$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/CtKmbDl1m0949oktq8QHmfCsCwU.roa File: CtKmbDl1m0949oktq8QHmfCsCwU.roa (raw, json) Hash identifier: /5IhJ1nlUXSAbS0SLNYh8yJIgBrT5sUQR0120d5SpxU= Subject key identifier: 0A:D2:A6:6C:39:75:9B:4F:78:F6:89:2D:AB:C4:07:99:F0:AC:0B:05 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 173F Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/CtKmbDl1m0949oktq8QHmfCsCwU.roa Signing time: Wed 12 Feb 2025 01:36:32 +0000 ROA not before: Wed 12 Feb 2025 01:36:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 122.116.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 06:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5951 (0x173f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:32 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0AD2A66C39759B4F78F6892DABC40799F0AC0B05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:be:bf:5d:05:62:31:e2:26:37:7c:cc:2f:f4: da:bd:e0:07:d4:1d:76:cd:03:00:72:04:4f:7a:ae: 4f:21:23:64:31:6a:6b:35:31:6b:f6:9b:08:c7:1b: b9:db:d4:e4:e2:52:4e:11:10:f5:33:9d:bb:be:55: 67:e4:4d:1a:10:56:f2:de:e2:f6:4d:9b:8b:e3:16: 17:9d:ca:c2:bf:b6:70:17:37:60:d1:45:22:34:cb: 1e:9a:b1:b2:3a:5b:f0:d8:0b:18:db:18:e5:d3:13: 0b:2c:74:c8:ce:6b:b7:5a:8a:cd:6f:7f:78:ba:44: fc:ff:3a:3c:e9:1e:97:29:9e:45:3c:1c:a1:54:a5: df:ac:ec:df:c2:40:62:f9:4f:d5:a4:bf:6f:59:59: a1:d3:70:b6:39:a3:dc:df:42:49:7e:8e:48:1c:bc: 90:4e:b9:d8:7e:1c:96:7c:e4:94:75:6f:ae:b1:b9: 9c:37:78:fa:37:d5:8b:ec:43:1c:79:d9:56:7d:09: 84:53:75:54:06:45:94:ff:2a:24:b6:28:a3:cc:4e: b1:7c:6e:0f:72:7f:42:2c:5a:c4:b5:34:ef:a2:8e: b0:21:43:d4:dc:3a:a8:7c:da:87:c2:80:cf:1d:73: 86:35:f3:d2:76:cb:2b:f4:86:ea:d3:39:82:8f:8b: f4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D2:A6:6C:39:75:9B:4F:78:F6:89:2D:AB:C4:07:99:F0:AC:0B:05 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/CtKmbDl1m0949oktq8QHmfCsCwU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.116.0.0/15 Signature Algorithm: sha256WithRSAEncryption 6d:e2:94:80:2d:25:ca:77:34:de:4a:a0:02:01:af:d6:55:17: 3a:7d:bb:0c:ce:4b:8e:f2:d8:66:c7:fe:2a:c8:c5:c9:fb:08: 5e:4f:0a:af:68:f0:a1:56:3b:16:d5:d3:79:64:3e:7e:e5:35: f8:4d:ca:9d:85:e6:2e:90:98:f5:39:07:56:09:aa:6b:0d:32: 03:72:b2:5d:a4:d9:74:fd:82:f1:c5:ad:dd:8d:8f:7c:63:0a: 70:dc:66:25:ac:5f:c6:78:fa:92:d3:26:7f:e2:7c:7a:ab:69: 6c:18:bc:0b:29:b9:e7:2e:1f:73:71:f3:f6:f8:2b:d8:1e:b1: b4:49:ca:aa:6c:ff:e7:96:b9:fa:15:4f:8a:41:82:be:64:fd: fe:2a:12:af:a0:cd:6c:d1:ce:17:08:52:a2:38:47:ac:49:13: 25:70:a2:ef:fb:83:d5:be:f8:8c:6d:38:11:64:11:a8:62:44: 87:a7:98:0a:7e:d1:cf:a7:23:03:28:d4:0e:70:37:e5:8b:ae: 5e:6d:f4:c3:cb:07:1e:82:31:2a:0e:e1:ed:99:52:dc:70:b6: 6a:d3:42:57:c8:49:08:c2:34:0c:02:46:1b:08:d5:6f:e6:12: 11:b6:4d:1f:d6:87:cd:85:b4:8e:14:ba:8d:4b:a6:99:a9:34: ca:24:6b:21 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICFz8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBBRDJBNjZDMzk3NTlC NEY3OEY2ODkyREFCQzQwNzk5RjBBQzBCMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOvr9dBWIx4iY3fMwv9Nq94AfUHXbNAwByBE96rk8hI2Qxams1 MWv2mwjHG7nb1OTiUk4REPUznbu+VWfkTRoQVvLe4vZNm4vjFhedysK/tnAXN2DR RSI0yx6asbI6W/DYCxjbGOXTEwssdMjOa7dais1vf3i6RPz/OjzpHpcpnkU8HKFU pd+s7N/CQGL5T9Wkv29ZWaHTcLY5o9zfQkl+jkgcvJBOudh+HJZ85JR1b66xuZw3 ePo31YvsQxx52VZ9CYRTdVQGRZT/KiS2KKPMTrF8bg9yf0IsWsS1NO+ijrAhQ9Tc Oqh82ofCgM8dc4Y189J2yyv0hurTOYKPi/TLAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUCtKmbDl1m0949oktq8QHmfCsCwUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9DdEttYkRsMW0wOTQ5b2t0cThR SG1mQ3NDd1Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBenQw DQYJKoZIhvcNAQELBQADggEBAG3ilIAtJcp3NN5KoAIBr9ZVFzp9uwzOS47y2GbH /irIxcn7CF5PCq9o8KFWOxbV03lkPn7lNfhNyp2F5i6QmPU5B1YJqmsNMgNysl2k 2XT9gvHFrd2Nj3xjCnDcZiWsX8Z4+pLTJn/ifHqraWwYvAspuecuH3Nx8/b4K9ge sbRJyqps/+eWufoVT4pBgr5k/f4qEq+gzWzRzhcIUqI4R6xJEyVwou/7g9W++Ixt OBFkEahiRIenmAp+0c+nIwMo1A5wN+WLrl5t9MPLBx6CMSoO4e2ZUtxwtmrTQlfI SQjCNAwCRhsI1W/mEhG2TR/Wh82FtI4Uuo1LppmpNMokayE= -----END CERTIFICATE-----Generated at Mon Apr 7 02:05:28 2025 by rpki-client