$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/6W-Ap_T8fBZcwxyIMpf_1GjUgEA.roa File: 6W-Ap_T8fBZcwxyIMpf_1GjUgEA.roa (raw, json) Hash identifier: i6WhwQ7OJYCWiAfLDEoB459gCuC9owC4XBmpyXvQTyg= Subject key identifier: E9:6F:80:A7:F4:FC:7C:16:5C:C3:1C:88:32:97:FF:D4:68:D4:80:40 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1758 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/6W-Ap_T8fBZcwxyIMpf_1GjUgEA.roa Signing time: Wed 12 Feb 2025 01:36:36 +0000 ROA not before: Wed 12 Feb 2025 01:36:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17714 IP address blocks: 220.128.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5976 (0x1758) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:36 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E96F80A7F4FC7C165CC31C883297FFD468D48040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:68:e0:33:f5:79:32:f3:38:45:83:58:ee:7e: 7b:f3:75:00:21:61:3f:b1:f0:de:59:8c:91:20:e9: 8b:80:2f:90:90:ba:f2:57:29:6a:d3:97:3c:c6:fd: ad:03:b9:e0:68:7f:e2:05:ca:d0:07:1d:83:87:90: 2a:65:9e:1f:08:64:31:f4:ce:89:a1:82:2f:f1:b6: 4d:8a:02:58:2a:70:96:bf:48:fa:4a:fb:3e:49:2c: de:90:69:0a:50:85:69:74:f9:b9:ef:5b:5c:bf:c7: 8f:fb:e0:f1:ed:a5:f1:82:a1:4d:7c:ab:96:9e:ee: 2b:79:cd:6a:9a:b2:49:ce:71:97:32:82:a2:e1:eb: 27:c8:2c:34:5d:26:a0:b2:a5:e6:84:c5:d2:58:08: c8:b5:8e:c7:ab:97:b0:4b:e6:98:34:3b:05:6e:23: 94:91:8e:20:9d:b2:5b:13:2a:ef:d7:0a:58:42:96: e9:16:d0:51:ac:79:71:7f:4d:da:1a:58:c3:8c:50: 12:a4:d9:07:e2:79:4f:23:d3:06:8e:d6:1e:5a:9c: e3:47:f9:0e:bf:ad:59:cf:dc:68:b4:d3:52:e6:ea: 7a:26:9f:c3:dc:92:14:07:22:cf:7e:4f:f6:88:29: c4:fa:e8:2a:0d:08:04:46:7c:f0:f5:20:97:7b:a9: da:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6F:80:A7:F4:FC:7C:16:5C:C3:1C:88:32:97:FF:D4:68:D4:80:40 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/6W-Ap_T8fBZcwxyIMpf_1GjUgEA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.48.0/24 Signature Algorithm: sha256WithRSAEncryption 12:c5:05:e8:f1:37:06:43:06:d6:8a:e9:bd:0c:e1:82:04:e9: ea:81:8e:2a:d0:63:65:63:47:0f:39:ce:8f:b2:70:2d:e6:67: 74:9e:8c:92:17:a2:82:dd:6d:9f:3d:7a:21:17:44:85:04:bf: 6e:ef:78:d5:fd:f9:2e:ec:10:73:87:89:11:de:fa:45:52:25: 95:0c:3c:a1:d2:58:c1:b4:4d:e1:b0:67:63:a2:81:04:c5:0e: 28:ea:c4:d2:31:c4:98:4e:b7:21:aa:b0:c9:ad:ba:7e:3d:01: 5a:b9:e0:6b:c9:fa:47:e8:8c:0e:d7:cf:4f:18:90:65:b8:f9: a0:bc:34:ab:90:87:40:d5:76:e8:50:fa:7a:b7:28:58:49:aa: d3:82:97:95:0f:41:83:50:fc:aa:66:80:96:c9:13:11:df:07: 70:77:e2:de:bb:19:36:c3:d7:c3:e6:91:83:46:16:b4:bd:f6: 72:10:89:68:03:c4:f4:22:4a:33:fc:4e:e2:dd:1f:d8:fd:7a: 4d:7e:21:1e:55:8b:4b:5d:54:32:57:44:3b:41:a3:06:e5:94: e6:f3:11:ff:52:a6:dd:a0:3b:fc:6f:fe:10:43:b5:cd:96:cb: ef:93:82:59:dd:6a:06:58:77:25:f2:31:ea:87:a0:01:65:05: 0e:25:4f:dc -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICF1gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU5NkY4MEE3RjRGQzdD MTY1Q0MzMUM4ODMyOTdGRkQ0NjhENDgwNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdaOAz9Xky8zhFg1jufnvzdQAhYT+x8N5ZjJEg6YuAL5CQuvJX KWrTlzzG/a0DueBof+IFytAHHYOHkCplnh8IZDH0zomhgi/xtk2KAlgqcJa/SPpK +z5JLN6QaQpQhWl0+bnvW1y/x4/74PHtpfGCoU18q5ae7it5zWqasknOcZcygqLh 6yfILDRdJqCypeaExdJYCMi1jserl7BL5pg0OwVuI5SRjiCdslsTKu/XClhClukW 0FGseXF/TdoaWMOMUBKk2QfieU8j0waO1h5anONH+Q6/rVnP3Gi001Lm6nomn8Pc khQHIs9+T/aIKcT66CoNCARGfPD1IJd7qdrtAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU6W+Ap/T8fBZcwxyIMpf/1GjUgEAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC82Vy1BcF9UOGZCWmN3eHlJTXBm XzFHalVnRUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3IAw MA0GCSqGSIb3DQEBCwUAA4IBAQASxQXo8TcGQwbWium9DOGCBOnqgY4q0GNlY0cP Oc6PsnAt5md0noySF6KC3W2fPXohF0SFBL9u73jV/fku7BBzh4kR3vpFUiWVDDyh 0ljBtE3hsGdjooEExQ4o6sTSMcSYTrchqrDJrbp+PQFaueBryfpH6IwO189PGJBl uPmgvDSrkIdA1XboUPp6tyhYSarTgpeVD0GDUPyqZoCWyRMR3wdwd+Leuxk2w9fD 5pGDRha0vfZyEIloA8T0Ikoz/E7i3R/Y/XpNfiEeVYtLXVQyV0Q7QaMG5ZTm8xH/ UqbdoDv8b/4QQ7XNlsvvk4JZ3WoGWHcl8jHqh6ABZQUOJU/c -----END CERTIFICATE-----Generated at Mon Apr 7 17:47:57 2025 by rpki-client