$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/3mvcQj8minngWWreTzjH4k4cyss.roa File: 3mvcQj8minngWWreTzjH4k4cyss.roa (raw, json) Hash identifier: qOwxEPF3st/BEdWQIwkl8/81EYUE2W3fYq1YwlGTycQ= Subject key identifier: DE:6B:DC:42:3F:26:8A:79:E0:59:6A:DE:4F:38:C7:E2:4E:1C:CA:CB Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1726 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3mvcQj8minngWWreTzjH4k4cyss.roa Signing time: Wed 12 Feb 2025 01:36:26 +0000 ROA not before: Wed 12 Feb 2025 01:36:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 54994 IP address blocks: 202.39.156.0/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 08:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5926 (0x1726) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DE6BDC423F268A79E0596ADE4F38C7E24E1CCACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ae:e4:02:fb:cb:dd:89:10:4d:6d:5e:ae:ad: fe:ec:b7:3d:87:c3:aa:dd:82:74:ad:26:33:7b:bf: 34:4d:67:2c:e7:14:31:b4:48:3c:8f:b7:2c:b6:ed: f8:71:fb:4f:39:d2:eb:ab:d0:a3:f6:87:9d:85:89: 1d:9a:7f:cf:9b:e4:0e:30:0d:24:0f:16:3e:a8:2a: 25:e5:2f:4d:d0:ff:1d:13:9a:ec:39:ea:19:35:5a: db:05:50:fa:22:c8:b0:9e:e6:48:a4:09:34:16:36: ee:58:e5:0b:a4:da:fa:1c:30:2b:60:94:71:7f:df: ae:6d:bf:3c:34:e5:ff:c7:03:ac:cf:71:12:82:6e: 8f:04:0f:a1:61:94:0f:d2:59:e9:9b:19:9d:c0:07: e9:d0:4e:b9:eb:24:f0:39:6f:e2:94:45:09:af:a5: 35:ec:e6:91:4d:81:2c:7a:da:8e:af:75:45:ee:5a: bb:50:c7:44:d2:03:76:94:08:f6:55:3f:cd:00:67: d3:07:e0:3a:22:fb:60:d0:86:00:28:41:8f:8d:c6: 8d:75:ec:c8:77:a8:2c:54:3f:4f:2e:60:85:ba:1a: 6a:94:6a:d1:d7:4b:4e:db:3e:04:7e:c8:03:d2:7b: 8b:b0:be:2e:04:0f:b2:d5:6f:e2:b5:a4:a4:1f:de: 5f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6B:DC:42:3F:26:8A:79:E0:59:6A:DE:4F:38:C7:E2:4E:1C:CA:CB X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3mvcQj8minngWWreTzjH4k4cyss.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.39.156.0/26 Signature Algorithm: sha256WithRSAEncryption 00:e9:c9:94:dd:c1:84:5b:e1:25:a5:d0:c7:e8:73:89:c2:31: 7e:a7:a5:20:25:d8:2c:41:a6:db:d0:07:c0:25:3c:ab:c2:fe: 64:a9:e3:ff:c9:0e:9e:de:d2:0d:47:e4:a9:ff:1d:24:e4:26: 9c:ad:b5:7f:53:fd:85:92:c6:53:62:2b:92:73:6d:31:81:13: 31:9c:a5:e0:89:86:6f:b4:2e:2c:6b:f6:ce:dc:24:d8:10:bf: 43:e9:20:35:18:43:5c:25:7b:dc:41:8d:7f:c4:e2:13:ee:40: 7b:14:3d:c8:97:34:58:53:ad:e5:8e:a5:c1:b7:0e:9f:4f:55: 0c:0b:8d:33:89:2b:08:7f:80:2f:cf:3a:de:0d:4c:dc:0f:cf: de:13:cc:72:07:ce:6d:92:81:2a:bf:1a:e8:f5:6c:8b:ef:20: 9d:3b:a6:99:45:ac:65:3e:a5:ef:13:40:68:2c:00:dd:c6:d4: d0:f3:4d:7e:15:94:64:fa:66:12:1b:e1:a7:bb:85:15:7e:40: 98:6c:4b:37:5c:3c:64:4a:d6:a8:cc:e7:83:6e:6a:49:58:5a: b1:d9:9b:10:5f:c4:2a:ab:09:01:ab:55:8b:64:1f:59:aa:d5: 08:0d:d0:bd:24:bf:11:07:a9:c5:8a:70:f5:df:3e:87:64:9e: 5a:76:c5:4f -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICFyYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERFNkJEQzQyM0YyNjhB NzlFMDU5NkFERTRGMzhDN0UyNEUxQ0NBQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5ruQC+8vdiRBNbV6urf7stz2Hw6rdgnStJjN7vzRNZyznFDG0 SDyPtyy27fhx+0850uur0KP2h52FiR2af8+b5A4wDSQPFj6oKiXlL03Q/x0Tmuw5 6hk1WtsFUPoiyLCe5kikCTQWNu5Y5Quk2vocMCtglHF/365tvzw05f/HA6zPcRKC bo8ED6FhlA/SWembGZ3AB+nQTrnrJPA5b+KURQmvpTXs5pFNgSx62o6vdUXuWrtQ x0TSA3aUCPZVP80AZ9MH4Doi+2DQhgAoQY+Nxo117Mh3qCxUP08uYIW6GmqUatHX S07bPgR+yAPSe4uwvi4ED7LVb+K1pKQf3l81AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU3mvcQj8minngWWreTzjH4k4cysswHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8zbXZjUWo4bWlubmdXV3JlVHpq SDRrNGN5c3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGyiec ADANBgkqhkiG9w0BAQsFAAOCAQEAAOnJlN3BhFvhJaXQx+hzicIxfqelICXYLEGm 29AHwCU8q8L+ZKnj/8kOnt7SDUfkqf8dJOQmnK21f1P9hZLGU2IrknNtMYETMZyl 4ImGb7QuLGv2ztwk2BC/Q+kgNRhDXCV73EGNf8TiE+5AexQ9yJc0WFOt5Y6lwbcO n09VDAuNM4krCH+AL8863g1M3A/P3hPMcgfObZKBKr8a6PVsi+8gnTummUWsZT6l 7xNAaCwA3cbU0PNNfhWUZPpmEhvhp7uFFX5AmGxLN1w8ZErWqMzng25qSVhasdmb EF/EKqsJAatVi2QfWarVCA3QvSS/EQepxYpw9d8+h2SeWnbFTw== -----END CERTIFICATE-----Generated at Sat Apr 5 07:23:03 2025 by rpki-client