$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/GlBXXHTR5jS6_1ZRN_6ge34fmEE.roa File: GlBXXHTR5jS6_1ZRN_6ge34fmEE.roa (raw, json) Hash identifier: FKnZedUTYGtMah1zqW0cw7st1tG4s+hnto0gyd+GR+k= Subject key identifier: 1A:50:57:5C:74:D1:E6:34:BA:FF:56:51:37:FE:A0:7B:7E:1F:98:41 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1789 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GlBXXHTR5jS6_1ZRN_6ge34fmEE.roa Signing time: Wed 12 Feb 2025 01:36:48 +0000 ROA not before: Wed 12 Feb 2025 01:36:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 114.24.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 06:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6025 (0x1789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:48 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1A50575C74D1E634BAFF565137FEA07B7E1F9841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:29:95:80:af:f9:cc:9a:f2:4d:71:93:30:c0: ea:5d:6c:ac:c9:fb:5d:0d:d3:1c:ee:bd:57:27:19: ad:f6:cc:c0:75:6c:f5:a8:e4:f1:09:62:7c:bd:2b: 52:31:8c:25:ad:03:b7:e9:70:42:d7:cd:89:6f:9e: 65:d9:a3:a5:3f:de:10:0f:59:c8:d7:ab:4d:e6:9c: 5f:dd:98:26:4c:c1:01:b8:f3:39:5d:92:31:b9:a5: e0:99:44:30:7d:47:ce:7a:ff:c6:a8:bf:66:4c:54: be:5b:d5:97:ae:86:fe:1a:6f:2d:f2:e0:3a:54:50: 8d:74:62:b1:18:c8:d5:99:96:cc:b7:ef:be:3b:50: 56:d3:e3:5b:d2:15:4e:e2:70:b5:ca:71:e9:1d:98: 13:cd:13:5d:a1:8c:e9:43:11:8a:96:50:de:80:7a: 9a:c0:fa:0c:1b:9a:b5:31:0c:27:ad:15:02:08:8f: fa:a0:56:0b:e8:6d:c0:2d:68:89:f9:b1:8d:0d:fa: 27:20:c7:37:7c:bf:c6:13:a1:51:53:7b:aa:09:60: c3:4d:e8:5e:64:f0:ef:b4:b6:0d:ee:fd:c8:da:d4: 4b:a0:85:94:79:00:68:11:e3:8f:1f:fb:6b:c0:bf: b2:59:b1:d2:c4:ee:a6:08:56:af:fd:67:7b:bc:5d: eb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:50:57:5C:74:D1:E6:34:BA:FF:56:51:37:FE:A0:7B:7E:1F:98:41 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GlBXXHTR5jS6_1ZRN_6ge34fmEE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.24.0.0/14 Signature Algorithm: sha256WithRSAEncryption 16:b4:ce:57:c5:a8:c3:ef:eb:4d:ec:1d:9e:91:6c:83:e0:be: a6:e1:f1:4e:2e:25:fb:41:9e:24:f9:07:ce:d2:54:13:da:21: e6:22:32:98:91:90:16:17:a3:5e:13:10:19:cd:27:97:a9:18: 0f:3b:61:83:60:17:c9:d2:d5:f5:fb:13:73:9b:4e:99:09:e1: c6:0c:ff:27:1e:b5:1f:95:de:b0:db:43:4e:f8:ee:a1:57:35: 29:73:40:83:ac:8f:0e:6f:3b:66:9e:38:5a:2c:59:3e:6c:69: ed:38:93:4e:cc:68:b0:d4:b0:3b:72:27:86:22:51:6f:af:a9: b4:e0:59:8c:68:65:ea:74:4c:a0:e5:5c:4c:b3:21:a9:7c:4f: a9:35:4f:7b:25:98:b4:98:01:83:8d:d4:f9:93:ab:62:ec:ba: 00:24:28:49:34:5c:26:51:d4:18:86:2c:6c:f9:26:f1:60:ec: 6a:5d:ca:80:5b:00:2d:58:30:d2:02:04:72:ea:d0:84:5d:c7: e1:aa:7c:33:bb:72:55:ec:18:07:68:0c:0e:96:ff:47:be:c6: 6d:ea:9c:2b:19:ce:e4:8a:91:39:c7:ab:2f:70:db:fc:56:48: 4c:6e:aa:7f:f7:de:a5:54:d3:4d:ae:97:a8:2b:fc:43:b8:cd: 1a:f2:46:3d -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICF4kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFBNTA1NzVDNzREMUU2 MzRCQUZGNTY1MTM3RkVBMDdCN0UxRjk4NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoKZWAr/nMmvJNcZMwwOpdbKzJ+10N0xzuvVcnGa32zMB1bPWo 5PEJYny9K1IxjCWtA7fpcELXzYlvnmXZo6U/3hAPWcjXq03mnF/dmCZMwQG48zld kjG5peCZRDB9R856/8aov2ZMVL5b1Zeuhv4aby3y4DpUUI10YrEYyNWZlsy37747 UFbT41vSFU7icLXKcekdmBPNE12hjOlDEYqWUN6AeprA+gwbmrUxDCetFQIIj/qg VgvobcAtaIn5sY0N+icgxzd8v8YToVFTe6oJYMNN6F5k8O+0tg3u/cja1EughZR5 AGgR448f+2vAv7JZsdLE7qYIVq/9Z3u8XetPAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUGlBXXHTR5jS6/1ZRN/6ge34fmEEwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9HbEJYWEhUUjVqUzZfMVpSTl82 Z2UzNGZtRUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCchgw DQYJKoZIhvcNAQELBQADggEBABa0zlfFqMPv603sHZ6RbIPgvqbh8U4uJftBniT5 B87SVBPaIeYiMpiRkBYXo14TEBnNJ5epGA87YYNgF8nS1fX7E3ObTpkJ4cYM/yce tR+V3rDbQ0747qFXNSlzQIOsjw5vO2aeOFosWT5sae04k07MaLDUsDtyJ4YiUW+v qbTgWYxoZep0TKDlXEyzIal8T6k1T3slmLSYAYON1PmTq2LsugAkKEk0XCZR1BiG LGz5JvFg7GpdyoBbAC1YMNICBHLq0IRdx+GqfDO7clXsGAdoDA6W/0e+xm3qnCsZ zuSKkTnHqy9w2/xWSExuqn/33qVU002ul6gr/EO4zRryRj0= -----END CERTIFICATE-----Generated at Mon Apr 7 02:07:59 2025 by rpki-client