$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/qunzVS5tB_Cy8DRv15CfgcT_89c.roa File: qunzVS5tB_Cy8DRv15CfgcT_89c.roa (raw, json) Hash identifier: HWjsSutf83HwkBWESI9eEZa0oFN5x9AufmM+0T2q5/g= Subject key identifier: AA:E9:F3:55:2E:6D:07:F0:B2:F0:34:6F:D7:90:9F:81:C4:FF:F3:D7 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0EE7 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/qunzVS5tB_Cy8DRv15CfgcT_89c.roa Signing time: Mon 10 Feb 2025 14:16:12 +0000 ROA not before: Mon 10 Feb 2025 14:16:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 210.62.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3815 (0xee7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Feb 10 14:16:12 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AAE9F3552E6D07F0B2F0346FD7909F81C4FFF3D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:83:b6:b3:fc:70:07:a0:76:6a:d3:68:9a:7f: 82:ac:f9:88:69:27:05:bc:2e:5c:bd:76:6a:30:03: 95:6d:22:2e:96:86:b4:17:4c:e5:25:8f:85:a6:e0: ac:9b:e1:0c:eb:f2:ef:ad:c8:7d:fa:46:90:22:a7: 27:66:84:03:3c:b1:84:5b:64:1e:90:d8:63:36:b1: a4:ba:ea:33:a7:8a:8c:6f:4b:f8:3a:ea:7b:67:70: 9f:93:19:3f:0d:5e:9f:90:c8:e2:17:90:76:16:91: e7:25:52:be:b0:4a:1e:ee:d9:fa:b3:75:9b:32:e7: 9e:1a:39:92:c9:bc:12:fd:5c:61:a8:28:a2:ca:d0: 5a:ec:c5:00:37:d6:49:5f:e1:9e:04:51:9a:b1:92: 01:38:67:fd:a7:7f:e2:55:dd:12:30:34:70:9c:fd: f8:51:05:69:c0:14:fa:65:f4:12:a4:f5:f5:73:e3: d9:7c:06:0c:06:1a:59:05:15:b0:70:42:5d:3c:38: 70:f8:11:e3:4e:67:d7:e7:5f:bf:06:42:34:f7:7d: 99:f8:49:88:0f:9a:e6:0c:5b:d9:ea:a9:86:c9:49: ca:3c:af:73:f2:0c:4b:f8:8b:bf:09:b6:fc:c0:f2: d9:35:30:9c:ea:da:93:ec:95:03:70:1c:74:fb:ec: 77:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E9:F3:55:2E:6D:07:F0:B2:F0:34:6F:D7:90:9F:81:C4:FF:F3:D7 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/qunzVS5tB_Cy8DRv15CfgcT_89c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.62.64.0/19 Signature Algorithm: sha256WithRSAEncryption 00:ee:ca:9b:5e:48:22:89:0a:40:89:ee:37:01:0e:eb:77:ee: f4:0a:29:c9:86:f7:a5:d8:71:52:83:92:d3:2e:35:ca:05:17: 8f:97:79:42:19:33:da:7e:af:7e:1f:c1:4c:0d:c3:61:25:69: 47:2b:5e:0a:ce:db:ce:f9:73:8c:cc:b3:b4:e3:b9:11:3b:93: 2f:07:ea:18:e3:5a:1c:28:43:20:10:c4:ec:1f:17:52:d4:e2: a2:34:7c:bb:73:09:48:3b:7f:24:7e:98:64:fd:b6:0d:1a:53: 07:52:60:ea:bb:39:7c:f4:a1:48:45:aa:2b:ad:4e:c3:25:46: ce:c5:d1:01:77:1e:36:45:ea:b9:47:5a:fb:12:0b:02:10:56: f7:28:06:c4:11:ea:eb:cb:b8:fe:11:98:a9:eb:ac:e7:70:c9: e1:48:45:20:25:93:f5:6c:b0:dc:3b:01:b3:e1:fa:0d:c7:a4: 47:88:84:83:32:0d:1e:a4:57:6f:de:8e:99:cb:30:49:fd:80: 88:cd:05:f1:7f:75:86:14:2a:9d:dc:e6:7b:5b:32:26:89:03: de:e7:b2:dc:32:e3:ca:51:40:11:89:f5:39:f4:7d:72:4d:3d: b2:39:b8:88:f5:b1:21:b8:d3:77:b5:4b:63:6c:9a:df:9b:ad: 0b:9e:c3:3d -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDucwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTAx NDE2MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFBRTlGMzU1MkU2RDA3 RjBCMkYwMzQ2RkQ3OTA5RjgxQzRGRkYzRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChg7az/HAHoHZq02iaf4Ks+YhpJwW8Lly9dmowA5VtIi6WhrQX TOUlj4Wm4Kyb4Qzr8u+tyH36RpAipydmhAM8sYRbZB6Q2GM2saS66jOnioxvS/g6 6ntncJ+TGT8NXp+QyOIXkHYWkeclUr6wSh7u2fqzdZsy554aOZLJvBL9XGGoKKLK 0FrsxQA31klf4Z4EUZqxkgE4Z/2nf+JV3RIwNHCc/fhRBWnAFPpl9BKk9fVz49l8 BgwGGlkFFbBwQl08OHD4EeNOZ9fnX78GQjT3fZn4SYgPmuYMW9nqqYbJSco8r3Py DEv4i78JtvzA8tk1MJzq2pPslQNwHHT77HdZAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUqunzVS5tB/Cy8DRv15CfgcT/89cwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9xdW56VlM1dEJfQ3k4RFJ2MTVD ZmdjVF84OWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0j5A MA0GCSqGSIb3DQEBCwUAA4IBAQAA7sqbXkgiiQpAie43AQ7rd+70CinJhvel2HFS g5LTLjXKBRePl3lCGTPafq9+H8FMDcNhJWlHK14KztvO+XOMzLO047kRO5MvB+oY 41ocKEMgEMTsHxdS1OKiNHy7cwlIO38kfphk/bYNGlMHUmDquzl89KFIRaorrU7D JUbOxdEBdx42Req5R1r7EgsCEFb3KAbEEerry7j+EZip66zncMnhSEUgJZP1bLDc OwGz4foNx6RHiISDMg0epFdv3o6ZyzBJ/YCIzQXxf3WGFCqd3OZ7WzImiQPe57Lc MuPKUUARifU59H1yTT2yObiI9bEhuNN3tUtjbJrfm60LnsM9 -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net