$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/6elno89_uGtg1Ngg_bXb534kbDg.roa File: 6elno89_uGtg1Ngg_bXb534kbDg.roa (raw, json) Hash identifier: ECFvKOWSegT8q9JpWlsIx93o6FUZNHXOaB4ypI4SrV4= Subject key identifier: E9:E9:67:A3:CF:7F:B8:6B:60:D4:D8:20:FD:B5:DB:E7:7E:24:6C:38 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 17B6 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/6elno89_uGtg1Ngg_bXb534kbDg.roa Signing time: Wed 12 Feb 2025 01:36:59 +0000 ROA not before: Wed 12 Feb 2025 01:36:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9505 IP address blocks: 175.111.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6070 (0x17b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:59 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E9E967A3CF7FB86B60D4D820FDB5DBE77E246C38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4f:04:cd:ba:d9:1e:9d:9b:93:8e:77:d3:13: 28:1d:7a:7e:c7:cd:8c:78:68:5e:8e:44:2f:11:7f: 76:a7:3f:c0:b0:11:19:d1:3d:e8:62:11:e4:f7:30: 16:7a:92:27:f0:ab:56:28:66:6a:29:a8:4e:23:e1: e1:94:b1:65:5d:62:8f:72:32:97:8a:f9:ba:cc:14: 1f:23:40:9f:72:ce:1b:0d:50:21:21:81:ef:c9:37: 94:1b:32:c2:f9:f6:ff:8e:7a:29:6e:7a:55:8f:77: e8:7b:d3:0f:07:be:b7:c4:61:a3:67:ea:d7:ac:b8: 0b:37:2f:77:52:5d:38:4f:de:ae:bf:87:35:5d:fe: 4e:f8:df:76:32:4a:9f:07:c3:0b:64:f5:20:e4:27: 32:ad:bc:a0:79:96:8f:d7:1a:f8:0c:39:18:ee:bd: 6e:41:0a:02:08:d2:1e:b5:76:27:6a:14:fa:f4:04: 22:3e:1e:90:aa:bb:cd:8c:5d:70:17:e2:c0:f4:11: ba:69:37:7d:ca:f3:78:b0:91:e3:72:8d:4f:fd:de: 7f:bb:6e:c1:21:36:c7:ea:03:30:6e:c6:75:ff:5c: 53:83:4c:f3:76:4c:42:f2:03:61:87:bb:bb:e8:d5: 75:da:01:01:de:57:01:c7:43:ed:97:b9:55:c8:e4: e3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E9:67:A3:CF:7F:B8:6B:60:D4:D8:20:FD:B5:DB:E7:7E:24:6C:38 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/6elno89_uGtg1Ngg_bXb534kbDg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.111.237.0/24 Signature Algorithm: sha256WithRSAEncryption 38:05:bf:73:7c:e5:ee:a4:25:dd:00:62:ac:33:da:ed:35:fb: 92:9e:fa:2e:d4:46:0b:b8:5f:d4:39:4a:e0:8a:50:b8:a7:a9: 3c:91:5a:2d:31:17:90:41:ed:0d:46:bb:2e:4f:53:cd:d9:c6: 3d:e7:03:08:bf:28:99:f2:8a:83:ef:50:71:5b:ec:44:0d:d7: be:a0:dc:45:49:57:89:f8:ef:ea:94:1a:df:25:6d:a6:a5:df: b4:6d:63:f2:46:58:75:7a:52:7c:86:21:63:ee:08:76:20:da: 11:13:a0:90:ac:93:72:48:c5:89:3d:2f:c8:52:a1:8e:e3:6f: b5:d3:0a:44:5c:6c:41:dd:74:b1:bc:36:1e:b5:18:f0:5a:79: 33:b1:03:8f:77:b7:e9:68:c2:cc:b2:f2:0a:08:77:c3:ed:97: ed:ed:3f:39:41:c3:09:e4:53:27:4e:46:78:4f:12:c2:79:f2: a2:34:49:ba:3a:90:fd:57:ee:40:bb:f9:a7:5d:fe:9c:ab:28: 1f:d7:e6:31:d8:31:d8:0c:29:31:f4:73:a3:61:98:22:b7:6b: 3e:0c:0b:21:68:15:ea:a3:09:17:a8:f7:c3:dd:3b:11:54:e8: d6:19:1e:a4:f5:c3:90:8f:fe:92:a6:76:68:4d:5d:0f:8f:9a: 27:c4:61:d3 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICF7YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU5RTk2N0EzQ0Y3RkI4 NkI2MEQ0RDgyMEZEQjVEQkU3N0UyNDZDMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNTwTNutkenZuTjnfTEygden7HzYx4aF6ORC8Rf3anP8CwERnR PehiEeT3MBZ6kifwq1YoZmopqE4j4eGUsWVdYo9yMpeK+brMFB8jQJ9yzhsNUCEh ge/JN5QbMsL59v+OeiluelWPd+h70w8HvrfEYaNn6tesuAs3L3dSXThP3q6/hzVd /k7433YySp8Hwwtk9SDkJzKtvKB5lo/XGvgMORjuvW5BCgII0h61didqFPr0BCI+ HpCqu82MXXAX4sD0EbppN33K83iwkeNyjU/93n+7bsEhNsfqAzBuxnX/XFODTPN2 TELyA2GHu7vo1XXaAQHeVwHHQ+2XuVXI5OMVAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU6elno89/uGtg1Ngg/bXb534kbDgwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC82ZWxubzg5X3VHdGcxTmdnX2JY YjUzNGtiRGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr2/t MA0GCSqGSIb3DQEBCwUAA4IBAQA4Bb9zfOXupCXdAGKsM9rtNfuSnvou1EYLuF/U OUrgilC4p6k8kVotMReQQe0NRrsuT1PN2cY95wMIvyiZ8oqD71BxW+xEDde+oNxF SVeJ+O/qlBrfJW2mpd+0bWPyRlh1elJ8hiFj7gh2INoRE6CQrJNySMWJPS/IUqGO 42+10wpEXGxB3XSxvDYetRjwWnkzsQOPd7fpaMLMsvIKCHfD7Zft7T85QcMJ5FMn TkZ4TxLCefKiNEm6OpD9V+5Au/mnXf6cqygf1+Yx2DHYDCkx9HOjYZgit2s+DAsh aBXqowkXqPfD3TsRVOjWGR6k9cOQj/6SpnZoTV0Pj5onxGHT -----END CERTIFICATE-----Generated at Mon Apr 7 17:47:53 2025 by rpki-client