$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/QAtEiMrfYBZryCOY7BEnOMcc9OM.roa File: QAtEiMrfYBZryCOY7BEnOMcc9OM.roa (raw, json) Hash identifier: IbKMB0bN3UBpqg4YJFE1sF7l++3GBFDspwQOVNQnsws= Subject key identifier: 40:0B:44:88:CA:DF:60:16:6B:C8:23:98:EC:11:27:38:C7:1C:F4:E3 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 17B2 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/QAtEiMrfYBZryCOY7BEnOMcc9OM.roa Signing time: Wed 12 Feb 2025 01:36:58 +0000 ROA not before: Wed 12 Feb 2025 01:36:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 54994 IP address blocks: 61.221.181.0/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 08:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6066 (0x17b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=400B4488CADF60166BC82398EC112738C71CF4E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7d:fd:1d:16:4c:e8:59:d9:10:b0:3c:4f:4e: 42:41:47:f5:ce:83:f1:5e:ba:d6:9e:15:56:36:cc: a8:9e:d7:94:36:78:b2:9b:43:6e:74:70:26:a8:d9: df:5b:35:4d:95:31:da:7a:f7:96:f4:d0:ce:68:30: ab:44:92:3a:ae:84:00:b8:22:df:e8:ee:72:d2:3e: fe:53:ae:eb:1e:3a:92:f5:6d:a9:80:f9:1e:5c:0d: 2d:68:38:19:2f:cf:5d:ea:f9:70:29:e7:82:b8:cc: 23:2d:10:fa:e8:f9:7a:e6:da:5c:43:aa:0a:a5:c1: ee:87:a0:a9:39:24:5f:cc:98:43:1d:6f:94:e6:e3: 3d:7c:8b:e0:09:58:b9:4d:ed:57:30:68:a2:1e:cb: d2:15:c4:c0:d8:36:6e:97:e9:5e:19:9f:1f:8a:a2: 59:91:5e:5c:f4:76:bb:3e:51:90:0d:87:ee:45:ae: 6e:43:f4:b7:e4:9f:74:c7:7c:4f:74:75:6c:a6:e8: 4c:18:75:f6:74:a9:db:ec:7a:99:cb:87:9a:f7:db: 87:a2:63:b1:52:04:4e:e9:99:b1:44:0b:b3:6f:a4: cc:ca:48:e7:6f:b1:d6:95:73:ce:c5:f8:a9:1c:08: f1:34:7c:05:67:6b:e2:76:94:6d:ef:4c:77:be:a5: bd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0B:44:88:CA:DF:60:16:6B:C8:23:98:EC:11:27:38:C7:1C:F4:E3 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/QAtEiMrfYBZryCOY7BEnOMcc9OM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.221.181.0/26 Signature Algorithm: sha256WithRSAEncryption 5b:dd:01:46:ab:1e:69:94:37:97:3a:ac:e0:d5:b8:1b:ff:73: 8c:17:0c:63:60:5f:69:94:23:35:fe:e7:03:9e:ae:cb:ad:e2: 98:48:51:92:f8:61:49:9d:c2:7e:9d:81:2b:00:3d:70:c4:6a: 52:08:e2:28:58:98:18:45:60:a3:e6:32:86:16:d8:d0:5a:57: e1:3b:1c:5b:88:99:77:43:8a:b0:ba:f3:cb:7a:43:7e:7e:06: 1b:e1:77:5e:30:09:26:2f:2e:6d:19:21:f6:a2:fb:20:33:dd: ec:f2:fd:5f:07:90:6e:f0:80:fe:99:d5:68:a4:b9:2f:b0:ae: ed:33:58:6a:41:80:77:12:c9:34:65:ac:1d:ba:a8:45:78:21: 87:b7:fa:07:6c:5a:ec:7c:db:5d:94:15:c4:ca:f6:e0:a4:c7: 67:0b:f7:83:92:b2:79:c2:ab:a8:51:bb:d6:48:c1:19:35:ff: f9:d2:34:51:d7:c0:dc:63:7f:3c:7c:0b:c9:f0:a6:0a:f4:37: 6e:39:eb:ee:2a:c1:9e:a6:0c:5e:d8:76:28:31:37:62:93:73: 1a:88:94:4b:e7:e3:f9:c3:5c:0d:c1:1c:bd:a2:8b:f9:28:51: c9:ca:d7:55:4f:77:91:8e:a6:a7:f5:33:e3:44:b1:07:cf:9f: be:ce:9f:6b -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICF7IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQwMEI0NDg4Q0FERjYw MTY2QkM4MjM5OEVDMTEyNzM4QzcxQ0Y0RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBff0dFkzoWdkQsDxPTkJBR/XOg/FeutaeFVY2zKie15Q2eLKb Q250cCao2d9bNU2VMdp695b00M5oMKtEkjquhAC4It/o7nLSPv5TruseOpL1bamA +R5cDS1oOBkvz13q+XAp54K4zCMtEPro+Xrm2lxDqgqlwe6HoKk5JF/MmEMdb5Tm 4z18i+AJWLlN7VcwaKIey9IVxMDYNm6X6V4Znx+KolmRXlz0drs+UZANh+5Frm5D 9Lfkn3THfE90dWym6EwYdfZ0qdvsepnLh5r324eiY7FSBE7pmbFEC7NvpMzKSOdv sdaVc87F+KkcCPE0fAVna+J2lG3vTHe+pb2TAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUQAtEiMrfYBZryCOY7BEnOMcc9OMwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9RQXRFaU1yZllCWnJ5Q09ZN0JF bk9NY2M5T00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGPd21 ADANBgkqhkiG9w0BAQsFAAOCAQEAW90BRqseaZQ3lzqs4NW4G/9zjBcMY2BfaZQj Nf7nA56uy63imEhRkvhhSZ3Cfp2BKwA9cMRqUgjiKFiYGEVgo+YyhhbY0FpX4Tsc W4iZd0OKsLrzy3pDfn4GG+F3XjAJJi8ubRkh9qL7IDPd7PL9XweQbvCA/pnVaKS5 L7Cu7TNYakGAdxLJNGWsHbqoRXghh7f6B2xa7HzbXZQVxMr24KTHZwv3g5KyecKr qFG71kjBGTX/+dI0UdfA3GN/PHwLyfCmCvQ3bjnr7irBnqYMXth2KDE3YpNzGoiU S+fj+cNcDcEcvaKL+ShRycrXVU93kY6mp/Uz40SxB8+fvs6faw== -----END CERTIFICATE-----Generated at Sat Apr 5 07:23:00 2025 by rpki-client