$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/23bGIa5I_Xcc9WLNxjzn1ZGvVkE.roa File: 23bGIa5I_Xcc9WLNxjzn1ZGvVkE.roa (raw, json) Hash identifier: IayZtBUhiRz76Wc0VqwqtNhxcKruDBjXa0Cx4wVW0Ss= Subject key identifier: DB:76:C6:21:AE:48:FD:77:1C:F5:62:CD:C6:3C:E7:D5:91:AF:56:41 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1784 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/23bGIa5I_Xcc9WLNxjzn1ZGvVkE.roa Signing time: Wed 12 Feb 2025 01:36:47 +0000 ROA not before: Wed 12 Feb 2025 01:36:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 203.74.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 06:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6020 (0x1784) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:47 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DB76C621AE48FD771CF562CDC63CE7D591AF5641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:08:3c:5d:ec:19:f5:66:b7:c4:76:96:f9:c3: a1:e5:a3:9f:80:e3:97:8d:e8:1c:06:89:48:cf:48: d5:66:40:bb:88:03:9a:4c:f1:d8:c8:d8:af:d0:43: 09:5a:b6:c2:c6:63:87:93:43:77:62:20:a5:82:1f: d1:73:c2:e8:d4:4f:6e:cb:7e:e3:d6:18:45:23:cd: 40:87:66:54:98:11:1b:7b:83:72:e8:25:d3:76:6e: bd:8b:01:4c:23:48:09:48:a5:78:c4:1b:d2:d2:93: 77:6f:ed:d9:08:19:0d:58:41:1d:62:7b:ad:fc:bf: c9:4a:13:13:1b:88:42:af:30:13:58:a4:64:09:93: 55:2e:38:3c:d1:eb:9e:2b:5e:40:78:dc:db:af:c9: c4:a2:ea:b8:71:bc:5a:91:f2:8f:cf:fc:f3:24:f1: 55:fb:27:f4:60:73:d6:f5:3f:09:b3:d7:de:a7:af: 9d:8c:0e:59:68:96:7d:ae:b5:72:1a:71:db:56:55: d9:97:ac:45:63:bf:fd:2e:c5:e4:bb:12:d0:52:00: 09:64:dc:50:a6:b8:5a:14:d8:25:4f:c8:47:3c:6f: 46:c3:52:83:79:84:fc:7b:9e:c0:34:aa:c2:8a:e3: cf:46:0f:2a:32:75:bc:1a:25:ac:77:88:e8:c7:dd: cd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:76:C6:21:AE:48:FD:77:1C:F5:62:CD:C6:3C:E7:D5:91:AF:56:41 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/23bGIa5I_Xcc9WLNxjzn1ZGvVkE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.74.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7f:96:f8:79:f0:14:f3:f6:2c:46:22:25:50:79:b2:b0:4c:a0: 59:81:c4:6b:75:c7:5b:ee:cd:14:f1:3b:8c:f3:f9:af:71:a2: a9:0b:a6:89:2b:fc:eb:f7:ce:bb:60:5d:78:32:ba:1a:1c:f9: 42:a7:02:0e:6f:04:8c:73:00:ef:42:c6:1a:96:9e:86:ed:36: 52:88:18:ba:e0:36:64:09:4e:d6:7b:ba:14:2d:a0:40:a6:cd: e7:9e:d9:68:1c:72:c3:a2:60:e0:d8:31:c6:3e:77:79:b2:27: c3:d3:71:eb:59:f7:7c:b1:07:14:87:1a:dd:f9:e8:27:0a:8d: 68:ef:32:20:fe:be:46:19:b0:f1:c3:cb:c5:f6:07:f1:72:88: 1c:d3:34:9f:be:9f:f9:db:54:67:76:e0:4e:8e:b2:ba:0f:ef: 27:c3:4f:8b:be:11:6f:65:39:32:22:58:8d:5a:de:19:dd:aa: 10:4f:01:c0:f7:c4:50:ea:29:32:50:3b:45:92:da:61:7c:67: b9:6c:c8:49:30:a9:81:38:14:35:10:4e:87:b6:bd:2e:77:67: e7:2e:e6:04:8a:c7:5e:3c:54:c9:9b:73:0f:ee:81:ba:6b:f9: fa:d5:e2:b9:e2:95:37:ee:87:9f:b3:24:18:ab:d5:58:fa:b8: ba:94:e0:42 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICF4QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERCNzZDNjIxQUU0OEZE NzcxQ0Y1NjJDREM2M0NFN0Q1OTFBRjU2NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFCDxd7Bn1ZrfEdpb5w6Hlo5+A45eN6BwGiUjPSNVmQLuIA5pM 8djI2K/QQwlatsLGY4eTQ3diIKWCH9FzwujUT27LfuPWGEUjzUCHZlSYERt7g3Lo JdN2br2LAUwjSAlIpXjEG9LSk3dv7dkIGQ1YQR1ie638v8lKExMbiEKvMBNYpGQJ k1UuODzR654rXkB43NuvycSi6rhxvFqR8o/P/PMk8VX7J/Rgc9b1Pwmz196nr52M Dlloln2utXIacdtWVdmXrEVjv/0uxeS7EtBSAAlk3FCmuFoU2CVPyEc8b0bDUoN5 hPx7nsA0qsKK489GDyoydbwaJax3iOjH3c2BAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU23bGIa5I/Xcc9WLNxjzn1ZGvVkEwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8yM2JHSWE1SV9YY2M5V0xOeGp6 bjFaR3ZWa0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAy0ow DQYJKoZIhvcNAQELBQADggEBAH+W+HnwFPP2LEYiJVB5srBMoFmBxGt1x1vuzRTx O4zz+a9xoqkLpokr/Ov3zrtgXXgyuhoc+UKnAg5vBIxzAO9CxhqWnobtNlKIGLrg NmQJTtZ7uhQtoECmzeee2WgccsOiYODYMcY+d3myJ8PTcetZ93yxBxSHGt356CcK jWjvMiD+vkYZsPHDy8X2B/FyiBzTNJ++n/nbVGd24E6OsroP7yfDT4u+EW9lOTIi WI1a3hndqhBPAcD3xFDqKTJQO0WS2mF8Z7lsyEkwqYE4FDUQToe2vS53Z+cu5gSK x148VMmbcw/ugbpr+frV4rnilTfuh5+zJBir1Vj6uLqU4EI= -----END CERTIFICATE-----Generated at Mon Apr 7 02:05:27 2025 by rpki-client