$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/17aQQXTopXC3Q6M6x-2d4mnsd-0.roa File: 17aQQXTopXC3Q6M6x-2d4mnsd-0.roa (raw, json) Hash identifier: Pmp5fg1ySX/NFusyWNdZB8EDX59omDOSZ+iianm5V/Q= Subject key identifier: D7:B6:90:41:74:E8:A5:70:B7:43:A3:3A:C7:ED:9D:E2:69:EC:77:ED Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C Certificate serial: 06FA Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/17aQQXTopXC3Q6M6x-2d4mnsd-0.roa Signing time: Mon 10 Feb 2025 14:22:49 +0000 ROA not before: Mon 10 Feb 2025 14:22:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9678 IP address blocks: 45.123.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 12:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1786 (0x6fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C Validity Not Before: Feb 10 14:22:49 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D7B6904174E8A570B743A33AC7ED9DE269EC77ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:58:c5:90:5a:e3:0e:6a:37:e8:dd:05:85: 65:40:3d:d6:9f:68:d3:56:b3:64:cf:d1:04:fa:0b: 26:ac:3b:38:2a:cb:62:65:da:7e:4c:67:21:c8:72: 06:d0:1c:5d:4f:ac:21:1d:b5:fa:a5:26:fa:31:e5: a6:6e:e2:b0:ff:87:3c:03:c3:be:68:86:1c:d1:ec: 8c:d7:30:1c:29:54:b3:d2:06:01:18:d3:ea:9a:1a: 2e:42:72:56:38:07:e5:2d:4b:4f:75:e8:84:fd:b4: b6:21:2d:35:56:f2:ad:98:dc:ad:f9:30:83:49:b4: 79:5d:2a:4a:12:5e:c1:5b:e3:d9:b1:45:34:06:58: 74:20:35:b0:2c:90:38:5e:57:75:a0:57:f8:80:b3: 2e:d7:90:c7:d9:9d:02:04:50:8d:9f:c1:01:84:07: 9a:a6:23:3a:ad:ea:f4:23:d9:80:ac:80:c7:b8:d8: 5a:8b:cf:d3:08:f5:8f:8a:79:a5:ed:b4:59:74:b0: 8a:60:f4:85:2d:2f:77:64:ed:45:d9:5b:52:ff:a3: ec:41:3c:bd:d4:c1:99:6f:74:8b:32:ed:2d:64:9e: cf:9b:80:f4:b4:bd:92:9a:5a:53:15:9e:b9:1d:98: c2:dd:c5:1c:06:3a:0c:0d:6b:a3:a9:af:f4:46:5b: 82:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B6:90:41:74:E8:A5:70:B7:43:A3:3A:C7:ED:9D:E2:69:EC:77:ED X509v3 Authority Key Identifier: keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/17aQQXTopXC3Q6M6x-2d4mnsd-0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.123.117.0/24 Signature Algorithm: sha256WithRSAEncryption 66:5e:fd:93:f3:96:85:c3:90:ca:e8:59:11:1f:f2:93:82:c2: dc:93:9d:75:eb:a6:5d:5c:8b:17:bd:72:9d:09:77:ef:2c:e2: f8:44:a4:ed:47:a4:e9:71:e0:5b:aa:2f:fe:6d:c4:d9:f3:4a: 1a:1e:fe:cb:08:d8:b2:80:fe:41:2e:2e:6e:14:51:27:f7:62: d5:9f:73:28:42:d3:ef:91:4a:aa:5c:4b:15:8e:1a:ac:cc:b6: 4b:21:c4:61:af:87:a3:78:21:96:9f:5b:dc:72:99:e3:d3:5c: 34:ad:b9:af:fe:0f:db:a0:44:a3:b1:25:3b:7d:72:83:fe:b8: fa:3b:47:51:fc:ae:82:fc:52:2d:1f:e0:e5:ba:40:93:2b:60: 09:f1:f6:fd:ef:b1:c6:d9:dd:a5:0a:27:4c:95:20:1b:17:5b: 05:3d:99:7b:c0:bb:87:3f:c0:4c:20:f8:8a:a9:5a:44:ec:f3: 34:05:3c:bc:d5:ca:93:77:ae:55:c8:6d:57:e4:5e:36:33:f2: 67:cb:cb:e6:60:11:07:4b:7e:b4:cb:04:12:4b:c9:42:b9:c5: c8:81:cb:bf:97:c3:4a:a9:af:e5:82:e1:d5:7b:49:b0:98:4a: 56:b2:f0:72:86:f9:d4:12:b6:bf:71:13:d2:8b:79:4a:36:97: 38:c6:2a:af -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBvowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJF RDI4RkZDQzA0MEUzNjAzMkM0MjYxNTQ5NTU2MkJDQzZFRjQ1QzAeFw0yNTAyMTAx NDIyNDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ3QjY5MDQxNzRFOEE1 NzBCNzQzQTMzQUM3RUQ5REUyNjlFQzc3RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCv01jFkFrjDmo36N0FhWVAPdafaNNWs2TP0QT6CyasOzgqy2Jl 2n5MZyHIcgbQHF1PrCEdtfqlJvox5aZu4rD/hzwDw75ohhzR7IzXMBwpVLPSBgEY 0+qaGi5CclY4B+UtS0916IT9tLYhLTVW8q2Y3K35MINJtHldKkoSXsFb49mxRTQG WHQgNbAskDheV3WgV/iAsy7XkMfZnQIEUI2fwQGEB5qmIzqt6vQj2YCsgMe42FqL z9MI9Y+KeaXttFl0sIpg9IUtL3dk7UXZW1L/o+xBPL3UwZlvdIsy7S1kns+bgPS0 vZKaWlMVnrkdmMLdxRwGOgwNa6Opr/RGW4KPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU17aQQXTopXC3Q6M6x+2d4mnsd+0wHwYDVR0jBBgwFoAUq+0o/8wEDjYDLEJh VJVWK8xu9FwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElO L3EtMG9fOHdFRGpZRExFSmhWSlZXSzh4dTlGdy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvcS0wb184d0VEallETEVKaFZKVldLOHh1OUZ3LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElOLzE3YVFRWFRvcFhDM1E2TTZ4 LTJkNG1uc2QtMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt e3UwDQYJKoZIhvcNAQELBQADggEBAGZe/ZPzloXDkMroWREf8pOCwtyTnXXrpl1c ixe9cp0Jd+8s4vhEpO1HpOlx4FuqL/5txNnzShoe/ssI2LKA/kEuLm4UUSf3YtWf cyhC0++RSqpcSxWOGqzMtkshxGGvh6N4IZafW9xymePTXDStua/+D9ugRKOxJTt9 coP+uPo7R1H8roL8Ui0f4OW6QJMrYAnx9v3vscbZ3aUKJ0yVIBsXWwU9mXvAu4c/ wEwg+IqpWkTs8zQFPLzVypN3rlXIbVfkXjYz8mfLy+ZgEQdLfrTLBBJLyUK5xciB y7+Xw0qpr+WC4dV7SbCYSlay8HKG+dQStr9xE9KLeUo2lzjGKq8= -----END CERTIFICATE-----Generated at Sun Apr 6 11:29:27 2025 by rpki-client