$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/-Fg31ys7nPy7ZAcaQT2PD7JldWc.roa File: -Fg31ys7nPy7ZAcaQT2PD7JldWc.roa (raw, json) Hash identifier: EBgfns+Kq047M2dcB7MUeQmHrZcE9Zji0zoz9YA9uiY= Subject key identifier: F8:58:37:D7:2B:3B:9C:FC:BB:64:07:1A:41:3D:8F:0F:B2:65:75:67 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1269 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-Fg31ys7nPy7ZAcaQT2PD7JldWc.roa Signing time: Mon 10 Feb 2025 14:28:23 +0000 ROA not before: Mon 10 Feb 2025 14:28:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 210.58.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4713 (0x1269) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:28:23 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F85837D72B3B9CFCBB64071A413D8F0FB2657567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d9:f1:e7:d1:39:6e:cc:be:72:67:d7:fb:eb: 94:68:21:d8:8f:f1:fa:e7:1b:ba:2d:4f:a0:b0:05: 23:58:c1:fa:29:bd:4e:7b:a1:cc:3a:ec:83:3a:70: e8:09:8c:60:45:02:72:1e:a8:6c:c1:28:61:0d:db: be:73:12:4b:0a:62:88:37:31:0d:fb:a5:95:a8:28: a8:63:34:6e:0a:ca:52:68:3d:6c:1f:4a:2f:e9:77: 94:a1:d8:9a:f0:83:91:20:11:56:32:fb:43:f7:34: 36:fc:58:bc:2e:4c:08:1b:53:d8:93:18:e8:93:ba: 3d:34:10:f3:94:ab:b6:04:1c:94:20:5f:24:31:1d: 2b:2b:81:3b:db:09:00:b1:10:44:52:22:d9:37:92: a3:5c:e5:22:88:1a:44:54:da:3e:b2:7a:26:48:d0: 91:c7:e0:8d:86:e9:aa:68:c5:91:55:74:14:c6:6a: 59:1f:70:f4:5b:48:9e:78:44:7e:24:c7:cb:74:71: b0:8b:1e:dc:ab:35:b1:a7:0e:56:a2:01:4d:a0:c0: 36:6e:4e:e1:46:9c:7c:8b:2e:a1:97:75:e1:de:e7: 82:5a:da:43:b9:83:dc:58:7f:50:a2:cd:54:cd:d0: 56:62:98:1e:b4:8b:aa:f4:0d:a6:24:a9:5a:a9:e9: 82:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:58:37:D7:2B:3B:9C:FC:BB:64:07:1A:41:3D:8F:0F:B2:65:75:67 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-Fg31ys7nPy7ZAcaQT2PD7JldWc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.58.0.0/16 Signature Algorithm: sha256WithRSAEncryption 05:ba:5f:9d:db:56:b7:af:0f:84:7e:55:09:12:eb:40:95:e1: c7:0b:a1:54:be:56:a9:88:14:17:fc:7e:1a:a5:e4:7d:9c:6e: b4:c1:54:87:c4:a9:6a:33:45:78:f4:97:b4:e8:0d:87:9b:92: 90:ed:5d:0d:b7:08:38:e3:bb:f2:c5:a5:84:ac:39:0f:38:55: ff:88:f1:6d:f3:48:9d:cd:2f:ed:06:aa:2f:9d:ad:bd:96:97: bf:34:f7:55:8f:32:ea:7a:26:33:a9:65:4d:11:91:de:77:7d: 92:bd:6b:69:44:ef:a3:37:e6:e3:20:80:53:fc:b5:8c:af:1b: 7f:ac:9c:ea:31:8c:60:6b:c3:e4:95:d7:3c:a4:a2:71:09:0e: 87:df:81:76:2a:69:61:c4:60:01:9f:ec:29:d4:9c:fa:be:00: bc:e8:f6:02:7f:88:87:cb:92:42:a4:b1:99:e3:af:ec:39:86: 6f:27:c2:43:2c:6c:f8:27:08:ec:19:fd:80:79:8d:f4:83:e9: af:cd:be:45:7f:72:3a:7d:11:49:26:6c:e8:c2:09:fa:ad:6b: 07:f5:3a:a0:d4:bf:ae:96:38:fe:42:47:a4:79:3a:50:bf:ee: a5:97:93:2a:71:98:91:da:06:b7:fd:ed:6c:d6:5b:25:bf:e2: 35:75:09:bb -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEmkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI4MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY4NTgzN0Q3MkIzQjlD RkNCQjY0MDcxQTQxM0Q4RjBGQjI2NTc1NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+2fHn0TluzL5yZ9f765RoIdiP8frnG7otT6CwBSNYwfopvU57 ocw67IM6cOgJjGBFAnIeqGzBKGEN275zEksKYog3MQ37pZWoKKhjNG4KylJoPWwf Si/pd5Sh2Jrwg5EgEVYy+0P3NDb8WLwuTAgbU9iTGOiTuj00EPOUq7YEHJQgXyQx HSsrgTvbCQCxEERSItk3kqNc5SKIGkRU2j6yeiZI0JHH4I2G6apoxZFVdBTGalkf cPRbSJ54RH4kx8t0cbCLHtyrNbGnDlaiAU2gwDZuTuFGnHyLLqGXdeHe54Ja2kO5 g9xYf1CizVTN0FZimB60i6r0DaYkqVqp6YIhAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQU+Fg31ys7nPy7ZAcaQT2PD7JldWcwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULy1GZzMxeXM3blB5N1pBY2FRVDJQRDdK bGRXYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDSOjANBgkq hkiG9w0BAQsFAAOCAQEABbpfndtWt68PhH5VCRLrQJXhxwuhVL5WqYgUF/x+GqXk fZxutMFUh8SpajNFePSXtOgNh5uSkO1dDbcIOOO78sWlhKw5DzhV/4jxbfNInc0v 7QaqL52tvZaXvzT3VY8y6nomM6llTRGR3nd9kr1raUTvozfm4yCAU/y1jK8bf6yc 6jGMYGvD5JXXPKSicQkOh9+BdippYcRgAZ/sKdSc+r4AvOj2An+Ih8uSQqSxmeOv 7DmGbyfCQyxs+CcI7Bn9gHmN9IPpr82+RX9yOn0RSSZs6MIJ+q1rB/U6oNS/rpY4 /kJHpHk6UL/upZeTKnGYkdoGt/3tbNZbJb/iNXUJuw== -----END CERTIFICATE-----Generated at Sat May 17 16:53:45 2025 by rpki-client