$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Lnaqy4oC9qCdkQS-RBJ8niangXc.roa File: Lnaqy4oC9qCdkQS-RBJ8niangXc.roa (raw, json) Hash identifier: jDfVTAMMjMFeXBYD0idThjoRqNmcg+N69as7Eh7D16U= Subject key identifier: 2E:76:AA:CB:8A:02:F6:A0:9D:91:04:BE:44:12:7C:9E:26:A7:81:77 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1738 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Lnaqy4oC9qCdkQS-RBJ8niangXc.roa Signing time: Wed 12 Feb 2025 01:36:30 +0000 ROA not before: Wed 12 Feb 2025 01:36:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 10126 IP address blocks: 220.128.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5944 (0x1738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:30 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2E76AACB8A02F6A09D9104BE44127C9E26A78177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:9d:83:cf:e0:de:75:2c:a1:8c:f3:7c:22: e1:30:8d:73:26:88:58:65:c4:50:e6:a9:9b:69:29: e8:a9:be:e4:0f:52:1e:c4:d9:0d:30:d0:15:42:9e: a3:16:ac:bb:48:8e:ae:d3:89:fe:5b:bd:44:8c:59: 1d:0c:87:ea:b7:ce:97:87:f7:8a:4e:46:1e:58:11: 0f:4d:c7:c9:68:26:30:83:b5:51:1b:7d:c9:8c:7c: a4:d7:1e:fc:a2:08:0e:6b:e1:f5:f0:e1:84:97:e5: 7d:16:12:03:4a:86:a9:a5:58:38:e3:d0:7b:20:66: dc:f4:8b:86:fd:a9:02:ff:0d:a3:ca:65:a6:5b:c0: 4c:df:e4:df:87:23:ab:39:d6:67:11:63:05:ff:1c: 12:fa:3a:19:8b:26:3a:ee:7a:96:ed:03:b8:ac:fe: ff:ca:1b:c0:9c:19:33:da:c2:09:4d:fc:fe:9a:d3: 15:03:d1:31:8b:2f:4c:b6:79:6e:04:00:c1:51:5c: 1a:0f:8c:83:a7:99:93:b7:7b:fc:d9:71:ba:76:29: b6:1d:8b:b8:df:88:61:61:75:7f:ff:c2:cc:9a:a2: 18:4c:27:ac:1b:e2:a0:89:35:9b:88:a6:f7:3d:24: f8:fc:ee:98:9d:26:f1:d2:d7:7b:72:d7:70:61:ab: 7a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:76:AA:CB:8A:02:F6:A0:9D:91:04:BE:44:12:7C:9E:26:A7:81:77 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Lnaqy4oC9qCdkQS-RBJ8niangXc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.80.0/20 Signature Algorithm: sha256WithRSAEncryption c9:a9:eb:dd:0e:84:1e:44:cc:01:16:2c:e9:8e:7f:2a:d3:0e: 75:f0:b4:85:30:43:d5:43:11:bb:81:0a:fd:2c:a1:49:d1:db: 03:3d:00:0b:eb:57:02:18:28:a8:ef:f7:85:0c:6c:bb:c1:2c: 8c:27:b5:a4:3f:f1:e7:ca:b8:64:0e:8c:86:e3:ef:2f:bb:b0: 61:55:d7:14:41:b9:07:4a:ea:66:b4:a1:48:92:63:d6:73:23: 4f:3f:24:42:d8:59:59:d8:25:e3:29:c8:98:6b:9a:b2:a0:8d: f4:66:ee:54:ff:85:10:98:09:82:36:3c:df:8c:62:fc:67:7f: e6:0b:16:7f:aa:c2:83:0c:53:db:2e:6c:84:6b:2e:89:7b:6e: 46:a3:e8:31:99:86:e8:38:a9:d5:5f:48:50:d9:bc:ee:a4:73: f8:cb:2d:fe:48:6d:af:32:ef:2b:09:82:63:84:4d:9b:f3:ec: f6:69:7c:7c:66:26:1d:2d:76:84:77:46:7b:d9:f5:d2:eb:69: 45:6a:98:9d:f4:b7:42:d1:2f:6c:30:ae:a6:c1:a7:fe:07:39: 3d:f3:1f:b9:9c:29:b9:ff:c0:21:d6:b2:5d:bb:fb:34:2c:ad: d8:90:6f:5d:f3:ae:9c:d4:c3:35:68:b4:e3:be:e3:f7:1d:73: 46:0d:7d:71 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICFzgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJFNzZBQUNCOEEwMkY2 QTA5RDkxMDRCRTQ0MTI3QzlFMjZBNzgxNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC88J2Dz+DedSyhjPN8IuEwjXMmiFhlxFDmqZtpKeipvuQPUh7E 2Q0w0BVCnqMWrLtIjq7Tif5bvUSMWR0Mh+q3zpeH94pORh5YEQ9Nx8loJjCDtVEb fcmMfKTXHvyiCA5r4fXw4YSX5X0WEgNKhqmlWDjj0HsgZtz0i4b9qQL/DaPKZaZb wEzf5N+HI6s51mcRYwX/HBL6OhmLJjruepbtA7is/v/KG8CcGTPawglN/P6a0xUD 0TGLL0y2eW4EAMFRXBoPjIOnmZO3e/zZcbp2KbYdi7jfiGFhdX//wsyaohhMJ6wb 4qCJNZuIpvc9JPj87pidJvHS13ty13Bhq3qdAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQULnaqy4oC9qCdkQS+RBJ8niangXcwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9MbmFxeTRvQzlxQ2RrUVMtUkJK OG5pYW5nWGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE3IBQ MA0GCSqGSIb3DQEBCwUAA4IBAQDJqevdDoQeRMwBFizpjn8q0w518LSFMEPVQxG7 gQr9LKFJ0dsDPQAL61cCGCio7/eFDGy7wSyMJ7WkP/HnyrhkDoyG4+8vu7BhVdcU QbkHSupmtKFIkmPWcyNPPyRC2FlZ2CXjKciYa5qyoI30Zu5U/4UQmAmCNjzfjGL8 Z3/mCxZ/qsKDDFPbLmyEay6Je25Go+gxmYboOKnVX0hQ2bzupHP4yy3+SG2vMu8r CYJjhE2b8+z2aXx8ZiYdLXaEd0Z72fXS62lFapid9LdC0S9sMK6mwaf+Bzk98x+5 nCm5/8Ah1rJdu/s0LK3YkG9d866c1MM1aLTjvuP3HXNGDX1x -----END CERTIFICATE-----Generated at Mon Apr 7 17:48:02 2025 by rpki-client