$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/MnLcGBa7LCC8DQ0fxtNy91qpyRw.roa File: MnLcGBa7LCC8DQ0fxtNy91qpyRw.roa (raw, json) Hash identifier: lkGrxIFG4gFPMpJJXZwdxK3MLYtfeKz3X+UOmPtbWdw= Subject key identifier: 32:72:DC:18:16:BB:2C:20:BC:0D:0D:1F:C6:D3:72:F7:5A:A9:C9:1C Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1799 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/MnLcGBa7LCC8DQ0fxtNy91qpyRw.roa Signing time: Wed 12 Feb 2025 01:36:52 +0000 ROA not before: Wed 12 Feb 2025 01:36:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 210.71.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 06:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6041 (0x1799) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3272DC1816BB2C20BC0D0D1FC6D372F75AA9C91C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:46:ca:c2:fc:56:26:82:55:12:af:9a:bf:03: 0f:b3:7a:74:2b:98:65:53:f3:7d:f8:ec:64:f5:26: 9e:5b:32:4d:fa:cc:6b:83:9c:d7:b5:1a:59:d3:9c: b9:f9:86:fa:2c:13:5f:d3:74:21:bb:33:0d:7a:5d: 1e:13:ad:61:3a:65:be:48:2b:e1:fe:9e:9d:d4:fd: 8a:ed:ba:64:7d:6d:3b:3d:c0:2f:85:14:a5:09:9a: 13:31:1e:68:57:b9:38:fb:21:7f:af:de:c5:df:b0: ce:9a:4f:9a:21:60:cf:08:85:10:a8:fe:ba:f6:c7: 1f:d2:31:21:9b:62:42:c2:9b:26:14:c4:89:ce:4f: 1c:4c:71:74:c1:b6:f6:cf:d0:4c:a1:22:bf:3a:fa: 20:aa:de:f4:b6:17:7e:41:5e:00:c8:0c:a2:22:49: 19:56:b5:20:22:3b:7f:83:2d:90:99:d3:1d:da:a1: 7f:bb:ce:7b:9f:41:62:2e:21:0f:d1:45:f2:38:bb: ce:93:8c:42:ea:1f:fa:7f:c7:11:93:04:a4:47:80: 02:3b:ed:e8:ee:54:8a:2d:e9:9a:ff:ed:b2:26:9b: 09:69:39:0c:3b:13:02:4a:be:37:40:18:c0:f4:fc: 01:62:ef:37:66:b6:71:c3:23:99:4a:74:c1:68:e6: c1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:72:DC:18:16:BB:2C:20:BC:0D:0D:1F:C6:D3:72:F7:5A:A9:C9:1C X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/MnLcGBa7LCC8DQ0fxtNy91qpyRw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.71.128.0/17 Signature Algorithm: sha256WithRSAEncryption 87:b5:fd:85:35:49:d3:24:38:38:68:b3:2d:39:06:76:27:7b: 1c:bc:45:d9:4c:b5:c9:ac:a6:3d:1a:a5:2f:32:e5:6a:56:a5: 4c:14:49:d0:ae:02:cf:db:c7:e9:2e:ff:a3:52:d1:12:42:c2: 6d:9f:14:21:ee:2c:87:9c:e0:15:f9:bf:b3:9e:e5:57:65:58: 46:12:65:b3:7b:33:5c:96:aa:58:77:1d:7f:79:f6:f4:59:16: 34:b6:46:0e:7a:05:70:31:f8:9c:53:37:e1:c0:14:ff:77:15: 0f:df:11:bf:c7:99:c1:cf:2f:58:82:ab:76:f1:6d:e1:d2:ea: 0f:a2:63:c9:0c:06:36:76:f4:9d:21:ad:98:44:f6:20:78:b8: 0d:09:f3:e3:a2:64:2d:9a:60:94:bf:e8:63:b2:b5:91:2d:2b: 83:5e:27:a1:c5:10:9f:a7:3d:4c:75:bc:0f:7b:d9:35:c1:78: d1:ea:a3:07:e5:e8:13:f9:0d:42:0f:cf:38:73:60:3b:83:01: e1:4c:63:f9:8e:5b:e4:a4:11:81:96:4b:50:26:44:fa:73:e8: c1:97:8b:42:59:a8:4c:cf:0e:0b:d5:04:37:7a:67:93:97:a0: 00:eb:e3:4d:17:df:07:62:8e:c1:94:f4:4a:1c:d7:84:98:90: d5:24:14:bc -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICF5kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMyNzJEQzE4MTZCQjJD MjBCQzBEMEQxRkM2RDM3MkY3NUFBOUM5MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3RsrC/FYmglUSr5q/Aw+zenQrmGVT83347GT1Jp5bMk36zGuD nNe1GlnTnLn5hvosE1/TdCG7Mw16XR4TrWE6Zb5IK+H+np3U/YrtumR9bTs9wC+F FKUJmhMxHmhXuTj7IX+v3sXfsM6aT5ohYM8IhRCo/rr2xx/SMSGbYkLCmyYUxInO TxxMcXTBtvbP0EyhIr86+iCq3vS2F35BXgDIDKIiSRlWtSAiO3+DLZCZ0x3aoX+7 znufQWIuIQ/RRfI4u86TjELqH/p/xxGTBKRHgAI77ejuVIot6Zr/7bImmwlpOQw7 EwJKvjdAGMD0/AFi7zdmtnHDI5lKdMFo5sFrAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUMnLcGBa7LCC8DQ0fxtNy91qpyRwwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9NbkxjR0JhN0xDQzhEUTBmeHRO eTkxcXB5Uncucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0keA MA0GCSqGSIb3DQEBCwUAA4IBAQCHtf2FNUnTJDg4aLMtOQZ2J3scvEXZTLXJrKY9 GqUvMuVqVqVMFEnQrgLP28fpLv+jUtESQsJtnxQh7iyHnOAV+b+znuVXZVhGEmWz ezNclqpYdx1/efb0WRY0tkYOegVwMficUzfhwBT/dxUP3xG/x5nBzy9Ygqt28W3h 0uoPomPJDAY2dvSdIa2YRPYgeLgNCfPjomQtmmCUv+hjsrWRLSuDXiehxRCfpz1M dbwPe9k1wXjR6qMH5egT+Q1CD884c2A7gwHhTGP5jlvkpBGBlktQJkT6c+jBl4tC WahMzw4L1QQ3emeTl6AA6+NNF98HYo7BlPRKHNeEmJDVJBS8 -----END CERTIFICATE-----Generated at Mon Apr 7 02:05:24 2025 by rpki-client