$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Wa108z_mLziNwDpeVbZGN4zH4Oc.roa File: Wa108z_mLziNwDpeVbZGN4zH4Oc.roa (raw, json) Hash identifier: qssL4LMRLkETrlECJMLWUcwQst4kF2+v4P0H7VmKHNs= Subject key identifier: 59:AD:74:F3:3F:E6:2F:38:8D:C0:3A:5E:55:B6:46:37:8C:C7:E0:E7 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 178A Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Wa108z_mLziNwDpeVbZGN4zH4Oc.roa Signing time: Wed 12 Feb 2025 01:36:48 +0000 ROA not before: Wed 12 Feb 2025 01:36:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9680 IP address blocks: 2001:b000:591::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 03:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6026 (0x178a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:48 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=59AD74F33FE62F388DC03A5E55B646378CC7E0E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d8:39:e6:e5:d3:98:78:db:98:e6:4a:90:72: fc:54:f4:6e:03:84:47:78:bf:9e:d6:ee:40:87:d5: 24:7f:2b:5f:25:23:55:7d:9d:59:d0:e2:ae:a4:62: 15:73:cd:5c:be:4b:5f:e8:e9:7a:38:8a:d3:50:91: a7:49:44:08:0f:6b:e8:11:69:a0:21:79:b4:ff:95: 6c:65:b5:0d:62:c0:26:8e:89:d0:88:22:28:84:c4: de:f1:f1:64:87:19:b6:1c:43:26:5c:cb:23:32:52: c5:89:76:b9:3a:42:4f:fb:9b:00:4f:f4:cd:63:39: 75:0a:ac:16:8a:d4:6f:e7:3f:7d:01:0e:8a:0f:24: b1:43:1c:b8:3f:f5:e0:68:b1:a3:72:74:c9:a6:52: 76:b7:0c:a7:ac:12:a0:ec:b8:1e:ed:d1:24:a3:46: ae:37:ca:31:78:99:a7:47:ab:34:98:59:93:cc:35: 03:78:e8:55:cc:26:50:37:6e:ba:48:aa:8f:1c:9c: 19:e7:da:91:46:9c:90:dd:fd:25:55:64:c5:4b:52: f3:90:e3:72:71:d2:7c:ea:52:a0:20:76:c8:20:3f: 42:ac:db:33:b8:e9:81:34:f3:74:4d:3f:45:b1:4c: dc:ae:8d:f6:ee:c0:15:c7:7f:a8:1e:33:47:01:56: 1f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AD:74:F3:3F:E6:2F:38:8D:C0:3A:5E:55:B6:46:37:8C:C7:E0:E7 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Wa108z_mLziNwDpeVbZGN4zH4Oc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:b000:591::/48 Signature Algorithm: sha256WithRSAEncryption b8:0a:b1:08:95:bf:4d:1c:68:cd:4e:2d:7b:89:db:8a:4b:6e: 8a:6b:78:80:fc:89:95:6b:15:c1:ff:f8:ac:6e:c9:fd:39:74: f9:d5:d1:62:d6:54:7e:51:8d:04:bd:51:8e:b0:2a:80:46:cb: 9e:3c:75:07:71:fb:59:0b:df:46:fb:e2:30:4f:f5:2c:9f:2a: 32:1e:f3:4a:d1:7b:40:d3:8d:f3:e2:88:90:74:b2:62:b2:fd: e2:5b:1c:e3:4b:f2:f1:8c:fc:72:95:d5:90:d5:6a:67:5d:a0: 89:4b:c8:fd:2f:34:e5:e7:6c:ac:6d:18:ed:e3:f2:db:4d:a9: c3:93:52:8b:62:4a:2e:21:d1:fc:de:1b:43:f8:fd:b1:ad:17: 99:14:04:f2:8f:ef:e4:88:5d:f4:e4:42:4e:90:2c:81:a5:7b: db:7d:d2:87:a5:b1:ac:4f:b6:25:d2:46:e3:51:30:d8:c5:dc: 71:22:88:11:a3:3d:e8:7d:13:79:dd:71:5e:8d:88:aa:8f:e4: eb:fd:a1:0d:dd:ef:e1:36:a9:f3:e3:15:e7:d5:f0:81:63:0a: 7a:d8:a1:a7:b1:13:71:f1:a1:3a:37:9d:85:22:d9:8a:c8:03: e4:24:32:dd:21:9e:8e:72:19:c1:cc:48:7d:c9:d2:97:03:79: c0:e9:e8:41 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICF4owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU5QUQ3NEYzM0ZFNjJG Mzg4REMwM0E1RTU1QjY0NjM3OENDN0UwRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC22Dnm5dOYeNuY5kqQcvxU9G4DhEd4v57W7kCH1SR/K18lI1V9 nVnQ4q6kYhVzzVy+S1/o6Xo4itNQkadJRAgPa+gRaaAhebT/lWxltQ1iwCaOidCI IiiExN7x8WSHGbYcQyZcyyMyUsWJdrk6Qk/7mwBP9M1jOXUKrBaK1G/nP30BDooP JLFDHLg/9eBosaNydMmmUna3DKesEqDsuB7t0SSjRq43yjF4madHqzSYWZPMNQN4 6FXMJlA3brpIqo8cnBnn2pFGnJDd/SVVZMVLUvOQ43Jx0nzqUqAgdsggP0Ks2zO4 6YE083RNP0WxTNyujfbuwBXHf6geM0cBVh9HAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUWa108z/mLziNwDpeVbZGN4zH4OcwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9XYTEwOHpfbUx6aU53RHBlVmJa R040ekg0T2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAGw AAWRMA0GCSqGSIb3DQEBCwUAA4IBAQC4CrEIlb9NHGjNTi17iduKS26Ka3iA/ImV axXB//isbsn9OXT51dFi1lR+UY0EvVGOsCqARsuePHUHcftZC99G++IwT/Usnyoy HvNK0XtA043z4oiQdLJisv3iWxzjS/LxjPxyldWQ1WpnXaCJS8j9LzTl52ysbRjt 4/LbTanDk1KLYkouIdH83htD+P2xrReZFATyj+/kiF305EJOkCyBpXvbfdKHpbGs T7Yl0kbjUTDYxdxxIogRoz3ofRN53XFejYiqj+Tr/aEN3e/hNqnz4xXn1fCBYwp6 2KGnsRNx8aE6N52FItmKyAPkJDLdIZ6OchnBzEh9ydKXA3nA6ehB -----END CERTIFICATE-----Generated at Mon Apr 7 23:11:22 2025 by rpki-client