$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/fnPWtv7fHzRTuYL5sPLBZ1nUY4E.roa File: fnPWtv7fHzRTuYL5sPLBZ1nUY4E.roa (raw, json) Hash identifier: MMUJKlNDAqHrvyZt4Mc3xMJcM0aVxcZFhB/9AFWxbB4= Subject key identifier: 7E:73:D6:B6:FE:DF:1F:34:53:B9:82:F9:B0:F2:C1:67:59:D4:63:81 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 11E5 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/fnPWtv7fHzRTuYL5sPLBZ1nUY4E.roa Signing time: Mon 10 Feb 2025 14:27:51 +0000 ROA not before: Mon 10 Feb 2025 14:27:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9674 IP address blocks: 110.24.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 09:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4581 (0x11e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 10 14:27:51 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7E73D6B6FEDF1F3453B982F9B0F2C16759D46381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:9a:bb:8f:e8:db:12:8e:41:dc:91:4c:6c:09: bb:16:37:b0:db:fb:99:6b:6b:e3:ae:2a:02:ab:1c: cf:88:b7:15:2b:8a:e4:06:1a:fd:3d:43:66:7c:48: 3e:af:ba:30:e1:74:02:ce:52:76:7b:71:68:90:53: 25:61:fb:d3:31:46:81:e4:79:40:77:b9:01:a9:db: 41:d4:0b:b1:9d:8d:e5:04:c9:3f:a9:65:79:4b:9f: c2:53:7f:65:e2:27:c1:25:f3:22:a9:4e:f6:80:f5: de:47:9b:6c:fa:22:29:ff:c7:47:b4:68:de:4a:a7: 3f:b9:fd:9b:f4:94:f6:08:41:7a:bd:15:88:8a:4e: 57:97:c7:93:02:a7:cf:a6:d1:b8:1d:01:bf:d8:8c: 56:89:1b:14:9a:f8:be:6b:34:5e:a9:14:27:f1:af: 21:e7:8b:b4:c6:bc:e6:e9:1f:9b:fb:49:9b:cb:b6: 4a:46:07:36:f0:d5:c4:44:ad:46:a8:7c:c9:99:81: be:3a:44:5c:8b:5c:81:99:43:6d:c5:b4:3f:fc:2b: ee:eb:62:de:05:1b:5d:1b:f2:6b:84:9b:bb:09:58: ec:cb:76:89:8a:9c:60:87:a1:19:32:29:f8:f3:52: 98:29:60:44:84:65:51:74:0f:38:a2:26:03:72:fe: 18:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:73:D6:B6:FE:DF:1F:34:53:B9:82:F9:B0:F2:C1:67:59:D4:63:81 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/fnPWtv7fHzRTuYL5sPLBZ1nUY4E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 110.24.0.0/13 Signature Algorithm: sha256WithRSAEncryption 3f:56:b8:0a:f1:18:ec:17:7c:b2:48:1d:17:da:bf:7c:cc:71: bf:8a:17:d3:7a:71:f6:e5:65:be:db:af:0c:68:97:3e:de:cc: a5:84:bb:8f:bd:d0:39:d1:23:0d:d5:d8:4a:9a:cc:3c:70:60: b0:d2:f7:2c:04:e3:32:8f:2c:c6:8b:49:d5:02:bb:f4:90:78: 0c:1a:cd:33:c7:7d:74:a8:d1:9b:48:93:0d:32:c1:14:e4:5e: 35:fc:f6:34:be:ef:9e:17:f8:b2:37:c8:c4:02:9b:65:0b:cd: e8:a7:21:0e:04:3d:5e:e3:e3:70:e3:1d:5d:f7:0f:01:31:8a: 51:df:12:a2:8d:64:c5:a5:19:10:a1:28:de:98:2b:61:60:b8: e3:eb:8a:b5:57:06:08:b6:96:f8:38:ec:1d:70:87:c2:c4:ea: 51:2e:39:3f:94:ef:57:da:25:9d:3c:20:3a:6a:d5:46:04:cc: 01:5c:4c:4d:69:a0:21:91:0f:99:ac:af:7e:f8:63:fb:18:df: 98:93:cc:c1:1d:ba:54:3c:68:b7:02:4f:93:2f:01:b8:88:8e: 9b:aa:52:d4:58:c8:75:dc:bf:3e:08:13:aa:b0:47:74:d3:24: af:40:5e:49:ca:10:de:be:4e:b9:b3:31:cf:d3:03:8e:88:98: 4c:17:ff:30 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEeUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx NDI3NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdFNzNENkI2RkVERjFG MzQ1M0I5ODJGOUIwRjJDMTY3NTlENDYzODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2mruP6NsSjkHckUxsCbsWN7Db+5lra+OuKgKrHM+ItxUriuQG Gv09Q2Z8SD6vujDhdALOUnZ7cWiQUyVh+9MxRoHkeUB3uQGp20HUC7GdjeUEyT+p ZXlLn8JTf2XiJ8El8yKpTvaA9d5Hm2z6Iin/x0e0aN5Kpz+5/Zv0lPYIQXq9FYiK TleXx5MCp8+m0bgdAb/YjFaJGxSa+L5rNF6pFCfxryHni7TGvObpH5v7SZvLtkpG Bzbw1cRErUaofMmZgb46RFyLXIGZQ23FtD/8K+7rYt4FG10b8muEm7sJWOzLdomK nGCHoRkyKfjzUpgpYESEZVF0DziiJgNy/hizAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUfnPWtv7fHzRTuYL5sPLBZ1nUY4EwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2ZuUFd0djdmSHpSVHVZTDVzUExCWjFu VVk0RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwNuGDANBgkq hkiG9w0BAQsFAAOCAQEAP1a4CvEY7Bd8skgdF9q/fMxxv4oX03px9uVlvtuvDGiX Pt7MpYS7j73QOdEjDdXYSprMPHBgsNL3LATjMo8sxotJ1QK79JB4DBrNM8d9dKjR m0iTDTLBFOReNfz2NL7vnhf4sjfIxAKbZQvN6KchDgQ9XuPjcOMdXfcPATGKUd8S oo1kxaUZEKEo3pgrYWC44+uKtVcGCLaW+DjsHXCHwsTqUS45P5TvV9olnTwgOmrV RgTMAVxMTWmgIZEPmayvfvhj+xjfmJPMwR26VDxotwJPky8BuIiOm6pS1FjIddy/ PggTqrBHdNMkr0BeScoQ3r5OubMxz9MDjoiYTBf/MA== -----END CERTIFICATE-----Generated at Thu May 8 06:12:04 2025 by rpki-client