$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/LxkU9_EQrnbtg2wDZS-TUx4c29c.roa File: LxkU9_EQrnbtg2wDZS-TUx4c29c.roa (raw, json) Hash identifier: aYf9yc8udR/b3TjOY7ujWM0mReTrbVHfe7wAJ7/Eyjw= Subject key identifier: 2F:19:14:F7:F1:10:AE:76:ED:83:6C:03:65:2F:93:53:1E:1C:DB:D7 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1793 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LxkU9_EQrnbtg2wDZS-TUx4c29c.roa Signing time: Wed 12 Feb 2025 01:36:51 +0000 ROA not before: Wed 12 Feb 2025 01:36:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 114.30.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 06:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6035 (0x1793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:51 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2F1914F7F110AE76ED836C03652F93531E1CDBD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c4:77:f8:83:49:77:73:cd:6b:6c:94:1f:93: bf:da:52:49:55:30:f0:01:9a:36:d7:60:1b:8c:87: 65:e8:65:a4:80:11:ed:22:65:70:84:01:0d:d7:06: 6e:f2:e5:93:7f:e8:33:7d:fc:4e:21:be:62:4c:00: e7:ea:8a:ef:30:98:be:70:0f:09:98:1f:9f:c2:b5: 1d:87:cc:a8:bc:1e:96:75:cb:f1:f4:67:9e:af:2d: 55:93:63:23:09:06:3b:a9:de:03:46:93:b1:0e:ff: 04:ac:c0:1a:96:e6:4b:ab:c4:cc:78:c5:1f:70:3c: db:1f:69:72:eb:c2:31:0e:45:a3:17:d2:7e:4b:ad: a3:93:85:52:c1:1c:6f:37:4f:b8:45:b5:2f:09:19: 2c:6b:d0:9c:d1:ad:01:84:ae:86:96:d7:50:c6:6f: 0a:ba:18:6a:07:a6:44:5d:fa:e2:1a:82:8c:2a:ed: 43:ab:40:7c:62:17:50:a3:2e:93:bf:54:c7:5a:bf: 20:b0:82:5d:db:92:e4:5e:29:e8:b0:f9:22:62:64: 3f:94:09:b7:90:12:26:3b:88:2a:80:8a:7e:a8:2b: fe:f1:49:38:13:92:c1:1b:f3:66:03:df:30:e7:02: 64:92:7e:d9:98:9b:2e:11:59:93:9f:8c:84:d4:62: 6f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:19:14:F7:F1:10:AE:76:ED:83:6C:03:65:2F:93:53:1E:1C:DB:D7 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LxkU9_EQrnbtg2wDZS-TUx4c29c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.30.44.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:bb:d3:ea:cb:0c:19:96:47:52:4f:27:5d:b3:28:91:ec:0f: 7e:ef:f7:f2:de:c0:80:c2:10:32:6e:f3:00:2a:c9:8c:a7:fa: d3:f2:43:2a:3b:46:1c:d7:84:21:aa:97:5a:2b:40:67:09:84: ff:d2:b3:75:38:fc:5a:1e:5b:70:32:72:73:e1:f9:1e:8a:08: c3:80:4b:2a:f1:f3:10:2f:5c:25:c2:67:e7:17:3f:7a:68:49: ae:91:f7:93:56:e9:0a:42:aa:1b:e6:66:e0:e6:d2:71:fc:43: 2b:dc:e8:22:b7:d5:06:08:8c:18:16:ff:e5:92:63:76:e4:1b: 41:09:35:e3:68:9d:20:97:bc:1d:40:c1:1f:b8:78:94:21:9d: d3:3b:06:b3:c1:ff:0a:d8:80:7f:45:59:2a:b8:38:90:6d:c9: 05:25:ac:1a:69:96:e8:23:92:ae:6c:1d:34:87:55:2d:e7:e7: 52:97:6a:be:bb:50:0b:1a:7c:11:91:f0:32:2e:03:fb:fc:4e: f4:97:3f:7b:cb:57:33:65:51:8b:ec:a2:8e:94:78:3b:ae:74: 76:30:39:b2:3b:c6:36:9b:d3:2e:72:55:71:5f:75:59:f5:43: db:87:3d:44:66:8a:c0:2c:75:8a:75:1a:5c:b1:48:45:f3:72: ab:d3:5e:5d -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICF5MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJGMTkxNEY3RjExMEFF NzZFRDgzNkMwMzY1MkY5MzUzMUUxQ0RCRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrxHf4g0l3c81rbJQfk7/aUklVMPABmjbXYBuMh2XoZaSAEe0i ZXCEAQ3XBm7y5ZN/6DN9/E4hvmJMAOfqiu8wmL5wDwmYH5/CtR2HzKi8HpZ1y/H0 Z56vLVWTYyMJBjup3gNGk7EO/wSswBqW5kurxMx4xR9wPNsfaXLrwjEORaMX0n5L raOThVLBHG83T7hFtS8JGSxr0JzRrQGEroaW11DGbwq6GGoHpkRd+uIagowq7UOr QHxiF1CjLpO/VMdavyCwgl3bkuReKeiw+SJiZD+UCbeQEiY7iCqAin6oK/7xSTgT ksEb82YD3zDnAmSSftmYmy4RWZOfjITUYm/PAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQULxkU9/EQrnbtg2wDZS+TUx4c29cwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9MeGtVOV9FUXJuYnRnMndEWlMt VFV4NGMyOWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAch4s MA0GCSqGSIb3DQEBCwUAA4IBAQCLu9PqywwZlkdSTyddsyiR7A9+7/fy3sCAwhAy bvMAKsmMp/rT8kMqO0Yc14QhqpdaK0BnCYT/0rN1OPxaHltwMnJz4fkeigjDgEsq 8fMQL1wlwmfnFz96aEmukfeTVukKQqob5mbg5tJx/EMr3Ogit9UGCIwYFv/lkmN2 5BtBCTXjaJ0gl7wdQMEfuHiUIZ3TOwazwf8K2IB/RVkquDiQbckFJawaaZboI5Ku bB00h1Ut5+dSl2q+u1ALGnwRkfAyLgP7/E70lz97y1czZVGL7KKOlHg7rnR2MDmy O8Y2m9MuclVxX3VZ9UPbhz1EZorALHWKdRpcsUhF83Kr015d -----END CERTIFICATE-----Generated at Mon Apr 7 02:05:20 2025 by rpki-client