$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/hKSyd6sgpxiIwwHGHo00nWDuRZQ.roa File: hKSyd6sgpxiIwwHGHo00nWDuRZQ.roa (raw, json) Hash identifier: SXrTw/xvHAZUP6cAgF+KrzAh4vw/ZQP7TRnxlDeJ02Q= Subject key identifier: 84:A4:B2:77:AB:20:A7:18:88:C3:01:C6:1E:8D:34:9D:60:EE:45:94 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0D72 Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/hKSyd6sgpxiIwwHGHo00nWDuRZQ.roa Signing time: Mon 10 Feb 2025 13:50:02 +0000 ROA not before: Mon 10 Feb 2025 13:50:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9244 IP address blocks: 61.56.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3442 (0xd72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Feb 10 13:50:02 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=84A4B277AB20A71888C301C61E8D349D60EE4594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:53:bd:06:69:fd:25:b0:46:8c:cf:37:23:6b: dd:73:bd:96:50:3a:ff:80:52:a4:a7:2e:ef:59:4c: 58:91:da:6f:ea:6e:81:a2:97:dc:7b:5d:77:b6:6c: d2:04:f5:39:b6:e6:fe:e1:44:0d:b0:fe:9c:07:3e: c1:c5:58:2f:5c:0d:57:b0:59:4a:5d:d4:32:4a:86: d2:b6:e6:6e:bd:4d:dd:b6:98:19:ef:6b:9e:41:29: 0d:11:5a:aa:92:dc:9d:9c:8f:74:22:d0:33:6f:cf: 4c:6f:88:6b:37:53:d3:14:52:bf:5d:74:c0:b3:d6: fa:b9:08:a7:e9:dc:46:84:67:6f:1d:02:d3:fd:f7: 0a:30:c9:38:00:17:6e:a8:f3:1c:31:bc:b4:d2:4d: 6a:be:de:e0:c0:41:ec:70:24:fd:c4:da:dc:57:5c: c7:52:3f:b5:ca:56:ad:3f:c2:9a:56:dd:d2:b5:08: 4a:36:96:db:5d:4a:09:6d:34:5b:5e:20:24:07:ae: 55:8a:bc:45:95:60:82:77:92:9e:6a:c5:72:15:8a: 14:7b:e7:61:e7:82:f5:3a:c3:f2:c0:50:73:27:61: 93:a4:7f:f5:b1:7b:9e:15:2a:af:4b:d4:c7:73:f7: ee:34:9e:df:cb:23:7d:eb:6a:f3:52:c0:f0:37:dc: 5a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A4:B2:77:AB:20:A7:18:88:C3:01:C6:1E:8D:34:9D:60:EE:45:94 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/hKSyd6sgpxiIwwHGHo00nWDuRZQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.84.0/24 Signature Algorithm: sha256WithRSAEncryption 88:48:ff:b4:9d:5c:e5:e9:2e:b3:ff:1d:a8:3b:af:47:59:23: 4f:6b:86:17:59:e6:2a:d5:b2:e3:5b:39:1d:70:0a:00:04:41: 8b:48:30:03:87:c2:e3:67:d7:87:97:cd:d8:f5:a3:02:cd:f3: 0f:93:f9:83:d4:1c:3d:7a:a1:7e:f5:d1:21:2d:ab:2a:3b:fe: ae:6b:f0:f3:da:f9:02:cb:67:9b:1e:e1:ab:f7:40:10:08:b0: 1c:a6:43:95:8b:b7:41:40:77:a1:45:87:a7:61:42:ee:9a:98: 2f:19:25:cd:b3:e2:96:98:ef:3b:1c:6d:14:52:cf:04:9c:a6: 08:aa:9f:4b:3a:99:e1:c4:ec:38:b5:0a:cc:dc:c5:ab:5a:b9: e8:49:50:a3:8f:ec:cd:cc:8d:7f:3d:e5:0c:a3:e0:f4:41:a8: d0:bf:ef:37:2e:28:20:a7:c9:a2:86:7f:81:2a:05:64:23:f6: 4c:c3:d6:85:ef:d8:48:e8:3c:8e:9f:1c:de:d0:66:f1:ad:9c: 5c:72:0d:e9:83:91:a6:48:ed:50:41:ab:12:c8:96:e9:e2:75: f4:b8:27:a5:e8:9d:66:0e:d7:70:ad:55:c2:4b:8e:fd:29:37: 6c:2f:65:e2:cc:8b:a0:46:53:68:ca:44:ea:56:c4:1f:23:17: 63:2b:54:76 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDXIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNTAyMTAx MzUwMDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg0QTRCMjc3QUIyMEE3 MTg4OEMzMDFDNjFFOEQzNDlENjBFRTQ1OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpU70Gaf0lsEaMzzcja91zvZZQOv+AUqSnLu9ZTFiR2m/qboGi l9x7XXe2bNIE9Tm25v7hRA2w/pwHPsHFWC9cDVewWUpd1DJKhtK25m69Td22mBnv a55BKQ0RWqqS3J2cj3Qi0DNvz0xviGs3U9MUUr9ddMCz1vq5CKfp3EaEZ28dAtP9 9wowyTgAF26o8xwxvLTSTWq+3uDAQexwJP3E2txXXMdSP7XKVq0/wppW3dK1CEo2 lttdSgltNFteICQHrlWKvEWVYIJ3kp5qxXIVihR752HngvU6w/LAUHMnYZOkf/Wx e54VKq9L1Mdz9+40nt/LI33ravNSwPA33FqlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUhKSyd6sgpxiIwwHGHo00nWDuRZQwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL2hLU3lkNnNncHhpSXd3SEdI bzAwbldEdVJaUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9 OFQwDQYJKoZIhvcNAQELBQADggEBAIhI/7SdXOXpLrP/Hag7r0dZI09rhhdZ5irV suNbOR1wCgAEQYtIMAOHwuNn14eXzdj1owLN8w+T+YPUHD16oX710SEtqyo7/q5r 8PPa+QLLZ5se4av3QBAIsBymQ5WLt0FAd6FFh6dhQu6amC8ZJc2z4paY7zscbRRS zwScpgiqn0s6meHE7Di1CszcxatauehJUKOP7M3MjX895Qyj4PRBqNC/7zcuKCCn yaKGf4EqBWQj9kzD1oXv2EjoPI6fHN7QZvGtnFxyDemDkaZI7VBBqxLIlunidfS4 J6XonWYO13CtVcJLjv0pN2wvZeLMi6BGU2jKROpWxB8jF2MrVHY= -----END CERTIFICATE-----Generated at Fri Apr 18 19:41:35 2025 by rpki-client