$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/g8U2PvvZ0iz4Mfd8aSguHLL6Z_4.roa File: g8U2PvvZ0iz4Mfd8aSguHLL6Z_4.roa (raw, json) Hash identifier: LrjR7WI19o+U7Wspxts/iUtiMx11bFgUKssoOTTttA4= Subject key identifier: 83:C5:36:3E:FB:D9:D2:2C:F8:31:F7:7C:69:28:2E:1C:B2:FA:67:FE Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0F57 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/g8U2PvvZ0iz4Mfd8aSguHLL6Z_4.roa Signing time: Mon 17 Feb 2025 09:51:41 +0000 ROA not before: Mon 17 Feb 2025 09:51:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17716 IP address blocks: 210.60.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3927 (0xf57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Feb 17 09:51:41 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=83C5363EFBD9D22CF831F77C69282E1CB2FA67FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:81:84:92:92:aa:63:91:eb:a9:16:c5:14: 43:cd:08:8d:2b:6a:bd:78:8f:6c:12:04:f4:c5:5f: 39:8b:31:c9:ec:43:68:8b:cd:19:c8:48:ef:3b:e5: 60:8d:71:dd:5d:ae:9e:87:6c:87:3f:19:ca:55:49: 83:dd:d8:32:d9:21:1f:9a:05:ae:6a:4d:33:d8:fa: 48:25:39:45:10:ca:b4:09:74:69:12:15:c2:a6:73: 4b:e8:ec:d3:9f:65:aa:20:ef:6f:5e:a6:30:5b:50: cb:0a:62:d0:32:5f:89:70:86:fa:cb:2e:d5:da:57: 35:1f:01:ce:f1:a0:88:61:13:d2:36:12:1b:7a:87: 7a:33:e5:7c:3a:25:cb:12:ce:6a:89:81:2c:15:dd: fc:a1:44:6b:2a:7e:73:54:a4:73:82:93:b7:47:cf: c8:91:8b:92:48:c7:83:22:82:fa:c9:60:22:ea:1a: 42:63:e7:b3:e9:dc:06:50:14:23:51:41:2b:09:a9: 59:c3:18:ac:08:f4:41:f6:7e:e9:9c:fd:48:d4:36: 83:42:b1:fa:a1:54:cf:ee:2e:12:5d:c2:e5:18:1c: a5:a1:dd:d7:71:48:93:3e:44:68:d4:63:5d:39:35: 6f:6e:5f:0e:1d:d1:69:03:17:cf:e2:89:37:fa:0b: 4c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C5:36:3E:FB:D9:D2:2C:F8:31:F7:7C:69:28:2E:1C:B2:FA:67:FE X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/g8U2PvvZ0iz4Mfd8aSguHLL6Z_4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.60.150.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:fe:14:5a:20:be:fd:7d:12:81:e7:a2:01:9e:72:8a:04:d8: 3f:94:f4:aa:d4:b7:d7:ce:bd:f2:5d:8f:50:76:f2:e6:fd:c8: 32:a9:ff:66:30:ac:3e:5d:dc:f2:91:b3:70:c0:3e:20:48:5d: 6a:48:b5:05:4e:5a:0e:46:5a:bf:d2:e6:3d:1b:95:38:cc:b5: e8:d7:e4:39:6c:78:28:a3:5d:45:cd:b3:50:a7:55:9c:d9:43: 0f:3c:d6:8f:c2:7a:37:2e:ba:83:97:80:c2:14:d1:f7:0c:93: 37:9f:ba:f6:c5:c1:65:7d:c9:be:a2:a7:7d:9c:1b:cf:23:8d: 42:3c:01:d1:00:5e:58:4f:99:97:13:56:26:46:b1:b7:ca:cc: 1f:ea:b3:e9:7d:36:69:ff:b6:ba:c6:0d:47:25:ff:a7:52:68: c7:8d:2a:d6:d0:36:00:b0:db:5d:11:56:f8:35:99:64:81:af: cf:c4:e9:36:1e:00:2e:4d:08:39:36:34:3b:be:07:b1:50:1c: f5:eb:ed:b5:ea:b4:99:a3:2c:00:0d:1a:4e:a5:2f:f1:79:81: ac:99:76:e1:b2:16:a4:92:47:41:83:a6:bb:1c:38:6d:17:fa: db:80:ce:33:bd:23:c2:24:db:09:a0:2b:56:3b:f2:2e:25:04: d7:7b:72:01 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD1cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTcw OTUxNDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgzQzUzNjNFRkJEOUQy MkNGODMxRjc3QzY5MjgyRTFDQjJGQTY3RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCugoGEkpKqY5HrqRbFFEPNCI0rar14j2wSBPTFXzmLMcnsQ2iL zRnISO875WCNcd1drp6HbIc/GcpVSYPd2DLZIR+aBa5qTTPY+kglOUUQyrQJdGkS FcKmc0vo7NOfZaog729epjBbUMsKYtAyX4lwhvrLLtXaVzUfAc7xoIhhE9I2Eht6 h3oz5Xw6JcsSzmqJgSwV3fyhRGsqfnNUpHOCk7dHz8iRi5JIx4MigvrJYCLqGkJj 57Pp3AZQFCNRQSsJqVnDGKwI9EH2fumc/UjUNoNCsfqhVM/uLhJdwuUYHKWh3ddx SJM+RGjUY105NW9uXw4d0WkDF8/iiTf6C0z/AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUg8U2PvvZ0iz4Mfd8aSguHLL6Z/4wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9nOFUyUHZ2WjBpejRNZmQ4YVNn dUhMTDZaXzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0jyW MA0GCSqGSIb3DQEBCwUAA4IBAQCL/hRaIL79fRKB56IBnnKKBNg/lPSq1LfXzr3y XY9QdvLm/cgyqf9mMKw+XdzykbNwwD4gSF1qSLUFTloORlq/0uY9G5U4zLXo1+Q5 bHgoo11FzbNQp1Wc2UMPPNaPwno3LrqDl4DCFNH3DJM3n7r2xcFlfcm+oqd9nBvP I41CPAHRAF5YT5mXE1YmRrG3yswf6rPpfTZp/7a6xg1HJf+nUmjHjSrW0DYAsNtd EVb4NZlkga/PxOk2HgAuTQg5NjQ7vgexUBz16+216rSZoywADRpOpS/xeYGsmXbh shakkkdBg6a7HDhtF/rbgM4zvSPCJNsJoCtWO/IuJQTXe3IB -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net