36:84:04:39: 83:d3:61:f0 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD4wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTkw MjA2MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMwRkQ0QTg1NDhGOTc4 OTUxN0U1MTUxRDNDNDQ0MjhBNkM4MEU5RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNS9LUI6IK8G1rrVdq85b23XQFLxiZ51bAAFPDrvW+XfeYC+7l DOGoygZB2NJcVgJv4PSGwdjmdkavjkiABq3wSN8IdcOsnwoUPQPNX9Ub28RWhaAP PQejoSqoc2CU+jpKLjLLU5EesDD1jXBFMj4/xzKzxkthJeQ96v8td0SiUMiAfbA+ x9u/HAC69gSJQUK5xThgcA5Zhm5JdKecG1ILba0imd2FHgzncJ2QKY9Q9THOU01q qDziaOjErtSKptfBHW4KRCL0goF5OGj2ePROcDcq381AbXaEIMToNtcZSfYEEeHy 99edyPj2pczs1kcdLyWRGL3tXOhxNxnK+cY9AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUMP1KhUj5eJUX5RUdPERCimyA6dUwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9NUDFLaFVqNWVKVVg1UlVkUEVS Q2lteUE2ZFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoxIw DQYJKoZIhvcNAQELBQADggEBAJKyeHTaD9xOyH3vWroeV8+CsdA76rSgKajRmtKq CmFGXh4lhj9E5hiftLLJZs93sXiS9m4NUzA4ikkAlD7Yl3Qkl1Y4uAtm04So985m tW0D0Qj93DR6/lA4hSzjWE/5KUJ00y8Bl44MBRIM2lOgFB5v8Odo3yc7l/KLsql7 LMe8ObvGq0E2MuQquGm1wGwanOScP7SkbAK+lfep7m0YVF25mj6RU/ipWw1/Xa97 1MmrZ6c9D9UpWhc2Tmy6C7vLiq7tvszIGCDwhmgfk0xxV4cM4iwC1scsUzxcEiR4 Vt7h8RC7mqUqofctyakVdFtZ6TpEJseyzZ+ZNoQEOYPTYfA= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net