$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/To33sfaYvdkCTfeD-qtJPjMJn7M.roa File: To33sfaYvdkCTfeD-qtJPjMJn7M.roa (raw, json) Hash identifier: nxEiFwXoG/oJmXk9IkdtKYASf15Ug9baBRtmGzygHzA= Subject key identifier: 4E:8D:F7:B1:F6:98:BD:D9:02:4D:F7:83:FA:AB:49:3E:33:09:9F:B3 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 174E Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/To33sfaYvdkCTfeD-qtJPjMJn7M.roa Signing time: Wed 12 Feb 2025 01:36:34 +0000 ROA not before: Wed 12 Feb 2025 01:36:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 220.128.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5966 (0x174e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:34 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4E8DF7B1F698BDD9024DF783FAAB493E33099FB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:da:93:e3:44:41:cd:15:0a:5c:25:c2:5f:bc: 1c:13:46:e8:f3:55:b2:35:1d:7b:69:8d:bd:28:41: 03:39:7e:3a:45:04:6e:f0:61:ba:b2:ab:b8:4e:36: d5:f9:29:ca:59:32:84:f6:d2:a0:86:8e:49:54:54: 37:47:e7:4a:79:a0:90:a1:90:92:35:70:5e:fb:eb: b5:ad:13:05:1a:7f:fd:dd:56:73:8e:0a:b2:de:cc: 16:26:c6:e4:f4:f6:7b:e3:29:05:86:a7:3f:44:0c: e6:12:cb:d9:40:6c:5e:4b:a2:77:2f:05:65:34:7a: 78:e1:a5:07:ab:9a:30:00:3c:97:b9:e0:4e:23:1d: 24:73:4c:06:49:c5:69:a8:5b:75:dd:a2:f6:35:c8: 98:c0:ed:43:6c:4e:98:2e:9b:7e:9b:86:a8:8c:a6: 3d:a6:07:6d:8d:3f:40:2a:a1:5b:65:86:35:f1:c7: 4a:53:ea:af:37:79:20:ba:90:79:c0:53:1a:00:3b: 57:af:b0:5b:dd:c7:ef:18:c6:ed:ff:61:b0:0a:01: b0:04:33:8b:82:ef:61:00:63:83:16:65:c4:b9:c0: 1c:07:0e:e1:84:f7:46:33:86:e3:36:ee:e2:9c:cc: 42:c3:a2:35:5d:40:ef:58:d8:44:b3:70:dd:9c:18: b4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8D:F7:B1:F6:98:BD:D9:02:4D:F7:83:FA:AB:49:3E:33:09:9F:B3 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/To33sfaYvdkCTfeD-qtJPjMJn7M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.128.128.0/17 Signature Algorithm: sha256WithRSAEncryption d0:0f:07:b1:39:c8:9c:65:fe:98:7d:9c:18:fb:cb:3c:30:41: 2f:8b:87:30:f7:09:eb:10:3a:42:55:2a:dc:54:5c:b9:2e:da: 16:27:3d:f8:36:48:f4:02:22:cc:e6:4c:39:bd:23:ee:41:cc: f3:0e:51:dc:ab:9e:73:95:d6:a2:61:18:d2:b5:62:91:46:97: 2d:0c:0a:cb:e9:47:14:8f:25:ca:b0:44:cb:7a:5f:be:29:1b: b8:3d:f0:22:ef:54:67:73:c2:09:4b:ec:ed:ee:9c:be:80:1b: 31:34:df:d7:65:11:a5:d7:cc:b6:05:ba:fb:0d:bd:dc:2f:c0: 69:0d:12:65:b6:8e:57:12:9e:a4:52:27:0d:a9:69:56:b1:17: d6:6e:41:8c:d9:0e:eb:27:38:bd:bc:45:75:52:cd:81:47:94: 07:ae:f2:84:74:a2:7d:07:5d:e2:58:d1:9d:e2:9d:c5:09:61: 75:b1:2a:e5:d7:6e:91:53:cf:53:4c:81:0f:e2:47:d0:10:df: 3d:0b:e1:37:e8:e1:af:3f:10:45:4b:be:a6:b5:51:58:9b:fc: c8:04:50:be:fd:9d:a8:02:a6:61:f5:fd:19:ef:f4:f5:b4:df: c1:7e:00:11:9e:8b:54:ba:fe:2f:db:a7:66:b7:88:63:cf:c0: 82:f0:85:2b -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICF04wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRFOERGN0IxRjY5OEJE RDkwMjRERjc4M0ZBQUI0OTNFMzMwOTlGQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCl2pPjREHNFQpcJcJfvBwTRujzVbI1HXtpjb0oQQM5fjpFBG7w Ybqyq7hONtX5KcpZMoT20qCGjklUVDdH50p5oJChkJI1cF7767WtEwUaf/3dVnOO CrLezBYmxuT09nvjKQWGpz9EDOYSy9lAbF5LoncvBWU0enjhpQermjAAPJe54E4j HSRzTAZJxWmoW3XdovY1yJjA7UNsTpgum36bhqiMpj2mB22NP0AqoVtlhjXxx0pT 6q83eSC6kHnAUxoAO1evsFvdx+8Yxu3/YbAKAbAEM4uC72EAY4MWZcS5wBwHDuGE 90YzhuM27uKczELDojVdQO9Y2ESzcN2cGLSpAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUTo33sfaYvdkCTfeD+qtJPjMJn7MwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9UbzMzc2ZhWXZka0NUZmVELXF0 SlBqTUpuN00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH3ICA MA0GCSqGSIb3DQEBCwUAA4IBAQDQDwexOcicZf6YfZwY+8s8MEEvi4cw9wnrEDpC VSrcVFy5LtoWJz34Nkj0AiLM5kw5vSPuQczzDlHcq55zldaiYRjStWKRRpctDArL 6UcUjyXKsETLel++KRu4PfAi71Rnc8IJS+zt7py+gBsxNN/XZRGl18y2Bbr7Db3c L8BpDRJlto5XEp6kUicNqWlWsRfWbkGM2Q7rJzi9vEV1Us2BR5QHrvKEdKJ9B13i WNGd4p3FCWF1sSrl126RU89TTIEP4kfQEN89C+E36OGvPxBFS76mtVFYm/zIBFC+ /Z2oAqZh9f0Z7/T1tN/BfgARnotUuv4v26dmt4hjz8CC8IUr -----END CERTIFICATE-----Generated at Mon Apr 7 01:55:33 2025 by rpki-client