$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/cIN505sIwS6Qz_ZfZFZcwrkHdV4.roa File: cIN505sIwS6Qz_ZfZFZcwrkHdV4.roa (raw, json) Hash identifier: LXfV+O8CnaA5Bc+UON/kzjjek79oayPNCW3qy4qs4lY= Subject key identifier: 70:83:79:D3:9B:08:C1:2E:90:CF:F6:5F:64:56:5C:C2:B9:07:75:5E Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Certificate serial: 17C2 Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/cIN505sIwS6Qz_ZfZFZcwrkHdV4.roa Signing time: Wed 12 Feb 2025 01:37:02 +0000 ROA not before: Wed 12 Feb 2025 01:37:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 10126 IP address blocks: 203.160.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 20:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6082 (0x17c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509 Validity Not Before: Feb 12 01:37:02 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=708379D39B08C12E90CFF65F64565CC2B907755E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ad:95:1f:be:ba:3a:8b:7a:c7:86:c6:0c:b6: 31:6e:73:aa:b0:66:a4:6f:f7:67:77:9e:13:7a:c6: 01:11:f9:16:2b:53:a2:d1:06:75:0f:62:e3:21:f3: 26:25:41:4a:18:35:74:c7:90:0b:d2:59:22:b6:f5: 14:a7:10:00:da:23:95:44:5f:3b:ba:f3:72:bb:71: 66:84:d7:1d:a3:80:71:57:98:1f:a8:2f:42:7a:48: cd:1f:ad:79:4e:4e:b0:79:4d:b4:60:44:97:31:22: 3a:27:46:6c:cc:27:18:44:0f:f9:c1:33:45:74:44: 85:26:4a:c2:d6:e7:52:2e:9b:71:da:ab:bc:80:5b: 30:a2:50:9c:e4:19:e2:4c:b6:37:27:8b:1a:f4:07: 98:62:93:8f:cd:cc:19:27:72:ef:c5:b0:b1:8a:dd: c9:af:41:72:fb:1d:7f:60:6b:7e:5c:93:41:39:5d: eb:c4:7e:8c:43:bb:62:0c:6a:da:0e:31:33:dc:43: 3f:1c:3a:a6:b4:a2:08:30:18:9b:d6:f0:52:a5:04: 40:0a:34:68:1c:9a:c6:25:6a:4f:06:b6:d5:bc:c6: 16:b6:4f:03:ee:45:a6:73:ed:b9:37:ce:6f:95:6c: 27:6f:5c:25:18:d0:ee:f1:6b:b2:57:a2:c1:41:a1: 55:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:83:79:D3:9B:08:C1:2E:90:CF:F6:5F:64:56:5C:C2:B9:07:75:5E X509v3 Authority Key Identifier: keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/cIN505sIwS6Qz_ZfZFZcwrkHdV4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.160.240.0/20 Signature Algorithm: sha256WithRSAEncryption b6:58:56:9f:4f:bc:30:01:8b:b9:2d:58:99:50:0e:cf:0d:e8: 05:31:c9:16:bc:81:e7:f4:19:2d:59:40:e3:99:dd:d1:2a:43: f4:d0:ad:c2:82:34:b9:8b:20:be:cc:b1:f4:23:1c:9e:0f:d7: 27:06:b2:fd:2a:c6:22:a0:67:d3:27:78:86:ac:24:90:20:c5: 66:0c:7c:52:ba:c4:55:2c:28:15:c4:5b:9c:cb:de:23:70:ee: 66:60:97:82:8d:06:dc:3a:8f:c6:5b:c3:b7:10:8d:f6:62:b4: 92:d1:fc:3b:08:b0:9b:d5:ba:be:1a:db:76:6d:d9:2a:23:f9: 52:fd:5e:5b:41:13:77:58:f6:16:d7:e5:c3:b2:e7:2b:cf:ed: 78:2f:03:1e:4a:63:c9:88:d7:c3:6c:70:30:df:26:8c:b4:04: 5a:43:81:29:4d:b6:90:01:d7:c0:6f:48:80:78:ae:3a:40:ef: de:28:c9:69:8c:6d:38:ed:a6:f1:02:f6:ae:22:e6:c7:12:5c: 28:c6:b2:5b:1d:ef:f9:2d:6d:99:a6:1b:f1:5a:f2:f8:6b:1e: 82:8e:ca:52:df:e0:fc:c3:92:47:4b:07:8a:5d:54:69:db:da: 5d:0e:c8:45:e0:60:d7:d0:61:49:a1:40:a1:8b:ca:d8:7f:c8: f6:03:9c:45 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICF8IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw MTM3MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcwODM3OUQzOUIwOEMx MkU5MENGRjY1RjY0NTY1Q0MyQjkwNzc1NUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdrZUfvro6i3rHhsYMtjFuc6qwZqRv92d3nhN6xgER+RYrU6LR BnUPYuMh8yYlQUoYNXTHkAvSWSK29RSnEADaI5VEXzu683K7cWaE1x2jgHFXmB+o L0J6SM0frXlOTrB5TbRgRJcxIjonRmzMJxhED/nBM0V0RIUmSsLW51Ium3Haq7yA WzCiUJzkGeJMtjcnixr0B5hik4/NzBkncu/FsLGK3cmvQXL7HX9ga35ck0E5XevE foxDu2IMatoOMTPcQz8cOqa0oggwGJvW8FKlBEAKNGgcmsYlak8GttW8xha2TwPu RaZz7bk3zm+VbCdvXCUY0O7xa7JXosFBoVVlAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUcIN505sIwS6Qz/ZfZFZcwrkHdV4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv 5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9jSU41MDVzSXdTNlF6X1pmWkZa Y3dya0hkVjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEy6Dw MA0GCSqGSIb3DQEBCwUAA4IBAQC2WFafT7wwAYu5LViZUA7PDegFMckWvIHn9Bkt WUDjmd3RKkP00K3CgjS5iyC+zLH0IxyeD9cnBrL9KsYioGfTJ3iGrCSQIMVmDHxS usRVLCgVxFucy94jcO5mYJeCjQbcOo/GW8O3EI32YrSS0fw7CLCb1bq+Gtt2bdkq I/lS/V5bQRN3WPYW1+XDsucrz+14LwMeSmPJiNfDbHAw3yaMtARaQ4EpTbaQAdfA b0iAeK46QO/eKMlpjG047abxAvauIubHElwoxrJbHe/5LW2ZphvxWvL4ax6CjspS 3+D8w5JHSweKXVRp29pdDshF4GDX0GFJoUChi8rYf8j2A5xF -----END CERTIFICATE-----Generated at Mon Apr 14 17:33:26 2025 by rpki-client