$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/XJXcE7kZ2hLapSUiUIwIzeexkmI.roa File: XJXcE7kZ2hLapSUiUIwIzeexkmI.roa (raw, json) Hash identifier: M5vReXzKaGJhGmj6JzJ2316bYzCrN9HyYtm0/zGW5Ww= Subject key identifier: 5C:95:DC:13:B9:19:DA:12:DA:A5:25:22:50:8C:08:CD:E7:B1:92:62 Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 177D Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XJXcE7kZ2hLapSUiUIwIzeexkmI.roa Signing time: Wed 12 Feb 2025 01:36:45 +0000 ROA not before: Wed 12 Feb 2025 01:36:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 23675 IP address blocks: 203.66.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6013 (0x177d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5C95DC13B919DA12DAA52522508C08CDE7B19262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8c:4b:b0:1a:c0:59:ca:f2:7d:89:1d:38:91: fc:cf:83:aa:62:96:3c:f9:3c:b5:3d:8e:d0:c2:1a: a6:a2:aa:1b:a3:62:b3:3f:82:00:4a:d4:d3:93:92: 2e:25:40:05:4a:5c:53:e5:82:9f:51:b3:86:83:ba: ae:9a:99:13:d0:4c:94:33:12:65:5a:24:5f:f4:67: 36:5d:4d:46:08:05:37:66:af:41:4c:b9:d7:fa:ff: 18:3a:68:3b:bd:47:81:89:e9:c2:49:87:74:ba:dd: 69:39:4e:07:37:25:d4:4a:7c:b9:9b:19:05:dd:ae: 63:da:5f:87:3f:2e:2f:0c:01:46:83:ab:6c:f3:67: 7c:d0:e1:de:f6:83:25:52:c1:d6:52:93:ed:88:56: 8c:64:2c:09:b0:f2:9c:8a:e5:f2:a5:0b:6d:aa:30: a7:ca:04:73:29:fc:14:95:b2:10:bb:e8:0a:8a:9a: a1:84:67:83:85:53:a3:db:dd:d9:3c:5a:01:ad:de: 7e:e6:5c:2f:07:13:06:8a:c2:26:00:45:9f:10:9a: 73:bc:a9:95:5b:04:e6:87:2d:dc:63:3d:4e:01:86: 05:92:e8:2c:ea:a7:2b:0f:ec:b6:e7:ef:a7:2d:07: d7:88:38:29:33:a7:be:e0:28:6d:eb:d9:2e:85:e2: de:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:95:DC:13:B9:19:DA:12:DA:A5:25:22:50:8C:08:CD:E7:B1:92:62 X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XJXcE7kZ2hLapSUiUIwIzeexkmI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.66.245.0/24 Signature Algorithm: sha256WithRSAEncryption 19:dd:6b:6e:2f:d3:bd:7b:1a:6b:99:69:d4:73:ae:8e:fc:fe: 89:96:61:cb:b5:b1:5a:4b:e0:27:90:09:89:89:f5:a6:99:aa: ba:72:32:33:9d:75:06:2f:a8:94:ad:10:ed:bf:09:7e:4b:eb: 37:3e:99:ad:5d:a3:a9:8b:05:a4:ab:0e:1e:dc:bf:01:54:5e: 43:f3:4a:91:76:b7:c6:da:c1:68:9e:f9:da:28:b9:a1:0e:03: 27:23:c1:2b:46:bd:9a:3b:83:49:c6:0a:ed:69:dd:0a:d1:77: d6:50:d0:df:3b:9d:a8:31:e9:c9:64:b8:ae:15:ba:ab:cf:d3: 34:11:b8:30:1a:3c:d3:ea:1c:0d:07:f1:b9:4f:69:53:1a:04: 86:3a:05:ba:b5:d9:1b:36:a8:6d:29:82:26:82:6a:04:8c:91: d3:8f:79:c7:54:7b:bf:b2:5c:53:17:00:82:2a:d8:a2:4e:83: 3d:db:27:df:54:7c:5b:0b:34:ff:6c:90:09:4e:29:7a:9b:b0: 42:c0:b8:a8:a6:6b:c6:26:91:3f:b1:d5:d0:40:d7:a6:87:04: 69:2c:43:34:ed:a5:3a:b6:60:30:f7:3a:c4:90:33:61:ce:07: 87:db:00:82:02:43:8f:c2:c4:85:12:f0:6d:aa:44:94:81:54: 9a:44:55:a3 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICF30wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVDOTVEQzEzQjkxOURB MTJEQUE1MjUyMjUwOEMwOENERTdCMTkyNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrjEuwGsBZyvJ9iR04kfzPg6piljz5PLU9jtDCGqaiqhujYrM/ ggBK1NOTki4lQAVKXFPlgp9Rs4aDuq6amRPQTJQzEmVaJF/0ZzZdTUYIBTdmr0FM udf6/xg6aDu9R4GJ6cJJh3S63Wk5Tgc3JdRKfLmbGQXdrmPaX4c/Li8MAUaDq2zz Z3zQ4d72gyVSwdZSk+2IVoxkLAmw8pyK5fKlC22qMKfKBHMp/BSVshC76AqKmqGE Z4OFU6Pb3dk8WgGt3n7mXC8HEwaKwiYARZ8QmnO8qZVbBOaHLdxjPU4BhgWS6Czq pysP7Lbn76ctB9eIOCkzp77gKG3r2S6F4t5/AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUXJXcE7kZ2hLapSUiUIwIzeexkmIwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9YSlhjRTdrWjJoTGFwU1VpVUl3 SXplZXhrbUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0L1 MA0GCSqGSIb3DQEBCwUAA4IBAQAZ3WtuL9O9exprmWnUc66O/P6JlmHLtbFaS+An kAmJifWmmaq6cjIznXUGL6iUrRDtvwl+S+s3PpmtXaOpiwWkqw4e3L8BVF5D80qR drfG2sFonvnaKLmhDgMnI8ErRr2aO4NJxgrtad0K0XfWUNDfO52oMenJZLiuFbqr z9M0EbgwGjzT6hwNB/G5T2lTGgSGOgW6tdkbNqhtKYImgmoEjJHTj3nHVHu/slxT FwCCKtiiToM92yffVHxbCzT/bJAJTil6m7BCwLiopmvGJpE/sdXQQNemhwRpLEM0 7aU6tmAw9zrEkDNhzgeH2wCCAkOPwsSFEvBtqkSUgVSaRFWj -----END CERTIFICATE-----Generated at Mon Apr 7 17:44:39 2025 by rpki-client