$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/AsnzKdEYsCxVvgYWW5g_tLry2B4.roa File: AsnzKdEYsCxVvgYWW5g_tLry2B4.roa (raw, json) Hash identifier: wsOCE3uzZH+mmMls6H0kc0eGyCViMwOq9A2HnfvfxCI= Subject key identifier: 02:C9:F3:29:D1:18:B0:2C:55:BE:06:16:5B:98:3F:B4:BA:F2:D8:1E Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1787 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AsnzKdEYsCxVvgYWW5g_tLry2B4.roa Signing time: Wed 12 Feb 2025 01:36:47 +0000 ROA not before: Wed 12 Feb 2025 01:36:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 33717 IP address blocks: 220.128.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6023 (0x1787) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:47 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=02C9F329D118B02C55BE06165B983FB4BAF2D81E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:06:ff:18:2a:e2:9f:1d:56:f7:f5:b9:82:fc: db:83:9b:5c:57:15:8b:12:ea:31:41:a9:48:89:80: e6:a9:e2:2e:cd:1d:9f:82:cd:0a:20:c3:ec:a2:8c: f4:2e:1d:ed:d1:96:27:06:a7:82:fb:78:25:d7:30: 0b:84:7c:a9:74:a2:2c:26:9f:3e:fc:91:8a:ed:56: da:3a:84:5d:f2:eb:7c:0f:1a:7a:a4:29:1f:cc:88: be:82:4f:44:d3:0f:fe:d4:51:02:ed:98:fb:22:cf: 78:cf:80:b6:fe:2e:d7:1e:71:c2:1f:9c:b2:b3:37: 86:92:7e:ba:e9:fa:eb:5e:eb:e0:e6:ba:7e:a1:b2: b2:be:f7:41:29:7c:dd:0c:be:2e:60:e0:80:35:d2: 12:8c:b4:a0:15:c0:01:d5:41:26:91:9f:5f:01:0f: 15:ab:40:ab:0a:f8:df:05:76:d7:4e:13:e8:20:9b: 5a:00:15:f2:77:26:48:d6:a2:33:be:7b:c8:75:77: 03:32:1f:b6:6b:c6:29:5e:1c:76:30:e0:b7:0d:89: 2e:72:01:81:98:2b:a8:89:67:b2:b8:a4:d0:49:e0: e1:42:9f:a4:1d:75:6c:24:37:02:ec:17:6d:5a:bf: 24:5e:64:c1:05:c5:f8:9a:49:ba:b7:3f:bc:7b:8d: 95:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C9:F3:29:D1:18:B0:2C:55:BE:06:16:5B:98:3F:B4:BA:F2:D8:1E X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AsnzKdEYsCxVvgYWW5g_tLry2B4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.55.0/24 Signature Algorithm: sha256WithRSAEncryption 93:4d:7b:85:f6:34:3c:96:58:1a:f2:4f:9c:b7:39:b7:f6:a8: 45:b7:86:7a:c3:55:1f:6d:3f:ec:5a:1d:35:5a:53:92:f3:e5: 45:1c:d6:34:f6:60:f9:bc:e3:84:7d:6e:09:72:81:00:c5:af: 0b:c4:c0:88:d9:21:73:54:1e:06:ac:54:d9:bc:71:89:97:ea: f6:d4:15:27:43:79:94:a4:d3:cd:c6:a5:e9:c2:7f:a5:2f:c0: 3c:46:12:d6:51:28:27:5b:bd:ac:d1:37:17:18:1b:bf:46:91: 09:26:4e:7a:12:4e:fb:bf:79:8e:3d:38:2d:18:5b:fa:6e:28: fb:47:60:82:86:df:c6:a7:34:7d:b3:ee:ce:e5:f5:0f:51:de: 11:a3:c1:3e:20:df:98:b8:d3:ab:2d:b2:91:e5:44:b2:8f:39: c9:f1:cc:13:e0:ef:e9:12:62:ca:7d:14:b1:40:bf:3c:e5:e6: f7:b6:f1:9c:6d:9c:73:2a:85:2e:de:80:27:18:70:dd:c5:eb: 66:6c:05:62:b4:ad:e4:02:f9:5c:18:bb:5d:66:f6:82:47:bb: 02:e1:77:6c:b7:ea:30:d7:4a:83:23:7f:15:c0:38:6e:5b:4f: 11:17:aa:9e:4e:30:6f:d9:c0:55:65:38:8e:7a:9e:d0:36:2f: 4c:0a:73:5b -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICF4cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAyQzlGMzI5RDExOEIw MkM1NUJFMDYxNjVCOTgzRkI0QkFGMkQ4MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmBv8YKuKfHVb39bmC/NuDm1xXFYsS6jFBqUiJgOap4i7NHZ+C zQogw+yijPQuHe3RlicGp4L7eCXXMAuEfKl0oiwmnz78kYrtVto6hF3y63wPGnqk KR/MiL6CT0TTD/7UUQLtmPsiz3jPgLb+LtceccIfnLKzN4aSfrrp+ute6+Dmun6h srK+90EpfN0Mvi5g4IA10hKMtKAVwAHVQSaRn18BDxWrQKsK+N8FdtdOE+ggm1oA FfJ3JkjWojO+e8h1dwMyH7ZrxileHHYw4LcNiS5yAYGYK6iJZ7K4pNBJ4OFCn6Qd dWwkNwLsF21avyReZMEFxfiaSbq3P7x7jZX7AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUAsnzKdEYsCxVvgYWW5g/tLry2B4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9Bc256S2RFWXNDeFZ2Z1lXVzVn X3RMcnkyQjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3IA3 MA0GCSqGSIb3DQEBCwUAA4IBAQCTTXuF9jQ8llga8k+ctzm39qhFt4Z6w1UfbT/s Wh01WlOS8+VFHNY09mD5vOOEfW4JcoEAxa8LxMCI2SFzVB4GrFTZvHGJl+r21BUn Q3mUpNPNxqXpwn+lL8A8RhLWUSgnW72s0TcXGBu/RpEJJk56Ek77v3mOPTgtGFv6 bij7R2CCht/GpzR9s+7O5fUPUd4Ro8E+IN+YuNOrLbKR5USyjznJ8cwT4O/pEmLK fRSxQL885eb3tvGcbZxzKoUu3oAnGHDdxetmbAVitK3kAvlcGLtdZvaCR7sC4Xds t+ow10qDI38VwDhuW08RF6qeTjBv2cBVZTiOep7QNi9MCnNb -----END CERTIFICATE-----Generated at Mon Apr 7 20:49:14 2025 by rpki-client