$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/3qOkdfXs7PW36vI4oWr63ic016A.roa File: 3qOkdfXs7PW36vI4oWr63ic016A.roa (raw, json) Hash identifier: C8MKph6XjwUKEYF81e9Ro3nlX/+CmLdTTbNcO/NJsRk= Subject key identifier: DE:A3:A4:75:F5:EC:EC:F5:B7:EA:F2:38:A1:6A:FA:DE:27:34:D7:A0 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 17CA Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3qOkdfXs7PW36vI4oWr63ic016A.roa Signing time: Wed 12 Feb 2025 01:37:04 +0000 ROA not before: Wed 12 Feb 2025 01:37:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 54994 IP address blocks: 203.74.117.128/27 maxlen: 27 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 08:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6090 (0x17ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:37:04 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DEA3A475F5ECECF5B7EAF238A16AFADE2734D7A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:47:a9:24:85:91:56:47:34:f0:5a:8f:ea:6d: ac:f4:07:eb:c6:ca:7b:23:ef:74:07:73:2f:c4:97: e9:d2:ab:73:5d:26:02:10:41:89:34:e5:90:fc:24: 74:96:6d:42:86:42:45:e3:ad:73:28:e6:93:0d:fc: ff:74:a3:b9:60:45:2e:7d:06:10:30:b4:67:bb:6d: 8f:d6:c0:15:d6:8d:8d:46:2a:7f:e5:eb:f5:d1:9d: 6b:21:ed:3e:f3:d6:2a:bb:c7:17:e3:54:e4:87:8f: b8:a0:53:38:fd:8c:a0:79:80:fd:d9:67:b1:4a:24: fe:28:39:a4:02:41:62:c9:e7:9c:64:16:27:2a:e2: 9d:d5:90:b4:0f:84:21:aa:fd:a6:6f:78:f0:a6:6d: 7d:9b:ae:52:60:e9:7f:f7:5b:ce:99:3b:37:1a:c8: a8:86:59:55:45:75:b9:c4:21:c0:8a:cb:48:80:5a: 65:fe:51:66:29:3a:d6:24:3b:42:2c:71:0e:a9:e4: ed:88:89:fc:8c:83:4a:f2:5b:a1:68:ef:72:3e:e0: 25:0b:9a:b1:18:0c:9f:51:1f:59:da:cc:18:59:1c: a0:54:ed:82:24:42:48:95:f4:eb:c2:b8:18:f8:eb: 7e:03:1a:ab:84:97:cc:85:f9:64:f8:10:52:5e:ea: 4a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A3:A4:75:F5:EC:EC:F5:B7:EA:F2:38:A1:6A:FA:DE:27:34:D7:A0 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/3qOkdfXs7PW36vI4oWr63ic016A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.74.117.128/27 Signature Algorithm: sha256WithRSAEncryption 1e:6c:00:04:f6:a9:36:bb:13:23:86:aa:ff:0f:cc:5e:e5:26: 1c:ea:a9:d6:52:d9:50:66:21:85:a1:73:6d:88:dc:fa:bb:04: b1:47:41:6b:a4:82:27:e4:24:be:79:65:19:55:43:ca:6c:f3: dd:a8:b0:9b:53:06:67:d2:64:3d:ce:95:8a:35:ad:8b:3c:53: c5:e9:5a:c7:7c:6c:55:08:01:bf:c6:67:ae:e0:71:00:df:98: 5b:23:6d:29:fa:1a:b1:b8:a7:6f:ce:c0:e0:d4:02:af:27:7b: 0d:f1:32:e4:6b:3e:b6:74:fa:54:c4:59:b8:63:ce:58:78:45: 5c:70:11:6c:30:27:eb:b6:9f:e7:0c:07:7c:e8:70:94:6f:86: 88:f6:5b:56:2a:98:77:e9:26:e2:06:ad:28:7f:b5:5f:9a:3a: 03:6a:02:89:61:f3:4f:94:cd:97:74:1a:7f:cf:35:7a:a9:17: 0d:2c:b9:15:66:a0:82:d6:ff:23:d6:cb:43:5c:c5:db:b9:1b: 3b:e4:5d:cd:c0:85:25:47:51:f6:99:e7:d7:5a:20:0a:64:27: d1:7f:f5:ca:d5:21:bd:86:a8:d9:2d:3a:e9:f4:68:a2:04:e6: 02:b5:41:3c:16:30:27:7c:46:f7:38:58:85:0d:68:05:f2:2c: 31:03:3e:be -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICF8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM3MDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERFQTNBNDc1RjVFQ0VD RjVCN0VBRjIzOEExNkFGQURFMjczNEQ3QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNR6kkhZFWRzTwWo/qbaz0B+vGynsj73QHcy/El+nSq3NdJgIQ QYk05ZD8JHSWbUKGQkXjrXMo5pMN/P90o7lgRS59BhAwtGe7bY/WwBXWjY1GKn/l 6/XRnWsh7T7z1iq7xxfjVOSHj7igUzj9jKB5gP3ZZ7FKJP4oOaQCQWLJ55xkFicq 4p3VkLQPhCGq/aZvePCmbX2brlJg6X/3W86ZOzcayKiGWVVFdbnEIcCKy0iAWmX+ UWYpOtYkO0IscQ6p5O2IifyMg0ryW6Fo73I+4CULmrEYDJ9RH1nazBhZHKBU7YIk QkiV9OvCuBj4634DGquEl8yF+WT4EFJe6koRAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU3qOkdfXs7PW36vI4oWr63ic016AwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8zcU9rZGZYczdQVzM2dkk0b1dy NjNpYzAxNkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFy0p1 gDANBgkqhkiG9w0BAQsFAAOCAQEAHmwABPapNrsTI4aq/w/MXuUmHOqp1lLZUGYh haFzbYjc+rsEsUdBa6SCJ+QkvnllGVVDymzz3aiwm1MGZ9JkPc6VijWtizxTxela x3xsVQgBv8ZnruBxAN+YWyNtKfoasbinb87A4NQCryd7DfEy5Gs+tnT6VMRZuGPO WHhFXHARbDAn67af5wwHfOhwlG+GiPZbViqYd+km4gatKH+1X5o6A2oCiWHzT5TN l3Qaf881eqkXDSy5FWaggtb/I9bLQ1zF27kbO+RdzcCFJUdR9pnn11ogCmQn0X/1 ytUhvYao2S066fRoogTmArVBPBYwJ3xG9zhYhQ1oBfIsMQM+vg== -----END CERTIFICATE-----Generated at Sat Apr 5 07:24:20 2025 by rpki-client