$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/2kUUHfY7iqqNoB_qESJFgDpibb8.roa File: 2kUUHfY7iqqNoB_qESJFgDpibb8.roa (raw, json) Hash identifier: WDhuuzFPQxeosKNlKZx/CD52wdcfsnJyumv4lEkUC+I= Subject key identifier: DA:45:14:1D:F6:3B:8A:AA:8D:A0:1F:EA:11:22:45:80:3A:62:6D:BF Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1715 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2kUUHfY7iqqNoB_qESJFgDpibb8.roa Signing time: Wed 12 Feb 2025 01:36:23 +0000 ROA not before: Wed 12 Feb 2025 01:36:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 1.160.0.0/12 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5909 (0x1715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:23 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DA45141DF63B8AAA8DA01FEA112245803A626DBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ad:65:ce:0a:1d:fa:9e:53:79:05:09:04:36: fc:92:dc:7e:cd:66:0c:e4:01:9d:23:e0:b5:c1:83: 72:03:bb:2d:be:42:ab:32:f5:a7:28:7b:34:ef:12: c2:c6:6e:8e:73:57:b7:44:52:1a:99:84:8d:87:10: e7:56:ca:f8:fc:42:c5:be:1b:db:f1:a1:9d:58:c0: f3:c1:b5:dc:9f:f5:39:74:cc:d9:e2:da:e8:fe:2d: cb:24:31:9d:9f:21:96:a9:45:ed:63:49:84:73:f7: 25:82:83:63:79:ce:18:b8:55:ee:d6:9f:7c:56:2b: 6d:2f:da:29:1b:2c:55:b5:fe:32:03:f0:be:12:36: c2:2c:72:94:9f:d1:4b:c7:f8:0c:48:04:41:e0:b7: f9:f8:26:6a:60:b9:84:8e:65:11:6a:25:05:d3:45: e1:5d:fe:50:d2:5d:91:9c:94:db:1d:cb:93:43:13: 0c:c6:07:24:99:5f:39:6a:f4:6f:56:5b:78:47:73: ee:2e:3b:5f:93:6a:6e:01:b5:c2:55:c0:5d:9d:81: 4b:8b:e2:ae:9c:d3:b2:5e:43:79:49:95:33:59:81: 1d:ae:27:ad:80:b3:d0:16:1d:fc:e4:fc:f9:78:d5: 1b:df:50:ed:b6:e7:cf:52:67:c9:20:ff:bb:64:4e: 0f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:45:14:1D:F6:3B:8A:AA:8D:A0:1F:EA:11:22:45:80:3A:62:6D:BF X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2kUUHfY7iqqNoB_qESJFgDpibb8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 1.160.0.0/12 Signature Algorithm: sha256WithRSAEncryption ad:51:a2:a9:60:4d:fb:c6:48:68:4d:29:82:f2:c2:fb:2b:68: 93:57:f2:b3:22:eb:2c:f3:6d:fb:d9:62:75:51:fb:26:ad:37: dd:f0:24:f7:92:1d:4a:b1:38:b3:39:4f:2c:d6:a1:4b:db:be: 5f:08:9d:59:ee:aa:42:f6:61:f0:b8:db:ac:92:47:d4:29:75: cd:9c:41:63:32:b7:d1:6b:5b:42:99:92:88:ac:fa:8d:46:a9: 96:39:42:95:c0:f6:64:ea:ed:42:15:0f:b4:6d:bb:45:42:52: 4a:c8:7b:82:8f:1f:7f:8c:d3:d1:ba:fc:c8:72:65:59:65:1e: 46:e8:df:be:c5:21:d1:f9:c6:0f:ca:33:d7:eb:25:c3:01:a9: 66:70:bd:db:fd:34:dc:c7:be:fa:84:2b:6c:36:47:ba:ff:ee: 3c:e5:09:ce:44:16:62:ee:ca:91:e7:5d:32:02:86:48:be:ae: 65:2f:13:f1:70:0c:b1:cf:e2:64:f5:a0:55:f2:16:74:f4:71: bf:a0:70:db:5f:e9:ae:54:11:29:4e:6e:1a:89:f0:7e:6a:0b: 15:07:71:2d:38:74:1f:1a:83:75:f4:89:9b:e7:61:20:a8:5a: 5c:3e:a6:8c:f3:23:65:8d:0b:cd:ee:c7:f1:23:02:f2:fa:dc: 8f:18:d8:a1 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICFxUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERBNDUxNDFERjYzQjhB QUE4REEwMUZFQTExMjI0NTgwM0E2MjZEQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+rWXOCh36nlN5BQkENvyS3H7NZgzkAZ0j4LXBg3IDuy2+Qqsy 9acoezTvEsLGbo5zV7dEUhqZhI2HEOdWyvj8QsW+G9vxoZ1YwPPBtdyf9Tl0zNni 2uj+LcskMZ2fIZapRe1jSYRz9yWCg2N5zhi4Ve7Wn3xWK20v2ikbLFW1/jID8L4S NsIscpSf0UvH+AxIBEHgt/n4JmpguYSOZRFqJQXTReFd/lDSXZGclNsdy5NDEwzG BySZXzlq9G9WW3hHc+4uO1+Tam4BtcJVwF2dgUuL4q6c07JeQ3lJlTNZgR2uJ62A s9AWHfzk/Pl41RvfUO22589SZ8kg/7tkTg9tAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU2kUUHfY7iqqNoB/qESJFgDpibb8wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8ya1VVSGZZN2lxcU5vQl9xRVNK RmdEcGliYjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEAaAw DQYJKoZIhvcNAQELBQADggEBAK1RoqlgTfvGSGhNKYLywvsraJNX8rMi6yzzbfvZ YnVR+yatN93wJPeSHUqxOLM5TyzWoUvbvl8InVnuqkL2YfC426ySR9Qpdc2cQWMy t9FrW0KZkois+o1GqZY5QpXA9mTq7UIVD7Rtu0VCUkrIe4KPH3+M09G6/MhyZVll Hkbo377FIdH5xg/KM9frJcMBqWZwvdv9NNzHvvqEK2w2R7r/7jzlCc5EFmLuypHn XTIChki+rmUvE/FwDLHP4mT1oFXyFnT0cb+gcNtf6a5UESlObhqJ8H5qCxUHcS04 dB8ag3X0iZvnYSCoWlw+pozzI2WNC83ux/EjAvL63I8Y2KE= -----END CERTIFICATE-----Generated at Mon Apr 7 01:55:18 2025 by rpki-client