$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/WxDOMXoAMvkx7EwpuFgKm2qunbA.roa File: WxDOMXoAMvkx7EwpuFgKm2qunbA.roa (raw, json) Hash identifier: navwxojswlFilygeXrw8s0TcMP//s1lCL2bmJ9ETjaI= Subject key identifier: 5B:10:CE:31:7A:00:32:F9:31:EC:4C:29:B8:58:0A:9B:6A:AE:9D:B0 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 1729 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WxDOMXoAMvkx7EwpuFgKm2qunbA.roa Signing time: Wed 12 Feb 2025 01:36:27 +0000 ROA not before: Wed 12 Feb 2025 01:36:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 122.118.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5929 (0x1729) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5B10CE317A0032F931EC4C29B8580A9B6AAE9DB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6a:ec:99:eb:ce:28:d6:8e:71:df:d0:8a:c6: a5:26:dd:a2:63:3c:2c:3a:b6:f1:10:f0:e9:6a:71: 02:4c:5a:76:1a:a7:b6:aa:c3:48:91:30:ba:a8:58: 51:f5:da:9f:58:1c:5d:88:64:31:6d:e6:41:18:d3: fd:41:f4:3e:a3:99:99:95:d0:b3:3d:5e:d9:36:fc: ca:bf:73:aa:3a:23:78:ce:81:49:da:6e:6e:79:5c: 7d:34:0f:2d:60:24:8f:46:14:33:80:72:e5:6a:8e: c1:3b:0c:bb:2e:df:cb:d2:30:d8:25:f5:7a:80:22: 78:ce:ba:80:35:58:a8:c0:e5:05:b8:15:32:b2:e0: 74:91:39:0a:d9:21:cd:c4:9a:f0:2a:b7:80:80:bc: a3:1b:5a:6e:64:0d:39:10:61:ba:cb:1a:19:30:42: d6:8b:2f:5e:87:76:f9:f9:d9:cb:73:dd:96:79:39: 25:36:dc:25:ab:ab:08:2c:df:ea:a0:1a:f3:82:8b: 20:19:9f:87:04:a5:cc:a0:ae:6a:13:10:a5:d2:3d: 5d:02:d5:f0:c1:14:09:a2:30:06:b3:77:91:0b:8b: 34:7c:1b:db:64:87:1d:11:2e:12:53:6d:5a:16:d8: 37:5f:6f:7d:9e:a0:05:72:c0:e4:51:7c:a7:1d:be: 2e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:10:CE:31:7A:00:32:F9:31:EC:4C:29:B8:58:0A:9B:6A:AE:9D:B0 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WxDOMXoAMvkx7EwpuFgKm2qunbA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.118.0.0/16 Signature Algorithm: sha256WithRSAEncryption bc:66:6e:2e:f5:2f:0f:2e:ec:9a:74:52:6c:57:73:1c:cf:c2: d0:40:40:2d:0f:89:43:3d:d1:f3:73:97:93:6b:6b:5f:48:a9: a0:70:f3:a8:d3:61:54:b3:b4:f3:87:01:b8:4c:c2:72:6d:93: dd:d5:fd:ba:1e:09:a5:fa:68:5d:3b:a0:b2:0e:cf:91:ea:11: a1:a2:03:d0:98:28:e1:82:e1:2f:2e:da:3d:9e:9a:7f:e1:74: e8:c7:65:30:28:1d:fc:13:35:29:7b:9f:e8:57:dc:e3:12:f9: 08:28:41:e4:23:bb:90:55:64:5e:21:31:ad:62:fd:00:5f:0d: 1c:69:dc:e1:40:7b:a1:8b:84:3c:ed:d6:a2:75:2e:b2:03:d1: 83:60:dc:73:0b:74:0f:d2:ae:4b:14:74:77:aa:d8:b9:74:41: da:e7:ac:99:2d:ef:fe:24:d9:a8:a6:b4:58:0f:d9:89:12:a4: 61:25:fa:48:d4:8c:a4:1a:31:cd:54:27:8c:05:17:63:28:db: 04:0d:21:27:b7:6f:b9:99:5c:0b:4b:48:8f:c3:a1:87:d7:08: 16:1d:19:57:4e:71:84:c9:cd:d4:44:68:47:2e:d3:67:c4:e5: 5f:52:9b:2f:24:fc:2b:3f:55:c2:e4:cf:74:83:df:27:52:4a: 39:0f:9a:bc -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICFykwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVCMTBDRTMxN0EwMDMy RjkzMUVDNEMyOUI4NTgwQTlCNkFBRTlEQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnauyZ684o1o5x39CKxqUm3aJjPCw6tvEQ8OlqcQJMWnYap7aq w0iRMLqoWFH12p9YHF2IZDFt5kEY0/1B9D6jmZmV0LM9Xtk2/Mq/c6o6I3jOgUna bm55XH00Dy1gJI9GFDOAcuVqjsE7DLsu38vSMNgl9XqAInjOuoA1WKjA5QW4FTKy 4HSROQrZIc3EmvAqt4CAvKMbWm5kDTkQYbrLGhkwQtaLL16Hdvn52ctz3ZZ5OSU2 3CWrqwgs3+qgGvOCiyAZn4cEpcygrmoTEKXSPV0C1fDBFAmiMAazd5ELizR8G9tk hx0RLhJTbVoW2Ddfb32eoAVywORRfKcdvi47AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUWxDOMXoAMvkx7EwpuFgKm2qunbAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9XeERPTVhvQU12a3g3RXdwdUZn S20ycXVuYkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAenYw DQYJKoZIhvcNAQELBQADggEBALxmbi71Lw8u7Jp0UmxXcxzPwtBAQC0PiUM90fNz l5Nra19IqaBw86jTYVSztPOHAbhMwnJtk93V/boeCaX6aF07oLIOz5HqEaGiA9CY KOGC4S8u2j2emn/hdOjHZTAoHfwTNSl7n+hX3OMS+QgoQeQju5BVZF4hMa1i/QBf DRxp3OFAe6GLhDzt1qJ1LrID0YNg3HMLdA/SrksUdHeq2Ll0QdrnrJkt7/4k2aim tFgP2YkSpGEl+kjUjKQaMc1UJ4wFF2Mo2wQNISe3b7mZXAtLSI/DoYfXCBYdGVdO cYTJzdREaEcu02fE5V9Smy8k/Cs/VcLkz3SD3ydSSjkPmrw= -----END CERTIFICATE-----Generated at Mon Apr 7 01:52:59 2025 by rpki-client