$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/TV7WgCLrXnq8txkXJrNSMaThrX8.roa File: TV7WgCLrXnq8txkXJrNSMaThrX8.roa (raw, json) Hash identifier: e6Ji+EVgHKe4Cb+158YbZt4dJ3n8qqbdhGVjtWQkYW0= Subject key identifier: 4D:5E:D6:80:22:EB:5E:7A:BC:B7:19:17:26:B3:52:31:A4:E1:AD:7F Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1795 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TV7WgCLrXnq8txkXJrNSMaThrX8.roa Signing time: Wed 12 Feb 2025 01:36:51 +0000 ROA not before: Wed 12 Feb 2025 01:36:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131660 IP address blocks: 114.25.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6037 (0x1795) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:51 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4D5ED68022EB5E7ABCB7191726B35231A4E1AD7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:18:f9:d7:03:78:e1:6f:35:27:a7:63:f1: a6:c5:87:77:98:33:0e:49:b8:49:62:b0:d2:53:97: 02:1a:09:20:f0:fd:3c:93:43:3e:d6:fc:86:a4:c3: 8c:b5:0f:d8:26:f3:8b:77:a3:59:da:02:88:80:d7: ac:38:ac:8e:30:b9:2a:58:d1:a8:e8:9b:4c:b4:4c: f6:59:7d:74:43:95:52:41:68:05:10:b2:87:9a:63: db:41:0c:d4:7e:16:b1:b7:61:7b:d4:2f:25:b4:ce: d0:43:7c:53:d4:d1:ab:d5:79:20:db:68:6b:bf:61: 0a:7d:0a:42:b7:38:b7:89:05:44:bd:15:d7:07:ef: 5c:a6:87:2e:27:5e:17:a0:21:70:76:52:a8:6c:72: 1d:6b:18:ca:13:86:af:de:50:4b:0f:ce:ed:f3:ef: b0:15:5a:fc:e2:c7:31:d7:0b:83:d0:61:c7:fd:9e: fe:19:cb:42:01:10:15:14:75:e6:9b:da:34:1e:f3: f7:9e:0c:21:f7:89:5e:8d:41:9b:5d:46:7d:e6:3d: b1:28:64:5c:21:fa:c0:b6:83:10:2f:1f:25:29:45: 17:a3:b8:d0:17:08:d7:ab:99:74:c5:a4:0e:76:e0: 8a:fb:8b:52:a4:fa:f8:d0:8f:2f:82:91:0d:24:64: ff:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5E:D6:80:22:EB:5E:7A:BC:B7:19:17:26:B3:52:31:A4:E1:AD:7F X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TV7WgCLrXnq8txkXJrNSMaThrX8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.25.251.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:e3:c0:b4:da:7a:91:fe:5e:1d:8b:bc:b4:e5:3d:9e:72:ae: 5a:1f:57:12:e4:5d:8e:b3:8b:3d:19:21:a5:bf:1a:88:95:ff: f5:2a:12:71:f4:8b:4d:57:96:5a:f8:c3:95:99:e4:d4:ec:e3: 3b:52:eb:9a:b5:c4:ed:18:50:9e:7f:e3:d7:c8:4b:4f:49:55: 44:ac:34:29:6d:3c:1f:b3:46:1d:0d:f7:c9:e8:04:4c:5d:05: 90:bd:dd:a0:84:1f:21:e7:83:8c:22:03:3d:9d:aa:ac:5c:65: d8:16:f1:32:02:a6:06:3f:cf:a3:59:c8:dd:d4:b7:47:1f:21: 6f:45:a4:d6:3d:77:f0:e2:dc:0a:65:86:a4:32:48:89:8d:73: 14:c0:9a:8a:fe:3e:42:b8:cf:00:4c:2d:8b:c3:c6:22:80:5f: f6:38:de:0e:5d:88:a7:9b:82:2c:69:d8:9e:c1:c9:06:5b:17: 66:03:e7:5d:49:15:56:ae:17:10:96:14:bc:8f:d4:60:1a:dc: 5d:ff:8b:f7:b8:47:bc:ce:7e:6b:d3:cd:a8:52:8e:15:96:be: df:d2:0d:38:48:c3:6a:34:93:90:4f:86:e4:43:d6:8a:d1:3f: 57:e4:76:9f:06:fb:f5:18:67:d3:90:65:a2:e6:5a:8d:a4:98: b4:04:0b:16 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICF5UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRENUVENjgwMjJFQjVF N0FCQ0I3MTkxNzI2QjM1MjMxQTRFMUFEN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBNRj51wN44W81J6dj8abFh3eYMw5JuElisNJTlwIaCSDw/TyT Qz7W/Iakw4y1D9gm84t3o1naAoiA16w4rI4wuSpY0ajom0y0TPZZfXRDlVJBaAUQ soeaY9tBDNR+FrG3YXvULyW0ztBDfFPU0avVeSDbaGu/YQp9CkK3OLeJBUS9FdcH 71ymhy4nXhegIXB2Uqhsch1rGMoThq/eUEsPzu3z77AVWvzixzHXC4PQYcf9nv4Z y0IBEBUUdeab2jQe8/eeDCH3iV6NQZtdRn3mPbEoZFwh+sC2gxAvHyUpRRejuNAX CNermXTFpA524Ir7i1Kk+vjQjy+CkQ0kZP/BAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUTV7WgCLrXnq8txkXJrNSMaThrX8wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9UVjdXZ0NMclhucTh0eGtYSnJO U01hVGhyWDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAchn7 MA0GCSqGSIb3DQEBCwUAA4IBAQA648C02nqR/l4di7y05T2ecq5aH1cS5F2Os4s9 GSGlvxqIlf/1KhJx9ItNV5Za+MOVmeTU7OM7UuuatcTtGFCef+PXyEtPSVVErDQp bTwfs0YdDffJ6ARMXQWQvd2ghB8h54OMIgM9naqsXGXYFvEyAqYGP8+jWcjd1LdH HyFvRaTWPXfw4twKZYakMkiJjXMUwJqK/j5CuM8ATC2Lw8YigF/2ON4OXYinm4Is adiewckGWxdmA+ddSRVWrhcQlhS8j9RgGtxd/4v3uEe8zn5r082oUo4Vlr7f0g04 SMNqNJOQT4bkQ9aK0T9X5HafBvv1GGfTkGWi5lqNpJi0BAsW -----END CERTIFICATE-----Generated at Mon Apr 7 17:44:26 2025 by rpki-client