$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/RSvtvP0TchFIRVlUjyfOcm2s7dw.roa File: RSvtvP0TchFIRVlUjyfOcm2s7dw.roa (raw, json) Hash identifier: oyK5IhB4Lf3F/1GUU3ftADPfhmuUsNZ/TmZ2sJSZxYY= Subject key identifier: 45:2B:ED:BC:FD:13:72:11:48:45:59:54:8F:27:CE:72:6D:AC:ED:DC Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0EE4 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RSvtvP0TchFIRVlUjyfOcm2s7dw.roa Signing time: Mon 10 Feb 2025 14:16:11 +0000 ROA not before: Mon 10 Feb 2025 14:16:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 210.62.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 04:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3812 (0xee4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Feb 10 14:16:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=452BEDBCFD137211484559548F27CE726DACEDDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:cd:0b:af:d7:c9:fe:22:17:6a:ee:7e:dc: c8:39:38:c3:8c:8d:71:42:90:88:a0:6b:69:28:b7: 34:26:62:a5:37:c8:2e:90:12:7d:5f:07:95:51:41: 37:63:d7:ee:ee:0e:60:7d:d6:50:03:f6:9a:22:a8: b9:87:54:3f:f6:35:47:bf:ce:65:4b:c3:09:91:40: af:b3:c3:ba:fc:62:3d:05:f9:19:34:57:ad:74:ab: 6c:a6:59:07:a9:0b:28:c2:75:2a:66:a3:88:de:ec: 89:04:5c:15:8b:71:62:89:72:e8:9a:02:0e:bd:dd: ff:92:72:94:f4:1e:75:76:b0:88:da:ca:10:fb:dd: 7f:ff:83:80:8b:31:36:2d:c7:2f:d1:74:b0:a0:e1: 0a:b2:cd:17:0f:c3:7c:44:77:84:1f:13:5d:96:3b: d5:23:39:fb:67:4c:b5:5c:7c:df:66:cf:ad:de:c7: e4:35:cb:80:e0:ff:42:f5:94:fe:0c:b9:c7:10:8e: 66:ea:73:97:d4:0b:17:44:69:79:0b:0a:1e:0c:20: 5c:1b:ee:13:a8:f1:33:0e:70:b5:a5:a0:2b:bb:26: e4:e5:26:d7:43:1a:fd:44:f9:79:f6:2b:a1:a0:14: cf:45:79:44:e7:f6:a5:b0:b9:6f:61:4e:f0:9f:ca: 2e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2B:ED:BC:FD:13:72:11:48:45:59:54:8F:27:CE:72:6D:AC:ED:DC X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RSvtvP0TchFIRVlUjyfOcm2s7dw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.62.224.0/20 Signature Algorithm: sha256WithRSAEncryption 1a:b7:22:c2:a9:cb:af:71:d1:42:f3:d2:f5:1d:7c:98:a1:8a: ed:87:2f:a4:38:b9:64:31:6d:22:86:09:1a:92:c3:5b:fc:b9: c1:f9:9d:52:2a:5c:14:d7:cc:76:b5:80:b6:b5:00:2e:8e:2f: 2f:69:e8:e4:33:31:4b:23:4c:ea:ad:ca:18:46:48:54:e0:49: cd:ff:36:77:30:83:f5:42:5d:f2:66:d2:c7:31:85:61:88:6b: e4:60:48:65:e2:24:78:a9:71:a8:a0:78:a3:e9:bf:94:90:23: b9:66:5b:c5:0b:8c:c9:ad:fb:21:8b:3f:03:59:b6:3b:e2:f9: 4e:85:00:56:4d:1a:c5:aa:c3:f5:a1:4d:7d:8b:c2:4a:0a:5d: cc:22:23:eb:97:11:d9:48:a9:9b:49:a4:03:2b:73:b3:32:a6: 94:6e:fb:60:6b:8d:c9:38:2b:77:60:95:74:47:15:e3:1b:79: 34:1d:f3:10:14:bb:5c:95:b6:c4:ae:96:ab:0e:e0:bf:2c:e5: b2:09:d5:9c:5e:6d:d3:18:6d:89:42:cf:d1:9b:c4:f3:58:bc: 79:ce:f7:36:2e:c1:9e:17:0d:10:55:0c:2b:90:a0:05:cc:4e: eb:0f:97:dc:48:66:a8:54:e3:0a:99:c2:d4:0c:13:99:1f:2f: 33:ef:79:3e -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDuQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTAx NDE2MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ1MkJFREJDRkQxMzcy MTE0ODQ1NTk1NDhGMjdDRTcyNkRBQ0VEREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEGM0Lr9fJ/iIXau5+3Mg5OMOMjXFCkIiga2kotzQmYqU3yC6Q En1fB5VRQTdj1+7uDmB91lAD9poiqLmHVD/2NUe/zmVLwwmRQK+zw7r8Yj0F+Rk0 V610q2ymWQepCyjCdSpmo4je7IkEXBWLcWKJcuiaAg693f+ScpT0HnV2sIjayhD7 3X//g4CLMTYtxy/RdLCg4QqyzRcPw3xEd4QfE12WO9UjOftnTLVcfN9mz63ex+Q1 y4Dg/0L1lP4MuccQjmbqc5fUCxdEaXkLCh4MIFwb7hOo8TMOcLWloCu7JuTlJtdD Gv1E+Xn2K6GgFM9FeUTn9qWwuW9hTvCfyi7hAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQURSvtvP0TchFIRVlUjyfOcm2s7dwwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9SU3Z0dlAwVGNoRklSVmxVanlm T2NtMnM3ZHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0j7g MA0GCSqGSIb3DQEBCwUAA4IBAQAatyLCqcuvcdFC89L1HXyYoYrthy+kOLlkMW0i hgkaksNb/LnB+Z1SKlwU18x2tYC2tQAuji8vaejkMzFLI0zqrcoYRkhU4EnN/zZ3 MIP1Ql3yZtLHMYVhiGvkYEhl4iR4qXGooHij6b+UkCO5ZlvFC4zJrfshiz8DWbY7 4vlOhQBWTRrFqsP1oU19i8JKCl3MIiPrlxHZSKmbSaQDK3OzMqaUbvtga43JOCt3 YJV0RxXjG3k0HfMQFLtclbbErparDuC/LOWyCdWcXm3TGG2JQs/Rm8TzWLx5zvc2 LsGeFw0QVQwrkKAFzE7rD5fcSGaoVOMKmcLUDBOZHy8z73k+ -----END CERTIFICATE-----Generated at Mon May 19 02:50:58 2025 by rpki-client