$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/_ILCxvG60CiCOap_Bn3VLGuCdr0.roa File: _ILCxvG60CiCOap_Bn3VLGuCdr0.roa (raw, json) Hash identifier: sR5q13RgLhE3GArsuDUpJWgiwy9ZhQidOM0po+VWD+w= Subject key identifier: FC:82:C2:C6:F1:BA:D0:28:82:39:AA:7F:06:7D:D5:2C:6B:82:76:BD Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0EF8 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/_ILCxvG60CiCOap_Bn3VLGuCdr0.roa Signing time: Mon 10 Feb 2025 14:16:15 +0000 ROA not before: Mon 10 Feb 2025 14:16:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9916 IP address blocks: 120.126.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 15:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3832 (0xef8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Feb 10 14:16:15 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FC82C2C6F1BAD0288239AA7F067DD52C6B8276BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cf:25:b9:2d:a3:e2:61:95:fb:f2:16:fb:c0: 51:c6:02:86:53:8a:54:60:79:10:90:a6:cb:97:90: 57:77:16:38:f8:3e:4d:a1:25:1f:39:7a:61:dc:82: f3:a9:a1:06:45:26:25:17:ad:6c:8c:ac:86:0e:fb: 5c:60:11:f7:08:fd:b8:64:8b:a3:c8:8e:5d:bc:58: 31:f9:08:35:ff:30:82:e3:5b:26:9e:1c:c6:d5:b6: 6c:cf:ae:ab:fb:44:90:6f:22:c3:ae:8a:70:a4:5f: ef:6a:91:04:b1:a0:28:a2:b1:f1:e2:bc:39:ab:92: 66:b9:7a:c4:c9:8d:5f:52:67:48:60:06:75:f9:5d: 28:c7:70:c0:c1:18:fa:b0:9a:88:a7:60:7b:4d:e7: 5d:b6:e6:28:be:ea:e6:bd:7a:67:f4:e8:60:0e:31: a1:b7:74:72:5e:f8:c0:96:f2:52:b6:a2:ac:ae:dd: 8c:ea:46:78:71:51:53:4e:59:f4:dd:58:4f:b3:d7: cf:b6:c4:53:84:3a:c9:23:21:a4:c4:72:7a:09:f0: c6:2f:e9:93:92:03:0e:d0:e6:b4:70:a9:bb:7d:cd: 5d:2e:9d:f4:93:2c:e0:cf:c7:3d:0a:2d:e1:a9:a4: 34:0f:dd:99:b1:aa:b1:65:cd:4f:78:02:02:eb:a3: 26:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:82:C2:C6:F1:BA:D0:28:82:39:AA:7F:06:7D:D5:2C:6B:82:76:BD X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/_ILCxvG60CiCOap_Bn3VLGuCdr0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.126.32.0/19 Signature Algorithm: sha256WithRSAEncryption b3:1c:46:11:80:f0:5e:bc:59:f0:49:85:58:a5:60:6b:df:19: 7a:ea:d7:0d:0c:aa:c2:40:a3:8a:81:76:44:2b:d4:39:b7:50: 96:bf:85:ad:4a:af:19:99:e6:14:e4:91:79:4f:d5:0d:b5:57: 8b:aa:29:2e:3f:9f:97:b6:5c:ed:74:e8:ae:be:d3:b2:b2:98: ac:1f:42:22:94:e8:c7:5f:f6:a2:29:8d:ef:74:26:bf:77:91: 8c:a5:57:ac:59:e6:b3:c1:12:ca:d5:82:75:53:09:a3:a1:40: bd:d3:93:70:2e:46:aa:32:f2:f7:cc:e0:b8:46:19:2d:17:e8: da:45:b6:8c:1e:a0:78:c7:0e:95:d7:74:e8:da:58:87:0a:76: 94:dd:68:2b:1b:27:30:31:c6:f1:58:e4:a6:2a:19:1e:c4:79: 46:4d:6a:e1:17:c2:30:57:89:79:e5:31:7d:ca:6f:09:cb:f6: 0a:71:c2:6c:c1:f7:6c:ba:21:54:09:8e:1c:d6:b3:88:95:94: 81:08:95:32:1d:d1:d5:4c:2a:e3:03:39:90:78:12:92:e9:f0: f5:ea:37:63:ee:11:0f:b0:fd:f1:4f:d7:52:3d:ce:fb:82:cb: e8:2b:33:0e:40:33:f6:ae:0a:c2:b1:dd:3b:12:18:bf:5f:97: 1d:26:4a:d0 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDvgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTAx NDE2MTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZDODJDMkM2RjFCQUQw Mjg4MjM5QUE3RjA2N0RENTJDNkI4Mjc2QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhzyW5LaPiYZX78hb7wFHGAoZTilRgeRCQpsuXkFd3Fjj4Pk2h JR85emHcgvOpoQZFJiUXrWyMrIYO+1xgEfcI/bhki6PIjl28WDH5CDX/MILjWyae HMbVtmzPrqv7RJBvIsOuinCkX+9qkQSxoCiisfHivDmrkma5esTJjV9SZ0hgBnX5 XSjHcMDBGPqwmoinYHtN51225ii+6ua9emf06GAOMaG3dHJe+MCW8lK2oqyu3Yzq RnhxUVNOWfTdWE+z18+2xFOEOskjIaTEcnoJ8MYv6ZOSAw7Q5rRwqbt9zV0unfST LODPxz0KLeGppDQP3ZmxqrFlzU94AgLroya/AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU/ILCxvG60CiCOap/Bn3VLGuCdr0wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9fSUxDeHZHNjBDaUNPYXBfQm4z VkxHdUNkcjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFeH4g MA0GCSqGSIb3DQEBCwUAA4IBAQCzHEYRgPBevFnwSYVYpWBr3xl66tcNDKrCQKOK gXZEK9Q5t1CWv4WtSq8ZmeYU5JF5T9UNtVeLqikuP5+XtlztdOiuvtOyspisH0Ii lOjHX/aiKY3vdCa/d5GMpVesWeazwRLK1YJ1UwmjoUC905NwLkaqMvL3zOC4Rhkt F+jaRbaMHqB4xw6V13To2liHCnaU3WgrGycwMcbxWOSmKhkexHlGTWrhF8IwV4l5 5TF9ym8Jy/YKccJswfdsuiFUCY4c1rOIlZSBCJUyHdHVTCrjAzmQeBKS6fD16jdj 7hEPsP3xT9dSPc77gsvoKzMOQDP2rgrCsd07Ehi/X5cdJkrQ -----END CERTIFICATE-----Generated at Sat May 10 15:39:02 2025 by rpki-client