$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/XztEM4qgD8HS7TgT-MOc1Sf4rNw.roa File: XztEM4qgD8HS7TgT-MOc1Sf4rNw.roa (raw, json) Hash identifier: oYzdukhjgNRUkGkG3FzS3vhfoYwMev4PVLgyrDaK10w= Subject key identifier: 5F:3B:44:33:8A:A0:0F:C1:D2:ED:38:13:F8:C3:9C:D5:27:F8:AC:DC Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 171E Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XztEM4qgD8HS7TgT-MOc1Sf4rNw.roa Signing time: Wed 12 Feb 2025 01:36:25 +0000 ROA not before: Wed 12 Feb 2025 01:36:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 3462 IP address blocks: 125.224.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 06:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5918 (0x171e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:36:25 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5F3B44338AA00FC1D2ED3813F8C39CD527F8ACDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:09:6b:0b:7d:36:22:b7:f2:64:e7:c5:b5:08: 49:79:16:91:95:a9:09:da:ba:53:8b:bb:2f:8a:4a: db:41:7c:ca:65:23:83:0f:d5:f6:47:17:2e:a8:c7: 57:87:82:2d:9c:6a:73:22:55:f4:4a:3f:eb:04:35: 0e:4e:f7:c9:00:27:b1:71:cf:00:44:4f:e8:34:a8: 16:21:b1:76:3f:47:89:8a:b7:f7:3d:e0:c1:34:d8: 24:a5:e6:82:05:aa:83:8e:4b:f8:51:5c:4e:7b:7f: f1:e8:29:da:86:03:4b:9e:65:e2:c4:e2:aa:8e:f2: 8d:67:f4:3b:91:72:77:ea:b8:57:f0:1a:2e:92:37: a3:dc:37:02:e4:af:3d:60:c2:70:9b:9f:66:23:35: 49:88:06:d8:ab:ec:30:a7:9e:7e:d8:11:93:8d:41: 54:c1:23:1f:83:24:d4:0e:97:58:54:2f:15:16:fe: 86:5d:c2:af:8d:66:c1:1e:fb:b2:a0:ea:2c:68:bb: 01:e8:fb:26:fa:3c:ee:09:44:a2:5d:4b:cf:0f:ee: 0a:96:39:69:0f:1c:16:4e:7b:2a:69:b3:4b:6c:2d: 68:0d:d3:44:2c:d0:9d:1a:f4:10:e4:95:99:1f:18: e4:51:fc:5b:c8:71:5a:33:0f:66:a7:e5:c3:b4:c1: a5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3B:44:33:8A:A0:0F:C1:D2:ED:38:13:F8:C3:9C:D5:27:F8:AC:DC X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XztEM4qgD8HS7TgT-MOc1Sf4rNw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.224.0.0/13 Signature Algorithm: sha256WithRSAEncryption 74:5a:ae:33:3d:3e:9a:f5:2b:7b:b0:99:a5:6a:82:4a:f4:ff: ff:46:43:e2:32:67:13:4c:d4:f1:04:4e:92:ab:9b:69:92:bb: cb:04:47:d4:6f:68:77:67:2e:57:fe:dd:b1:ac:f8:d0:a0:a6: bd:89:17:36:01:2f:b7:be:1d:bf:bb:cd:62:d6:8c:59:4d:11: cf:e6:75:ff:0e:bc:9f:fd:b2:64:b8:95:ab:97:4b:1b:87:2d: 57:eb:90:6e:c3:03:c9:aa:74:81:91:e4:e0:21:02:10:c9:ba: 3f:07:82:c3:fb:92:90:95:a9:52:e4:dc:cd:fb:a8:6f:bc:f2: a3:5a:b4:ca:75:0e:72:6c:ff:a8:e1:38:6a:04:a3:06:5b:3f: 63:5c:b4:ab:37:e0:7c:da:17:35:c2:35:84:db:d1:5a:aa:d3: 1c:42:c1:d8:3e:cb:c3:62:e6:bf:0d:58:63:87:14:cb:16:1e: 5b:2e:f6:81:bc:93:c3:a8:ea:f8:a9:cb:45:0e:6b:80:ea:47: 36:f6:b4:5f:96:7f:d9:b1:23:4d:7f:24:d3:d0:ec:fb:20:33: c1:77:fd:17:4b:ba:76:48:83:85:42:bb:a7:0c:bb:43:a3:ba: 85:68:96:de:75:dc:79:ae:e5:9d:61:a9:40:6a:53:c1:08:07: 42:97:30:eb -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICFx4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM2MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVGM0I0NDMzOEFBMDBG QzFEMkVEMzgxM0Y4QzM5Q0Q1MjdGOEFDREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSCWsLfTYit/Jk58W1CEl5FpGVqQnaulOLuy+KSttBfMplI4MP 1fZHFy6ox1eHgi2canMiVfRKP+sENQ5O98kAJ7FxzwBET+g0qBYhsXY/R4mKt/c9 4ME02CSl5oIFqoOOS/hRXE57f/HoKdqGA0ueZeLE4qqO8o1n9DuRcnfquFfwGi6S N6PcNwLkrz1gwnCbn2YjNUmIBtir7DCnnn7YEZONQVTBIx+DJNQOl1hULxUW/oZd wq+NZsEe+7Kg6ixouwHo+yb6PO4JRKJdS88P7gqWOWkPHBZOeypps0tsLWgN00Qs 0J0a9BDklZkfGORR/FvIcVozD2an5cO0waVlAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUXztEM4qgD8HS7TgT+MOc1Sf4rNwwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9YenRFTTRxZ0Q4SFM3VGdULU1P YzFTZjRyTncucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDfeAw DQYJKoZIhvcNAQELBQADggEBAHRarjM9Ppr1K3uwmaVqgkr0//9GQ+IyZxNM1PEE TpKrm2mSu8sER9RvaHdnLlf+3bGs+NCgpr2JFzYBL7e+Hb+7zWLWjFlNEc/mdf8O vJ/9smS4lauXSxuHLVfrkG7DA8mqdIGR5OAhAhDJuj8HgsP7kpCVqVLk3M37qG+8 8qNatMp1DnJs/6jhOGoEowZbP2NctKs34HzaFzXCNYTb0Vqq0xxCwdg+y8Ni5r8N WGOHFMsWHlsu9oG8k8Oo6vipy0UOa4DqRzb2tF+Wf9mxI01/JNPQ7PsgM8F3/RdL unZIg4VCu6cMu0OjuoVolt513Hmu5Z1hqUBqU8EIB0KXMOs= -----END CERTIFICATE-----Generated at Mon Apr 7 02:08:00 2025 by rpki-client