$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/d7l5cB4yBVgvq5-1J2nDB3ZXv-c.roa File: d7l5cB4yBVgvq5-1J2nDB3ZXv-c.roa (raw, json) Hash identifier: 0NYixBwUhtgI4YmAWVKAHlkx1kTkOB+IkASJRNKhwqM= Subject key identifier: 77:B9:79:70:1E:32:05:58:2F:AB:9F:B5:27:69:C3:07:76:57:BF:E7 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0EF5 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/d7l5cB4yBVgvq5-1J2nDB3ZXv-c.roa Signing time: Mon 10 Feb 2025 14:16:14 +0000 ROA not before: Mon 10 Feb 2025 14:16:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 210.71.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3829 (0xef5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Feb 10 14:16:14 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=77B979701E3205582FAB9FB52769C3077657BFE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:76:86:4c:00:cc:99:d9:41:ba:b6:f9:cc:e9: 0f:e9:a8:e9:f5:fe:17:23:58:66:68:99:29:a8:8a: 85:33:42:e0:78:d5:49:c1:19:2b:f9:93:63:81:a9: 26:e1:fb:fd:10:53:77:e9:89:e5:80:85:cc:01:a7: b5:0a:1c:92:b8:29:6d:78:11:c9:15:f2:ea:c1:60: 36:f7:2a:14:65:4a:72:64:bc:cf:ba:2f:7f:d0:18: 59:87:a3:96:9b:70:45:f4:bb:0f:d3:be:b0:ac:88: a3:d3:2b:d7:0c:44:52:34:1d:f5:b6:73:0b:af:a9: 1f:2a:d4:3a:7c:f0:33:84:2c:7b:6b:58:02:94:9a: 46:f4:cd:ee:ae:70:3d:91:d9:3d:4a:fa:86:62:8c: 20:e1:49:f9:5d:90:d6:c2:15:db:32:26:59:39:46: 56:40:14:42:ad:89:d4:3b:bb:8c:8a:f8:99:02:9f: 74:d4:97:83:fc:47:b4:35:c0:ef:c1:f2:bf:0a:4f: da:b1:1f:74:5c:46:dc:e4:11:56:4b:c7:62:6b:1d: dc:51:e4:13:eb:8d:3f:66:e0:a8:f3:39:f1:eb:d1: 1d:7c:11:d4:95:6f:02:f6:28:64:2b:d3:83:89:e4: 88:58:d5:54:fd:1e:1f:2f:7f:c1:07:67:1a:2c:64: 83:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B9:79:70:1E:32:05:58:2F:AB:9F:B5:27:69:C3:07:76:57:BF:E7 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/d7l5cB4yBVgvq5-1J2nDB3ZXv-c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.71.0.0/17 Signature Algorithm: sha256WithRSAEncryption a7:47:74:cf:08:83:8e:a2:d9:f1:6e:73:80:31:e0:8d:5a:e3: 32:e5:f9:ad:f9:e6:82:11:05:4f:f7:10:08:05:89:f0:03:f1: 94:e6:a7:ca:ec:19:ac:a9:b9:59:3e:f3:61:f0:f6:85:aa:87: 2f:46:a3:f3:15:3c:95:1e:a4:cf:2e:14:58:e9:8e:c0:25:fe: 36:cb:4f:12:0d:d2:b1:ae:0b:de:8a:6b:52:08:31:36:71:fe: d9:b2:ef:74:5c:9e:f2:3e:38:28:d1:29:30:f7:46:82:95:c3: 81:8f:40:f9:e2:1d:5b:a8:b3:b6:a8:3c:ba:91:12:6e:be:cc: bb:ce:ba:47:f0:10:dd:78:55:5f:8f:e6:ab:cf:82:76:0d:8d: 7d:78:a5:78:89:ca:67:77:ce:88:00:3d:9e:e1:93:f5:a2:20: 35:ae:23:b3:cb:9b:5c:7d:79:a4:95:d8:a7:80:45:50:81:1f: 86:e4:24:87:fb:1e:c8:80:08:a3:7d:bf:26:db:c5:ae:97:c7: 4e:9f:cc:d1:dc:a2:f9:c0:f6:49:c5:fa:95:28:3c:6f:9a:7f: 89:8e:bd:c8:07:24:7b:a7:73:7a:3f:0d:51:97:a1:03:2f:88: 96:06:6f:22:8f:a6:50:18:43:ee:53:41:12:bf:0b:67:e4:ab: da:4c:92:6c -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDvUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTAx NDE2MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc3Qjk3OTcwMUUzMjA1 NTgyRkFCOUZCNTI3NjlDMzA3NzY1N0JGRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCydoZMAMyZ2UG6tvnM6Q/pqOn1/hcjWGZomSmoioUzQuB41UnB GSv5k2OBqSbh+/0QU3fpieWAhcwBp7UKHJK4KW14EckV8urBYDb3KhRlSnJkvM+6 L3/QGFmHo5abcEX0uw/TvrCsiKPTK9cMRFI0HfW2cwuvqR8q1Dp88DOELHtrWAKU mkb0ze6ucD2R2T1K+oZijCDhSfldkNbCFdsyJlk5RlZAFEKtidQ7u4yK+JkCn3TU l4P8R7Q1wO/B8r8KT9qxH3RcRtzkEVZLx2JrHdxR5BPrjT9m4KjzOfHr0R18EdSV bwL2KGQr04OJ5IhY1VT9Hh8vf8EHZxosZIM9AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUd7l5cB4yBVgvq5+1J2nDB3ZXv+cwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9kN2w1Y0I0eUJWZ3ZxNS0xSjJu REIzWlh2LWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0kcA MA0GCSqGSIb3DQEBCwUAA4IBAQCnR3TPCIOOotnxbnOAMeCNWuMy5fmt+eaCEQVP 9xAIBYnwA/GU5qfK7BmsqblZPvNh8PaFqocvRqPzFTyVHqTPLhRY6Y7AJf42y08S DdKxrgveimtSCDE2cf7Zsu90XJ7yPjgo0Skw90aClcOBj0D54h1bqLO2qDy6kRJu vsy7zrpH8BDdeFVfj+arz4J2DY19eKV4icpnd86IAD2e4ZP1oiA1riOzy5tcfXmk ldingEVQgR+G5CSH+x7IgAijfb8m28Wul8dOn8zR3KL5wPZJxfqVKDxvmn+Jjr3I ByR7p3N6Pw1Rl6EDL4iWBm8ij6ZQGEPuU0ESvwtn5KvaTJJs -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net