$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/FM2CJHSozwVBi5zZhe7ZY5mhhSY.roa File: FM2CJHSozwVBi5zZhe7ZY5mhhSY.roa (raw, json) Hash identifier: 0zZgvJIhGjx5HPPe3LHiKQQuWzlP+S+p9VX+1gMc1bU= Subject key identifier: 14:CD:82:24:74:A8:CF:05:41:8B:9C:D9:85:EE:D9:63:99:A1:85:26 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 171F Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FM2CJHSozwVBi5zZhe7ZY5mhhSY.roa Signing time: Wed 12 Feb 2025 01:36:25 +0000 ROA not before: Wed 12 Feb 2025 01:36:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9505 IP address blocks: 175.111.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5919 (0x171f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:25 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=14CD822474A8CF05418B9CD985EED96399A18526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:26:2f:5f:63:45:bf:fa:c9:0c:58:c7:44:6b: cd:2e:fb:39:d9:00:f9:62:66:05:40:4c:c8:ce:63: 2a:f7:fe:ac:45:5b:c9:8a:ef:b8:45:2b:7e:00:0a: 77:24:6b:0f:df:2c:22:07:5a:02:47:10:bd:17:ed: eb:6e:04:8b:4e:cf:0b:e1:ad:9c:aa:6a:0c:4c:e9: ea:c4:4a:34:8e:6f:04:1f:62:c9:25:c3:d0:b7:cc: e7:83:0c:77:d7:62:fa:16:93:f1:76:eb:74:a4:c0: 68:47:d3:3f:7d:bd:53:ea:03:f7:d5:1b:84:a5:95: 47:57:18:f0:48:1d:c2:b7:f0:d1:20:84:ee:47:cb: 34:4a:68:6b:ef:97:cc:68:12:9f:b9:43:55:5b:fc: 58:6e:99:8d:2a:eb:51:38:70:13:26:de:11:d4:ca: e1:08:20:8d:1c:0a:39:d3:48:3d:03:af:f5:51:40: 95:ae:65:31:f8:72:5d:75:0f:27:2f:e2:fc:a1:29: 9d:71:50:59:6b:e1:bf:90:58:a1:f3:b2:d1:d9:c8: e7:b2:23:df:53:cc:69:42:a9:9c:d5:08:c5:22:d5: 6b:e3:85:c5:b0:36:9f:92:e1:44:e6:27:b9:31:f1: 0c:2b:b8:20:4e:4d:3c:04:cc:df:de:17:fa:8c:2e: 29:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CD:82:24:74:A8:CF:05:41:8B:9C:D9:85:EE:D9:63:99:A1:85:26 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FM2CJHSozwVBi5zZhe7ZY5mhhSY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.111.238.0/24 Signature Algorithm: sha256WithRSAEncryption 82:0d:11:98:45:68:ed:84:ce:cb:17:24:35:64:31:ec:ca:63: d1:a9:a8:66:ea:34:cb:aa:c4:71:2f:40:64:58:ae:94:80:65: 11:70:46:ca:bc:5a:37:a4:da:9e:ea:48:5d:0a:ac:9a:b5:a9: 3d:23:58:52:bf:dd:4e:cb:a2:f1:4e:9b:42:7a:26:20:9a:58: 17:55:3e:cf:77:d1:d8:90:4f:24:5f:7a:b8:4d:88:c8:8b:09: 58:c1:bb:3e:de:d0:17:f5:64:e2:59:0c:c2:38:dc:d6:b0:17: 26:06:f3:40:03:75:43:47:e5:b5:a2:7a:7f:e4:c6:4e:a1:a1: ed:ee:8e:2f:10:3f:a4:7f:17:ef:80:be:d8:e5:28:81:80:2e: f5:22:42:7a:55:77:f4:c0:de:c7:7c:5f:91:e4:72:96:8f:fb: 4b:15:3f:aa:21:30:5b:ee:c1:a5:0a:77:b9:fc:f9:6a:8b:d4: 0b:7e:db:0c:ff:a6:8d:27:94:29:15:20:a6:1c:19:26:15:9d: 57:2f:de:bb:1a:80:aa:86:67:78:1c:6c:10:96:2e:e4:af:c9: 71:32:30:47:86:50:d8:43:1a:d1:b2:ac:29:73:84:9b:d1:7b: cc:fa:84:69:09:bd:94:a4:32:c2:41:46:7b:af:65:a6:44:8d: a8:af:d4:70 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICFx8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE0Q0Q4MjI0NzRBOENG MDU0MThCOUNEOTg1RUVEOTYzOTlBMTg1MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWJi9fY0W/+skMWMdEa80u+znZAPliZgVATMjOYyr3/qxFW8mK 77hFK34ACnckaw/fLCIHWgJHEL0X7etuBItOzwvhrZyqagxM6erESjSObwQfYskl w9C3zOeDDHfXYvoWk/F263SkwGhH0z99vVPqA/fVG4SllUdXGPBIHcK38NEghO5H yzRKaGvvl8xoEp+5Q1Vb/FhumY0q61E4cBMm3hHUyuEIII0cCjnTSD0Dr/VRQJWu ZTH4cl11Dycv4vyhKZ1xUFlr4b+QWKHzstHZyOeyI99TzGlCqZzVCMUi1WvjhcWw Np+S4UTmJ7kx8QwruCBOTTwEzN/eF/qMLinfAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUFM2CJHSozwVBi5zZhe7ZY5mhhSYwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9GTTJDSkhTb3p3VkJpNXpaaGU3 Wlk1bWhoU1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr2/u MA0GCSqGSIb3DQEBCwUAA4IBAQCCDRGYRWjthM7LFyQ1ZDHsymPRqahm6jTLqsRx L0BkWK6UgGURcEbKvFo3pNqe6khdCqyatak9I1hSv91Oy6LxTptCeiYgmlgXVT7P d9HYkE8kX3q4TYjIiwlYwbs+3tAX9WTiWQzCONzWsBcmBvNAA3VDR+W1onp/5MZO oaHt7o4vED+kfxfvgL7Y5SiBgC71IkJ6VXf0wN7HfF+R5HKWj/tLFT+qITBb7sGl Cne5/Plqi9QLftsM/6aNJ5QpFSCmHBkmFZ1XL967GoCqhmd4HGwQli7kr8lxMjBH hlDYQxrRsqwpc4Sb0XvM+oRpCb2UpDLCQUZ7r2WmRI2or9Rw -----END CERTIFICATE-----Generated at Mon Apr 7 17:50:15 2025 by rpki-client