$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/fVCNW1U6pessIDdFymfehliXGmg.roa File: fVCNW1U6pessIDdFymfehliXGmg.roa (raw, json) Hash identifier: lRXYZwMTSyjnx+t/etbiH5xvOu2+1FfwLBLDuOwjVrA= Subject key identifier: 7D:50:8D:5B:55:3A:A5:EB:2C:20:37:45:CA:67:DE:86:58:97:1A:68 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0D7B Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/fVCNW1U6pessIDdFymfehliXGmg.roa Signing time: Mon 10 Feb 2025 13:50:03 +0000 ROA not before: Mon 10 Feb 2025 13:50:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9244 IP address blocks: 210.67.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 06:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3451 (0xd7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Feb 10 13:50:03 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7D508D5B553AA5EB2C203745CA67DE8658971A68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:f8:a9:cb:5d:3a:ef:c8:21:5e:53:61:dc: 93:fc:a5:56:09:a9:6e:45:71:98:50:b4:16:fe:d4: 5a:d0:6d:fe:93:7c:f9:c3:c6:a6:a1:62:06:1f:cd: 7f:d3:cf:fa:21:e3:43:9d:16:9b:02:8e:af:c9:a2: 15:3d:56:05:42:d9:19:c3:ab:cb:d0:68:f5:cb:72: 4a:6f:f3:fe:05:99:52:72:02:7b:5b:9e:7c:5d:81: 3f:e3:46:53:42:e4:99:da:62:2d:b4:15:f4:06:2c: 02:d7:ec:57:ac:9f:1a:3f:61:bc:4e:b4:ef:ac:3f: ce:f8:68:3c:14:57:0d:55:d1:e1:9e:b4:60:eb:62: a2:4d:9c:67:79:fe:a8:65:ff:62:f6:4a:2d:09:44: b9:96:59:40:cd:77:0b:59:fe:8e:51:b5:43:ab:4a: 82:f3:bb:48:cc:39:69:20:31:c4:90:d2:33:7c:e5: 4d:b7:cb:01:d9:a3:09:7d:bf:e3:26:a9:52:02:77: 9f:7b:57:d4:49:25:cd:22:c9:28:9e:b1:c7:dc:49: db:83:86:0b:8b:d6:8d:e7:54:18:39:21:fb:56:7a: 49:fb:28:80:d7:29:dc:1c:fd:8d:12:9a:af:d7:ed: b3:23:2e:3a:01:bc:98:71:ab:b0:d5:d1:6e:d9:41: 8f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:50:8D:5B:55:3A:A5:EB:2C:20:37:45:CA:67:DE:86:58:97:1A:68 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/fVCNW1U6pessIDdFymfehliXGmg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.67.96.0/20 Signature Algorithm: sha256WithRSAEncryption b8:36:75:82:71:27:81:29:4f:e4:d5:15:a1:39:41:d4:96:d3: f5:84:b7:09:ae:6f:82:b1:38:c4:89:2f:7d:0e:1b:7f:61:4d: 55:ca:ce:09:4d:d5:91:bd:d6:43:39:d3:a0:96:bc:7d:a5:c5: f5:a9:9b:dd:1c:7e:04:fe:cd:9e:d7:c3:2e:2e:8f:47:36:56: 51:28:c2:fd:c5:0c:4d:b0:70:d3:f3:98:01:4d:8a:71:ac:2a: 6f:40:15:89:46:cc:57:b8:6c:07:d4:16:96:1f:8d:f3:6a:34: 1b:f8:16:42:17:c3:ae:31:ec:1e:59:68:50:66:16:36:c8:3f: d8:3e:7e:92:e6:08:63:1d:95:33:8e:74:ff:3f:7e:a0:cc:01: b7:55:2f:25:66:c5:31:b1:cd:0d:a2:c0:60:81:fb:12:cc:ea: e1:b7:2f:fb:43:96:c2:ba:a3:01:c3:37:7b:ee:33:65:53:4e: 56:ce:10:1e:b8:fb:46:5e:c1:2e:ad:8a:66:99:9f:79:57:5d: 6b:38:07:f4:a6:a4:71:00:cd:12:ab:7e:3f:1a:ad:64:ac:d0: b9:37:b6:57:38:f5:94:e7:d1:56:5f:10:15:02:45:4c:cb:64: db:04:c6:56:cc:c0:ab:ee:1c:f1:1f:76:88:15:84:b5:91:36: 77:ed:45:17 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDXswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNTAyMTAx MzUwMDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdENTA4RDVCNTUzQUE1 RUIyQzIwMzc0NUNBNjdERTg2NTg5NzFBNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxQfipy10678ghXlNh3JP8pVYJqW5FcZhQtBb+1FrQbf6TfPnD xqahYgYfzX/Tz/oh40OdFpsCjq/JohU9VgVC2RnDq8vQaPXLckpv8/4FmVJyAntb nnxdgT/jRlNC5JnaYi20FfQGLALX7Fesnxo/YbxOtO+sP874aDwUVw1V0eGetGDr YqJNnGd5/qhl/2L2Si0JRLmWWUDNdwtZ/o5RtUOrSoLzu0jMOWkgMcSQ0jN85U23 ywHZowl9v+MmqVICd597V9RJJc0iySiescfcSduDhguL1o3nVBg5IftWekn7KIDX Kdwc/Y0Smq/X7bMjLjoBvJhxq7DV0W7ZQY9nAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUfVCNW1U6pessIDdFymfehliXGmgwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL2ZWQ05XMVU2cGVzc0lEZEZ5 bWZlaGxpWEdtZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATS Q2AwDQYJKoZIhvcNAQELBQADggEBALg2dYJxJ4EpT+TVFaE5QdSW0/WEtwmub4Kx OMSJL30OG39hTVXKzglN1ZG91kM506CWvH2lxfWpm90cfgT+zZ7Xwy4uj0c2VlEo wv3FDE2wcNPzmAFNinGsKm9AFYlGzFe4bAfUFpYfjfNqNBv4FkIXw64x7B5ZaFBm FjbIP9g+fpLmCGMdlTOOdP8/fqDMAbdVLyVmxTGxzQ2iwGCB+xLM6uG3L/tDlsK6 owHDN3vuM2VTTlbOEB64+0ZewS6timaZn3lXXWs4B/SmpHEAzRKrfj8arWSs0Lk3 tlc49ZTn0VZfEBUCRUzLZNsExlbMwKvuHPEfdogVhLWRNnftRRc= -----END CERTIFICATE-----Generated at Sun Apr 27 05:57:38 2025 by rpki-client