$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/A7cedtB0yzx1y_alDEiyxwB2y2Q.roa File: A7cedtB0yzx1y_alDEiyxwB2y2Q.roa (raw, json) Hash identifier: grR9En5+YYB0TV44pdFUBZE3do2ty7RVt+CE8nNX1Mo= Subject key identifier: 03:B7:1E:76:D0:74:CB:3C:75:CB:F6:A5:0C:48:B2:C7:00:76:CB:64 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 17C7 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/A7cedtB0yzx1y_alDEiyxwB2y2Q.roa Signing time: Wed 12 Feb 2025 01:37:03 +0000 ROA not before: Wed 12 Feb 2025 01:37:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 220.132.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 06:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6087 (0x17c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:37:03 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=03B71E76D074CB3C75CBF6A50C48B2C70076CB64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:90:54:c4:01:65:37:f6:88:c2:aa:bf:8a:ee: c8:84:c3:34:cf:d7:bd:e5:47:0a:8d:18:f3:f6:a7: 75:d4:93:16:a5:c4:ff:b6:11:89:a6:33:d9:4c:64: 6c:9a:80:be:29:f3:d6:4b:1c:51:a7:ff:35:63:9c: 4d:56:37:54:a2:d8:a6:4a:8a:9e:68:31:66:48:bb: 11:e0:e9:c4:8d:26:03:9a:cd:7c:d4:56:9a:6a:05: 88:76:c3:b3:56:aa:2c:c9:72:25:70:40:b6:e6:f7: 73:64:8c:19:d7:e0:e5:32:02:7e:a5:25:60:5f:51: 82:8a:12:c5:ed:65:73:50:ce:d7:ca:b6:71:d5:0a: 87:4c:20:84:58:20:ed:02:b5:55:2f:75:75:1f:74: 29:ac:6a:a8:12:91:68:f4:a6:29:7d:d5:ac:ec:ad: 32:c2:00:72:54:0d:94:ff:b0:7d:ce:3a:58:28:ef: 61:f7:43:b8:af:3d:e8:05:c5:1b:52:24:8d:e4:8e: b6:9b:9c:22:46:a6:e0:d7:08:21:3f:b5:7e:03:af: db:33:22:c8:e8:61:49:b7:49:e3:71:26:47:51:71: 4e:a5:86:07:e9:c4:16:a4:c2:95:82:86:b5:9c:24: ed:af:c4:32:9d:3e:23:ab:49:1b:43:41:13:cd:e5: cb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B7:1E:76:D0:74:CB:3C:75:CB:F6:A5:0C:48:B2:C7:00:76:CB:64 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/A7cedtB0yzx1y_alDEiyxwB2y2Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.132.0.0/14 Signature Algorithm: sha256WithRSAEncryption 23:1c:51:ce:29:35:7a:3b:85:70:7d:4e:c3:65:b4:07:94:2c: 3a:ba:02:60:c9:11:f0:5b:3e:af:8a:07:60:39:84:5b:55:f7: 46:94:5f:c1:c1:53:e9:1e:65:81:9e:0a:ed:39:3f:e2:1a:9a: 8c:3d:5a:44:f1:4e:e7:1f:71:e4:9e:58:bc:99:2f:ba:8b:f6: 15:82:77:55:77:33:4a:23:87:c1:67:d5:64:78:31:bc:93:bc: 97:39:88:ff:68:a3:7c:2e:5d:0f:a3:cd:1e:8f:24:89:d0:e1: b0:b2:8e:57:c2:6b:64:cc:ac:27:20:15:49:56:50:8d:b7:12: 67:21:23:28:22:35:25:0c:26:fb:03:5f:2a:60:b2:8b:79:68: 2f:72:a8:93:42:da:80:e7:ea:fb:d8:a0:57:09:f2:21:96:e6: 3a:05:79:b8:f1:50:98:c2:18:61:7c:84:9f:0c:d1:1d:23:f7: f2:e6:39:ab:f0:a2:2e:4d:ea:bd:9e:1e:b9:77:2b:3f:c0:cd: 5d:3e:81:d9:3b:43:12:bc:2d:0c:50:81:e6:e8:88:24:ca:96: 0a:0d:f9:8d:30:a0:36:13:01:24:f8:22:f5:50:b2:5f:4c:5a: 8e:61:54:7b:1e:35:a5:5d:a6:01:10:b1:89:8d:ca:8f:b7:08: 6e:38:de:56 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICF8cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM3MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAzQjcxRTc2RDA3NENC M0M3NUNCRjZBNTBDNDhCMkM3MDA3NkNCNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxkFTEAWU39ojCqr+K7siEwzTP173lRwqNGPP2p3XUkxalxP+2 EYmmM9lMZGyagL4p89ZLHFGn/zVjnE1WN1Si2KZKip5oMWZIuxHg6cSNJgOazXzU VppqBYh2w7NWqizJciVwQLbm93NkjBnX4OUyAn6lJWBfUYKKEsXtZXNQztfKtnHV CodMIIRYIO0CtVUvdXUfdCmsaqgSkWj0pil91azsrTLCAHJUDZT/sH3OOlgo72H3 Q7ivPegFxRtSJI3kjrabnCJGpuDXCCE/tX4Dr9szIsjoYUm3SeNxJkdRcU6lhgfp xBakwpWChrWcJO2vxDKdPiOrSRtDQRPN5cuTAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUA7cedtB0yzx1y/alDEiyxwB2y2QwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9BN2NlZHRCMHl6eDF5X2FsREVp eXh3QjJ5MlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMC3IQw DQYJKoZIhvcNAQELBQADggEBACMcUc4pNXo7hXB9TsNltAeULDq6AmDJEfBbPq+K B2A5hFtV90aUX8HBU+keZYGeCu05P+Iamow9WkTxTucfceSeWLyZL7qL9hWCd1V3 M0ojh8Fn1WR4MbyTvJc5iP9oo3wuXQ+jzR6PJInQ4bCyjlfCa2TMrCcgFUlWUI23 EmchIygiNSUMJvsDXypgsot5aC9yqJNC2oDn6vvYoFcJ8iGW5joFebjxUJjCGGF8 hJ8M0R0j9/LmOavwoi5N6r2eHrl3Kz/AzV0+gdk7QxK8LQxQgeboiCTKlgoN+Y0w oDYTAST4IvVQsl9MWo5hVHseNaVdpgEQsYmNyo+3CG443lY= -----END CERTIFICATE-----Generated at Mon Apr 7 02:07:57 2025 by rpki-client