$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/JsMNuxzU0Ltvhi2ckrz1VjYTz_I.roa File: JsMNuxzU0Ltvhi2ckrz1VjYTz_I.roa (raw, json) Hash identifier: 9tC9nYDr3WWIlDVGmR/bu+SI7vnnGhlWAUa7V3SLKr4= Subject key identifier: 26:C3:0D:BB:1C:D4:D0:BB:6F:86:2D:9C:92:BC:F5:56:36:13:CF:F2 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1764 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JsMNuxzU0Ltvhi2ckrz1VjYTz_I.roa Signing time: Wed 12 Feb 2025 01:36:39 +0000 ROA not before: Wed 12 Feb 2025 01:36:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9505 IP address blocks: 220.128.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5988 (0x1764) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=26C30DBB1CD4D0BB6F862D9C92BCF5563613CFF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:70:6a:9b:c7:55:5d:9f:f8:47:f1:66:97:a6: 55:0b:d1:f7:ea:d2:fd:3d:00:73:6e:3a:1b:fd:20: 98:c5:10:84:8b:86:9d:14:57:89:d6:81:f3:49:da: 9a:8b:13:db:9d:1f:7f:18:76:5b:34:5f:f0:0f:76: 30:11:4f:4c:6e:dd:a4:ca:35:50:98:6f:0b:38:63: 68:7f:2d:a0:a9:98:36:8e:81:0f:b8:82:2a:21:6f: 15:14:42:68:a8:d1:d2:a6:88:69:3a:54:22:84:68: a6:4d:1d:1b:00:e9:2c:7d:31:77:0d:3c:9e:f0:e4: 1f:eb:8c:d0:dd:87:1c:52:af:2b:d7:e3:ab:9d:b3: 35:04:38:f5:e9:c6:b4:1b:b5:b7:b2:b7:d8:5f:5a: 1c:df:93:fc:80:2c:95:63:e2:ce:40:8f:cc:53:07: f4:93:ff:d5:79:fb:d7:79:83:f6:ec:c6:79:59:e2: 12:1b:9a:8f:b1:e9:da:f1:11:f3:bd:fb:71:b9:e8: 17:cc:5c:dd:fd:93:c6:17:49:de:56:0f:b3:59:c6: 56:51:d3:52:07:01:05:01:c1:6f:04:13:53:aa:37: c1:bc:11:d3:4d:79:d2:9c:5f:0d:56:00:80:46:4a: db:c6:6a:fd:42:e4:ff:d8:43:f3:a8:cc:22:61:d9: c5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C3:0D:BB:1C:D4:D0:BB:6F:86:2D:9C:92:BC:F5:56:36:13:CF:F2 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JsMNuxzU0Ltvhi2ckrz1VjYTz_I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.48.0/21 Signature Algorithm: sha256WithRSAEncryption 11:ad:99:1b:f6:a3:c2:c9:ca:66:c6:b7:72:0c:9b:80:9a:04: 93:68:b5:a6:a5:82:d6:dd:1f:d2:00:2f:36:81:e6:88:cc:03: b2:89:4c:f1:8d:d4:59:22:89:f5:d7:a5:63:93:64:d6:24:65: 07:92:c7:a1:c4:1c:01:f8:78:83:c5:93:1f:79:29:32:fa:cb: a3:77:04:e1:b0:17:58:9d:e1:1a:eb:bc:b2:74:4b:1f:b4:b7: 4a:7a:83:aa:3b:4b:68:0e:ba:b4:02:f4:e3:9b:7e:53:38:18: 98:ba:ed:9e:11:48:cb:50:6a:59:5b:15:ee:93:bd:fe:77:30: 12:8d:97:bc:41:b5:b5:a4:1b:db:ac:b6:a1:51:f8:0d:8d:48: 58:9b:41:0c:ee:11:7a:30:56:c1:eb:99:7f:00:9c:19:75:44: 4b:92:0c:2c:29:47:ed:f8:10:e9:5f:b7:59:5e:67:cb:e2:18: 9b:c9:99:8e:7f:16:88:e0:c2:66:e9:02:49:e9:9f:b9:9a:b1: 8b:b1:4e:71:72:0a:30:ed:0c:99:8d:61:35:e3:47:4d:09:ca: 7f:47:98:15:12:72:50:de:fb:fd:9f:fa:ae:fd:7e:86:6d:f8: bb:64:e1:4c:96:31:b2:79:c4:43:f5:72:a1:d7:ae:59:e5:12: c6:b4:68:ee -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICF2QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI2QzMwREJCMUNENEQw QkI2Rjg2MkQ5QzkyQkNGNTU2MzYxM0NGRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/cGqbx1Vdn/hH8WaXplUL0ffq0v09AHNuOhv9IJjFEISLhp0U V4nWgfNJ2pqLE9udH38Ydls0X/APdjART0xu3aTKNVCYbws4Y2h/LaCpmDaOgQ+4 giohbxUUQmio0dKmiGk6VCKEaKZNHRsA6Sx9MXcNPJ7w5B/rjNDdhxxSryvX46ud szUEOPXpxrQbtbeyt9hfWhzfk/yALJVj4s5Aj8xTB/ST/9V5+9d5g/bsxnlZ4hIb mo+x6drxEfO9+3G56BfMXN39k8YXSd5WD7NZxlZR01IHAQUBwW8EE1OqN8G8EdNN edKcXw1WAIBGStvGav1C5P/YQ/OozCJh2cUDAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUJsMNuxzU0Ltvhi2ckrz1VjYTz/IwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9Kc01OdXh6VTBMdHZoaTJja3J6 MVZqWVR6X0kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD3IAw MA0GCSqGSIb3DQEBCwUAA4IBAQARrZkb9qPCycpmxrdyDJuAmgSTaLWmpYLW3R/S AC82geaIzAOyiUzxjdRZIon116Vjk2TWJGUHksehxBwB+HiDxZMfeSky+sujdwTh sBdYneEa67yydEsftLdKeoOqO0toDrq0AvTjm35TOBiYuu2eEUjLUGpZWxXuk73+ dzASjZe8QbW1pBvbrLahUfgNjUhYm0EM7hF6MFbB65l/AJwZdURLkgwsKUft+BDp X7dZXmfL4hibyZmOfxaI4MJm6QJJ6Z+5mrGLsU5xcgow7QyZjWE140dNCcp/R5gV EnJQ3vv9n/qu/X6Gbfi7ZOFMljGyecRD9XKh165Z5RLGtGju -----END CERTIFICATE-----Generated at Mon Apr 7 17:48:33 2025 by rpki-client